Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa
File:                     3139302e36302e32312e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          xosx2qb5yWuN4fprkiqHIz2jf/KklWXVz19Qochj/Ks=
Subject key identifier:   5B:E8:FD:D1:A0:32:00:49:DA:5F:4E:EA:A7:85:8A:7A:71:AD:C5:B8
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6C678DD60FD72DA992767077EF5142433DF06DE3
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     7087
IP address blocks:        190.60.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:67:8d:d6:0f:d7:2d:a9:92:76:70:77:ef:51:42:43:3d:f0:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=5BE8FDD1A0320049DA5F4EEAA7858A7A71ADC5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:9b:ce:6e:97:00:78:7b:f6:31:d4:36:db:
                    74:b2:d3:50:32:51:42:9b:0c:94:55:99:7b:cc:d7:
                    44:2b:71:4d:3d:d2:5d:bc:0d:76:a4:67:b1:36:9a:
                    65:6a:8b:90:f2:97:c0:cc:15:0c:c5:5d:f4:72:df:
                    57:e9:09:c4:6d:b4:24:5a:98:f7:0b:e7:e8:18:c6:
                    63:5f:6a:61:73:9c:74:21:a7:0c:79:80:33:c9:c4:
                    da:27:27:92:22:47:d5:01:72:a2:91:4d:bc:aa:4b:
                    40:11:a2:8d:cd:cd:8d:fd:1d:33:53:5a:3f:41:ac:
                    7e:90:4b:3c:47:6d:78:e7:d1:56:3d:75:a9:3a:d2:
                    4f:9d:7b:44:82:82:41:dc:ee:82:db:a9:3c:63:af:
                    f7:ef:d4:fa:0a:60:f6:ab:83:49:c8:7e:d9:80:68:
                    2a:7d:64:bc:22:31:9d:94:14:da:25:78:82:3a:59:
                    aa:c8:c4:f1:0b:60:59:6e:cd:90:25:5b:fe:03:aa:
                    00:70:a9:73:95:b0:be:05:92:5e:13:d6:0b:c9:59:
                    30:ba:d2:6a:62:77:47:59:23:88:45:2a:2e:33:bb:
                    2b:08:3e:e5:02:18:5d:2a:0f:67:a2:02:ad:66:2a:
                    b3:87:d9:34:90:e4:75:f5:b7:c5:a8:d9:f9:68:b1:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:FD:D1:A0:32:00:49:DA:5F:4E:EA:A7:85:8A:7A:71:AD:C5:B8
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e32312e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:8e:36:c9:a0:00:35:f4:51:3e:84:1b:02:d4:9a:1b:28:
         f4:22:8d:3e:d6:16:5f:64:22:a6:a1:4c:0b:da:8d:8f:69:6c:
         48:84:d5:16:9f:cd:7e:30:3f:67:d2:4f:e9:ff:7d:24:28:75:
         97:56:5a:3b:64:5c:50:b6:4d:d1:c3:cd:b5:df:1e:bb:47:67:
         8a:e9:04:13:cd:2b:c8:aa:fc:2a:7d:4e:56:6d:39:4d:6f:70:
         37:c5:a4:ff:95:91:df:2e:ff:dd:dc:46:e6:8d:6f:a1:50:41:
         42:2b:da:87:14:38:13:97:32:59:b9:6a:87:e4:ba:29:23:37:
         db:72:b6:d2:7e:d1:28:fe:2b:6e:a0:cc:b9:3c:8b:57:58:2b:
         41:a0:7e:0c:b5:81:2f:e9:f0:cf:08:84:09:e4:66:d0:7f:5c:
         d7:b6:ce:a7:20:b1:bf:ed:fd:ba:34:bc:e4:2c:0b:79:ee:26:
         96:da:7c:1e:b6:41:ac:68:5b:fd:50:62:e5:dc:57:5b:f2:df:
         ff:11:9c:22:8d:70:5b:55:bd:aa:ea:99:22:e1:85:23:1f:30:
         9e:4b:ee:cc:50:2b:c9:c3:67:2c:66:c3:7a:3b:0a:92:4e:7d:
         62:f2:dd:7c:e4:18:7c:d6:b0:64:39:b3:32:98:c8:52:23:5a:
         0b:f8:90:0c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbGeN1g/XLamSdnB371FCQz3wbeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MDRaFw0yNTAzMDQxNzU5MDRaMDMxMTAvBgNV
BAMTKDVCRThGREQxQTAzMjAwNDlEQTVGNEVFQUE3ODU4QTdBNzFBREM1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHJvObpcAeHv2MdQ223Sy01Ay
UUKbDJRVmXvM10QrcU090l28DXakZ7E2mmVqi5Dyl8DMFQzFXfRy31fpCcRttCRa
mPcL5+gYxmNfamFznHQhpwx5gDPJxNonJ5IiR9UBcqKRTbyqS0ARoo3NzY39HTNT
Wj9BrH6QSzxHbXjn0VY9dak60k+de0SCgkHc7oLbqTxjr/fv1PoKYParg0nIftmA
aCp9ZLwiMZ2UFNoleII6WarIxPELYFluzZAlW/4DqgBwqXOVsL4Fkl4T1gvJWTC6
0mpid0dZI4hFKi4zuysIPuUCGF0qD2eiAq1mKrOH2TSQ5HX1t8Wo2flosXKFAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUW+j90aAyAEnaX07qp4WKenGtxbgwHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMxMzkzMDJlMzYzMDJlMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvjwVMA0GCSqG
SIb3DQEBCwUAA4IBAQCGfo42yaAANfRRPoQbAtSaGyj0Io0+1hZfZCKmoUwL2o2P
aWxIhNUWn81+MD9n0k/p/30kKHWXVlo7ZFxQtk3Rw8213x67R2eK6QQTzSvIqvwq
fU5WbTlNb3A3xaT/lZHfLv/d3EbmjW+hUEFCK9qHFDgTlzJZuWqH5LopIzfbcrbS
ftEo/ituoMy5PItXWCtBoH4MtYEv6fDPCIQJ5GbQf1zXts6nILG/7f26NLzkLAt5
7iaW2nwetkGsaFv9UGLl3Fdb8t//EZwijXBbVb2q6pki4YUjHzCeS+7MUCvJw2cs
ZsN6OwqSTn1i8t185Bh81rBkObMymMhSI1oL+JAM
-----END CERTIFICATE-----
Generated at Mon Jun 24 14:05:00 2024 by rpki-client on console-ams.rpki-client.org