Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35332e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          ivF7NpjDnDpj9ujin7u0olGBwMW8RZHy7z/nZgzcWyk=
Subject key identifier:   4A:1E:B6:3E:83:14:AC:8E:6C:87:29:D3:25:24:2D:41:67:8A:87:60
Certificate issuer:       /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial:       6D1C323A6BD96EBA8AC0246A8666C0B059E80A78
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:22:35 +0000
ROA not before:           Tue 05 Mar 2024 18:17:35 +0000
ROA not after:            Tue 04 Mar 2025 18:22:35 +0000
asID:                     61468
IP address blocks:        192.188.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:32:3a:6b:d9:6e:ba:8a:c0:24:6a:86:66:c0:b0:59:e8:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
        Validity
            Not Before: Mar  5 18:17:35 2024 GMT
            Not After : Mar  4 18:22:35 2025 GMT
        Subject: CN=4A1EB63E8314AC8E6C8729D325242D41678A8760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:dc:d7:ba:0c:f7:7a:1d:34:b5:4a:c7:d2:
                    2e:1f:3b:ff:62:08:e0:79:7f:e9:b5:be:96:5d:da:
                    01:84:8c:07:8c:3f:c4:5b:35:fa:71:a4:50:10:eb:
                    8e:a3:ba:89:38:e0:44:a3:5f:4d:22:4b:af:01:d1:
                    91:7a:36:43:b1:49:3d:2c:aa:2b:64:26:5e:b7:d5:
                    f5:c6:c0:50:4d:52:a6:94:5a:de:1a:3f:90:e8:47:
                    a4:59:e1:63:6e:78:dc:93:61:4e:2c:99:ba:38:cc:
                    df:a4:8e:d4:4b:b3:cc:83:8c:30:0a:95:b8:4d:ed:
                    7a:c1:a9:2b:af:b8:79:61:4a:c1:32:28:2b:49:81:
                    33:1c:63:ac:18:b8:a3:ae:8a:a3:74:5b:f8:51:7c:
                    dd:53:5c:4b:c8:d9:bb:1d:79:53:52:e7:63:aa:2e:
                    6a:66:a6:ac:b1:06:c8:1e:f5:ae:39:9c:69:79:a6:
                    39:29:88:01:c9:e3:2c:64:0e:72:12:4b:f1:63:13:
                    ba:94:31:a9:17:c6:c7:90:4d:3e:8f:55:4c:f4:6a:
                    06:35:1e:1e:10:37:e9:e5:4b:93:2c:77:ea:d8:6f:
                    61:e9:bd:4c:09:1c:87:a0:54:9c:1b:f0:45:ee:78:
                    64:0a:5b:a7:47:ef:1a:19:0c:3d:1a:30:ab:77:7c:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1E:B6:3E:83:14:AC:8E:6C:87:29:D3:25:24:2D:41:67:8A:87:60
            X509v3 Authority Key Identifier:
                keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:66:92:45:2e:c6:9c:35:ed:f7:c3:a6:15:da:9a:d2:7d:
         5e:fb:09:6f:47:74:4c:87:26:69:75:29:0c:e3:e3:6b:c4:e4:
         a0:bf:96:e1:5e:6c:c8:9f:ed:40:ac:b6:1e:3a:07:64:d5:57:
         91:b0:89:f4:f7:20:20:98:5b:e2:fd:93:f7:9c:49:9d:29:c0:
         a7:72:73:ad:7f:96:0a:11:8f:78:59:54:08:be:30:be:fb:a3:
         cd:52:84:ae:1f:d8:0e:e3:c5:9d:44:ae:08:e1:bb:37:c0:a2:
         ae:ee:84:f3:03:eb:82:24:64:8f:21:f2:52:96:bc:3e:2e:24:
         fa:42:63:bb:19:6a:0b:4d:b3:54:19:0e:95:89:8a:e4:de:1f:
         b9:fa:0f:b4:5e:a8:d6:7f:b0:e3:81:f4:27:3b:97:7b:46:66:
         08:5d:47:f8:cd:1d:88:8e:ec:37:90:e6:69:fb:cb:c7:df:d2:
         18:dd:eb:af:ab:dd:26:bb:ee:55:42:cd:4f:ee:c6:08:8d:6f:
         68:53:fa:8a:6a:1e:ba:e8:0a:d2:6f:4d:f9:cd:94:20:62:a7:
         62:12:ae:36:88:cd:8d:cf:2c:5f:65:d9:ce:e5:b6:df:5f:5a:
         b5:2d:2c:ca:6d:5d:de:04:b6:d1:13:fd:32:54:96:5f:6a:84:
         c5:d6:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org