Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa
File:                     3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa (raw, json)
Hash identifier:          wON4Al+75/uMbM9Z65BY/PkF6UfnhL8Ek3ruyqznmnw=
Subject key identifier:   74:ED:3C:24:D8:37:3B:76:83:D8:47:82:7C:CB:6E:E0:35:D6:B4:A8
Certificate issuer:       /CN=13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D
Certificate serial:       4635724C9CBB49DF7389EFA6ACA6BF4F73FD7803
Authority key identifier: 13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa
Signing time:             Tue 05 Mar 2024 18:00:51 +0000
ROA not before:           Tue 05 Mar 2024 17:55:51 +0000
ROA not after:            Tue 04 Mar 2025 18:00:51 +0000
asID:                     11514
IP address blocks:        190.111.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:35:72:4c:9c:bb:49:df:73:89:ef:a6:ac:a6:bf:4f:73:fd:78:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D
        Validity
            Not Before: Mar  5 17:55:51 2024 GMT
            Not After : Mar  4 18:00:51 2025 GMT
        Subject: CN=74ED3C24D8373B7683D847827CCB6EE035D6B4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:91:a0:fb:8a:1b:67:f5:de:92:0a:62:a3:
                    91:05:d3:94:c1:31:ad:f1:ee:55:c3:c6:1e:d4:11:
                    96:b9:ba:28:32:c5:2e:a7:12:02:55:ff:bd:b1:17:
                    c8:fe:e4:f5:a8:43:ca:ef:42:40:80:7c:12:dd:bc:
                    4e:75:29:ca:f8:e9:15:77:5e:69:10:92:05:fc:60:
                    1d:4b:14:26:9c:d6:a7:f0:6c:76:28:24:83:ef:ef:
                    45:d3:06:da:84:3e:fb:82:c7:8b:df:ca:cb:91:80:
                    0e:c2:27:13:02:b0:ef:3f:29:a5:38:2e:db:37:90:
                    33:89:16:2b:c7:90:b9:25:a9:43:75:86:46:ed:0a:
                    06:8b:c9:f8:97:9d:29:32:f7:cf:a0:5e:b1:aa:72:
                    a4:97:ee:d2:f1:76:3c:de:d7:8d:b3:f8:b4:7d:65:
                    1d:0f:79:33:3b:52:d7:5f:15:64:d0:c9:11:6e:98:
                    47:f6:21:ef:07:56:f0:d0:c5:de:9e:9d:89:7b:92:
                    9a:22:9e:23:e7:65:e3:e7:9a:77:59:88:16:da:7a:
                    88:9f:87:78:f2:84:ed:01:69:6d:8e:29:11:ca:05:
                    3c:f9:cf:fa:87:cd:4a:41:13:10:6b:e7:16:6d:2e:
                    77:37:36:ce:42:44:d3:da:14:6d:ee:df:61:64:4d:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:3C:24:D8:37:3B:76:83:D8:47:82:7C:CB:6E:E0:35:D6:B4:A8
            X509v3 Authority Key Identifier:
                keyid:13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/3139302e3131312e3131322e302f32312d3234203d3e203131353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:60:6a:11:95:fe:9a:3e:a0:2a:99:22:23:bd:8c:1e:76:
         ce:af:0b:15:23:66:d8:6d:60:24:07:7e:d8:7c:9a:0f:75:e3:
         cd:ee:d7:4c:30:6d:c0:c4:b9:a7:f2:35:f0:2e:55:1b:3b:b1:
         05:92:19:b8:47:52:03:1d:d6:78:33:6d:e1:a3:4b:be:24:b6:
         02:d9:9d:81:8e:96:d1:37:76:f6:c5:6a:3e:ff:68:52:d5:02:
         cc:9b:ee:dc:97:e1:4d:c7:4e:9a:16:56:13:0a:69:a3:98:08:
         5e:77:60:91:b5:8e:1f:74:5d:97:7e:17:7d:ec:48:dd:1a:88:
         9d:4c:4e:bb:73:15:70:04:18:35:cc:ea:55:2e:fe:d5:c6:64:
         f3:e2:26:93:36:d3:a3:35:e9:c4:9e:78:0d:d1:87:6c:81:02:
         2a:b3:c4:9e:d7:2f:46:51:5c:6d:16:5a:c7:34:30:e7:8e:57:
         3d:86:9d:6a:d3:79:f4:55:36:6b:6a:61:73:c5:98:38:bc:cc:
         f9:0d:f6:69:8c:16:63:62:8d:7e:b6:8b:25:11:8b:5a:8a:d8:
         eb:0b:a0:86:b6:c9:b5:bd:12:3a:84:a0:ab:ab:5e:1e:71:ee:
         cc:2e:7c:dc:95:96:9e:2d:0d:27:aa:24:18:de:4f:c5:65:d4:
         e4:65:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:02:25 2024 by rpki-client on console-ams.rpki-client.org