Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
File:                     3139302e3135302e39362e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          r/IczoaFSK4Xi2157EnYI1yXX8BCPWfpTdXs6S9rAKw=
Subject key identifier:   ED:50:9E:94:DA:7A:80:74:9F:7C:FD:42:0B:34:AD:7C:CB:16:68:F4
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3BC1BC30CA161A21F8D37C7E46561DC905172F62
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:41 +0000
ROA not before:           Tue 05 Mar 2024 18:05:41 +0000
ROA not after:            Tue 04 Mar 2025 18:10:41 +0000
asID:                     27773
IP address blocks:        190.150.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c1:bc:30:ca:16:1a:21:f8:d3:7c:7e:46:56:1d:c9:05:17:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:41 2024 GMT
            Not After : Mar  4 18:10:41 2025 GMT
        Subject: CN=ED509E94DA7A80749F7CFD420B34AD7CCB1668F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:d0:34:92:94:24:6a:7b:b0:0a:4a:5c:2a:
                    08:d5:d6:57:80:3d:69:bb:e6:b3:1a:8b:c0:34:28:
                    20:c9:ba:65:50:a9:2c:70:0d:3c:82:20:29:69:ec:
                    00:56:37:0d:e6:f6:db:5f:6a:cd:30:85:7f:a2:86:
                    04:b1:25:99:4b:c8:9f:72:77:4e:17:90:5f:95:39:
                    53:bd:50:3b:23:72:4e:d6:6d:4a:b6:91:25:11:4e:
                    52:ee:44:f1:94:a1:cb:61:fe:47:34:0b:73:57:2a:
                    34:c8:28:04:48:05:44:d9:d9:0e:2e:f7:4c:23:26:
                    32:32:6c:41:25:d3:a3:fc:2a:54:a6:ac:cf:2d:a8:
                    44:15:62:8a:1d:3a:f7:3a:3f:ae:1e:cc:6f:b0:32:
                    02:45:f0:68:b6:80:8f:8c:e6:11:2a:a0:7e:27:4c:
                    ed:f7:69:9f:c5:23:54:26:a7:b1:0a:7e:ed:fa:c1:
                    4d:57:3e:0c:a9:aa:20:0c:33:04:e0:ba:06:7f:cd:
                    14:b8:d3:8c:0b:7b:55:98:51:66:95:96:63:36:77:
                    41:3f:a0:ba:f3:43:84:71:32:75:9e:10:b2:48:3f:
                    f7:a5:99:17:d7:de:cc:7b:02:72:3c:0c:ef:09:d0:
                    07:d3:21:73:2f:25:a4:74:af:aa:c0:34:fd:30:23:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:50:9E:94:DA:7A:80:74:9F:7C:FD:42:0B:34:AD:7C:CB:16:68:F4
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:0f:7d:0f:86:82:dd:53:1a:1d:bf:e2:74:01:33:f7:71:ff:
         02:84:fa:3b:83:a3:46:a3:5a:ae:25:b1:22:1a:08:6d:c5:c8:
         b9:ae:2e:2b:c7:91:6f:a6:3c:71:a8:6a:45:0f:24:04:15:ee:
         bd:3c:90:45:3d:7e:7a:d4:a7:cd:51:b8:df:ab:68:58:ce:35:
         ed:fa:29:c8:3b:71:da:13:ef:ad:20:d0:b8:bc:19:e1:26:f7:
         be:a2:14:a1:08:3a:e5:72:16:fa:6a:eb:90:eb:2a:2d:51:77:
         bb:fd:3a:b1:06:b4:1c:7f:67:c5:ba:ae:62:48:0f:da:b1:e7:
         e9:78:31:f4:82:2c:55:b7:c3:7a:d2:b5:54:8c:2f:2d:e4:61:
         87:81:5c:b8:5d:b4:2a:21:2a:0e:c9:bd:66:91:22:c2:35:c9:
         17:9a:86:1d:fe:96:c8:67:d7:25:b1:c7:73:8d:eb:43:e5:81:
         02:9b:64:a9:81:e1:6b:f3:d3:c3:b9:b6:8f:4c:fc:bb:fb:1d:
         c4:be:e2:ff:2a:6d:60:ff:97:10:56:40:71:99:fd:53:6e:13:
         07:0b:b8:02:64:f7:4b:be:58:9d:1d:0c:ec:c2:96:aa:46:39:
         61:39:21:7f:c1:22:c4:d2:ac:93:d3:63:72:55:97:1c:89:96:
         7c:5c:5a:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO8G8MMoWGiH403x+RlYdyQUXL2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1NDFaFw0yNTAzMDQxODEwNDFaMDMxMTAvBgNV
BAMTKEVENTA5RTk0REE3QTgwNzQ5RjdDRkQ0MjBCMzRBRDdDQ0IxNjY4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDue9A0kpQkanuwCkpcKgjV1leA
PWm75rMai8A0KCDJumVQqSxwDTyCIClp7ABWNw3m9ttfas0whX+ihgSxJZlLyJ9y
d04XkF+VOVO9UDsjck7WbUq2kSURTlLuRPGUocth/kc0C3NXKjTIKARIBUTZ2Q4u
90wjJjIybEEl06P8KlSmrM8tqEQVYoodOvc6P64ezG+wMgJF8Gi2gI+M5hEqoH4n
TO33aZ/FI1Qmp7EKfu36wU1XPgypqiAMMwTgugZ/zRS404wLe1WYUWaVlmM2d0E/
oLrzQ4RxMnWeELJIP/elmRfX3sx7AnI8DO8J0AfTIXMvJaR0r6rANP0wI5UlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7VCelNp6gHSffP1CCzStfMsWaPQwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzEzNTMwMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNzM3MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb6WYDAN
BgkqhkiG9w0BAQsFAAOCAQEAog99D4aC3VMaHb/idAEz93H/AoT6O4OjRqNariWx
IhoIbcXIua4uK8eRb6Y8cahqRQ8kBBXuvTyQRT1+etSnzVG436toWM417fopyDtx
2hPvrSDQuLwZ4Sb3vqIUoQg65XIW+mrrkOsqLVF3u/06sQa0HH9nxbquYkgP2rHn
6Xgx9IIsVbfDetK1VIwvLeRhh4FcuF20KiEqDsm9ZpEiwjXJF5qGHf6WyGfXJbHH
c43rQ+WBAptkqYHha/PTw7m2j0z8u/sdxL7i/yptYP+XEFZAcZn9U24TBwu4AmT3
S75YnR0M7MKWqkY5YTkhf8EixNKsk9NjclWXHImWfFxadw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org