Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa
File:                     3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier:          AxLRaHVdtMOMMGQFIUPGHzfEQQd020Rad7o/ritYFsk=
Subject key identifier:   22:6C:81:A5:93:E8:C4:EB:8B:8B:AE:4E:1F:81:A1:2E:8B:82:9E:AC
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       4D43FE3083FF42CBB7D77D5156C2721520DE6476
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa
Signing time:             Tue 05 Mar 2024 18:02:54 +0000
ROA not before:           Tue 05 Mar 2024 17:57:54 +0000
ROA not after:            Tue 04 Mar 2025 18:02:54 +0000
asID:                     27751
IP address blocks:        190.108.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:fe:30:83:ff:42:cb:b7:d7:7d:51:56:c2:72:15:20:de:64:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Mar  5 17:57:54 2024 GMT
            Not After : Mar  4 18:02:54 2025 GMT
        Subject: CN=226C81A593E8C4EB8B8BAE4E1F81A12E8B829EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:96:bb:9a:64:30:de:35:e0:aa:cc:8a:08:
                    5a:8f:1f:61:55:54:91:1e:a8:46:e5:57:6c:85:b2:
                    ba:98:4e:06:59:dd:b5:af:c6:c2:92:94:f6:06:2d:
                    b0:6c:bb:86:53:49:0c:db:83:12:90:b5:bc:06:2c:
                    40:67:24:0d:52:9e:c0:11:5b:5b:9a:63:e0:9e:6d:
                    a6:35:8d:0f:e0:3a:5a:d7:f6:38:8c:b5:a2:0a:34:
                    cd:b9:a9:db:c4:60:62:41:25:f9:83:e8:11:90:a6:
                    ba:1f:93:ba:f3:93:e0:56:29:df:19:06:e1:18:e6:
                    15:17:cd:b0:7f:b5:9a:a5:44:a8:26:b7:14:62:37:
                    ea:d0:57:24:ec:c3:fd:b3:e0:c9:22:a3:4e:40:64:
                    f7:e8:7a:c8:5c:f6:de:fe:ee:d2:7f:dd:80:c0:3b:
                    03:f1:85:6e:30:57:0e:2c:69:79:03:05:8f:11:db:
                    45:3f:d5:21:37:46:e1:6f:72:79:6c:d2:f3:e6:7a:
                    fe:38:74:31:bc:9a:d2:0f:22:35:7c:27:0c:7d:bc:
                    b8:cd:bf:36:b8:a1:98:79:01:20:87:cd:d9:85:f4:
                    6f:90:40:d5:d4:5d:3b:f0:72:6d:2e:45:08:63:91:
                    2e:1b:15:ef:c0:32:4f:d2:44:09:3f:31:6b:77:a3:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6C:81:A5:93:E8:C4:EB:8B:8B:AE:4E:1F:81:A1:2E:8B:82:9E:AC
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:a3:e1:32:5f:2a:e3:42:92:b5:bb:39:e2:f2:ed:a0:42:
         75:2b:0e:45:54:0d:f2:5e:23:99:38:66:c2:52:4d:ba:ba:c4:
         92:64:2a:02:61:fe:63:0b:30:d8:2d:0d:3d:d7:84:c8:83:f0:
         7a:46:bd:e9:b5:2b:e9:58:1c:af:c3:82:55:21:7a:e7:f0:2d:
         27:0a:16:9d:e0:af:d7:69:67:5a:b2:6b:77:d3:88:60:a4:20:
         01:5e:9a:cd:f2:f0:52:5d:d7:e3:51:9f:93:52:e8:d2:49:ca:
         df:a5:c3:66:50:b1:79:75:9c:fd:d0:1f:ce:65:23:b9:89:79:
         ee:06:1f:10:09:94:4f:5b:80:87:3b:52:f5:cd:a9:ea:f5:fc:
         1e:24:c7:8e:91:b1:5b:9c:e6:16:64:b2:02:60:55:9e:3a:83:
         15:ae:11:94:62:90:0b:b5:0b:45:bd:92:a7:c8:f8:9d:54:3b:
         41:d6:a2:e7:3d:c6:8b:0e:af:94:fd:4e:b0:fd:c9:cf:c9:63:
         f4:6b:aa:1e:6d:40:a2:43:fa:7c:5e:ec:a9:5b:91:b4:38:a5:
         ee:8e:c0:e8:59:4c:c2:0e:68:6d:53:21:8a:ef:61:e7:f1:3d:
         2f:d8:40:74:56:19:bf:d5:9a:2f:08:2b:38:92:7d:45:3f:96:
         8a:64:76:68
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTUP+MIP/Qsu3131RVsJyFSDeZHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk5ODZBRjlCRTcwQzlGN0E3QkJERUI1RTNFODcyMDM4
RjU5N0Q0RTAeFw0yNDAzMDUxNzU3NTRaFw0yNTAzMDQxODAyNTRaMDMxMTAvBgNV
BAMTKDIyNkM4MUE1OTNFOEM0RUI4QjhCQUU0RTFGODFBMTJFOEI4MjlFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctZa7mmQw3jXgqsyKCFqPH2FV
VJEeqEblV2yFsrqYTgZZ3bWvxsKSlPYGLbBsu4ZTSQzbgxKQtbwGLEBnJA1SnsAR
W1uaY+CebaY1jQ/gOlrX9jiMtaIKNM25qdvEYGJBJfmD6BGQprofk7rzk+BWKd8Z
BuEY5hUXzbB/tZqlRKgmtxRiN+rQVyTsw/2z4Mkio05AZPfoeshc9t7+7tJ/3YDA
OwPxhW4wVw4saXkDBY8R20U/1SE3RuFvcnls0vPmev44dDG8mtIPIjV8Jwx9vLjN
vza4oZh5ASCHzdmF9G+QQNXUXTvwcm0uRQhjkS4bFe/AMk/SRAk/MWt3o2oZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUImyBpZPoxOuLi65OH4GhLouCnqwwHwYDVR0j
BBgwFoAUSZhq+b5wyfenu9614+hyA49ZfU4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzhCMzk1MTlGMzhEOUNGNEI4ODZBOTBCRUE4QzY2NkQ4
QzMyMTVGNTAzNTNGQzdEMjEyMUQ1RTkzNkVBRjE3LzAvNDk5ODZBRjlCRTcwQzlG
N0E3QkJERUI1RTNFODcyMDM4RjU5N0Q0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTk4NkFGOUJFNzBDOUY3QTdC
QkRFQjVFM0U4NzIwMzhGNTk3RDRFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjc4QjM5NTE5RjM4RDlDRjRCODg2QTkwQkVBOEM2NjZEOEMzMjE1RjUw
MzUzRkM3RDIxMjFENUU5MzZFQUYxNy8wLzMxMzkzMDJlMzEzMDM4MmUzMjM0MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3MzczNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvmzw
MA0GCSqGSIb3DQEBCwUAA4IBAQAvZqPhMl8q40KStbs54vLtoEJ1Kw5FVA3yXiOZ
OGbCUk26usSSZCoCYf5jCzDYLQ0914TIg/B6Rr3ptSvpWByvw4JVIXrn8C0nChad
4K/XaWdasmt304hgpCABXprN8vBSXdfjUZ+TUujSScrfpcNmULF5dZz90B/OZSO5
iXnuBh8QCZRPW4CHO1L1zanq9fweJMeOkbFbnOYWZLICYFWeOoMVrhGUYpALtQtF
vZKnyPidVDtB1qLnPcaLDq+U/U6w/cnPyWP0a6oebUCiQ/p8XuypW5G0OKXujsDo
WUzCDmhtUyGK72Hn8T0v2EB0Vhm/1ZovCCs4kn1FP5aKZHZo
-----END CERTIFICATE-----
Generated at Fri May 17 02:38:11 2024 by rpki-client on console-fra.rpki-client.org