Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa
File:                     3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa (raw, json)
Hash identifier:          a7/hWb8Yi0Ner7tTCcPDw+Irnf9GEC+jSXq4OlrUvUQ=
Subject key identifier:   2E:50:44:2C:4D:32:F2:83:57:AA:D5:68:1E:85:A8:7F:3C:3B:D8:E0
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       53E1076CECC3E5DF087D77799DFE86FCBE65FBF4
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa
Signing time:             Tue 05 Mar 2024 18:00:45 +0000
ROA not before:           Tue 05 Mar 2024 17:55:45 +0000
ROA not after:            Tue 04 Mar 2025 18:00:45 +0000
asID:                     16528
IP address blocks:        190.216.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e1:07:6c:ec:c3:e5:df:08:7d:77:79:9d:fe:86:fc:be:65:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:45 2024 GMT
            Not After : Mar  4 18:00:45 2025 GMT
        Subject: CN=2E50442C4D32F28357AAD5681E85A87F3C3BD8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:66:b9:1f:eb:65:36:65:ca:dd:73:cd:2d:
                    b9:dd:37:e3:83:e4:d6:b0:2d:4e:d6:2f:86:36:cb:
                    ba:36:59:9d:38:e3:4c:f5:ab:fa:8c:b9:13:1f:bd:
                    ac:19:56:ca:6e:e9:a6:d0:39:c2:bd:c5:41:1b:25:
                    b3:51:13:59:04:19:81:6b:56:d4:11:37:3d:c1:7b:
                    89:ae:9e:52:53:5b:1d:8f:26:b1:6c:01:e1:56:58:
                    23:c9:77:a2:f2:86:b4:5d:4b:28:bb:bc:9d:9b:ba:
                    24:08:0d:89:39:6a:8b:4c:4f:12:98:4b:ec:7e:29:
                    e3:f9:ed:8a:99:79:d3:b5:35:e0:50:ee:7c:1f:15:
                    dd:c6:7a:d4:34:3e:82:48:5b:6f:20:9f:4a:e3:aa:
                    7b:af:56:d7:72:c0:14:a6:c2:f9:56:a3:e7:ba:68:
                    b8:43:30:7d:ea:d3:22:eb:49:bc:87:89:f0:7b:ae:
                    6c:54:7e:e1:34:b6:78:d0:e5:c2:c5:05:5d:24:57:
                    bb:35:68:a0:05:7f:65:10:23:6b:c3:5e:52:ca:a2:
                    2b:f8:9f:bb:06:c9:44:58:3c:48:bc:17:54:99:82:
                    d1:f6:75:50:18:a7:51:39:9c:45:53:38:da:51:28:
                    28:f5:82:5e:10:72:73:58:d9:65:2b:44:c1:57:43:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:50:44:2C:4D:32:F2:83:57:AA:D5:68:1E:85:A8:7F:3C:3B:D8:E0
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3133322e302f32342d3234203d3e203136353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:69:42:4c:a4:9b:0c:a1:aa:00:96:ea:e0:2e:51:5b:bf:
         2b:87:5b:67:25:1c:94:4f:cf:b3:7b:a3:88:b5:8e:b3:91:90:
         d3:26:63:76:b9:cd:2d:81:91:21:04:a7:b2:5c:46:ac:2a:c1:
         86:f9:91:2b:76:30:ca:cf:65:24:22:ea:a8:36:c2:6a:a0:b9:
         43:81:d6:6d:dd:ae:05:6c:77:24:1c:85:9f:07:0d:f3:39:a2:
         a8:b8:c5:cf:e6:e4:14:c1:8e:5c:ae:de:b0:d7:59:df:db:e4:
         55:f9:2f:d8:20:bc:d6:9c:5e:a4:e1:d0:aa:89:e9:13:7c:a0:
         9e:8b:29:31:6f:69:84:ae:8b:02:f3:b1:a2:bb:03:2e:0e:59:
         49:80:79:1a:dc:23:84:75:f2:b0:92:07:d2:ee:2d:3e:cf:3b:
         1c:58:cb:c3:ae:c6:f7:36:2d:5a:1a:2c:a4:03:bc:c7:27:41:
         22:65:d0:b0:04:78:b7:b0:bc:9f:db:7f:eb:6f:ff:52:36:70:
         17:d9:ff:71:35:56:5c:8a:c7:43:db:60:43:5a:ae:15:b8:34:
         cc:f5:59:69:13:6a:23:ce:d9:58:ff:48:db:20:df:6b:e5:6a:
         84:b2:b2:83:d7:45:34:a9:57:ff:3d:64:bd:15:e6:a5:4f:81:
         91:2e:75:d0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUU+EHbOzD5d8IfXd5nf6G/L5l+/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NDVaFw0yNTAzMDQxODAwNDVaMDMxMTAvBgNV
BAMTKDJFNTA0NDJDNEQzMkYyODM1N0FBRDU2ODFFODVBODdGM0MzQkQ4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahWa5H+tlNmXK3XPNLbndN+OD
5NawLU7WL4Y2y7o2WZ0440z1q/qMuRMfvawZVspu6abQOcK9xUEbJbNRE1kEGYFr
VtQRNz3Be4munlJTWx2PJrFsAeFWWCPJd6LyhrRdSyi7vJ2buiQIDYk5aotMTxKY
S+x+KeP57YqZedO1NeBQ7nwfFd3GetQ0PoJIW28gn0rjqnuvVtdywBSmwvlWo+e6
aLhDMH3q0yLrSbyHifB7rmxUfuE0tnjQ5cLFBV0kV7s1aKAFf2UQI2vDXlLKoiv4
n7sGyURYPEi8F1SZgtH2dVAYp1E5nEVTONpRKCj1gl4QcnNY2WUrRMFXQzzxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULlBELE0y8oNXqtVoHoWofzw72OAwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzMTMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvtiE
MA0GCSqGSIb3DQEBCwUAA4IBAQA0bWlCTKSbDKGqAJbq4C5RW78rh1tnJRyUT8+z
e6OItY6zkZDTJmN2uc0tgZEhBKeyXEasKsGG+ZErdjDKz2UkIuqoNsJqoLlDgdZt
3a4FbHckHIWfBw3zOaKouMXP5uQUwY5crt6w11nf2+RV+S/YILzWnF6k4dCqiekT
fKCeiykxb2mErosC87GiuwMuDllJgHka3COEdfKwkgfS7i0+zzscWMvDrsb3Ni1a
GiykA7zHJ0EiZdCwBHi3sLyf23/rb/9SNnAX2f9xNVZcisdD22BDWq4VuDTM9Vlp
E2ojztlY/0jbIN9r5WqEsrKD10U0qVf/PWS9FealT4GRLnXQ
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org