Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203132313839.roa
File:                     3139302e3131322e3139322e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          C3Bzx6Zd6Tl1P9H3RvJRhGv/rEPmWcoQbj88OyBxwZo=
Subject key identifier:   87:82:61:67:FC:42:E2:F3:10:6D:A6:8F:97:C9:92:33:58:73:0B:39
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       76A7A360B67C385C7012A8B36442C09498318621
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 05 Mar 2024 18:03:57 +0000
ROA not before:           Tue 05 Mar 2024 17:58:57 +0000
ROA not after:            Tue 04 Mar 2025 18:03:57 +0000
asID:                     12189
IP address blocks:        190.112.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a7:a3:60:b6:7c:38:5c:70:12:a8:b3:64:42:c0:94:98:31:86:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:58:57 2024 GMT
            Not After : Mar  4 18:03:57 2025 GMT
        Subject: CN=87826167FC42E2F3106DA68F97C9923358730B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:2b:6e:18:d6:05:93:ef:1c:92:d4:e4:02:
                    f2:aa:ff:39:8f:ff:9d:15:35:2c:86:ee:bc:78:6b:
                    2f:2d:b6:a4:3b:96:17:76:d2:a0:bf:1c:54:7d:b9:
                    3d:4a:da:a5:da:13:c5:e2:b1:cf:a9:2a:ce:59:8a:
                    24:a2:28:56:d9:3e:5a:a8:87:68:74:d5:30:6c:7c:
                    03:c3:37:90:2c:c8:f4:be:b5:11:5c:20:e3:e0:f3:
                    c7:b8:e6:74:d7:e1:af:3c:9b:63:d3:88:f3:19:e3:
                    a4:d9:86:fe:a7:f9:2f:b6:02:4c:08:d8:99:46:c2:
                    b2:01:3e:dc:84:9a:c2:a5:44:62:a5:f2:dd:62:1b:
                    55:29:d2:37:f1:18:f0:67:23:1d:f2:c0:46:31:13:
                    75:47:a6:e1:87:47:7b:fa:6d:e8:68:b4:72:ed:bf:
                    ad:f9:d7:a0:c1:02:10:28:7e:16:0f:c9:c3:1b:3a:
                    9d:07:e2:11:7a:e9:8b:22:5c:ae:4f:70:85:ea:64:
                    71:6a:ee:ad:33:01:52:88:80:6b:8c:ab:b8:e5:4e:
                    f7:b2:0b:a7:10:37:31:69:c9:7a:73:f5:0f:c8:55:
                    58:57:55:9e:86:2b:de:ef:17:7a:ad:f3:3b:d0:b3:
                    86:2b:b1:1f:d9:ad:97:24:2c:25:c9:6d:00:09:50:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:61:67:FC:42:E2:F3:10:6D:A6:8F:97:C9:92:33:58:73:0B:39
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:3c:b4:46:fe:4a:4b:79:61:b1:ef:fa:fd:b9:2f:d7:08:
         cc:2d:3d:46:84:2d:e6:af:d1:ac:f9:ea:14:c8:58:d7:05:c2:
         1d:ef:75:80:a1:c3:d8:f4:72:3b:f1:e1:08:ca:b9:5a:30:92:
         36:29:31:53:84:a4:7f:83:ce:0d:16:f4:71:0c:88:bc:fc:49:
         c6:00:81:0b:a4:78:3a:ae:e7:fa:f9:68:a6:89:05:a6:1b:ec:
         56:bf:21:3f:21:cd:50:27:74:60:be:d5:02:05:0a:53:85:ae:
         84:60:ff:bc:0d:69:53:a6:87:16:26:67:37:3a:23:a7:b5:80:
         24:2a:3f:b4:4a:88:25:42:e6:14:b5:31:0b:8b:9c:c2:db:6e:
         60:73:45:77:ae:ae:b8:07:b6:b4:6f:ae:41:1f:e6:fb:fd:62:
         57:70:a7:2d:cb:a2:94:e2:41:52:ef:d8:ea:69:c4:fc:bb:5f:
         e9:a1:3e:ba:49:31:b1:41:9f:e6:f4:11:f2:99:5c:3b:e3:65:
         61:d3:47:c6:2d:19:d7:16:3a:ac:bf:09:43:78:50:3e:29:44:
         64:4b:46:46:e5:57:3c:81:c3:b5:4a:34:95:02:0f:e0:7a:be:
         1a:91:8e:37:bb:09:bf:03:b2:1b:90:8e:e8:c9:a0:0f:a7:f9:
         12:04:f7:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdqejYLZ8OFxwEqizZELAlJgxhiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNDAzMDUxNzU4NTdaFw0yNTAzMDQxODAzNTdaMDMxMTAvBgNV
BAMTKDg3ODI2MTY3RkM0MkUyRjMxMDZEQTY4Rjk3Qzk5MjMzNTg3MzBCMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVituGNYFk+8cktTkAvKq/zmP
/50VNSyG7rx4ay8ttqQ7lhd20qC/HFR9uT1K2qXaE8Xisc+pKs5ZiiSiKFbZPlqo
h2h01TBsfAPDN5AsyPS+tRFcIOPg88e45nTX4a88m2PTiPMZ46TZhv6n+S+2AkwI
2JlGwrIBPtyEmsKlRGKl8t1iG1Up0jfxGPBnIx3ywEYxE3VHpuGHR3v6behotHLt
v63516DBAhAofhYPycMbOp0H4hF66YsiXK5PcIXqZHFq7q0zAVKIgGuMq7jlTvey
C6cQNzFpyXpz9Q/IVVhXVZ6GK97vF3qt8zvQs4YrsR/ZrZckLCXJbQAJUGtTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUh4JhZ/xC4vMQbaaPl8mSM1hzCzkwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzEzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDA
MA0GCSqGSIb3DQEBCwUAA4IBAQBY+Ty0Rv5KS3lhse/6/bkv1wjMLT1GhC3mr9Gs
+eoUyFjXBcId73WAocPY9HI78eEIyrlaMJI2KTFThKR/g84NFvRxDIi8/EnGAIEL
pHg6ruf6+WimiQWmG+xWvyE/Ic1QJ3RgvtUCBQpTha6EYP+8DWlTpocWJmc3OiOn
tYAkKj+0SoglQuYUtTELi5zC225gc0V3rq64B7a0b65BH+b7/WJXcKcty6KU4kFS
79jqacT8u1/poT66STGxQZ/m9BHymVw742Vh00fGLRnXFjqsvwlDeFA+KURkS0ZG
5Vc8gcO1SjSVAg/ger4akY43uwm/A7IbkI7oyaAPp/kSBPfS
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org