Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa
File:                     3139302e35342e3138362e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          kJoqiH6QYyRfXbWhiKGiL2pB1OJyROlFaM4gKDDTqN8=
Subject key identifier:   99:6C:5F:39:3F:38:4F:67:46:0E:75:83:D4:91:80:11:C5:53:0F:8A
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       432112D69EBEF363507BBCCE3FEFCCEA788E7BC1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:17:13 +0000
ROA not before:           Tue 05 Mar 2024 18:12:13 +0000
ROA not after:            Tue 04 Mar 2025 18:17:13 +0000
asID:                     6535
IP address blocks:        190.54.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:21:12:d6:9e:be:f3:63:50:7b:bc:ce:3f:ef:cc:ea:78:8e:7b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:13 2024 GMT
            Not After : Mar  4 18:17:13 2025 GMT
        Subject: CN=996C5F393F384F67460E7583D4918011C5530F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f0:0b:36:9b:30:69:c4:8a:7c:26:99:eb:c8:
                    2c:71:ec:28:c6:0c:22:64:4b:30:ff:30:23:20:a5:
                    52:49:03:c8:93:e2:05:ab:13:b7:47:8b:ef:b5:be:
                    5c:09:73:ba:04:19:2b:ca:f2:5a:db:b3:aa:39:d9:
                    c2:7f:2e:0c:5e:a6:5d:ea:91:4f:b1:d3:07:8d:57:
                    b4:b8:ea:a2:35:3b:c6:1c:b7:e0:e2:4c:63:02:7c:
                    99:7e:8e:b8:63:50:f0:25:00:d1:5f:2b:98:ef:22:
                    5d:2f:36:e4:6d:07:db:a4:a0:e7:a5:71:7e:b6:e2:
                    c6:30:89:71:ee:1d:c1:1e:49:da:8b:f2:42:a3:ce:
                    02:d1:8c:c1:83:bb:90:8a:7f:c0:45:f6:ba:7f:9c:
                    4f:3c:13:2b:0d:0e:b3:49:dd:2a:e6:3a:05:6d:69:
                    b6:4d:b8:6f:5a:c6:40:d6:c3:a1:8c:e0:db:90:e6:
                    9d:e7:be:d3:88:b2:32:0b:3d:d7:0b:ad:74:98:1b:
                    79:ec:7a:c2:0a:db:fb:4e:61:8b:12:82:f4:a5:35:
                    9e:33:90:01:6a:bc:62:37:8e:92:b6:40:ab:b8:dc:
                    df:76:76:d2:7f:91:84:1f:d1:d0:c3:4c:63:56:62:
                    ff:82:66:4e:be:b7:ef:a7:06:aa:89:83:b5:d5:70:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6C:5F:39:3F:38:4F:67:46:0E:75:83:D4:91:80:11:C5:53:0F:8A
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:a5:66:02:95:97:c0:23:da:90:48:d9:12:06:79:c3:f9:
         f6:da:51:f9:9f:d0:b6:43:4f:7c:45:d4:a6:ea:ae:2b:9c:4e:
         98:a8:bd:4a:36:d4:b3:ed:e7:0b:66:2d:50:b0:98:fb:14:b5:
         82:cd:21:92:e3:98:26:06:f8:05:70:50:b8:b3:55:98:7d:16:
         b1:d1:b0:33:9a:51:60:ab:43:fb:f0:b3:15:f1:f1:0e:98:4f:
         a4:2c:c4:9f:22:cc:d9:54:a2:7b:ca:98:dc:2f:e6:94:2e:5d:
         03:88:7d:8c:71:f8:29:ae:dc:32:01:b0:e5:c4:e4:65:3d:00:
         fc:0c:df:c0:2f:4e:2a:0f:62:90:cc:51:22:fd:8b:3e:c0:e2:
         1b:c1:63:9d:c4:0e:e3:9a:4f:f8:50:9a:80:0f:e5:59:9f:8b:
         31:54:5a:b8:b6:6a:29:86:ea:e9:88:2c:d9:4a:0e:29:0e:30:
         82:21:7a:28:64:6f:e1:9d:dc:23:bf:c1:88:be:66:24:30:1e:
         9d:a0:07:66:d4:60:d2:01:38:8b:c1:d8:d9:c8:72:90:c8:88:
         76:26:3f:5e:9a:13:58:1c:75:ad:b5:d4:70:8e:53:55:b4:4c:
         1d:03:15:c5:be:9d:ad:40:af:6b:49:e0:f7:27:80:96:d3:bd:
         a3:cc:09:b2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQyES1p6+82NQe7zOP+/M6niOe8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNDAzMDUxODEyMTNaFw0yNTAzMDQxODE3MTNaMDMxMTAvBgNV
BAMTKDk5NkM1RjM5M0YzODRGNjc0NjBFNzU4M0Q0OTE4MDExQzU1MzBGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8As2mzBpxIp8JpnryCxx7CjG
DCJkSzD/MCMgpVJJA8iT4gWrE7dHi++1vlwJc7oEGSvK8lrbs6o52cJ/Lgxepl3q
kU+x0weNV7S46qI1O8Yct+DiTGMCfJl+jrhjUPAlANFfK5jvIl0vNuRtB9ukoOel
cX624sYwiXHuHcEeSdqL8kKjzgLRjMGDu5CKf8BF9rp/nE88EysNDrNJ3SrmOgVt
abZNuG9axkDWw6GM4NuQ5p3nvtOIsjILPdcLrXSYG3nsesIK2/tOYYsSgvSlNZ4z
kAFqvGI3jpK2QKu43N92dtJ/kYQf0dDDTGNWYv+CZk6+t++nBqqJg7XVcA7jAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmWxfOT84T2dGDnWD1JGAEcVTD4owHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzODM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NrowDQYJ
KoZIhvcNAQELBQADggEBABa4pWYClZfAI9qQSNkSBnnD+fbaUfmf0LZDT3xF1Kbq
riucTpiovUo21LPt5wtmLVCwmPsUtYLNIZLjmCYG+AVwULizVZh9FrHRsDOaUWCr
Q/vwsxXx8Q6YT6QsxJ8izNlUonvKmNwv5pQuXQOIfYxx+Cmu3DIBsOXE5GU9APwM
38AvTioPYpDMUSL9iz7A4hvBY53EDuOaT/hQmoAP5VmfizFUWri2aimG6umILNlK
DikOMIIheihkb+Gd3CO/wYi+ZiQwHp2gB2bUYNIBOIvB2NnIcpDIiHYmP16aE1gc
da211HCOU1W0TB0DFcW+na1Ar2tJ4PcngJbTvaPMCbI=
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org