Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
File:                     3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa (raw, json)
Hash identifier:          n2MRYn+bHRBvUxxEfq9DOOPx5wJRVpZQzc0fE6YpQ0A=
Subject key identifier:   C1:66:4E:02:CE:E1:98:03:60:E2:65:FE:E7:E6:4E:F7:B7:48:5B:46
Certificate issuer:       /CN=C16940956C9D4811364B5F0969082CDFA737DE6C
Certificate serial:       63409BC50B88AE1198CFA56CC5113EB19A6C6667
Authority key identifier: C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
Signing time:             Tue 05 Mar 2024 18:15:55 +0000
ROA not before:           Tue 05 Mar 2024 18:10:55 +0000
ROA not after:            Tue 04 Mar 2025 18:15:55 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:9b:c5:0b:88:ae:11:98:cf:a5:6c:c5:11:3e:b1:9a:6c:66:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16940956C9D4811364B5F0969082CDFA737DE6C
        Validity
            Not Before: Mar  5 18:10:55 2024 GMT
            Not After : Mar  4 18:15:55 2025 GMT
        Subject: CN=C1664E02CEE1980360E265FEE7E64EF7B7485B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:59:37:86:98:89:6f:d5:8e:9a:72:5d:84:
                    7b:4d:e9:6c:00:3f:ac:ee:51:97:2d:ca:34:aa:7f:
                    34:e4:14:41:91:64:44:05:71:cc:dc:89:23:14:f9:
                    8b:fd:5d:d8:3c:54:18:8b:ac:20:d7:58:56:ad:e6:
                    09:ad:0d:d3:7f:a4:cf:c4:65:c6:0b:34:f4:bc:bf:
                    1c:fc:c8:6a:04:da:8b:9b:31:f5:78:0b:a2:e8:5b:
                    1c:22:6a:05:da:a2:70:68:74:da:36:c5:d2:6b:79:
                    ff:b6:ec:4c:b3:cd:cf:e9:9a:c8:cf:b7:c3:1f:72:
                    e9:1f:b5:d3:f4:4d:e4:96:cc:e5:f7:82:0f:bb:a9:
                    2a:91:15:26:04:43:c6:0d:2b:ec:fc:70:cf:a9:aa:
                    ad:26:ad:cc:07:b9:39:ab:56:19:3b:ba:7b:64:93:
                    c3:4d:db:37:a3:c3:ba:7a:62:d9:e2:62:6a:2d:44:
                    fa:2e:cc:90:14:27:cf:f0:fe:95:29:1e:60:1e:81:
                    93:31:8d:c0:2e:9b:ac:8c:55:68:26:cf:fb:56:60:
                    10:c6:5e:c8:a2:9a:c4:33:48:d2:a3:25:72:26:46:
                    bd:37:44:65:0c:09:3a:d0:45:a5:1b:6b:84:a0:59:
                    bb:50:b9:6b:15:58:f6:ac:c2:0d:94:4d:2c:25:51:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:4E:02:CE:E1:98:03:60:E2:65:FE:E7:E6:4E:F7:B7:48:5B:46
            X509v3 Authority Key Identifier:
                keyid:C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:5f:43:e0:96:3c:e4:a2:31:4c:49:72:1c:f7:a6:f6:c6:
         20:63:7e:8c:6a:6e:ad:d6:ae:17:18:96:3d:2d:6a:a8:43:ae:
         74:94:06:3b:c8:f9:8d:57:75:48:b3:bd:4c:ab:b5:bd:08:a0:
         9e:b0:9e:ef:0d:13:e1:27:c2:f7:fa:07:63:b0:20:af:d3:83:
         a9:56:e1:ef:a4:85:60:c6:ce:e3:90:fd:5e:19:21:0e:55:31:
         54:20:27:7b:a0:7e:c7:3d:12:60:c6:68:ea:a4:36:a9:79:f5:
         39:92:e0:80:b9:d7:e3:8b:be:6b:2d:12:cd:75:e5:26:4a:f3:
         54:c7:1e:88:ec:9a:30:c1:68:64:49:32:73:d0:b1:0d:22:f4:
         64:e7:c6:81:70:8a:ed:e6:fd:f4:b5:29:ca:1f:76:7d:5e:28:
         4d:31:98:59:b1:d7:ab:06:53:56:fe:aa:d6:29:36:27:9c:4a:
         16:ce:4c:fc:21:27:f9:45:58:01:f0:e1:8b:b3:71:02:4c:c2:
         cf:4b:95:0a:f3:3b:68:ba:c0:3e:b2:3f:26:67:96:fe:f5:3b:
         b0:00:28:f2:59:ba:5c:7c:4b:4b:61:87:f1:92:72:fc:55:4e:
         e1:1b:6a:0a:65:4f:72:f8:63:a5:a0:df:93:83:f0:f1:57:31:
         80:40:fa:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUY0CbxQuIrhGYz6VsxRE+sZpsZmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2OTQwOTU2QzlENDgxMTM2NEI1RjA5NjkwODJDREZB
NzM3REU2QzAeFw0yNDAzMDUxODEwNTVaFw0yNTAzMDQxODE1NTVaMDMxMTAvBgNV
BAMTKEMxNjY0RTAyQ0VFMTk4MDM2MEUyNjVGRUU3RTY0RUY3Qjc0ODVCNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigVk3hpiJb9WOmnJdhHtN6WwA
P6zuUZctyjSqfzTkFEGRZEQFcczciSMU+Yv9Xdg8VBiLrCDXWFat5gmtDdN/pM/E
ZcYLNPS8vxz8yGoE2oubMfV4C6LoWxwiagXaonBodNo2xdJref+27Eyzzc/pmsjP
t8MfcukftdP0TeSWzOX3gg+7qSqRFSYEQ8YNK+z8cM+pqq0mrcwHuTmrVhk7untk
k8NN2zejw7p6YtniYmotRPouzJAUJ8/w/pUpHmAegZMxjcAum6yMVWgmz/tWYBDG
XsiimsQzSNKjJXImRr03RGUMCTrQRaUba4SgWbtQuWsVWPaswg2UTSwlUer7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUwWZOAs7hmANg4mX+5+ZO97dIW0YwHwYDVR0j
BBgwFoAUwWlAlWydSBE2S18JaQgs36c33mwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTM0NEVBOTc3MTJFRDdGMUIwMUIwMkVBRjlGOENFRDMw
MzRFOEY3RkNBOUI4NjI0RjYxM0EwRkEwQjE3RjlGLzAvQzE2OTQwOTU2QzlENDgx
MTM2NEI1RjA5NjkwODJDREZBNzM3REU2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMTY5NDA5NTZDOUQ0ODExMzY0
QjVGMDk2OTA4MkNERkE3MzdERTZDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEUzNDRFQTk3NzEyRUQ3RjFCMDFCMDJFQUY5RjhDRUQzMDM0RThGN0ZD
QTlCODYyNEY2MTNBMEZBMEIxN0Y5Ri8wLzMxMzkzMDJlMzEzMDM2MmUzMTMxMzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMyMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+
anAwDQYJKoZIhvcNAQELBQADggEBAHsbX0PgljzkojFMSXIc96b2xiBjfoxqbq3W
rhcYlj0taqhDrnSUBjvI+Y1XdUizvUyrtb0IoJ6wnu8NE+Enwvf6B2OwIK/Tg6lW
4e+khWDGzuOQ/V4ZIQ5VMVQgJ3ugfsc9EmDGaOqkNql59TmS4IC51+OLvmstEs11
5SZK81THHojsmjDBaGRJMnPQsQ0i9GTnxoFwiu3m/fS1Kcofdn1eKE0xmFmx16sG
U1b+qtYpNiecShbOTPwhJ/lFWAHw4YuzcQJMws9LlQrzO2i6wD6yPyZnlv71O7AA
KPJZulx8S0thh/GScvxVTuEbagplT3L4Y6Wg35OD8PFXMYBA+qg=
-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org