Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3234203d3e2036343239.roa
File:                     3139302e35342e3138322e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          8yilRP8jcTxUN1t8cKbQZKy9fgXLGJA/om0amAYtsnI=
Subject key identifier:   71:E8:7F:6D:35:91:B7:8B:6F:F0:DF:DC:E6:FE:6C:A5:79:E7:EF:6E
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       4C438A7582B9E0B33B328484FD7EF31A1472569E
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:08 +0000
ROA not before:           Tue 05 Mar 2024 18:12:08 +0000
ROA not after:            Tue 04 Mar 2025 18:17:08 +0000
asID:                     6429
IP address blocks:        190.54.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:8a:75:82:b9:e0:b3:3b:32:84:84:fd:7e:f3:1a:14:72:56:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:08 2024 GMT
            Not After : Mar  4 18:17:08 2025 GMT
        Subject: CN=71E87F6D3591B78B6FF0DFDCE6FE6CA579E7EF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:b7:f3:3b:dc:95:83:12:d3:fa:07:88:04:
                    70:ae:0d:f9:e6:6f:f0:04:32:74:e3:43:9a:bf:fe:
                    c3:45:be:5e:be:b1:dc:07:cf:41:68:50:62:c5:7a:
                    a6:f7:95:68:1a:3d:0f:3b:81:bb:d8:43:38:6d:42:
                    c6:12:4b:76:92:0d:6d:aa:c7:c2:1c:20:c1:c6:85:
                    c6:8b:87:c1:92:50:b7:26:f6:cc:9c:e8:fe:5d:66:
                    86:a6:8d:0c:29:43:7c:66:da:49:15:86:35:7f:16:
                    6d:d6:55:51:7c:56:ab:4a:a9:b3:80:12:fe:b7:7d:
                    ab:97:7d:49:f7:0f:c0:01:f4:ad:e3:3f:52:6d:b0:
                    79:10:5f:5a:e1:8a:d2:1b:76:af:54:8f:d5:2c:c4:
                    ba:1a:e5:4e:78:9e:12:47:1f:07:64:14:69:2b:e6:
                    1b:25:a2:db:2e:0e:14:2a:d4:4b:05:dd:fd:7d:ff:
                    f2:b6:d4:7a:2c:dd:33:59:9b:92:8e:cb:78:f8:c5:
                    e9:6c:37:72:a4:80:d7:aa:a3:e7:7d:d4:f3:d1:bf:
                    19:fe:25:d0:31:db:6d:98:9e:89:da:19:51:32:49:
                    c8:7b:3a:f9:c5:1d:76:d9:28:87:75:63:1b:59:01:
                    d9:18:67:ce:39:3d:43:ae:12:61:94:21:0e:62:8e:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E8:7F:6D:35:91:B7:8B:6F:F0:DF:DC:E6:FE:6C:A5:79:E7:EF:6E
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:a3:41:fe:64:fe:d5:9c:27:ac:b6:66:70:24:ac:79:48:
         d5:55:c8:e2:4e:89:da:4b:c0:06:a7:5b:3b:c8:0b:fb:6a:c4:
         73:7d:ab:77:e8:7e:1e:9c:15:3a:e3:81:3b:52:88:9e:20:92:
         63:00:34:45:24:ef:ef:f1:15:cd:4d:49:f2:7e:77:26:6c:47:
         95:81:82:10:4a:d2:a1:61:d3:fa:1d:a9:02:e9:e8:3f:00:2f:
         bf:11:af:47:da:e6:92:c1:fb:3f:15:93:4d:23:04:2a:27:d4:
         f3:ff:71:cd:23:58:13:4f:7a:58:16:fb:06:73:bc:e4:c1:64:
         98:a2:05:93:ea:20:d8:f6:34:9c:67:dd:f5:35:c6:c2:69:5e:
         dc:7b:f4:d5:f0:b7:98:ea:db:a8:5f:a2:03:58:f3:ff:5f:ce:
         ec:61:37:94:17:d6:a0:18:cb:b0:d6:80:8f:bd:47:eb:45:48:
         c1:fa:21:4a:41:82:49:a6:fd:f5:27:71:fe:1d:6b:ad:d1:e1:
         38:74:4d:fb:3a:3a:16:8c:17:8c:32:dc:4e:11:c7:97:02:b2:
         f7:02:b0:dd:d0:ef:71:28:60:6b:1b:3a:24:c8:cc:c5:57:c9:
         41:92:8d:db:56:f1:85:1a:3b:52:43:dc:5b:22:19:fa:5e:f3:
         13:52:21:d0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTEOKdYK54LM7MoSE/X7zGhRyVp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNDAzMDUxODEyMDhaFw0yNTAzMDQxODE3MDhaMDMxMTAvBgNV
BAMTKDcxRTg3RjZEMzU5MUI3OEI2RkYwREZEQ0U2RkU2Q0E1NzlFN0VGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8z7fzO9yVgxLT+geIBHCuDfnm
b/AEMnTjQ5q//sNFvl6+sdwHz0FoUGLFeqb3lWgaPQ87gbvYQzhtQsYSS3aSDW2q
x8IcIMHGhcaLh8GSULcm9syc6P5dZoamjQwpQ3xm2kkVhjV/Fm3WVVF8VqtKqbOA
Ev63fauXfUn3D8AB9K3jP1JtsHkQX1rhitIbdq9Uj9UsxLoa5U54nhJHHwdkFGkr
5hslotsuDhQq1EsF3f19//K21Hos3TNZm5KOy3j4xelsN3KkgNeqo+d91PPRvxn+
JdAx222YnonaGVEySch7OvnFHXbZKId1YxtZAdkYZ845PUOuEmGUIQ5ijgGRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUceh/bTWRt4tv8N/c5v5spXnn724wHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzODMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+NrYwDQYJ
KoZIhvcNAQELBQADggEBAD/3o0H+ZP7VnCestmZwJKx5SNVVyOJOidpLwAanWzvI
C/tqxHN9q3fofh6cFTrjgTtSiJ4gkmMANEUk7+/xFc1NSfJ+dyZsR5WBghBK0qFh
0/odqQLp6D8AL78Rr0fa5pLB+z8Vk00jBCon1PP/cc0jWBNPelgW+wZzvOTBZJii
BZPqINj2NJxn3fU1xsJpXtx79NXwt5jq26hfogNY8/9fzuxhN5QX1qAYy7DWgI+9
R+tFSMH6IUpBgkmm/fUncf4da63R4Th0Tfs6OhaMF4wy3E4Rx5cCsvcCsN3Q73Eo
YGsbOiTIzMVXyUGSjdtW8YUaO1JD3FsiGfpe8xNSIdA=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org