Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3138372e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          4NFV7OmY1xnX08hJe/wNVQfXGQEe5V8ozgMTpt4Xf64=
Subject key identifier:   B8:D8:FE:10:C6:FC:D8:5F:69:C4:CA:8E:84:1B:71:9A:B6:51:00:5E
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0D26B719D75DF497FA4C410DF74EB142FA6C2B48
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:05 +0000
ROA not before:           Tue 05 Mar 2024 18:12:05 +0000
ROA not after:            Tue 04 Mar 2025 18:17:05 +0000
asID:                     6429
IP address blocks:        190.54.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:b7:19:d7:5d:f4:97:fa:4c:41:0d:f7:4e:b1:42:fa:6c:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:05 2024 GMT
            Not After : Mar  4 18:17:05 2025 GMT
        Subject: CN=B8D8FE10C6FCD85F69C4CA8E841B719AB651005E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:ca:32:6d:d2:a6:f1:0c:d4:6d:69:1e:08:
                    d1:5c:d9:fc:0e:51:da:2c:1a:ba:1a:04:26:c6:a1:
                    28:d1:0c:df:da:bc:61:95:26:b1:4e:6b:32:68:1e:
                    6d:a3:3b:56:6b:53:62:da:0c:92:86:82:5d:f3:f8:
                    4b:02:6b:19:1b:af:b8:7f:78:3e:9c:14:5f:53:a9:
                    fe:09:af:68:56:41:ca:7f:57:11:3b:09:c4:03:63:
                    9d:46:eb:d3:66:b4:b4:18:9b:a6:c1:e3:93:17:f5:
                    02:b0:2d:cd:13:d0:87:6b:b9:86:9a:31:71:74:85:
                    b5:36:fe:94:7b:2e:d4:10:ea:9c:b6:85:42:24:5a:
                    a9:68:56:c4:5f:25:16:6f:7c:db:ce:dc:47:d7:18:
                    9c:73:64:9a:cb:af:e1:15:18:f8:55:31:86:d5:92:
                    e3:1f:48:78:8f:d8:57:cd:60:27:7d:45:e3:8b:d5:
                    47:f6:15:b8:b4:51:d7:11:e1:49:62:57:a0:35:7f:
                    b4:7d:c3:36:62:32:9a:58:de:41:a1:7e:22:64:4f:
                    3f:18:3f:4f:99:b3:a0:d6:8e:1e:09:c8:26:52:dc:
                    44:fb:df:7d:2c:e4:96:cd:6f:df:44:49:bf:f3:48:
                    1f:21:00:57:7c:fa:ac:da:77:4d:6e:9f:d7:77:96:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:FE:10:C6:FC:D8:5F:69:C4:CA:8E:84:1B:71:9A:B6:51:00:5E
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138372e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:8b:e8:75:c1:d6:3c:42:c9:d9:cb:72:2a:11:aa:3b:1f:
         04:77:37:58:e0:c5:04:44:29:78:88:8a:d0:f1:46:bd:f0:eb:
         c3:e2:78:f8:8c:ba:26:49:60:c7:a4:cf:92:64:7d:4a:11:7f:
         1f:8a:18:ea:0e:90:fc:52:58:24:82:c1:fe:c9:91:93:51:3a:
         c9:ea:c4:46:5b:79:2c:2d:67:75:95:44:d9:88:0d:24:8c:b9:
         5f:ad:b1:43:ca:24:eb:ee:a9:6c:10:a0:9f:bb:9b:b0:58:ea:
         fa:fa:f2:91:f3:f7:3d:8a:42:ac:81:63:dc:bc:40:b8:bd:35:
         fe:af:8b:8d:2a:92:e8:a3:b7:a8:85:eb:c0:e3:23:a0:4f:6a:
         01:40:ca:fe:24:a5:2a:3a:15:78:77:37:f1:ab:09:35:fc:b2:
         1e:b6:b2:3e:00:be:25:cb:a2:ec:f3:29:9b:e1:3f:e5:2b:8e:
         01:a0:75:66:60:f5:eb:19:6e:c9:7c:f3:18:1f:bc:8b:0f:ef:
         24:21:4f:6a:25:a0:cc:ed:b7:10:4b:df:f2:ad:4a:69:3c:60:
         f7:7b:6d:a5:17:f4:36:e0:46:41:df:ca:c5:d0:22:fb:58:9c:
         9c:ce:bd:2e:0c:f5:67:30:0b:03:0e:33:aa:9b:2d:51:73:36:
         3f:93:f6:00
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDSa3Gddd9Jf6TEEN906xQvpsK0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNDAzMDUxODEyMDVaFw0yNTAzMDQxODE3MDVaMDMxMTAvBgNV
BAMTKEI4RDhGRTEwQzZGQ0Q4NUY2OUM0Q0E4RTg0MUI3MTlBQjY1MTAwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxMoybdKm8QzUbWkeCNFc2fwO
UdosGroaBCbGoSjRDN/avGGVJrFOazJoHm2jO1ZrU2LaDJKGgl3z+EsCaxkbr7h/
eD6cFF9Tqf4Jr2hWQcp/VxE7CcQDY51G69NmtLQYm6bB45MX9QKwLc0T0IdruYaa
MXF0hbU2/pR7LtQQ6py2hUIkWqloVsRfJRZvfNvO3EfXGJxzZJrLr+EVGPhVMYbV
kuMfSHiP2FfNYCd9ReOL1Uf2Fbi0UdcR4UliV6A1f7R9wzZiMppY3kGhfiJkTz8Y
P0+Zs6DWjh4JyCZS3ET7330s5JbNb99ESb/zSB8hAFd8+qzad01un9d3lnIPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUuNj+EMb82F9pxMqOhBtxmrZRAF4wHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzODM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NrswDQYJ
KoZIhvcNAQELBQADggEBAIG9i+h1wdY8QsnZy3IqEao7HwR3N1jgxQREKXiIitDx
Rr3w68PiePiMuiZJYMekz5JkfUoRfx+KGOoOkPxSWCSCwf7JkZNROsnqxEZbeSwt
Z3WVRNmIDSSMuV+tsUPKJOvuqWwQoJ+7m7BY6vr68pHz9z2KQqyBY9y8QLi9Nf6v
i40qkuijt6iF68DjI6BPagFAyv4kpSo6FXh3N/GrCTX8sh62sj4AviXLouzzKZvh
P+UrjgGgdWZg9esZbsl88xgfvIsP7yQhT2oloMzttxBL3/KtSmk8YPd7baUX9Dbg
RkHfysXQIvtYnJzOvS4M9WcwCwMOM6qbLVFzNj+T9gA=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org