Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233392e302f32342d3234203d3e203230323037.roa
File:                     3139302e3131302e3233392e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          Qxy+5gNmZ6K7kwJNRmdlyVzFs1xhQDwkBeUFoMgJgk4=
Subject key identifier:   7D:0C:C0:2E:ED:89:D8:22:03:F0:E4:F6:E5:69:3A:7E:F5:78:FE:31
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       3C15855A235872FB08886B06698AA9597C1A4435
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233392e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:22:05 +0000
ROA not before:           Tue 05 Mar 2024 18:17:05 +0000
ROA not after:            Tue 04 Mar 2025 18:22:05 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:85:5a:23:58:72:fb:08:88:6b:06:69:8a:a9:59:7c:1a:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:05 2024 GMT
            Not After : Mar  4 18:22:05 2025 GMT
        Subject: CN=7D0CC02EED89D82203F0E4F6E5693A7EF578FE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:6c:d9:53:e6:3c:7a:2a:0f:dc:b0:46:27:
                    35:58:6b:c4:23:9c:b4:4b:57:cd:5a:9f:26:df:a8:
                    3c:fe:2a:e3:d3:c3:0e:7c:bd:3e:02:a3:41:b6:86:
                    c7:27:24:e5:23:42:68:07:73:b2:bd:a6:23:e8:23:
                    6a:93:0d:6d:c4:da:5f:43:0c:2e:77:fb:de:a5:9c:
                    62:71:8c:d1:3c:2e:2a:d7:ca:3e:43:70:44:e4:43:
                    c5:52:33:b0:4b:62:a8:9e:a6:93:37:b1:94:e1:f8:
                    61:2d:1e:db:86:3b:1b:04:82:90:1c:dc:92:34:ef:
                    50:df:cb:ac:f0:50:b1:3b:d6:16:28:b1:e3:6c:5a:
                    fb:6d:ac:34:c8:1f:93:d8:94:e3:ab:f4:9e:57:3c:
                    be:39:d9:88:6f:7a:60:2f:4d:f5:f7:eb:7a:8d:55:
                    06:e3:68:c5:fc:ad:24:5e:cb:33:02:1f:fb:20:09:
                    a9:af:05:9f:c9:ed:a7:fb:43:16:bd:6f:71:66:d3:
                    9b:7f:55:01:c8:d5:5e:ed:09:60:40:99:97:88:9d:
                    99:a8:7d:64:f0:5e:5c:94:fe:34:a1:10:31:da:fe:
                    6e:2b:d7:be:50:46:2a:8a:7f:8b:a7:35:06:ad:04:
                    e5:0d:51:d2:7f:f0:2d:fc:2e:19:e3:87:e8:f4:4b:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0C:C0:2E:ED:89:D8:22:03:F0:E4:F6:E5:69:3A:7E:F5:78:FE:31
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233392e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:00:d7:84:97:73:3d:af:a5:60:5c:f5:20:0a:b1:d3:5a:01:
         f1:a5:1f:00:40:95:5c:71:61:b6:44:74:00:22:71:f5:71:8d:
         87:34:4a:64:71:cc:46:84:31:eb:f7:19:c7:2d:75:71:c2:85:
         0f:10:dc:f4:a0:6b:6b:d0:1c:14:0a:80:3d:2e:09:4e:e1:b0:
         d5:73:77:26:58:f7:b2:95:2a:76:f6:02:d9:92:14:0a:4c:09:
         a3:a8:d6:4c:b5:ce:ec:38:30:26:1a:6b:37:36:9b:48:f1:ef:
         68:0b:1f:80:a9:98:c9:d4:1a:90:01:c3:40:3f:40:01:01:1d:
         bd:4d:e7:d2:8d:b9:c0:25:43:6e:ba:f3:e7:7d:b4:9c:48:b0:
         a7:13:fb:79:23:fd:54:94:68:bf:21:76:ff:70:74:22:fb:77:
         5e:76:ee:2a:12:29:01:ff:a7:9b:9c:20:5c:84:37:49:43:6b:
         fb:01:ab:28:8c:57:2f:bc:87:cf:b6:93:47:7c:c6:2e:c9:c8:
         e9:bb:a6:af:d8:10:0c:8b:81:af:82:a8:b7:fe:5d:a1:49:9f:
         3a:ea:24:2d:85:5b:7c:f6:ed:f3:6b:7b:bb:f7:28:f2:f9:d7:
         38:b7:4c:32:3a:44:e9:a0:16:99:d1:2a:09:ba:e1:50:f7:c0:
         c2:22:d7:b7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPBWFWiNYcvsIiGsGaYqpWXwaRDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNDAzMDUxODE3MDVaFw0yNTAzMDQxODIyMDVaMDMxMTAvBgNV
BAMTKDdEMENDMDJFRUQ4OUQ4MjIwM0YwRTRGNkU1NjkzQTdFRjU3OEZFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+mzZU+Y8eioP3LBGJzVYa8Qj
nLRLV81anybfqDz+KuPTww58vT4Co0G2hscnJOUjQmgHc7K9piPoI2qTDW3E2l9D
DC53+96lnGJxjNE8LirXyj5DcETkQ8VSM7BLYqieppM3sZTh+GEtHtuGOxsEgpAc
3JI071Dfy6zwULE71hYoseNsWvttrDTIH5PYlOOr9J5XPL452YhvemAvTfX363qN
VQbjaMX8rSReyzMCH/sgCamvBZ/J7af7Qxa9b3Fm05t/VQHI1V7tCWBAmZeInZmo
fWTwXlyU/jShEDHa/m4r175QRiqKf4unNQatBOUNUdJ/8C38Lhnjh+j0S8v/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfQzALu2J2CID8OT25Wk6fvV4/jEwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMxMzkzMDJlMzEzMTMwMmUzMjMzMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm7v
MA0GCSqGSIb3DQEBCwUAA4IBAQCEANeEl3M9r6VgXPUgCrHTWgHxpR8AQJVccWG2
RHQAInH1cY2HNEpkccxGhDHr9xnHLXVxwoUPENz0oGtr0BwUCoA9LglO4bDVc3cm
WPeylSp29gLZkhQKTAmjqNZMtc7sODAmGms3NptI8e9oCx+AqZjJ1BqQAcNAP0AB
AR29TefSjbnAJUNuuvPnfbScSLCnE/t5I/1UlGi/IXb/cHQi+3dedu4qEikB/6eb
nCBchDdJQ2v7AasojFcvvIfPtpNHfMYuycjpu6av2BAMi4Gvgqi3/l2hSZ866iQt
hVt89u3za3u79yjy+dc4t0wyOkTpoBaZ0SoJuuFQ98DCIte3
-----END CERTIFICATE-----
Generated at Sun May 19 22:51:09 2024 by rpki-client on console-fra.rpki-client.org