Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa
File:                     3139302e35332e302e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          ADOYk8V1JTcI/9Acd+crc8Ahws9CYKg0tDS9WHx9WNA=
Subject key identifier:   81:1F:F5:A9:EE:CE:48:E5:10:36:FC:DC:51:B0:53:E1:20:C0:08:F5
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       411D06B6A61E8B20D3E49674B8163F24C30193D4
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:33 +0000
ROA not before:           Tue 05 Mar 2024 18:05:33 +0000
ROA not after:            Tue 04 Mar 2025 18:10:33 +0000
asID:                     27773
IP address blocks:        190.53.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:06:b6:a6:1e:8b:20:d3:e4:96:74:b8:16:3f:24:c3:01:93:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:33 2024 GMT
            Not After : Mar  4 18:10:33 2025 GMT
        Subject: CN=811FF5A9EECE48E51036FCDC51B053E120C008F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:72:e4:9b:b5:0e:9b:7e:5a:7d:aa:a6:2b:
                    45:5e:db:5c:b6:ea:8d:7e:13:98:6f:1d:6f:ee:18:
                    5e:4b:d5:c8:ef:12:4d:f1:6f:ef:de:88:d7:c6:6e:
                    d8:86:67:56:d0:c8:e6:ff:c3:75:d0:2b:df:87:c2:
                    3f:98:a8:8c:6f:4a:3e:8a:13:a0:2a:f1:74:ff:1d:
                    e2:c7:1d:42:4f:a7:9c:d4:46:0f:db:47:e1:af:05:
                    36:66:b4:c9:e7:4d:9f:1a:57:33:61:17:c6:dc:4b:
                    61:e9:63:22:55:ce:81:dd:79:3b:86:b9:ca:9b:8b:
                    60:e2:db:c7:a6:87:d6:9d:ee:bd:2a:e4:c3:ff:d8:
                    b8:b1:40:cd:ab:2e:2a:f9:7a:99:60:8f:7a:b6:e2:
                    fb:9f:52:05:c6:4f:11:f8:da:8d:af:67:be:f5:39:
                    15:28:15:8a:53:df:95:94:62:a8:52:d4:9d:73:c8:
                    1c:29:63:1d:89:eb:da:f7:91:fb:ac:c6:91:55:67:
                    bd:fc:6b:5a:ff:22:07:02:d1:b6:df:96:66:48:e5:
                    20:d2:04:84:a6:8c:41:d6:6d:92:4a:ec:43:e1:62:
                    7e:45:62:a2:eb:ee:18:e8:87:e7:b7:ab:e9:e1:a4:
                    b0:2c:b0:15:0e:38:b8:25:bf:a7:7f:f7:2d:30:89:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:F5:A9:EE:CE:48:E5:10:36:FC:DC:51:B0:53:E1:20:C0:08:F5
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:26:15:e9:4d:71:cf:fc:e6:d3:3d:2b:6d:e4:2f:13:f1:53:
         c5:a9:95:e7:63:48:96:f3:1f:23:7a:de:c5:be:33:86:39:3b:
         69:71:e4:ce:7f:5e:c8:e7:a0:0b:90:a1:02:73:5c:c4:f3:56:
         07:b8:f0:7c:64:40:72:a2:5b:0b:db:4f:e3:ad:12:ee:cf:f1:
         c2:7d:d9:96:f9:e1:64:2f:c3:8c:3f:a9:7e:60:a7:49:c8:79:
         e1:35:2c:63:14:59:aa:fb:3d:70:0d:4e:51:0d:4d:53:fc:ad:
         d7:a6:54:8c:0b:09:23:53:5c:cd:2e:cd:79:7d:6d:4d:2b:45:
         b7:1a:78:f3:ec:ec:c9:13:32:b2:4e:c9:d7:36:54:e7:ca:db:
         bf:94:16:22:8d:d7:40:15:08:54:d7:e7:76:7b:ec:e3:3a:b8:
         43:7a:9b:cf:4f:f1:a9:ca:ae:30:ed:3d:7b:ee:ca:91:af:ca:
         e0:28:16:06:d8:99:51:a9:df:04:38:a4:36:1b:dd:5d:81:68:
         02:71:7e:ce:28:e0:6a:fe:9c:e1:3f:4c:74:93:b0:bf:98:c2:
         70:d2:1e:ac:f4:3d:d8:fb:01:ac:85:53:bf:63:c8:40:ac:91:
         f0:a5:d1:22:a9:69:ed:9e:1f:51:30:ce:5f:79:6c:bf:e5:a7:
         c9:a0:2f:a6
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQR0GtqYeiyDT5JZ0uBY/JMMBk9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzNaFw0yNTAzMDQxODEwMzNaMDMxMTAvBgNV
BAMTKDgxMUZGNUE5RUVDRTQ4RTUxMDM2RkNEQzUxQjA1M0UxMjBDMDA4RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbHLkm7UOm35afaqmK0Ve21y2
6o1+E5hvHW/uGF5L1cjvEk3xb+/eiNfGbtiGZ1bQyOb/w3XQK9+Hwj+YqIxvSj6K
E6Aq8XT/HeLHHUJPp5zURg/bR+GvBTZmtMnnTZ8aVzNhF8bcS2HpYyJVzoHdeTuG
ucqbi2Di28emh9ad7r0q5MP/2LixQM2rLir5eplgj3q24vufUgXGTxH42o2vZ771
ORUoFYpT35WUYqhS1J1zyBwpYx2J69r3kfusxpFVZ738a1r/IgcC0bbflmZI5SDS
BISmjEHWbZJK7EPhYn5FYqLr7hjoh+e3q+nhpLAssBUOOLglv6d/9y0wid9HAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUgR/1qe7OSOUQNvzcUbBT4SDACPUwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzUzMzJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvjUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBOJhXpTXHP/ObTPStt5C8T8VPFqZXnY0iW8x8jet7FvjOG
OTtpceTOf17I56ALkKECc1zE81YHuPB8ZEByolsL20/jrRLuz/HCfdmW+eFkL8OM
P6l+YKdJyHnhNSxjFFmq+z1wDU5RDU1T/K3XplSMCwkjU1zNLs15fW1NK0W3Gnjz
7OzJEzKyTsnXNlTnytu/lBYijddAFQhU1+d2e+zjOrhDepvPT/Gpyq4w7T177sqR
r8rgKBYG2JlRqd8EOKQ2G91dgWgCcX7OKOBq/pzhP0x0k7C/mMJw0h6s9D3Y+wGs
hVO/Y8hArJHwpdEiqWntnh9RMM5feWy/5afJoC+m
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org