Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34302e302f32342d3234203d3e203532333437.roa
File:                     3139302e39332e34302e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          oQSNItWCZYhalo2uM0RUqYELh6TF/fhTRYcEsZ7uXaU=
Subject key identifier:   46:91:8E:97:EC:EC:B8:6B:6F:3F:F5:62:50:2D:8C:C8:CC:64:C2:20
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       0DC05C0F97AE19CEEC80CC52386C61D6D76F860F
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34302e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:25 +0000
ROA not before:           Tue 05 Mar 2024 17:36:25 +0000
ROA not after:            Tue 04 Mar 2025 17:41:25 +0000
asID:                     52347
IP address blocks:        190.93.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c0:5c:0f:97:ae:19:ce:ec:80:cc:52:38:6c:61:d6:d7:6f:86:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:25 2024 GMT
            Not After : Mar  4 17:41:25 2025 GMT
        Subject: CN=46918E97ECECB86B6F3FF562502D8CC8CC64C220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:82:f3:ef:be:c3:ce:b5:5f:63:5b:e2:8a:
                    c0:85:28:31:a8:aa:c4:67:f6:03:62:a8:72:b4:cb:
                    a2:2e:f3:9c:bc:c2:9a:d1:76:7f:46:6c:6e:98:36:
                    a2:00:a7:89:f8:60:e2:12:ee:6b:ae:94:de:7c:b0:
                    01:b3:a2:b2:b7:0e:04:f9:11:16:9a:5c:83:00:02:
                    47:cc:45:81:2f:4b:b6:70:75:fe:e4:cf:9d:a7:55:
                    57:da:30:e6:73:75:66:68:60:a2:2e:77:fc:0a:ea:
                    76:53:ff:8a:35:d5:cb:61:2a:a7:b0:86:6c:bd:07:
                    f4:e3:fa:14:5f:fa:fe:98:f2:8b:37:31:9f:7c:3c:
                    44:db:00:dc:da:19:91:55:39:c1:9c:54:a3:a4:98:
                    ab:bc:c3:ec:aa:a9:95:df:0d:38:b2:b1:eb:53:6e:
                    b7:96:01:d8:88:0f:58:55:b4:b7:f5:7a:fd:1f:20:
                    90:27:3e:05:6f:f8:5a:75:51:17:71:93:c3:10:86:
                    31:98:b0:53:5c:f9:31:d2:24:ca:82:2b:70:dc:1f:
                    52:29:95:e7:86:c5:22:2e:3e:a2:9f:6a:d2:ab:11:
                    52:a6:1f:a8:84:9c:13:a8:38:84:f0:7a:b7:e1:8c:
                    23:95:b5:4e:96:e8:f8:60:9a:6e:10:a2:07:13:ca:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:8E:97:EC:EC:B8:6B:6F:3F:F5:62:50:2D:8C:C8:CC:64:C2:20
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34302e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c5:c5:01:97:44:77:a1:cf:4f:5e:06:a5:09:5a:f0:f8:54:
         36:da:ba:60:16:dc:fc:47:ef:54:91:4a:85:ac:1d:b4:01:aa:
         20:03:66:ed:86:73:14:99:30:d0:24:fc:9a:4c:29:df:0a:78:
         de:ff:7d:86:36:d8:2b:06:14:7f:51:b8:26:92:e7:ce:7b:79:
         0f:9e:26:db:01:52:48:e8:99:07:7e:c6:65:00:f2:1a:91:97:
         92:99:10:cc:52:ab:b2:0d:52:bc:af:1d:b6:98:d1:8f:e0:c1:
         12:ce:e7:d6:57:3b:3a:d0:ff:15:5d:a0:e5:7a:45:ab:67:6a:
         be:7e:c7:36:f6:9d:5e:d9:e9:f1:0c:a3:0b:c2:24:5a:7f:e6:
         b7:1a:46:df:97:0a:89:08:24:b8:df:65:61:b0:1d:33:fe:38:
         f3:de:f7:0b:0f:bc:28:8b:b4:31:18:ab:eb:87:79:ad:41:6d:
         dd:65:db:12:09:e1:cf:97:8a:0c:12:3e:f8:0c:82:fa:66:c1:
         f2:5b:33:24:71:62:97:e7:0a:71:2d:7e:a4:8b:fa:94:40:8b:
         f8:f1:d9:e5:7b:1c:e4:21:b3:0b:1b:3f:98:81:67:dc:1d:14:
         e7:9c:31:08:96:d7:78:97:6e:47:d4:1e:19:4b:ea:86:44:17:
         1e:ff:83:93
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDcBcD5euGc7sgMxSOGxh1tdvhg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkU3NUY0MkQyNzExMkZFNUQ4OTU3RkRGMTk0OTUx
MDVGOUFERjAeFw0yNDAzMDUxNzM2MjVaFw0yNTAzMDQxNzQxMjVaMDMxMTAvBgNV
BAMTKDQ2OTE4RTk3RUNFQ0I4NkI2RjNGRjU2MjUwMkQ4Q0M4Q0M2NEMyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hYLz777DzrVfY1viisCFKDGo
qsRn9gNiqHK0y6Iu85y8wprRdn9GbG6YNqIAp4n4YOIS7muulN58sAGzorK3DgT5
ERaaXIMAAkfMRYEvS7Zwdf7kz52nVVfaMOZzdWZoYKIud/wK6nZT/4o11cthKqew
hmy9B/Tj+hRf+v6Y8os3MZ98PETbANzaGZFVOcGcVKOkmKu8w+yqqZXfDTiysetT
breWAdiID1hVtLf1ev0fIJAnPgVv+Fp1URdxk8MQhjGYsFNc+THSJMqCK3DcH1Ip
leeGxSIuPqKfatKrEVKmH6iEnBOoOITwerfhjCOVtU6W6Phgmm4QogcTyoCJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQURpGOl+zsuGtvP/ViUC2MyMxkwiAwHwYDVR0j
BBgwFoAUkvvnX0LScRL+XYlX/fGUlRBfmt8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjE5MzQzRkU0Nzk5N0Q4MzBDNjFDREU1NENFODEzODlF
MkZERjMzRURENjI0Nzk5OEQ1Q0E2RUQxREZDNTMwLzAvOTJGQkU3NUY0MkQyNzEx
MkZFNUQ4OTU3RkRGMTk0OTUxMDVGOUFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCRTc1RjQyRDI3MTEyRkU1
RDg5NTdGREYxOTQ5NTEwNUY5QURGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkIxOTM0M0ZFNDc5OTdEODMwQzYxQ0RFNTRDRTgxMzg5RTJGREYzM0VE
RDYyNDc5OThENUNBNkVEMURGQzUzMC8wLzMxMzkzMDJlMzkzMzJlMzQzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+XSgwDQYJ
KoZIhvcNAQELBQADggEBAKbFxQGXRHehz09eBqUJWvD4VDbaumAW3PxH71SRSoWs
HbQBqiADZu2GcxSZMNAk/JpMKd8KeN7/fYY22CsGFH9RuCaS5857eQ+eJtsBUkjo
mQd+xmUA8hqRl5KZEMxSq7INUryvHbaY0Y/gwRLO59ZXOzrQ/xVdoOV6Ratnar5+
xzb2nV7Z6fEMowvCJFp/5rcaRt+XCokIJLjfZWGwHTP+OPPe9wsPvCiLtDEYq+uH
ea1Bbd1l2xIJ4c+XigwSPvgMgvpmwfJbMyRxYpfnCnEtfqSL+pRAi/jx2eV7HOQh
swsbP5iBZ9wdFOecMQiW13iXbkfUHhlL6oZEFx7/g5M=
-----END CERTIFICATE-----
Generated at Wed May 8 07:10:25 2024 by rpki-client on console-fra.rpki-client.org