Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33362e302f32322d3234203d3e203532343638.roa
File:                     3139302e36312e33362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Gd2PJw0kmeZrcZQIFdB2BBbUKRVX/mJY8Tu4lqIKiDg=
Subject key identifier:   50:D2:A5:1D:9C:87:B5:61:22:64:31:E5:F9:F2:F3:34:B1:10:AC:9D
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       1E2DF7A922481627FE23B501F7CF12F9D051711B
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:06:49 +0000
ROA not before:           Tue 05 Mar 2024 18:01:49 +0000
ROA not after:            Tue 04 Mar 2025 18:06:49 +0000
asID:                     52468
IP address blocks:        190.61.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2d:f7:a9:22:48:16:27:fe:23:b5:01:f7:cf:12:f9:d0:51:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Mar  5 18:01:49 2024 GMT
            Not After : Mar  4 18:06:49 2025 GMT
        Subject: CN=50D2A51D9C87B561226431E5F9F2F334B110AC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:42:dc:e1:8e:4f:24:f6:31:e2:79:39:05:
                    fb:37:80:f5:0d:6b:1f:70:d2:37:0b:ab:29:2a:cb:
                    7a:63:1c:4a:f3:63:14:64:3d:67:8e:0a:24:89:28:
                    01:21:e1:2a:ae:50:a1:5a:f4:28:6a:ac:02:25:1f:
                    9a:db:70:6f:5a:2a:f6:ac:2e:9e:6b:4d:6c:42:ab:
                    de:a3:49:54:5d:a6:78:3d:e5:18:cd:b8:49:87:99:
                    f4:23:47:48:c6:13:ff:f3:d5:79:ac:51:36:c3:dd:
                    8d:c9:97:1b:60:3d:94:b7:0b:a3:6c:75:9e:b8:b9:
                    7f:91:ed:11:59:06:c4:8f:b6:4a:f8:95:ff:4a:71:
                    e6:b7:27:a1:ec:82:ce:8c:76:38:12:3c:71:ca:5c:
                    e8:05:b3:d9:46:59:12:35:f5:0f:c7:27:d6:a8:62:
                    5a:e6:a3:3c:dc:76:9c:55:ba:bd:22:cc:10:80:ca:
                    99:11:6f:36:40:45:8f:fe:aa:8e:83:c7:6d:2a:75:
                    44:31:99:ae:7d:76:a6:fd:ec:3a:eb:61:29:00:e9:
                    fe:e1:89:9d:23:f3:2d:9a:74:db:0b:7a:bd:9d:a0:
                    dc:d3:4b:b5:34:e1:21:b2:4e:8f:0f:91:f3:f6:59:
                    93:39:32:56:83:8b:81:ac:db:63:6b:68:eb:7d:88:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:A5:1D:9C:87:B5:61:22:64:31:E5:F9:F2:F3:34:B1:10:AC:9D
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:55:bb:ae:38:ad:97:48:59:47:55:fa:4c:36:b5:f9:57:
         da:8a:52:c6:60:d1:a8:60:b6:d6:46:fb:3a:d8:dc:79:b7:73:
         ba:88:61:c7:05:ed:9e:cf:b1:ee:5e:fc:5a:cc:17:b6:c9:4b:
         00:c5:8c:07:d5:77:0e:9d:e1:fe:37:06:0e:41:28:75:9d:70:
         1c:2e:f3:6e:9b:11:88:ce:b2:68:b6:63:f2:bf:63:c5:72:1b:
         3e:d1:ea:83:0f:ce:bf:b2:3c:53:96:e8:1d:24:a1:2f:2e:d3:
         5e:75:ff:b6:51:99:26:17:5b:13:9d:3d:e1:ff:c6:61:e8:c3:
         3c:3c:fb:30:07:74:16:e9:d8:10:fd:3b:1d:1f:e0:6a:19:fb:
         fc:c2:8d:ea:5f:d8:e2:f4:9b:49:a1:ac:9f:61:fa:9d:21:28:
         45:c8:47:dc:71:cb:14:75:d2:00:70:fc:ac:d5:c8:33:d2:14:
         0e:b5:73:fd:32:2b:5a:fa:11:84:a8:cb:f5:83:f8:19:48:fb:
         61:04:3c:7e:a2:00:00:84:ad:69:dd:be:c2:29:14:35:5c:91:
         aa:80:22:7d:fb:3e:90:43:0a:ab:f5:63:dc:38:67:3f:13:78:
         44:0c:13:ac:d5:2a:e2:e5:be:ca:ee:f7:7e:91:ff:a6:b9:96:
         fa:17:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org