Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          bYMVRVsKTSVcWRKY9TadD3/hYY10mrxeQ3TXLWMky2w=
Subject key identifier:   C6:28:26:49:BF:68:B5:7E:48:B9:7F:48:3E:64:A4:DE:30:4D:3E:27
Certificate issuer:       /CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
Certificate serial:       0291C59D565B7D8DEDD80CF08411A296A37CDD8C
Authority key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     61468
IP address blocks:        192.188.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:c5:9d:56:5b:7d:8d:ed:d8:0c:f0:84:11:a2:96:a3:7c:dd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=C6282649BF68B57E48B97F483E64A4DE304D3E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:b4:71:56:5c:28:69:97:47:5e:a8:7a:3a:
                    3f:99:b3:4e:c3:42:c1:43:f8:99:c7:4e:f0:35:52:
                    de:86:bf:e1:37:9d:f8:fe:55:1d:e1:1d:ca:17:78:
                    62:f8:cd:55:e4:10:09:ae:71:eb:44:43:70:e6:27:
                    0d:04:ae:81:cd:8e:74:60:a0:17:c6:9f:c1:96:c9:
                    ba:50:9c:b2:76:2e:8a:a1:7a:de:f9:39:93:94:95:
                    d9:b4:f1:83:1e:9e:83:0e:6f:55:35:2f:19:11:1d:
                    e8:1b:7c:81:54:9b:6d:35:d6:2c:62:31:01:5f:2b:
                    ae:6c:5c:f1:72:5f:8b:ca:4c:df:ac:cd:3c:99:9b:
                    12:e5:a1:9e:f8:6e:0a:4e:46:a7:73:c6:12:3b:60:
                    de:23:3b:31:4d:c4:18:38:a2:b1:99:db:67:27:86:
                    51:c6:c6:5f:d0:6a:41:93:26:40:1e:a0:21:d4:24:
                    f0:0c:61:90:73:22:1e:cd:ea:10:26:eb:69:c8:96:
                    1e:7d:21:57:11:b4:45:ab:13:a8:83:f0:0b:68:ca:
                    2e:78:a9:b1:92:0f:10:27:6b:f6:0f:9a:a0:13:aa:
                    79:d1:a4:95:c7:0c:80:cb:21:35:cc:61:c4:00:db:
                    12:3e:0a:fe:cf:1c:df:62:ea:48:92:d6:f7:56:0c:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:26:49:BF:68:B5:7E:48:B9:7F:48:3E:64:A4:DE:30:4D:3E:27
            X509v3 Authority Key Identifier:
                keyid:5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:7f:a5:3c:85:53:5f:db:6d:6f:ab:b7:0f:6d:27:98:71:
         6c:93:3d:49:e1:45:54:7d:8a:85:98:7d:06:35:26:e9:b5:23:
         c5:06:09:63:6f:fd:1c:95:84:98:d2:d1:9f:db:ac:91:40:db:
         5f:51:95:ed:61:be:3d:27:27:1f:b0:9a:b1:24:30:f9:77:08:
         6c:2f:6c:25:e4:ee:9b:ed:07:e7:8e:18:ba:48:17:be:a8:17:
         17:4f:00:96:83:e0:3d:5d:73:f5:f2:40:f5:72:a2:c0:7d:02:
         66:cb:c7:bf:f5:c4:4c:e1:ae:b1:4c:c2:67:98:45:29:09:aa:
         05:64:ce:1e:40:e1:12:d7:59:f7:97:df:8f:72:9e:ac:4a:fd:
         72:9b:bd:b2:b0:62:b7:6f:c1:7f:68:46:ce:9b:4b:96:ba:94:
         1d:94:db:73:51:e7:f6:43:56:44:67:20:1b:91:ac:ef:e6:ab:
         a2:14:e9:4c:52:e1:62:5e:1f:c8:df:ae:23:24:00:b3:25:5c:
         8c:ad:cb:1c:1e:55:ed:9a:65:df:79:f3:aa:52:d0:f5:9c:01:
         99:79:50:db:d9:60:af:eb:34:a2:96:ee:2b:0c:f9:b3:c0:f1:
         08:69:7b:36:57:54:d0:bb:d0:1d:3a:4b:5c:a2:47:fc:35:3a:
         1d:bb:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org