Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa
File:                     3139302e3231322e36342e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          t4J/76Vqo0eTLP297bxhX91gdl/NgtAOcV7UooXIsYY=
Subject key identifier:   F0:C8:2E:1D:1B:BA:20:E9:EB:26:73:FF:FA:E7:C1:79:0E:40:82:5B
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       5B35F9EE40A1CF832A9D42389077D9E2427F0EE6
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:09:44 +0000
ROA not before:           Tue 05 Mar 2024 18:04:44 +0000
ROA not after:            Tue 04 Mar 2025 18:09:44 +0000
asID:                     14754
IP address blocks:        190.212.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:f9:ee:40:a1:cf:83:2a:9d:42:38:90:77:d9:e2:42:7f:0e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Mar  5 18:04:44 2024 GMT
            Not After : Mar  4 18:09:44 2025 GMT
        Subject: CN=F0C82E1D1BBA20E9EB2673FFFAE7C1790E40825B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:95:b4:9e:b1:d4:43:01:46:79:02:b8:39:
                    31:f9:8a:af:23:ce:5c:f5:fa:c4:1f:69:d9:d5:60:
                    b1:14:3c:f5:87:03:ff:f1:62:2f:bc:19:36:99:da:
                    12:1f:7f:a3:d5:5d:54:0b:6d:62:e6:08:43:79:45:
                    42:c0:0f:f7:7a:cd:04:90:70:ca:7f:1f:f2:ff:4e:
                    1b:57:8f:17:ea:17:3b:06:77:7b:8a:9e:33:26:f9:
                    4a:ae:12:71:10:2f:52:5d:b9:87:09:e9:73:56:d3:
                    ce:02:86:7b:92:9e:2f:93:89:2d:a1:43:49:38:b0:
                    25:c8:b5:64:b6:2a:b4:95:91:26:ad:64:77:21:23:
                    1e:27:0b:3c:a7:23:60:0d:7d:ee:d3:be:6a:fc:14:
                    6c:64:09:a4:2f:c8:c8:6a:cf:06:51:05:aa:67:6e:
                    9e:fd:75:41:9c:24:80:b8:50:d0:c1:d3:1c:f5:4b:
                    b6:7e:6d:ea:82:a6:47:3e:4e:0c:98:a9:56:da:40:
                    89:f4:de:52:cb:ab:06:12:a3:e7:4f:0c:65:86:18:
                    28:99:c9:5c:ec:9d:09:98:a7:3f:22:16:93:98:b9:
                    c1:9d:95:65:82:d8:31:4e:47:31:a1:e8:f7:03:d7:
                    f2:55:e4:e5:f2:03:fa:2c:ef:95:10:13:1d:37:0a:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C8:2E:1D:1B:BA:20:E9:EB:26:73:FF:FA:E7:C1:79:0E:40:82:5B
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.212.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:12:28:9d:21:4f:ff:68:38:d4:c2:b3:de:d8:89:9a:50:35:
         8d:f6:61:fc:6f:f0:20:1f:d6:19:1e:90:f7:fe:35:25:e0:7e:
         44:9e:5a:fa:9b:39:5d:12:fd:59:fc:dc:e6:40:79:7e:d7:44:
         43:1a:2a:41:18:15:9a:f1:a9:dc:aa:49:11:88:13:f5:25:a8:
         5b:44:8e:c8:5c:b8:3a:5e:e9:ca:09:01:4f:50:aa:85:2e:46:
         f0:b1:86:73:93:64:02:f2:62:9c:fd:1b:1c:4d:5a:58:30:81:
         73:aa:cd:2d:93:fc:24:76:e3:20:b1:c2:3f:29:79:4e:df:37:
         4a:d5:1c:ea:7c:ed:e9:91:ea:59:51:a9:82:b2:53:b0:d8:ff:
         e8:6a:5c:22:9e:55:b7:7d:42:ae:04:e3:55:6e:58:11:a9:d0:
         e4:50:f8:11:37:cc:d3:5b:51:4a:f5:bb:00:21:4f:ac:23:1f:
         1d:ff:04:14:ff:91:d9:6f:82:27:3e:45:e9:69:64:a8:8f:e2:
         7f:4c:a1:a2:98:d2:0f:35:2c:f4:dc:85:8d:a0:21:7e:06:6b:
         2a:55:48:00:7a:46:9b:8d:ed:89:fa:d8:ad:cd:19:08:bc:71:
         07:8b:cb:f9:67:ff:57:82:f5:0d:01:86:b2:a0:16:87:e0:57:
         7c:0b:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 11:17:01 2024 by rpki-client on console-fra.rpki-client.org