Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa
File:                     3139302e3134382e39362e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          qUWvZign4L/YEAxPoR/71TEwXkETkU58sn3Ff69Eb2A=
Subject key identifier:   A4:7F:E4:37:1E:9B:DC:A7:71:55:49:39:30:07:B5:06:31:BF:60:F7
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       126028F2A7270DD21F0B7A29A838ACA48D1F7E28
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:34 +0000
ROA not before:           Tue 05 Mar 2024 17:37:34 +0000
ROA not after:            Tue 04 Mar 2025 17:42:34 +0000
asID:                     14754
IP address blocks:        190.148.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:60:28:f2:a7:27:0d:d2:1f:0b:7a:29:a8:38:ac:a4:8d:1f:7e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:34 2024 GMT
            Not After : Mar  4 17:42:34 2025 GMT
        Subject: CN=A47FE4371E9BDCA7715549393007B50631BF60F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:19:fa:f1:f6:39:d0:ec:74:d3:c9:b8:8b:
                    2c:31:89:43:ad:bb:e7:42:cc:49:50:5c:1c:7c:30:
                    1a:84:cb:17:d6:e6:06:85:83:ae:f1:ac:25:ba:13:
                    b6:f0:d6:34:01:85:45:10:54:db:7c:1a:3f:2f:d9:
                    37:1e:13:71:eb:64:2e:d4:02:13:b1:d7:5e:0f:41:
                    e5:69:55:3f:2e:9b:85:3b:d0:f0:30:82:4e:0f:13:
                    05:3f:52:40:04:f3:a4:c6:e7:e1:1d:97:d8:3b:8f:
                    a2:d0:77:63:25:4a:18:6d:4e:f1:0b:d7:87:3d:1c:
                    bf:78:d9:09:a2:18:f7:54:a6:1d:b8:4f:8d:28:23:
                    30:45:de:f6:93:7c:33:97:a2:2e:d2:ea:44:c7:ba:
                    c0:d3:d9:27:7b:13:0c:db:98:9e:29:f1:29:b8:de:
                    53:e6:84:58:76:d5:b0:00:09:21:0e:5c:04:60:65:
                    9e:27:73:43:6a:89:c9:46:97:46:26:68:91:2e:2e:
                    67:ac:6d:6a:a3:13:82:7e:43:7b:ef:55:68:1b:f7:
                    a8:49:0f:3c:b8:77:d7:74:d9:ee:3a:aa:17:33:82:
                    b0:d6:7d:1e:37:2c:71:f5:f9:27:80:f5:b1:c9:a5:
                    67:d1:df:3f:7a:73:48:3f:92:d0:cd:bc:6e:2b:07:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:E4:37:1E:9B:DC:A7:71:55:49:39:30:07:B5:06:31:BF:60:F7
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e39362e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:d0:8a:3f:43:cb:0d:9c:4d:d4:55:1a:3e:ab:49:a3:c9:
         a4:2c:91:f5:97:bb:6a:9a:4e:37:3c:93:bc:6a:95:39:30:63:
         63:98:0b:4f:04:17:0d:92:1a:16:c9:2d:2f:5c:ac:60:49:1a:
         d6:c6:ac:9f:fb:f8:66:cc:6a:91:fc:83:63:bc:77:e3:95:ce:
         1a:5f:4b:cd:75:d4:ee:da:2e:7b:e9:4c:fd:eb:da:0a:24:ce:
         e4:3c:12:ae:af:24:86:bb:22:64:63:66:32:4b:10:f6:52:8f:
         ea:fa:7f:1c:93:b5:66:c6:2a:cc:67:bc:82:ad:73:7a:c9:27:
         6a:42:d0:b8:99:3e:dd:d7:e4:73:95:23:c9:13:d6:c2:67:86:
         34:6d:34:db:be:05:c8:f3:22:88:06:35:b0:af:74:b4:f1:c3:
         1c:70:c1:3e:0f:b0:9d:d9:62:8d:3a:83:6d:48:ea:d4:f4:93:
         88:6d:52:cc:5c:3c:c1:20:18:60:82:c1:8e:9e:1d:5f:29:82:
         c7:6a:23:8f:86:d0:14:35:11:4e:11:6a:8c:35:30:90:78:21:
         29:c6:01:0c:2b:bf:e1:35:38:9c:42:12:c0:56:21:72:59:45:
         2a:d2:95:00:11:32:bf:86:36:5d:8f:e4:f1:74:28:7e:19:e8:
         e3:2e:19:12
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEmAo8qcnDdIfC3opqDispI0ffigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MzRaFw0yNTAzMDQxNzQyMzRaMDMxMTAvBgNV
BAMTKEE0N0ZFNDM3MUU5QkRDQTc3MTU1NDkzOTMwMDdCNTA2MzFCRjYwRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Fxn68fY50Ox008m4iywxiUOt
u+dCzElQXBx8MBqEyxfW5gaFg67xrCW6E7bw1jQBhUUQVNt8Gj8v2TceE3HrZC7U
AhOx114PQeVpVT8um4U70PAwgk4PEwU/UkAE86TG5+Edl9g7j6LQd2MlShhtTvEL
14c9HL942QmiGPdUph24T40oIzBF3vaTfDOXoi7S6kTHusDT2Sd7EwzbmJ4p8Sm4
3lPmhFh21bAACSEOXARgZZ4nc0NqiclGl0YmaJEuLmesbWqjE4J+Q3vvVWgb96hJ
Dzy4d9d02e46qhczgrDWfR43LHH1+SeA9bHJpWfR3z96c0g/ktDNvG4rB4T9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpH/kNx6b3KdxVUk5MAe1BjG/YPcwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM4MmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb6UYDAN
BgkqhkiG9w0BAQsFAAOCAQEALhPQij9Dyw2cTdRVGj6rSaPJpCyR9Ze7appONzyT
vGqVOTBjY5gLTwQXDZIaFsktL1ysYEka1sasn/v4ZsxqkfyDY7x345XOGl9LzXXU
7toue+lM/evaCiTO5DwSrq8khrsiZGNmMksQ9lKP6vp/HJO1ZsYqzGe8gq1zeskn
akLQuJk+3dfkc5UjyRPWwmeGNG00274FyPMiiAY1sK90tPHDHHDBPg+wndlijTqD
bUjq1PSTiG1SzFw8wSAYYILBjp4dXymCx2ojj4bQFDURThFqjDUwkHghKcYBDCu/
4TU4nEISwFYhcllFKtKVABEyv4Y2XY/k8XQofhno4y4ZEg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org