Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3137362e302f32302d3234203d3e203532333633.roa
File:                     3139302e3131322e3137362e302f32302d3234203d3e203532333633.roa (raw, json)
Hash identifier:          YmtGFFEkI462QSTWV7tGn123LQQUFJjYws8D8h+e+zo=
Subject key identifier:   2D:04:FB:8C:6C:27:34:1A:2F:4C:5E:2E:95:4F:93:49:23:4B:FD:E2
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       20EEFAEAED3FBAB5EC4F6A939A38DB9952B599C5
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3137362e302f32302d3234203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 18:22:05 +0000
ROA not before:           Tue 05 Mar 2024 18:17:05 +0000
ROA not after:            Tue 04 Mar 2025 18:22:05 +0000
asID:                     52363
IP address blocks:        190.112.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:fa:ea:ed:3f:ba:b5:ec:4f:6a:93:9a:38:db:99:52:b5:99:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Mar  5 18:17:05 2024 GMT
            Not After : Mar  4 18:22:05 2025 GMT
        Subject: CN=2D04FB8C6C27341A2F4C5E2E954F9349234BFDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:48:4a:9c:f2:89:94:2d:91:7d:fb:26:c0:
                    ee:05:b2:47:06:df:8d:4d:b7:e2:c1:01:ab:ff:fe:
                    99:02:c4:92:11:fd:b0:e3:b0:40:53:6a:5a:e1:02:
                    42:e2:ab:79:b5:35:5a:62:56:53:9c:20:c5:f8:fa:
                    6c:c1:6a:0b:45:9e:8e:ef:05:f4:b8:cd:25:b4:95:
                    b9:dc:07:25:e7:d0:e9:f0:af:d7:1e:ff:72:4c:61:
                    6c:54:fd:cc:64:4a:67:52:8a:d6:19:7f:b3:3c:88:
                    3d:a9:10:8b:f8:46:29:79:9c:0d:68:d0:9e:b1:1d:
                    ec:1e:b4:5c:6c:21:63:98:57:53:04:4b:8a:37:b9:
                    d9:35:2e:56:e5:2a:c2:7f:d5:28:a7:81:e8:6c:23:
                    a3:03:f4:24:0f:92:53:9a:22:82:2f:ab:bf:1f:23:
                    0c:6c:22:6f:5a:c6:62:9a:b1:83:41:b0:60:75:4a:
                    7c:6b:6a:7f:81:dc:85:93:de:80:1b:47:8c:ea:b2:
                    8e:9c:00:c4:80:38:fe:32:0a:e4:e0:75:fa:f3:03:
                    2e:b0:6c:23:20:55:14:f1:4c:44:ea:48:b2:1d:c3:
                    00:45:5d:01:f4:e3:b9:bc:a4:88:30:9c:17:a6:4f:
                    58:0b:31:33:04:88:ae:63:67:fd:72:76:52:46:59:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:FB:8C:6C:27:34:1A:2F:4C:5E:2E:95:4F:93:49:23:4B:FD:E2
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3131322e3137362e302f32302d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:9d:a5:31:6c:00:65:28:c6:7c:57:d5:0f:18:cc:a5:29:
         b9:36:e5:43:cf:78:0c:ad:4f:bf:2b:63:f4:41:aa:30:de:43:
         6e:c9:1b:58:f2:ff:14:d3:f1:3c:d4:f7:a5:cf:9f:93:64:00:
         4e:f8:2c:7b:41:01:56:b1:77:c7:36:ff:ac:02:cb:e3:39:87:
         89:33:93:56:96:d6:b2:b8:e9:e8:e4:6b:99:c4:c9:86:60:b3:
         17:6f:86:53:37:49:b2:a5:06:68:01:1d:09:94:ac:8e:38:12:
         5d:11:90:82:0f:34:f3:23:b6:53:4f:e1:45:bd:eb:1d:15:0b:
         0c:0d:8f:9c:53:54:1f:7e:0f:fa:de:22:67:97:a6:75:12:3d:
         1e:7e:00:00:0e:88:9e:13:8d:5b:8f:3f:ab:ce:d9:61:d2:9f:
         92:c8:89:ce:9b:1d:ce:45:a8:ae:d7:b9:fa:57:1d:04:ee:c7:
         cc:9f:84:f5:fa:0d:47:e9:1d:ad:51:8b:04:ed:8c:b3:19:8f:
         37:ae:91:21:b4:80:e8:92:72:45:11:28:e7:50:74:47:26:a3:
         6a:33:80:ee:7f:20:00:d3:53:2a:cd:fb:d7:68:1a:a9:b6:8c:
         79:04:99:26:63:95:b2:3f:f1:8d:c0:52:f4:87:57:1c:fd:71:
         9a:b5:63:21
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIO766u0/urXsT2qTmjjbmVK1mcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEMzlBRDVBNTE3OTEzMUVGODYyMUE2MjE1NjUwM0NG
OTJEQkFCRDAeFw0yNDAzMDUxODE3MDVaFw0yNTAzMDQxODIyMDVaMDMxMTAvBgNV
BAMTKDJEMDRGQjhDNkMyNzM0MUEyRjRDNUUyRTk1NEY5MzQ5MjM0QkZERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdYUhKnPKJlC2RffsmwO4FskcG
341Nt+LBAav//pkCxJIR/bDjsEBTalrhAkLiq3m1NVpiVlOcIMX4+mzBagtFno7v
BfS4zSW0lbncByXn0Onwr9ce/3JMYWxU/cxkSmdSitYZf7M8iD2pEIv4Ril5nA1o
0J6xHewetFxsIWOYV1MES4o3udk1LlblKsJ/1SingehsI6MD9CQPklOaIoIvq78f
IwxsIm9axmKasYNBsGB1Snxran+B3IWT3oAbR4zqso6cAMSAOP4yCuTgdfrzAy6w
bCMgVRTxTETqSLIdwwBFXQH047m8pIgwnBemT1gLMTMEiK5jZ/1ydlJGWRxVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULQT7jGwnNBovTF4ulU+TSSNL/eIwHwYDVR0j
BBgwFoAUktOa1aUXkTHvhiGmIVZQPPktur0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMkYyRDYwRjcwM0I2MThGNDJFMkY0OTI0MUE3OUZBRjVE
OUU2MEM1RTFDMDZFMEM2QjEyNUUxNjQ0RjA1NDRGLzAvOTJEMzlBRDVBNTE3OTEz
MUVGODYyMUE2MjE1NjUwM0NGOTJEQkFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkQzOUFENUE1MTc5MTMxRUY4
NjIxQTYyMTU2NTAzQ0Y5MkRCQUJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDJGMkQ2MEY3MDNCNjE4RjQyRTJGNDkyNDFBNzlGQUY1RDlFNjBDNUUx
QzA2RTBDNkIxMjVFMTY0NEYwNTQ0Ri8wLzMxMzkzMDJlMzEzMTMyMmUzMTM3MzYy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzMzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnCw
MA0GCSqGSIb3DQEBCwUAA4IBAQB5qp2lMWwAZSjGfFfVDxjMpSm5NuVDz3gMrU+/
K2P0Qaow3kNuyRtY8v8U0/E81Pelz5+TZABO+Cx7QQFWsXfHNv+sAsvjOYeJM5NW
ltayuOno5GuZxMmGYLMXb4ZTN0mypQZoAR0JlKyOOBJdEZCCDzTzI7ZTT+FFvesd
FQsMDY+cU1Qffg/63iJnl6Z1Ej0efgAADoieE41bjz+rztlh0p+SyInOmx3ORaiu
17n6Vx0E7sfMn4T1+g1H6R2tUYsE7YyzGY83rpEhtIDoknJFESjnUHRHJqNqM4Du
fyAA01MqzfvXaBqptox5BJkmY5WyP/GNwFL0h1cc/XGatWMh
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org