Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa
File:                     3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          l3VDriwG9d4Q4JYhxar/+IMAKIkrEKzZGJ5gxmc69qI=
Subject key identifier:   ED:72:89:FB:F2:B8:FC:7A:80:CE:EB:00:D1:78:B1:4F:4A:2B:8A:8E
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       112E13D4722660015401DEA79B28CE780E93A87B
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     28049
IP address blocks:        190.121.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2e:13:d4:72:26:60:01:54:01:de:a7:9b:28:ce:78:0e:93:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=ED7289FBF2B8FC7A80CEEB00D178B14F4A2B8A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:7a:1f:0e:15:eb:e3:a4:37:bd:4f:ac:1b:
                    7a:d5:30:58:99:83:1a:10:7e:3e:cf:63:97:cf:38:
                    9f:32:6e:d9:4b:eb:06:0e:41:84:00:9c:66:fb:a8:
                    8b:ea:c1:fc:03:88:6f:4a:8d:d3:f1:81:44:b5:6d:
                    10:68:39:ab:b3:cd:12:a9:5b:09:4a:f7:07:48:74:
                    f0:37:91:42:b2:fe:c1:e6:6c:75:99:40:da:5d:ef:
                    d4:b8:cf:c2:b3:6d:81:28:32:70:74:a9:31:17:85:
                    c6:92:e7:d3:5b:7a:4c:5e:28:ed:37:3e:b8:a9:93:
                    58:2b:fc:75:8b:a2:6f:d9:d2:2a:93:07:e7:5a:ce:
                    14:b4:3c:ef:50:d0:16:3c:68:d4:c9:9f:0d:1e:a4:
                    80:69:0d:af:42:f6:e9:e1:fc:13:99:8a:11:6e:54:
                    8d:08:4b:72:ff:26:f9:2d:cf:4d:78:4c:24:33:a3:
                    0a:86:a6:5c:c6:59:b6:e6:6e:e0:0d:0b:68:cf:0b:
                    eb:60:49:03:49:92:25:5e:b9:29:e6:18:8a:93:f0:
                    c0:aa:06:d2:59:23:93:5f:7c:0d:77:86:8c:b4:f1:
                    e8:c8:d7:0e:3a:06:de:3d:ce:d8:0d:17:ab:12:0c:
                    17:0a:56:d3:04:17:77:47:08:50:f6:c1:d1:64:8c:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:89:FB:F2:B8:FC:7A:80:CE:EB:00:D1:78:B1:4F:4A:2B:8A:8E
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139342e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:23:1a:51:cf:67:8b:12:e8:2e:37:fe:0b:64:43:c0:4c:8d:
         e6:f2:2a:76:6c:5f:0b:7f:33:27:d5:f6:d1:c9:9b:c3:50:c6:
         a5:26:58:7b:3a:a6:bf:aa:ea:82:48:88:90:1e:07:14:f9:86:
         72:5a:59:33:b3:7b:10:2b:fd:8d:2c:b8:08:fb:3f:53:dc:cb:
         c4:59:50:b0:3f:db:cc:9e:f9:b9:d3:22:72:d5:45:89:dd:c1:
         eb:72:df:5a:5e:00:4e:25:46:22:24:ab:de:75:22:ff:16:f3:
         73:ce:23:15:16:75:ca:aa:6e:f3:3d:ad:36:bc:31:60:12:6a:
         42:6d:9e:22:2e:84:f1:df:f6:ad:5f:10:e6:fa:b2:80:a1:65:
         1d:2c:fd:52:37:db:6b:39:36:ba:f6:3d:59:80:6f:fb:b5:48:
         5e:19:fc:77:6d:44:42:3d:5f:33:2c:d6:0c:68:61:f2:1b:d7:
         fc:3e:c9:80:66:ef:c1:34:a6:df:32:04:e3:13:fd:f6:36:06:
         24:41:3d:16:d3:9e:7e:61:39:82:1c:e3:b8:29:e7:6b:9f:67:
         0e:fd:1a:18:1e:09:e7:f4:6c:b6:bf:65:26:b2:e5:97:59:59:
         3b:de:0f:07:4a:12:f9:5c:10:d9:b4:b5:87:cf:03:32:6d:6a:
         22:f8:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org