Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3139302e3132332e34342e302f32322d3234203d3e203532323834.roa
File:                     3139302e3132332e34342e302f32322d3234203d3e203532323834.roa (raw, json)
Hash identifier:          HBO6lla4dgPDrX06OV/+lvGaOIwCGevDK5wYKxeNTGY=
Subject key identifier:   50:20:D0:65:ED:0D:12:94:91:A6:83:32:38:55:E3:1F:03:13:D6:3D
Certificate issuer:       /CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
Certificate serial:       03334708305AF1ECF3BA42E75B767ECE84E5AA99
Authority key identifier: 3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3139302e3132332e34342e302f32322d3234203d3e203532323834.roa
Signing time:             Tue 05 Mar 2024 18:16:36 +0000
ROA not before:           Tue 05 Mar 2024 18:11:36 +0000
ROA not after:            Tue 04 Mar 2025 18:16:36 +0000
asID:                     52284
IP address blocks:        190.123.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:33:47:08:30:5a:f1:ec:f3:ba:42:e7:5b:76:7e:ce:84:e5:aa:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
        Validity
            Not Before: Mar  5 18:11:36 2024 GMT
            Not After : Mar  4 18:16:36 2025 GMT
        Subject: CN=5020D065ED0D129491A683323855E31F0313D63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:96:e9:f0:86:69:af:93:bd:38:4b:95:d5:
                    f1:11:6c:42:eb:80:94:ec:bb:ed:1d:ad:49:8e:8e:
                    95:b6:d1:01:de:15:19:88:63:0d:2e:d0:4b:c6:3f:
                    4a:ad:40:86:b8:8c:e1:36:9b:24:4a:ab:1a:c4:18:
                    a7:ce:52:92:e1:26:8e:1a:3c:99:25:4c:20:c3:85:
                    64:86:38:7c:e4:a9:40:58:c8:83:43:02:c8:56:15:
                    f9:81:14:5e:7f:32:28:e4:8d:56:28:48:db:02:22:
                    69:ba:94:8a:e9:df:cd:28:ce:c5:3b:81:40:7f:15:
                    50:b1:aa:19:5c:4d:68:29:49:ca:80:55:50:97:9e:
                    44:30:f6:a4:4a:08:e5:aa:89:0b:78:41:2b:69:06:
                    d9:69:7f:73:07:be:4c:2e:4f:25:4e:56:62:5b:3f:
                    29:33:5d:dd:6f:6f:3b:85:2f:68:fc:22:7e:b6:86:
                    47:43:f6:60:27:9c:e7:37:8e:fb:de:b7:0d:37:72:
                    6b:28:8c:0a:36:66:48:b8:cb:0d:5e:98:59:01:f1:
                    e3:39:c9:30:ac:41:0f:ef:c2:a1:87:e3:55:cb:89:
                    c5:1a:07:0b:1e:79:08:6d:9b:6e:de:da:55:a0:3e:
                    94:17:f0:83:1d:68:a5:25:7c:c8:f6:67:30:1f:70:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:D0:65:ED:0D:12:94:91:A6:83:32:38:55:E3:1F:03:13:D6:3D
            X509v3 Authority Key Identifier:
                keyid:3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3139302e3132332e34342e302f32322d3234203d3e203532323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:35:6f:bd:96:26:1c:62:ac:27:ef:0b:f5:a5:af:66:56:
         a3:3c:ec:ef:3e:cd:5b:b9:81:90:4b:54:6d:5a:31:6b:f3:05:
         6b:1d:24:07:a9:c9:ed:e7:13:45:62:f5:fc:de:5b:7c:6c:9e:
         58:57:93:38:d2:b2:26:d0:ac:ac:62:0b:e6:df:61:1d:f6:0b:
         f2:ed:14:c4:b5:b4:03:4b:6a:a4:c7:44:36:fb:38:4d:65:46:
         13:84:a2:4c:e8:53:92:21:86:28:6b:c7:51:ce:53:d2:f9:bc:
         f4:18:1a:76:47:5b:de:38:7f:f2:17:02:ea:1e:b1:43:f0:70:
         b8:8a:64:13:1f:02:63:9c:ea:5a:9e:44:e6:fc:38:0c:6c:4a:
         ee:da:d8:30:fd:07:60:fd:10:e0:d4:72:71:cc:b5:a0:3f:8a:
         a1:0b:3b:0c:c6:90:cd:c4:ba:d0:1d:c3:8c:a7:08:d5:d2:78:
         c3:51:51:89:eb:49:cb:24:97:2c:9c:93:48:9b:a3:c8:d0:92:
         05:53:66:64:cc:76:77:48:f1:b8:a7:c1:82:f4:20:12:fd:1c:
         9c:c7:e0:21:fd:7f:01:f9:b3:3f:91:c4:03:08:e3:78:81:cd:
         ca:c7:bc:72:e0:85:1e:74:9c:15:b2:35:a6:95:27:4f:06:4a:
         11:c3:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:56:00 2024 by rpki-client on console-fra.rpki-client.org