Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e34382e302f32302d3234203d3e203532343638.roa
File:                     3139302e36312e34382e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          aTvCjc1gmZOss3bwRxbxcXANor5i+i+hO/Gi1phCqy8=
Subject key identifier:   BC:1C:0E:56:AD:8F:42:DB:57:CF:E8:22:40:E6:35:59:CF:91:90:0E
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       2DA52ABDAE1DDF7DE1B8FA9CC704234D0D109383
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e34382e302f32302d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:06:48 +0000
ROA not before:           Tue 05 Mar 2024 18:01:48 +0000
ROA not after:            Tue 04 Mar 2025 18:06:48 +0000
asID:                     52468
IP address blocks:        190.61.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:2a:bd:ae:1d:df:7d:e1:b8:fa:9c:c7:04:23:4d:0d:10:93:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Mar  5 18:01:48 2024 GMT
            Not After : Mar  4 18:06:48 2025 GMT
        Subject: CN=BC1C0E56AD8F42DB57CFE82240E63559CF91900E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:75:9c:8a:a9:ed:cc:7b:2b:0a:d0:89:76:
                    17:f4:a7:81:0e:fa:05:33:70:1b:e3:5d:ee:c4:b5:
                    fb:79:6a:14:80:4c:02:d4:ef:5d:e8:68:5e:7a:c7:
                    55:c6:03:22:d5:d5:dd:c9:f8:d7:e3:1a:73:f3:d5:
                    6f:b0:3f:b1:00:7e:10:d9:b7:09:6d:56:62:ec:fe:
                    42:dd:a5:db:2b:e1:3c:df:3d:2a:16:13:69:30:ad:
                    bd:1d:61:49:ef:8a:be:7e:27:93:79:94:bf:64:3d:
                    25:38:79:2b:a8:10:de:12:cc:82:c7:74:c5:77:02:
                    eb:18:f2:90:a5:22:cf:88:54:78:00:05:a1:b1:ea:
                    fe:98:f0:cb:13:32:00:0c:f0:9a:db:09:61:22:47:
                    74:18:07:93:60:e4:2b:e7:01:55:8b:5d:4c:ce:b5:
                    72:44:b3:5e:32:ff:8a:a2:9a:cf:76:5d:a6:83:a1:
                    3b:d9:44:b0:1e:87:65:7a:b9:c0:6a:5e:20:b7:3e:
                    02:2a:3f:5a:96:e5:bd:fd:3f:a5:47:d5:b2:cd:a7:
                    c8:5b:fd:02:c3:48:24:6f:a6:bc:cb:d6:c3:c7:2b:
                    0f:be:89:c1:ec:d2:e8:68:4e:67:10:e5:5f:1b:1f:
                    a0:cd:61:28:6d:58:8a:50:50:7a:f2:1f:c7:4d:eb:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1C:0E:56:AD:8F:42:DB:57:CF:E8:22:40:E6:35:59:CF:91:90:0E
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e34382e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:8b:02:92:8e:bd:44:b8:0e:a4:3b:09:fc:d0:5e:14:3e:
         0c:76:36:73:a7:7f:72:d0:6e:48:a4:2b:0f:63:be:42:13:00:
         6f:86:4c:b9:74:ac:f6:dd:8b:93:f8:28:ff:52:c8:fa:3e:94:
         04:64:5a:f0:7a:98:ee:c6:ec:bc:4f:10:d1:99:37:7a:18:5c:
         b8:62:be:50:72:81:f6:ed:8d:9d:eb:96:ae:5a:4b:db:00:06:
         8e:32:ec:c5:74:8a:1a:0c:66:25:94:fb:b4:37:01:1f:10:7f:
         bf:f0:ff:70:72:c5:9b:f6:c2:00:b5:76:96:ee:a8:cf:de:75:
         c0:a7:31:38:dd:f6:8c:fa:c3:c2:8a:ab:2e:f2:0d:0b:e0:20:
         d0:55:81:ae:0e:19:31:41:46:2a:e0:ed:8a:ba:c9:fb:4b:96:
         7e:87:ea:47:99:04:60:91:90:25:b3:45:cc:9d:ad:7f:8b:c7:
         0d:47:0c:d9:16:bf:47:0c:1c:31:1a:63:a0:d1:b8:be:a2:9d:
         13:18:b5:97:da:44:37:97:8c:89:fb:9f:a1:a9:6c:8a:60:60:
         10:f3:7b:88:3a:26:a4:1a:d8:09:96:b1:a2:38:ef:b5:03:ab:
         e6:95:a2:10:4d:2b:79:a0:1a:d1:2c:b2:43:b6:0b:45:a8:63:
         61:f2:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org