Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138392e302f32342d3234203d3e20323633363939.roa
File:                     3139302e39342e3138392e302f32342d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          nRFHzMQrLKxGVuu5/cG43bHyvRR8djexmaawjfOO0d0=
Subject key identifier:   ED:65:46:3F:DB:B1:28:3A:4B:1C:94:1B:AA:A6:07:F4:A5:25:A3:0E
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       3EB66D087CDB67BF390D6DB8D611F3900C256F59
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138392e302f32342d3234203d3e20323633363939.roa
Signing time:             Tue 05 Mar 2024 17:46:11 +0000
ROA not before:           Tue 05 Mar 2024 17:41:11 +0000
ROA not after:            Tue 04 Mar 2025 17:46:11 +0000
asID:                     263699
IP address blocks:        190.94.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b6:6d:08:7c:db:67:bf:39:0d:6d:b8:d6:11:f3:90:0c:25:6f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:11 2024 GMT
            Not After : Mar  4 17:46:11 2025 GMT
        Subject: CN=ED65463FDBB1283A4B1C941BAAA607F4A525A30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:6d:a2:04:f3:15:5a:68:92:ae:4d:9f:c4:
                    af:8d:01:08:2d:f4:f1:2e:c3:f4:f4:00:ee:c8:61:
                    dd:2b:33:b1:d5:82:43:91:3c:f1:c7:a9:ea:81:d3:
                    6f:08:7b:cf:6f:1d:4f:2b:70:b8:37:96:02:a0:6c:
                    a9:68:e3:63:6a:66:c1:5e:f5:2d:99:aa:1f:09:1a:
                    f6:09:52:15:cb:74:9c:e8:23:9a:88:77:01:24:68:
                    90:0c:65:22:39:31:fb:de:c4:58:34:12:7b:d4:6e:
                    85:70:4d:1e:b9:12:4a:c6:f3:fc:eb:ea:b9:f5:a0:
                    0d:a2:87:50:91:a0:16:7a:aa:fd:1b:a2:d4:c6:00:
                    0c:23:e7:be:1a:3f:eb:2f:6f:d2:72:6e:ef:42:ba:
                    4f:b0:fb:4c:f1:8d:84:0d:86:59:c1:c7:20:de:e2:
                    23:b8:4d:32:5a:af:66:02:61:ff:b7:8c:86:b0:45:
                    8c:09:a1:45:1e:85:03:2e:61:dc:7b:93:bf:6a:7e:
                    1b:e8:db:ef:f1:41:5f:e0:38:66:02:c4:18:d4:26:
                    04:48:3e:4e:e9:a9:02:ed:26:6a:78:47:60:ae:f7:
                    bd:c6:0e:15:19:af:1f:b3:70:8d:de:3a:bd:16:16:
                    0c:01:c3:3d:45:0e:8a:f7:2b:fb:be:88:9c:e4:84:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:46:3F:DB:B1:28:3A:4B:1C:94:1B:AA:A6:07:F4:A5:25:A3:0E
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138392e302f32342d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:be:6b:0c:7b:28:e1:d5:95:e5:fd:11:77:30:84:33:35:
         e5:53:6d:f6:30:97:35:89:99:44:21:dd:b3:58:ab:dc:b3:f6:
         b7:89:cc:31:a1:15:85:5b:40:d3:5d:e5:6e:a1:b2:eb:87:93:
         4f:5c:be:81:fe:b3:33:b0:7c:b7:fa:da:b6:34:3a:78:e4:96:
         3d:8e:0c:b4:6a:45:e9:dd:dd:95:da:f5:82:08:48:f1:f8:46:
         be:de:3f:d6:c9:7b:ce:27:e8:cf:e4:f1:61:b2:f4:89:b3:f8:
         f3:98:51:85:e6:89:9e:0a:bf:31:b6:12:b9:26:c9:ce:8c:f2:
         06:94:ab:aa:0f:49:76:3b:a1:ea:1a:d9:70:05:5c:08:7a:2b:
         d8:5e:71:c5:ee:ae:c7:78:27:9f:00:f5:8e:76:3b:c2:44:fc:
         fb:89:bc:4e:f1:21:b0:a7:1f:0e:d1:af:ac:ff:88:d1:6f:ae:
         c9:84:53:78:1e:4d:a4:16:54:ae:ab:c1:09:4d:fa:46:d6:aa:
         d6:db:07:73:5f:2f:25:e4:55:18:da:af:04:6a:ec:a3:ab:15:
         25:e8:31:97:a4:68:89:c4:77:9b:34:d7:45:2f:e3:9e:2d:dd:
         93:50:a9:2f:66:c9:ea:1d:d6:47:08:1f:71:09:ce:7d:2b:b4:
         10:35:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org