Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e32342e302f32312d3234203d3e203237373733.roa
File:                     3139302e39392e32342e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          ZdPoRYkWCxFPczSFpFAj+sLH+WFEzd2vgldZ8X+E0Bk=
Subject key identifier:   D5:4B:CB:FF:34:74:C9:DD:8B:8F:CA:46:9C:47:3C:62:68:D7:D9:2C
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       4C4B790D292D5F05390B89002EDAAB5676585BF1
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e32342e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:02 +0000
ROA not before:           Tue 04 Feb 2025 19:57:02 +0000
ROA not after:            Tue 03 Feb 2026 20:02:02 +0000
asID:                     27773
IP address blocks:        190.99.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4b:79:0d:29:2d:5f:05:39:0b:89:00:2e:da:ab:56:76:58:5b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:02 2025 GMT
            Not After : Feb  3 20:02:02 2026 GMT
        Subject: CN=D54BCBFF3474C9DD8B8FCA469C473C6268D7D92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:05:48:8b:de:31:ac:dc:0d:27:a2:06:e5:
                    8f:ca:8d:bc:80:52:f5:6d:9f:fe:d2:bc:1c:fc:13:
                    eb:fe:8b:37:b3:cd:12:4c:fe:e8:c1:bd:9c:d6:9f:
                    57:1b:7a:37:d3:bd:2d:69:d2:fc:ea:37:5e:64:56:
                    55:5b:f0:a4:80:5d:d0:cf:dd:9c:b3:b5:63:6a:0e:
                    f2:a4:14:d8:51:23:6a:01:dd:a2:7a:ec:2e:2c:f3:
                    5d:7f:a7:55:65:35:5c:a5:c6:ff:6b:1f:44:99:84:
                    71:4a:5b:12:12:f7:0a:93:5d:aa:c6:e9:23:23:f2:
                    aa:2b:81:d3:c1:be:7d:22:d5:02:fe:a6:6d:d1:4c:
                    f9:8d:89:94:6a:b1:e7:32:50:c1:26:25:10:a1:48:
                    04:94:02:29:8c:fb:fc:6f:19:1a:f5:7b:58:0e:ad:
                    dc:12:91:76:ac:e0:41:de:c6:e2:b8:8b:c2:25:45:
                    c1:31:90:cf:d8:a7:6b:fc:91:f8:da:9b:02:7e:93:
                    0c:14:7f:0a:23:6a:ed:6f:7a:2b:ab:9b:17:91:0f:
                    d8:cf:cc:93:43:00:60:3b:bd:9f:53:0c:54:45:49:
                    05:88:38:d3:98:ca:4f:dc:3c:c7:74:da:05:ed:c9:
                    61:80:94:64:0b:93:92:bb:ed:79:b5:e4:1f:85:32:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4B:CB:FF:34:74:C9:DD:8B:8F:CA:46:9C:47:3C:62:68:D7:D9:2C
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e32342e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:45:f7:40:de:10:9b:87:f1:29:1c:2b:33:4b:96:28:14:
         d1:ac:5d:ef:a0:f3:b4:e6:7c:d3:dc:d1:51:a8:72:9b:97:68:
         9b:76:84:dd:8e:73:46:f8:5d:c3:fa:e5:68:78:c8:6b:a6:78:
         04:22:cf:54:44:d0:d7:e9:c0:03:4f:20:b3:b8:83:a0:de:3b:
         35:53:83:14:5d:c3:d1:0a:67:08:4c:25:8e:cc:82:93:80:ef:
         c0:c3:e5:5f:0d:4f:11:6e:51:90:87:d1:1b:b4:e2:91:f7:57:
         57:04:a1:36:d6:13:c3:89:9d:80:07:47:31:77:2e:b1:85:8f:
         09:b9:55:05:36:5c:81:7e:69:5c:85:1f:02:6b:eb:d0:c6:64:
         11:e7:3f:5d:49:a7:61:99:d8:16:fb:11:ca:53:e4:47:0e:7e:
         c8:7d:ad:4b:93:b0:c1:7f:5f:3e:12:b3:93:05:92:a9:cc:4f:
         b3:2b:ce:97:16:34:09:69:9f:1c:ab:cc:3f:6d:25:59:59:b9:
         06:bb:41:a3:f5:b1:12:b9:9d:9c:dc:04:7a:e1:2d:8b:0f:47:
         46:e0:a5:57:6d:5d:91:a4:60:3b:32:e4:74:29:37:d2:50:32:
         be:af:de:f0:e1:b1:10:c8:38:cb:44:64:82:a5:65:89:f5:59:
         28:4c:49:23
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTEt5DSktXwU5C4kALtqrVnZYW/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MDJaFw0yNjAyMDMyMDAyMDJaMDMxMTAvBgNV
BAMTKEQ1NEJDQkZGMzQ3NEM5REQ4QjhGQ0E0NjlDNDczQzYyNjhEN0Q5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooAVIi94xrNwNJ6IG5Y/KjbyA
UvVtn/7SvBz8E+v+izezzRJM/ujBvZzWn1cbejfTvS1p0vzqN15kVlVb8KSAXdDP
3ZyztWNqDvKkFNhRI2oB3aJ67C4s811/p1VlNVylxv9rH0SZhHFKWxIS9wqTXarG
6SMj8qorgdPBvn0i1QL+pm3RTPmNiZRqsecyUMEmJRChSASUAimM+/xvGRr1e1gO
rdwSkXas4EHexuK4i8IlRcExkM/Yp2v8kfjamwJ+kwwUfwojau1veiurmxeRD9jP
zJNDAGA7vZ9TDFRFSQWIONOYyk/cPMd02gXtyWGAlGQLk5K77Xm15B+FMkQdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1UvL/zR0yd2Lj8pGnEc8YmjX2SwwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzkzOTJlMzIzNDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+YxgwDQYJ
KoZIhvcNAQELBQADggEBABQcRfdA3hCbh/EpHCszS5YoFNGsXe+g87TmfNPc0VGo
cpuXaJt2hN2Oc0b4XcP65Wh4yGumeAQiz1RE0NfpwANPILO4g6DeOzVTgxRdw9EK
ZwhMJY7MgpOA78DD5V8NTxFuUZCH0Ru04pH3V1cEoTbWE8OJnYAHRzF3LrGFjwm5
VQU2XIF+aVyFHwJr69DGZBHnP11Jp2GZ2Bb7EcpT5EcOfsh9rUuTsMF/Xz4Ss5MF
kqnMT7MrzpcWNAlpnxyrzD9tJVlZuQa7QaP1sRK5nZzcBHrhLYsPR0bgpVdtXZGk
YDsy5HQpN9JQMr6v3vDhsRDIOMtEZIKlZYn1WShMSSM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:37 2025 by rpki-client