Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138372e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3138372e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          Qc7juB5zi92/3pUHKs9gdNmthI+m3LSHsm7HXiyKpMQ=
Subject key identifier:   53:3D:7E:A7:FA:7E:F2:EC:CC:6A:23:B8:57:41:3D:04:E2:33:E0:53
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       7AE3ED04E02EC4C576BAC0390B96D12264B040F1
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138372e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:09 +0000
ROA not before:           Tue 05 Mar 2024 17:41:09 +0000
ROA not after:            Tue 04 Mar 2025 17:46:09 +0000
asID:                     262589
IP address blocks:        190.94.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:ed:04:e0:2e:c4:c5:76:ba:c0:39:0b:96:d1:22:64:b0:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:09 2024 GMT
            Not After : Mar  4 17:46:09 2025 GMT
        Subject: CN=533D7EA7FA7EF2ECCC6A23B857413D04E233E053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:cd:1c:6a:52:80:b3:bb:d4:e2:20:31:89:
                    8f:ca:1b:ce:f3:52:55:54:5d:60:0d:bc:e5:19:59:
                    5b:bb:08:7a:ce:99:e1:2d:f2:b0:c2:df:86:33:99:
                    85:ce:2b:fe:2f:44:8f:f0:e7:c4:8a:5e:f3:98:a5:
                    fe:07:8a:28:8f:4e:31:7e:95:3d:31:08:59:e5:96:
                    64:28:6d:a4:ef:c8:d5:65:b6:c1:cc:65:38:a7:84:
                    7c:12:e8:ff:e0:cf:c1:2e:bc:da:59:1e:21:82:3e:
                    30:90:20:48:cb:e2:ce:04:e9:15:de:38:a4:48:80:
                    7d:14:5e:f8:0b:0d:7f:ff:48:b8:4b:da:8e:88:0c:
                    a4:91:0b:8a:ba:f3:f9:82:8f:00:f8:e0:77:cf:59:
                    84:8a:47:00:c4:08:18:b4:39:92:b4:ea:8f:d7:4c:
                    32:04:4a:8b:75:f9:53:2a:69:5d:fd:93:74:0d:3d:
                    de:c4:c8:8b:0a:10:8e:ec:f3:a7:58:18:c2:c4:21:
                    2c:f0:80:e3:d5:60:46:ad:a2:e2:59:41:ff:76:67:
                    37:fe:a7:96:4c:af:ac:a0:d8:c7:3c:af:a5:5d:49:
                    ba:5f:dd:4f:5e:8b:71:45:81:da:45:43:6d:9d:85:
                    50:bf:78:38:ab:90:e5:ce:ca:92:9e:15:91:0a:e1:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:7E:A7:FA:7E:F2:EC:CC:6A:23:B8:57:41:3D:04:E2:33:E0:53
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138372e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:62:bb:dd:f4:ea:84:17:8f:29:f3:b1:a6:e9:49:08:36:
         e1:5a:36:7a:4c:9e:9a:8e:68:2c:d8:7b:2b:75:a3:c4:02:5b:
         60:46:0c:91:fe:6a:54:c0:be:1c:af:68:89:97:19:61:59:e3:
         11:84:40:2e:80:4d:f4:93:b5:1d:c7:0e:74:52:de:57:b3:a4:
         87:53:95:ed:3f:96:0c:5b:b1:62:ce:fd:e9:4c:cd:ca:9f:ac:
         79:8d:ff:00:81:28:51:77:44:2e:a9:03:78:dd:79:16:af:cf:
         26:31:b2:dd:14:a5:3c:72:21:fd:09:d7:8b:a1:96:b0:b6:75:
         ed:b1:33:87:2c:e3:25:c7:eb:5e:00:94:bc:62:18:43:fb:83:
         b7:42:a7:93:70:a4:6a:c6:b1:9e:d4:e8:51:37:37:aa:2b:1f:
         b5:f8:4c:48:87:62:98:da:06:0f:6f:38:cf:57:f0:9f:48:40:
         44:34:39:cb:36:54:49:74:1d:05:b0:23:aa:d6:2b:b6:4f:69:
         92:12:d6:78:0d:7f:d5:41:11:9a:3e:99:f6:21:29:74:fd:1d:
         d8:61:84:8c:48:fd:28:03:31:a0:32:41:9a:f6:22:6c:43:8e:
         02:32:a6:9d:e7:d8:05:4f:c6:7f:c9:8e:bd:2a:9c:fb:25:8b:
         63:ee:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org