Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa
File:                     3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa (raw, json)
Hash identifier:          j7gdgn37KwY5l5ezNCPvMAIqZ0fcG8tEIMPY807sXZ0=
Subject key identifier:   C9:3A:74:B6:52:E7:6C:56:C2:49:F5:DC:93:A4:E4:B0:3D:69:1B:99
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       038AF84BA8ACBB771DB2E91DB7C7AEA8D359FC88
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa
Signing time:             Tue 23 Jul 2024 15:50:03 +0000
ROA not before:           Tue 23 Jul 2024 15:45:03 +0000
ROA not after:            Tue 22 Jul 2025 15:50:03 +0000
asID:                     27660
IP address blocks:        190.104.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8a:f8:4b:a8:ac:bb:77:1d:b2:e9:1d:b7:c7:ae:a8:d3:59:fc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jul 23 15:45:03 2024 GMT
            Not After : Jul 22 15:50:03 2025 GMT
        Subject: CN=C93A74B652E76C56C249F5DC93A4E4B03D691B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:95:b1:48:3d:99:f2:74:a4:0a:81:91:b9:
                    b7:29:26:0e:dc:a3:ce:2d:15:1f:82:6c:95:da:d7:
                    07:c9:31:8e:b4:84:7a:d4:a3:7d:fd:8d:d2:45:02:
                    95:84:2c:f3:64:0a:a8:7b:9a:34:a7:f6:ad:39:4d:
                    c6:ba:cc:14:63:6c:8b:15:04:d2:64:97:c6:43:a5:
                    90:4b:06:83:3c:bc:c8:83:92:06:de:67:ad:be:e2:
                    af:62:de:ef:a0:52:3e:1b:d5:7a:b1:ac:b5:58:8a:
                    d8:b9:d2:82:3c:9f:4c:b9:02:7c:31:5f:dc:80:ed:
                    28:1d:2f:f3:54:12:25:a6:e2:9d:e3:66:d7:47:d2:
                    80:c3:50:e0:bb:17:6b:70:36:25:3b:e4:e0:23:55:
                    43:3e:a8:34:92:c8:6c:a6:fe:72:2b:24:35:3b:d6:
                    3e:cc:94:10:34:89:80:c2:da:e5:e5:d6:af:96:7f:
                    db:8c:59:b8:38:47:4b:c1:af:45:24:4c:a0:dd:c6:
                    9f:3e:12:ab:66:de:bc:a8:7e:46:00:ed:72:ac:e8:
                    69:27:b0:5a:9b:e3:20:b9:f5:24:3c:f9:72:0e:e9:
                    12:c1:3d:d9:3c:d2:14:2e:f8:94:8c:77:d0:7c:55:
                    3e:36:1f:a7:32:72:0c:ed:7b:61:07:7d:68:99:a2:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3A:74:B6:52:E7:6C:56:C2:49:F5:DC:93:A4:E4:B0:3D:69:1B:99
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:15:f2:d8:7f:10:c4:4a:39:a8:bd:ab:8e:c3:54:63:fe:
         34:d1:df:c4:1e:89:f9:ad:6a:71:cb:e1:66:41:40:34:ff:b4:
         20:6d:68:99:cc:ae:0a:4e:fa:8a:56:fe:09:47:d7:c2:dc:c0:
         5f:e5:45:78:5e:53:3a:12:dc:03:c3:e1:ac:60:04:bb:ce:37:
         63:63:59:b5:09:a2:bb:73:29:db:47:4d:d8:59:e7:44:75:db:
         68:e9:99:c7:0f:b3:65:f0:a8:fe:95:d4:95:14:6a:cf:46:03:
         e7:63:c2:8f:2e:6b:b9:07:15:1b:4b:ca:80:84:d5:e2:94:45:
         5e:8b:21:da:b3:db:fc:0a:b2:f9:e6:7d:cd:f1:5c:4b:d0:6e:
         b6:cf:c1:6f:46:4c:b1:56:9a:5a:07:85:44:fc:dd:83:2d:7f:
         35:56:3f:61:fe:2b:77:16:db:e7:bb:c7:e6:e3:eb:98:c6:f4:
         11:58:9e:d1:ab:2b:32:80:b7:62:eb:57:9c:09:a4:58:0b:eb:
         db:0a:06:eb:85:16:41:60:31:a3:53:03:58:54:50:d2:2b:d7:
         77:e8:b1:e1:41:52:6c:6d:78:1a:e3:e2:5d:e1:fc:24:ed:97:
         7e:eb:cf:10:8c:b4:c2:8d:0a:3c:a4:ec:93:a4:37:85:c3:95:
         53:44:46:a4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA4r4S6isu3cdsukdt8euqNNZ/IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE3MzFENkE4ODFGOTEwMDhDQUZFRDNCQTBFNkFFQzYx
RTYyNUNGMjAeFw0yNDA3MjMxNTQ1MDNaFw0yNTA3MjIxNTUwMDNaMDMxMTAvBgNV
BAMTKEM5M0E3NEI2NTJFNzZDNTZDMjQ5RjVEQzkzQTRFNEIwM0Q2OTFCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtZWxSD2Z8nSkCoGRubcpJg7c
o84tFR+CbJXa1wfJMY60hHrUo339jdJFApWELPNkCqh7mjSn9q05Tca6zBRjbIsV
BNJkl8ZDpZBLBoM8vMiDkgbeZ62+4q9i3u+gUj4b1XqxrLVYiti50oI8n0y5Anwx
X9yA7SgdL/NUEiWm4p3jZtdH0oDDUOC7F2twNiU75OAjVUM+qDSSyGym/nIrJDU7
1j7MlBA0iYDC2uXl1q+Wf9uMWbg4R0vBr0UkTKDdxp8+Eqtm3ryofkYA7XKs6Gkn
sFqb4yC59SQ8+XIO6RLBPdk80hQu+JSMd9B8VT42H6cycgzte2EHfWiZouXZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyTp0tlLnbFbCSfXck6TksD1pG5kwHwYDVR0j
BBgwFoAUEXMdaogfkQCMr+07oOauxh5iXPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREFDNjE0MTZFNUMxOTU1RjIyQUZBNjk5REQ4NTUxODRG
NjA5ODRCODI1QTJDMENBMzBDOEU5QUNDRUZFRUUxLzAvMTE3MzFENkE4ODFGOTEw
MDhDQUZFRDNCQTBFNkFFQzYxRTYyNUNGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTczMUQ2QTg4MUY5MTAwOENB
RkVEM0JBMEU2QUVDNjFFNjI1Q0YyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RBQzYxNDE2RTVDMTk1NUYyMkFGQTY5OUREODU1MTg0RjYwOTg0Qjgy
NUEyQzBDQTMwQzhFOUFDQ0VGRUVFMS8wLzMxMzkzMDJlMzEzMDM0MmUzMTMwMzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzYzNjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmho
MA0GCSqGSIb3DQEBCwUAA4IBAQBTzhXy2H8QxEo5qL2rjsNUY/400d/EHon5rWpx
y+FmQUA0/7QgbWiZzK4KTvqKVv4JR9fC3MBf5UV4XlM6EtwDw+GsYAS7zjdjY1m1
CaK7cynbR03YWedEddto6ZnHD7Nl8Kj+ldSVFGrPRgPnY8KPLmu5BxUbS8qAhNXi
lEVeiyHas9v8CrL55n3N8VxL0G62z8FvRkyxVppaB4VE/N2DLX81Vj9h/it3Ftvn
u8fm4+uYxvQRWJ7RqysygLdi61ecCaRYC+vbCgbrhRZBYDGjUwNYVFDSK9d36LHh
QVJsbXga4+Jd4fwk7Zd+688QjLTCjQo8pOyTpDeFw5VTREak
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org