Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3137362e302f32302d3234203d3e203532323332.roa
File:                     3139302e31342e3137362e302f32302d3234203d3e203532323332.roa (raw, json)
Hash identifier:          PUQo6/EkqN4rVKtql8sEQ6JgEoBGPxPGtOB1JLwIp2Q=
Subject key identifier:   7E:72:43:20:D7:60:6F:37:09:40:76:E9:90:87:2F:95:26:47:E8:FB
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       620C1BF6835233DF8FBFE683E2963B75DE1F228E
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3137362e302f32302d3234203d3e203532323332.roa
Signing time:             Tue 05 Mar 2024 17:53:40 +0000
ROA not before:           Tue 05 Mar 2024 17:48:40 +0000
ROA not after:            Tue 04 Mar 2025 17:53:40 +0000
asID:                     52232
IP address blocks:        190.14.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0c:1b:f6:83:52:33:df:8f:bf:e6:83:e2:96:3b:75:de:1f:22:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Mar  5 17:48:40 2024 GMT
            Not After : Mar  4 17:53:40 2025 GMT
        Subject: CN=7E724320D7606F37094076E990872F952647E8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:e7:fd:01:42:20:86:e7:6c:ac:74:23:6c:
                    e3:2c:28:b8:30:9c:0c:42:66:06:4b:32:53:06:21:
                    6a:aa:4a:e3:ca:06:06:0b:1b:46:4e:3f:a3:78:9b:
                    b8:3e:93:59:e3:20:a7:d1:9e:31:07:d4:82:2f:b5:
                    00:67:06:61:c8:3f:5f:b6:7e:4f:a8:a6:04:a9:d3:
                    4a:e5:dd:9a:59:ac:58:7c:87:c6:69:8f:e3:5c:6a:
                    0d:71:fb:1b:fe:e5:ef:6c:85:be:d0:bc:d0:a1:d5:
                    5f:f0:c5:a8:5e:a6:af:80:39:bd:71:e1:bd:7a:08:
                    87:6c:d9:69:30:49:d7:1a:90:bb:b7:b7:85:c2:ef:
                    ba:ce:03:36:3e:61:a1:cc:44:0d:0b:b9:f7:dc:95:
                    52:2a:ad:bb:d3:97:0c:86:59:7b:c4:72:8e:27:7c:
                    57:92:f7:29:df:85:a8:f4:50:3b:ab:9d:cb:a9:40:
                    9a:42:78:4f:b6:f9:2f:e3:70:7a:73:8e:2f:a2:72:
                    af:18:ee:c1:43:7b:de:f4:41:a4:89:86:74:9e:31:
                    7a:14:a4:f8:d6:12:20:6b:bc:f4:df:c1:2e:d8:57:
                    d2:33:07:fe:c4:1e:cb:56:ad:ca:b2:50:5a:16:96:
                    ba:c7:dd:7c:ed:83:a4:7a:1e:90:cd:69:15:77:2c:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:72:43:20:D7:60:6F:37:09:40:76:E9:90:87:2F:95:26:47:E8:FB
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3137362e302f32302d3234203d3e203532323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:c2:da:6c:62:98:86:97:d9:55:cf:0e:b0:1e:78:82:4f:
         2a:e7:1c:b0:fa:6c:cb:c5:18:8d:34:45:d6:06:86:fb:6e:e4:
         69:96:2a:81:eb:88:fe:40:55:47:70:da:1c:5e:a4:57:37:54:
         2e:47:74:ea:f6:e1:95:58:4b:53:d0:dd:4e:f0:8a:82:00:e7:
         94:d2:0b:38:f9:62:2e:15:e9:c7:07:96:8a:c0:48:1e:a7:28:
         87:42:fb:0b:c8:51:80:e8:09:0a:f3:83:21:ff:dd:b3:fd:2a:
         73:f6:20:56:61:41:91:6f:3f:10:68:23:f1:d3:ca:d5:4d:c0:
         dc:ca:54:34:f1:47:23:66:83:ae:c6:db:7f:b0:c2:fb:73:62:
         aa:1b:30:72:53:ac:93:72:29:55:11:83:53:d6:94:50:c6:6f:
         b5:32:80:41:f7:e7:a8:75:f8:06:c4:bd:62:d9:f2:79:b6:a0:
         17:93:a7:49:9d:06:10:ec:53:45:db:b5:e1:d7:1a:5c:da:ec:
         4b:12:35:89:19:42:f1:f4:66:b5:34:3e:d7:23:48:a0:1d:df:
         8e:b7:28:64:63:2d:84:5e:cd:61:64:7c:0b:0f:3d:26:7e:4f:
         26:72:13:f3:dd:df:13:92:73:05:ca:41:22:c7:e3:93:4a:81:
         d2:69:24:29
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYgwb9oNSM9+Pv+aD4pY7dd4fIo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2NzFBRUY4REEwOTExNUYwMThBQzFEMzY5QjVEQzBF
MTBCMUUzQzAeFw0yNDAzMDUxNzQ4NDBaFw0yNTAzMDQxNzUzNDBaMDMxMTAvBgNV
BAMTKDdFNzI0MzIwRDc2MDZGMzcwOTQwNzZFOTkwODcyRjk1MjY0N0U4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClp+f9AUIghudsrHQjbOMsKLgw
nAxCZgZLMlMGIWqqSuPKBgYLG0ZOP6N4m7g+k1njIKfRnjEH1IIvtQBnBmHIP1+2
fk+opgSp00rl3ZpZrFh8h8Zpj+Ncag1x+xv+5e9shb7QvNCh1V/wxahepq+AOb1x
4b16CIds2WkwSdcakLu3t4XC77rOAzY+YaHMRA0LuffclVIqrbvTlwyGWXvEco4n
fFeS9ynfhaj0UDurncupQJpCeE+2+S/jcHpzji+icq8Y7sFDe970QaSJhnSeMXoU
pPjWEiBrvPTfwS7YV9IzB/7EHstWrcqyUFoWlrrH3Xztg6R6HpDNaRV3LB3fAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfnJDINdgbzcJQHbpkIcvlSZH6PswHwYDVR0j
BBgwFoAUUWca742gkRXwGKwdNptdwOELHjwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQzUzM0E2QzRBMTE2RTkzMTNDMzJCM0FEM0Q3RjREMkZG
NTM5N0E4MUM0MjYwOTE3Qjc0MThCQjMyOUNGRTkxLzAvNTE2NzFBRUY4REEwOTEx
NUYwMThBQzFEMzY5QjVEQzBFMTBCMUUzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTY3MUFFRjhEQTA5MTE1RjAx
OEFDMUQzNjlCNURDMEUxMEIxRTNDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0M1MzNBNkM0QTExNkU5MzEzQzMyQjNBRDNEN0Y0RDJGRjUzOTdBODFD
NDI2MDkxN0I3NDE4QkIzMjlDRkU5MS8wLzMxMzkzMDJlMzEzNDJlMzEzNzM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL4OsDAN
BgkqhkiG9w0BAQsFAAOCAQEAgLzC2mximIaX2VXPDrAeeIJPKuccsPpsy8UYjTRF
1gaG+27kaZYqgeuI/kBVR3DaHF6kVzdULkd06vbhlVhLU9DdTvCKggDnlNILOPli
LhXpxweWisBIHqcoh0L7C8hRgOgJCvODIf/ds/0qc/YgVmFBkW8/EGgj8dPK1U3A
3MpUNPFHI2aDrsbbf7DC+3NiqhswclOsk3IpVRGDU9aUUMZvtTKAQffnqHX4BsS9
YtnyebagF5OnSZ0GEOxTRdu14dcaXNrsSxI1iRlC8fRmtTQ+1yNIoB3fjrcoZGMt
hF7NYWR8Cw89Jn5PJnIT893fE5JzBcpBIsfjk0qB0mkkKQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:06 2024 by rpki-client on console-fra.rpki-client.org