Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e36312e302f32342d3234203d3e203237373338.roa
File:                     3139302e36332e36312e302f32342d3234203d3e203237373338.roa (raw, json)
Hash identifier:          LMvNIyVZoNIyAmm3pOg8Z4OcJcBtbvxN9qX71inN2lA=
Subject key identifier:   07:FB:A4:33:CF:54:24:D5:7B:9C:F1:92:C2:1C:F9:75:9A:2F:DA:0B
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       0DBBF96CE138872E3D1C3E12D55797FA7E27AD1C
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e36312e302f32342d3234203d3e203237373338.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     27738
IP address blocks:        190.63.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bb:f9:6c:e1:38:87:2e:3d:1c:3e:12:d5:57:97:fa:7e:27:ad:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=07FBA433CF5424D57B9CF192C21CF9759A2FDA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:c7:ac:9c:a8:b8:98:8d:0d:b0:9f:a0:91:
                    e8:31:6c:7c:93:d9:0b:d1:ea:e8:42:97:42:51:75:
                    f9:b4:39:2e:b9:3a:a0:c2:21:98:59:f3:72:d7:91:
                    38:67:94:60:43:e3:31:a3:f8:f1:b2:4a:e9:5e:42:
                    a2:ff:dd:ce:48:2a:4f:25:e8:18:11:f5:07:27:44:
                    0b:e6:dd:3b:13:23:95:bc:e6:c8:f9:8b:15:05:39:
                    5f:a6:9a:92:dc:7f:4f:d6:15:82:4b:c9:29:33:d1:
                    c2:15:72:b9:55:01:a4:ed:1a:0c:c0:48:57:4b:7b:
                    fc:e8:6f:01:f3:cf:cd:e8:1e:20:03:06:a1:17:b7:
                    6c:ef:46:93:eb:10:96:36:31:38:78:78:34:34:74:
                    aa:4f:83:bd:6d:7d:22:a8:5c:9b:e3:e2:0a:e8:7e:
                    58:c3:2e:fa:18:82:64:e5:a3:fa:67:cf:28:d1:a2:
                    8b:74:4a:0e:a8:04:fd:6e:c7:42:94:4c:ce:41:d4:
                    69:a6:92:8c:24:0d:fd:97:54:a7:83:94:7a:da:ea:
                    db:24:6a:59:a3:1f:1d:fb:63:61:f7:5a:27:7e:d1:
                    00:84:40:16:d3:e4:e9:4d:cb:a9:19:ee:9c:33:01:
                    b9:ba:ba:7b:7b:c1:5c:f4:71:50:41:4d:c4:90:e4:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FB:A4:33:CF:54:24:D5:7B:9C:F1:92:C2:1C:F9:75:9A:2F:DA:0B
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e36312e302f32342d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:1b:30:52:f5:38:25:13:fb:fb:09:07:c6:72:20:fe:fc:
         55:84:1b:a5:12:b0:14:97:a2:d0:d7:f5:de:f9:8e:8d:98:77:
         28:3b:38:f8:48:ff:d4:e7:ac:95:8d:ca:e1:4c:21:5c:a0:2e:
         76:f5:77:dc:b5:0f:19:88:47:d2:33:b1:2a:d3:9d:43:36:6d:
         33:f3:bc:92:e3:22:1e:4e:9d:1b:6d:bc:7e:1a:0c:cf:bb:74:
         da:b9:be:9a:db:15:f3:b5:68:aa:f7:ef:e1:f6:57:20:7b:43:
         1f:bd:68:16:d0:d2:81:1c:70:5d:e4:e3:b6:bf:c1:30:bc:bd:
         3c:28:d0:20:4b:c4:a1:32:fe:d0:6d:70:76:01:57:56:af:a7:
         67:32:05:8b:d8:f7:64:16:9d:9b:4c:58:83:3e:47:47:90:7a:
         7f:d7:4b:0c:dd:a1:12:6e:ea:ae:82:54:69:0e:e9:56:90:0f:
         26:75:e2:9a:61:94:37:c1:1a:4e:1d:df:6b:00:b5:b7:14:94:
         50:79:a2:9f:c3:53:85:d9:bf:f5:a9:b2:ad:ad:b9:87:09:d8:
         dc:6e:b6:77:76:7b:3e:d4:c6:46:d9:8d:60:19:df:b3:27:99:
         8a:95:6a:1c:c6:48:1d:96:d9:3a:14:2a:3d:27:06:d6:1a:51:
         97:2b:a0:bd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDbv5bOE4hy49HD4S1VeX+n4nrRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJGOURBNEU5OUZDQkE5N0MxQzUwRDhDMEFCNUMzQjlC
OUQ2MzNBNTAeFw0yNDAzMDUxODExMjNaFw0yNTAzMDQxODE2MjNaMDMxMTAvBgNV
BAMTKDA3RkJBNDMzQ0Y1NDI0RDU3QjlDRjE5MkMyMUNGOTc1OUEyRkRBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKsesnKi4mI0NsJ+gkegxbHyT
2QvR6uhCl0JRdfm0OS65OqDCIZhZ83LXkThnlGBD4zGj+PGySuleQqL/3c5IKk8l
6BgR9QcnRAvm3TsTI5W85sj5ixUFOV+mmpLcf0/WFYJLySkz0cIVcrlVAaTtGgzA
SFdLe/zobwHzz83oHiADBqEXt2zvRpPrEJY2MTh4eDQ0dKpPg71tfSKoXJvj4gro
fljDLvoYgmTlo/pnzyjRoot0Sg6oBP1ux0KUTM5B1GmmkowkDf2XVKeDlHra6tsk
almjHx37Y2H3Wid+0QCEQBbT5OlNy6kZ7pwzAbm6unt7wVz0cVBBTcSQ5OOlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUB/ukM89UJNV7nPGSwhz5dZov2gswHwYDVR0j
BBgwFoAU6/naTpn8upfBxQ2MCrXDubnWM6UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQwQTEyNkNGODJERjIyMjA1QUM0OTZGRDc0MkFBRkFC
MkFFMUJDQTQ3MjlEMzU0M0JENTk4ODQxMzcwMzkwLzAvRUJGOURBNEU5OUZDQkE5
N0MxQzUwRDhDMEFCNUMzQjlCOUQ2MzNBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkY5REE0RTk5RkNCQTk3QzFD
NTBEOEMwQUI1QzNCOUI5RDYzM0E1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0MEExMjZDRjgyREYyMjIwNUFDNDk2RkQ3NDJBQUZBQjJBRTFCQ0E0
NzI5RDM1NDNCRDU5ODg0MTM3MDM5MC8wLzMxMzkzMDJlMzYzMzJlMzYzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+Pz0wDQYJ
KoZIhvcNAQELBQADggEBAInFGzBS9TglE/v7CQfGciD+/FWEG6USsBSXotDX9d75
jo2Ydyg7OPhI/9TnrJWNyuFMIVygLnb1d9y1DxmIR9IzsSrTnUM2bTPzvJLjIh5O
nRttvH4aDM+7dNq5vprbFfO1aKr37+H2VyB7Qx+9aBbQ0oEccF3k47a/wTC8vTwo
0CBLxKEy/tBtcHYBV1avp2cyBYvY92QWnZtMWIM+R0eQen/XSwzdoRJu6q6CVGkO
6VaQDyZ14pphlDfBGk4d32sAtbcUlFB5op/DU4XZv/Wpsq2tuYcJ2Nxutnd2ez7U
xkbZjWAZ37MnmYqVahzGSB2W2ToUKj0nBtYaUZcroL0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:13 2024 by rpki-client on console-ams.rpki-client.org