Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3139312e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3139312e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          XvHgcg19SBZc6YX+DZ/qFAcQPATwxK3KFc98KVx0Ta8=
Subject key identifier:   8D:BA:1E:28:3D:B2:88:BB:3A:AB:17:0C:3E:4E:E0:C4:5D:7C:98:57
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       0617BBA8E342423AB619506FAE3A6B7FDA43167E
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3139312e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:11 +0000
ROA not before:           Tue 05 Mar 2024 17:41:11 +0000
ROA not after:            Tue 04 Mar 2025 17:46:11 +0000
asID:                     262589
IP address blocks:        190.94.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:bb:a8:e3:42:42:3a:b6:19:50:6f:ae:3a:6b:7f:da:43:16:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:11 2024 GMT
            Not After : Mar  4 17:46:11 2025 GMT
        Subject: CN=8DBA1E283DB288BB3AAB170C3E4EE0C45D7C9857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:51:a9:75:29:08:f2:05:a8:c0:2d:6b:4d:
                    d4:f7:0d:6e:05:01:8d:47:59:77:5a:48:d3:bb:b7:
                    a2:e5:6b:bf:b4:80:a1:0e:57:28:37:30:85:fd:86:
                    0f:bc:76:f9:9d:46:1e:be:9d:b7:d5:14:5b:40:b8:
                    67:57:7e:8c:ce:53:3b:97:59:61:54:ca:0e:f3:6a:
                    20:ed:f1:20:fe:52:e4:09:ef:c9:dd:a9:f3:b0:56:
                    1f:72:90:83:18:88:4b:69:82:6f:19:28:33:8d:72:
                    70:e0:09:28:e6:da:cd:1c:33:62:e0:88:d7:f4:f0:
                    fd:9d:25:50:c0:87:86:10:46:97:96:b2:1c:4f:9a:
                    c8:2d:e7:c2:4d:39:d4:16:4e:a0:ca:c2:f3:54:4e:
                    75:cf:c0:ca:77:b1:10:e3:4e:84:28:73:ed:0c:e1:
                    1b:50:63:d5:e3:39:ac:f5:aa:00:a5:2b:3f:87:aa:
                    1e:d3:5b:b9:da:21:93:33:52:19:de:7d:f2:80:e9:
                    b4:56:98:11:56:59:c9:e0:d8:5c:79:b8:f3:85:0d:
                    4a:fd:ce:c2:ea:a6:02:36:b9:00:a3:98:83:95:c2:
                    d1:fc:ba:fa:1a:60:f5:38:dd:63:cc:55:e8:b4:0e:
                    64:4c:1a:75:94:36:e3:4f:74:56:4a:43:50:02:86:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BA:1E:28:3D:B2:88:BB:3A:AB:17:0C:3E:4E:E0:C4:5D:7C:98:57
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3139312e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:53:a6:ab:a0:e1:01:13:b5:b9:48:4a:8a:f9:6a:68:13:
         44:1d:46:cc:70:00:ef:6e:e2:f8:a2:57:14:fb:2d:bd:24:e5:
         89:e1:19:dd:b7:13:78:6d:f3:36:76:ce:b0:d1:2e:b2:75:fb:
         be:ac:5e:58:34:41:3a:3b:3b:3f:c9:0b:ac:30:1e:f0:21:87:
         47:3f:6b:2e:e8:16:82:17:fd:f1:95:18:3d:96:04:ce:05:db:
         de:b4:49:dd:c5:18:8c:ac:bb:de:bd:64:f0:16:ba:6e:30:54:
         d7:68:0c:d7:ed:3c:69:ad:52:aa:60:c7:8e:2e:7d:db:a9:40:
         9b:d5:5c:3b:f9:f2:9d:95:ad:cd:40:4d:40:57:c5:43:ad:56:
         04:a3:35:88:0a:4e:b3:09:74:e0:f4:cd:d0:0c:17:10:a6:97:
         a2:a8:fe:ab:29:d4:f1:38:08:1c:5d:d4:a8:92:21:49:02:cc:
         c9:19:e5:84:de:d3:b3:5c:62:1b:69:c3:2b:cb:fd:d2:e8:9e:
         aa:6c:be:24:ea:e2:96:7c:13:8c:f1:89:e7:0e:17:e7:d2:6a:
         0d:85:9f:18:42:c5:2d:ac:9c:c8:17:c1:35:ce:28:85:4f:2c:
         60:f7:38:d6:5b:f5:64:85:2f:30:35:0f:e5:58:ad:5b:a7:ae:
         3f:80:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org