Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230392e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3230392e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          YYMf3UcAe77cyTWZa6lWTKSSaYNXS+nVr4gg00TlEoU=
Subject key identifier:   0E:63:73:0B:28:63:45:2C:7A:2D:22:CA:E6:9C:7E:B3:20:DB:54:40
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       460F6A7AF153B8A95C89518BC5A6EDA18B03CD83
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230392e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:42 +0000
ROA not before:           Tue 05 Mar 2024 18:06:42 +0000
ROA not after:            Tue 04 Mar 2025 18:11:42 +0000
asID:                     52348
IP address blocks:        190.52.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0f:6a:7a:f1:53:b8:a9:5c:89:51:8b:c5:a6:ed:a1:8b:03:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:42 2024 GMT
            Not After : Mar  4 18:11:42 2025 GMT
        Subject: CN=0E63730B2863452C7A2D22CAE69C7EB320DB5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:a8:00:64:34:70:83:ef:32:9a:0d:7a:7c:
                    cc:9e:7e:e1:1c:cb:49:f3:3d:6d:31:29:27:81:d9:
                    6f:a1:24:d2:ba:9d:c5:2c:c3:d7:a4:47:36:5d:6a:
                    26:92:95:80:8c:ae:9b:b0:01:b3:82:18:89:4b:0c:
                    51:4e:1d:5a:5f:27:fa:bd:e4:43:8f:d8:ff:a0:d9:
                    f6:98:55:87:b2:a6:74:d2:70:aa:cd:64:33:f3:26:
                    57:68:77:68:4c:99:0b:57:d5:c1:eb:9d:1c:1f:3b:
                    5b:ef:bf:00:f0:ee:32:f6:ab:00:73:06:b0:d5:3c:
                    94:5c:b3:ac:32:17:49:68:83:a3:bc:ef:03:5f:f1:
                    78:2d:91:48:09:5a:a7:f4:1b:9e:02:99:1b:fe:e2:
                    b2:9e:d1:35:a5:f2:ef:27:3f:18:8e:33:d2:c8:0f:
                    c0:34:7b:dd:15:db:9f:fa:4c:c5:87:fa:4d:50:ed:
                    01:96:4e:45:07:df:65:97:e9:49:ba:e6:f9:0f:72:
                    94:79:de:5e:64:24:f7:a1:76:00:69:ed:20:eb:a8:
                    94:8c:45:62:40:5e:16:b0:fa:1b:85:5d:d5:97:da:
                    61:b1:6d:9e:78:21:eb:78:19:70:f6:df:30:49:8e:
                    07:37:e1:70:de:63:8b:b4:5f:d2:f3:14:65:35:0b:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:73:0B:28:63:45:2C:7A:2D:22:CA:E6:9C:7E:B3:20:DB:54:40
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230392e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:06:9e:bb:c3:60:4c:a0:16:4e:8c:b8:fc:f3:d3:82:58:0c:
         08:28:bb:97:f9:d3:60:41:61:e8:27:60:26:0a:81:67:9e:e6:
         4f:7f:f0:52:43:c8:1b:1f:50:7f:eb:d1:eb:51:f4:cb:e8:38:
         92:ba:a7:a6:b7:3d:8a:25:c2:86:ac:9b:f1:e2:35:ed:a0:63:
         9f:f0:8d:b1:d6:10:3e:8f:ea:62:87:a7:6f:bf:3a:8a:55:b5:
         0c:1e:62:c2:14:d2:0f:5d:a4:48:92:a6:9c:d2:42:b3:2a:df:
         36:39:87:da:be:4d:70:dd:1e:7d:8b:02:0d:1f:7c:06:45:07:
         6c:fe:8a:bf:ca:9a:b5:e0:44:2d:b9:53:c7:b0:a7:0f:33:a2:
         73:cd:4d:06:3c:4e:49:47:ba:c7:5a:8b:9c:27:70:ac:65:74:
         03:af:2d:50:64:8c:5c:c0:89:67:b3:e8:aa:91:0a:20:48:bc:
         5d:04:75:72:c0:84:97:bb:26:eb:4d:be:53:ca:2e:af:8d:b1:
         d6:54:53:fc:0b:9e:8f:91:86:2a:de:17:9b:1e:b4:d9:d9:f2:
         29:85:75:e1:eb:c4:fe:4f:df:73:c4:ec:37:a3:29:36:9a:f1:
         a3:c9:d0:ed:15:2e:f0:17:27:54:84:bf:a3:af:36:21:8c:10:
         1a:dc:ce:86
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURg9qevFTuKlciVGLxabtoYsDzYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZDM0M4MEU2OUE5QTJGM0U3QkIzRjMzNjQ0MEIzRTg3
QzIxNUYxMzAeFw0yNDAzMDUxODA2NDJaFw0yNTAzMDQxODExNDJaMDMxMTAvBgNV
BAMTKDBFNjM3MzBCMjg2MzQ1MkM3QTJEMjJDQUU2OUM3RUIzMjBEQjU0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvqgAZDRwg+8ymg16fMyefuEc
y0nzPW0xKSeB2W+hJNK6ncUsw9ekRzZdaiaSlYCMrpuwAbOCGIlLDFFOHVpfJ/q9
5EOP2P+g2faYVYeypnTScKrNZDPzJldod2hMmQtX1cHrnRwfO1vvvwDw7jL2qwBz
BrDVPJRcs6wyF0log6O87wNf8XgtkUgJWqf0G54CmRv+4rKe0TWl8u8nPxiOM9LI
D8A0e90V25/6TMWH+k1Q7QGWTkUH32WX6Um65vkPcpR53l5kJPehdgBp7SDrqJSM
RWJAXhaw+huFXdWX2mGxbZ54Iet4GXD23zBJjgc34XDeY4u0X9LzFGU1Cw0JAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDmNzCyhjRSx6LSLK5px+syDbVEAwHwYDVR0j
BBgwFoAUD8PIDmmpovPnuz8zZECz6HwhXxMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDFBQkZGNEFDMjJCMEM1NUIyOEQwNUQ3NjA5QjA0NUQx
QjgxNDM5QzcwOUJDM0ZDODgxRDI5QkNDODc0NEUzLzAvMEZDM0M4MEU2OUE5QTJG
M0U3QkIzRjMzNjQ0MEIzRTg3QzIxNUYxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkMzQzgwRTY5QTlBMkYzRTdC
QjNGMzM2NDQwQjNFODdDMjE1RjEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQxQUJGRjRBQzIyQjBDNTVCMjhEMDVENzYwOUIwNDVEMUI4MTQzOUM3
MDlCQzNGQzg4MUQyOUJDQzg3NDRFMy8wLzMxMzkzMDJlMzUzMjJlMzIzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzQzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL400TAN
BgkqhkiG9w0BAQsFAAOCAQEAKQaeu8NgTKAWToy4/PPTglgMCCi7l/nTYEFh6Cdg
JgqBZ57mT3/wUkPIGx9Qf+vR61H0y+g4krqnprc9iiXChqyb8eI17aBjn/CNsdYQ
Po/qYoenb786ilW1DB5iwhTSD12kSJKmnNJCsyrfNjmH2r5NcN0efYsCDR98BkUH
bP6Kv8qateBELblTx7CnDzOic81NBjxOSUe6x1qLnCdwrGV0A68tUGSMXMCJZ7Po
qpEKIEi8XQR1csCEl7sm602+U8our42x1lRT/Auej5GGKt4Xmx602dnyKYV14evE
/k/fc8TsN6MpNprxo8nQ7RUu8BcnVIS/o682IYwQGtzOhg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org