Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34302e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34302e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          Rw5i8Kwkv6umtLIQ97jpsxumglvMLROXMKn1+rPutDo=
Subject key identifier:   57:A6:A3:D3:26:29:FB:68:1F:97:9A:13:2D:A0:05:D0:78:C6:90:EE
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       67C9C6821B90BB3471DFECA2B2FD566F91C7E456
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34302e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 20:02:21 +0000
ROA not before:           Tue 04 Feb 2025 19:57:21 +0000
ROA not after:            Tue 03 Feb 2026 20:02:21 +0000
asID:                     27742
IP address blocks:        190.53.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:c6:82:1b:90:bb:34:71:df:ec:a2:b2:fd:56:6f:91:c7:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:21 2025 GMT
            Not After : Feb  3 20:02:21 2026 GMT
        Subject: CN=57A6A3D32629FB681F979A132DA005D078C690EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:eb:a9:6b:5f:35:cc:f6:84:6f:5d:62:ed:58:
                    cd:e8:35:68:7b:64:4e:0d:8b:aa:2c:34:25:de:e2:
                    9e:05:39:e6:95:24:07:73:2a:4e:04:66:ec:5d:3e:
                    a5:68:6e:7b:95:76:7d:3b:2d:9c:b0:f5:12:1c:c0:
                    8b:9a:b6:bc:9c:0f:93:ca:61:39:fa:fa:2e:3d:44:
                    67:27:e8:16:63:18:56:43:3e:c0:a3:b8:28:62:81:
                    22:0e:ed:d2:79:88:15:78:5d:8c:4d:54:a8:c3:01:
                    11:2e:8e:9f:f2:01:61:ea:50:eb:c8:d1:fa:b1:f8:
                    d1:de:ac:66:fd:e2:77:f8:d9:b5:3e:aa:2d:d8:13:
                    15:91:3f:0d:f7:c1:ea:d2:fb:c1:39:94:85:37:f1:
                    b5:13:66:83:a6:36:d5:2a:d0:a6:18:17:1d:27:39:
                    e5:e9:fc:7a:7c:89:1c:d7:d6:ae:f9:c3:a5:8b:d8:
                    30:6d:29:04:2f:a4:99:79:85:df:2c:29:fb:59:b4:
                    56:2f:de:bf:9e:36:2c:75:70:87:02:95:6b:de:ff:
                    45:75:7f:85:eb:ab:5d:10:83:24:d4:32:a3:f8:86:
                    1b:9f:e4:e6:cb:c0:7a:da:18:73:f7:0c:e6:55:b2:
                    c2:a3:04:ed:d0:ac:db:4c:38:dc:41:35:26:48:1c:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:A3:D3:26:29:FB:68:1F:97:9A:13:2D:A0:05:D0:78:C6:90:EE
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34302e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:68:a5:0e:c0:84:15:be:5a:af:fc:aa:86:81:60:f8:be:
         5e:a3:4a:29:77:e5:84:82:3a:1b:07:c9:49:6b:af:5a:9f:7a:
         f6:79:8d:ac:99:db:a2:bf:b9:3b:17:1d:75:d9:f2:7f:c4:9f:
         93:86:86:b5:48:f2:ec:09:1e:23:4e:8d:4a:31:1e:fc:47:a2:
         4b:44:95:07:c4:b9:69:78:9d:67:24:67:a6:67:28:0d:e8:0d:
         24:74:8a:8b:b2:20:fc:4c:e5:9f:f2:be:f1:db:09:0b:f4:d8:
         43:3c:15:5a:5f:09:31:fa:68:fb:f5:01:20:b3:1e:d0:92:de:
         11:9e:dd:62:4a:d4:a4:04:e3:d8:e3:c2:d0:86:84:c4:d0:8c:
         30:f2:f1:35:87:3f:42:e0:b1:43:13:b1:e1:19:e5:ef:27:a3:
         5d:7f:38:87:46:a2:12:83:6d:0d:bc:53:bc:81:e0:7a:35:37:
         dc:4c:fc:e1:b4:c1:1f:78:95:05:0e:2c:60:72:d6:6f:8d:b6:
         7c:20:ca:5f:28:6d:ae:7c:a0:bf:0c:22:4b:59:c4:61:4f:f9:
         ad:ea:f6:49:1a:4e:39:d4:2a:9d:6f:e6:bb:24:88:50:9d:cb:
         6f:06:5b:c9:85:e5:7d:8c:25:c2:37:97:60:66:14:d2:55:08:
         c3:f4:09:96
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZ8nGghuQuzRx3+yisv1Wb5HH5FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MjFaFw0yNjAyMDMyMDAyMjFaMDMxMTAvBgNV
BAMTKDU3QTZBM0QzMjYyOUZCNjgxRjk3OUExMzJEQTAwNUQwNzhDNjkwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD066lrXzXM9oRvXWLtWM3oNWh7
ZE4Ni6osNCXe4p4FOeaVJAdzKk4EZuxdPqVobnuVdn07LZyw9RIcwIuatrycD5PK
YTn6+i49RGcn6BZjGFZDPsCjuChigSIO7dJ5iBV4XYxNVKjDAREujp/yAWHqUOvI
0fqx+NHerGb94nf42bU+qi3YExWRPw33werS+8E5lIU38bUTZoOmNtUq0KYYFx0n
OeXp/Hp8iRzX1q75w6WL2DBtKQQvpJl5hd8sKftZtFYv3r+eNix1cIcClWve/0V1
f4Xrq10QgyTUMqP4hhuf5ObLwHraGHP3DOZVssKjBO3QrNtMONxBNSZIHHBrAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUV6aj0yYp+2gfl5oTLaAF0HjGkO4wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzUzMzJlMzQzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NSgwDQYJ
KoZIhvcNAQELBQADggEBAGjhaKUOwIQVvlqv/KqGgWD4vl6jSil35YSCOhsHyUlr
r1qfevZ5jayZ26K/uTsXHXXZ8n/En5OGhrVI8uwJHiNOjUoxHvxHoktElQfEuWl4
nWckZ6ZnKA3oDSR0iouyIPxM5Z/yvvHbCQv02EM8FVpfCTH6aPv1ASCzHtCS3hGe
3WJK1KQE49jjwtCGhMTQjDDy8TWHP0LgsUMTseEZ5e8no11/OIdGohKDbQ28U7yB
4Ho1N9xM/OG0wR94lQUOLGBy1m+Ntnwgyl8oba58oL8MIktZxGFP+a3q9kkaTjnU
Kp1v5rskiFCdy28GW8mF5X2MJcI3l2BmFNJVCMP0CZY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:42 2025 by rpki-client