Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          feydOZMSj12T8Dl17ypTivbUiyj6ay3yk2lmns7VsCg=
Subject key identifier:   C6:CE:1A:D8:5C:77:5D:4B:42:D8:02:36:C3:DC:E1:70:7B:7D:CF:31
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       4D41611F11C7FF710E74579E6BFD4491422202DB
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa
Signing time:             Tue 05 Mar 2024 18:01:37 +0000
ROA not before:           Tue 05 Mar 2024 17:56:37 +0000
ROA not after:            Tue 04 Mar 2025 18:01:37 +0000
asID:                     52278
IP address blocks:        190.105.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:41:61:1f:11:c7:ff:71:0e:74:57:9e:6b:fd:44:91:42:22:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar  5 17:56:37 2024 GMT
            Not After : Mar  4 18:01:37 2025 GMT
        Subject: CN=C6CE1AD85C775D4B42D80236C3DCE1707B7DCF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:94:e2:51:ea:1d:3d:09:0f:ae:2c:c3:94:
                    42:6f:27:66:6f:69:33:d2:8b:4a:2c:b9:5d:13:4f:
                    58:00:21:da:ec:92:73:4a:08:91:37:75:63:0a:5b:
                    cc:42:a4:a5:89:1e:6d:05:0e:5f:bd:5b:55:66:cb:
                    07:70:51:91:b0:39:54:ad:42:f3:73:e2:be:ee:85:
                    63:1e:be:86:bf:87:a5:73:26:3b:52:4d:53:38:63:
                    99:44:55:9b:66:a9:48:34:7e:83:4c:f8:fd:8f:e9:
                    94:76:d6:f5:ad:5c:17:93:93:81:b5:ba:5c:1a:15:
                    c4:65:17:74:5f:4e:2e:af:18:18:d6:7a:03:85:20:
                    25:4c:d6:53:12:a0:d6:9f:7a:99:02:dc:00:59:3d:
                    e1:33:c4:d8:c5:a5:3b:c6:b5:b6:96:ad:22:3d:58:
                    8b:68:d0:2c:8b:82:a9:fb:de:99:5f:6f:b5:fc:70:
                    63:60:59:39:7b:d5:19:21:3c:a5:ef:c0:41:5a:06:
                    bb:d8:b5:2d:44:ec:14:c3:90:10:71:30:f7:85:8f:
                    18:ea:4c:f6:25:f6:77:fb:75:5a:56:c2:68:b3:d6:
                    46:80:0c:ba:dc:ad:8f:0f:4b:9b:46:b6:57:21:7d:
                    ef:13:b5:95:9d:ee:1b:ae:59:9b:67:ec:1e:d2:6d:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:1A:D8:5C:77:5D:4B:42:D8:02:36:C3:DC:E1:70:7B:7D:CF:31
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:67:cf:f8:58:58:ab:62:b2:ec:74:cb:9d:28:e8:c5:3c:
         86:58:67:4f:89:79:56:e7:65:d6:a2:b5:25:3d:cd:ca:1b:09:
         85:5c:db:84:fb:05:50:46:c2:de:29:14:c4:30:88:01:96:39:
         da:9e:ee:98:1a:be:ed:d7:a2:7e:69:dc:a0:9e:f5:8a:52:07:
         f1:bf:c7:8d:98:84:18:c0:41:e4:36:84:7e:92:27:df:be:12:
         9e:86:df:58:12:39:b5:48:b3:28:69:83:59:2c:c6:d2:d4:eb:
         86:5d:de:6f:1f:b2:32:0f:72:b8:36:96:b9:80:9d:f7:36:c2:
         44:97:a0:b5:69:3c:52:60:dc:dc:26:7a:ee:f8:bf:e3:fb:6a:
         68:1b:fb:2e:a4:6e:9a:fb:af:25:46:f5:36:13:d3:79:a0:f1:
         12:fe:98:f8:0c:dd:a1:15:24:90:51:56:64:0c:b5:02:99:3c:
         88:c7:28:75:58:5c:1f:86:19:c5:67:c8:09:4d:43:d0:b3:4e:
         a7:c5:70:e6:51:02:e3:a6:46:e8:b7:1b:55:5d:f8:97:27:dc:
         c2:ee:ec:a4:fc:4e:8c:f5:58:8a:e1:cd:de:10:8b:2a:3a:54:
         2d:d1:f9:ff:37:1e:ac:e2:c8:eb:9e:aa:d4:75:66:91:7b:18:
         91:0e:3c:ef
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTUFhHxHH/3EOdFeea/1EkUIiAtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI4RkU2NkUxRERGODdBMzVCRTA5REU3RUFERTk2QTlF
RTZDMDc0MjAeFw0yNDAzMDUxNzU2MzdaFw0yNTAzMDQxODAxMzdaMDMxMTAvBgNV
BAMTKEM2Q0UxQUQ4NUM3NzVENEI0MkQ4MDIzNkMzRENFMTcwN0I3RENGMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iZTiUeodPQkPrizDlEJvJ2Zv
aTPSi0osuV0TT1gAIdrsknNKCJE3dWMKW8xCpKWJHm0FDl+9W1VmywdwUZGwOVSt
QvNz4r7uhWMevoa/h6VzJjtSTVM4Y5lEVZtmqUg0foNM+P2P6ZR21vWtXBeTk4G1
ulwaFcRlF3RfTi6vGBjWegOFICVM1lMSoNafepkC3ABZPeEzxNjFpTvGtbaWrSI9
WIto0CyLgqn73plfb7X8cGNgWTl71RkhPKXvwEFaBrvYtS1E7BTDkBBxMPeFjxjq
TPYl9nf7dVpWwmiz1kaADLrcrY8PS5tGtlchfe8TtZWd7huuWZtn7B7Sbao9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxs4a2Fx3XUtC2AI2w9zhcHt9zzEwHwYDVR0j
BBgwFoAU4o/mbh3fh6Nb4J3n6t6Wqe5sB0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjNCQzREQTU2QTRDOTM5RjQyMTEwMjNGNDUzODZCRUI1
RkM0MjA2OTRBREJCOTI0NzMzQjg3RTI3OTczNzI2LzAvRTI4RkU2NkUxRERGODdB
MzVCRTA5REU3RUFERTk2QTlFRTZDMDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjhGRTY2RTFEREY4N0EzNUJF
MDlERTdFQURFOTZBOUVFNkMwNzQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YzQkM0REE1NkE0QzkzOUY0MjExMDIzRjQ1Mzg2QkVCNUZDNDIwNjk0
QURCQjkyNDczM0I4N0UyNzk3MzcyNi8wLzMxMzkzMDJlMzEzMDM1MmUzMjM1MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmn/
MA0GCSqGSIb3DQEBCwUAA4IBAQB/RWfP+FhYq2Ky7HTLnSjoxTyGWGdPiXlW52XW
orUlPc3KGwmFXNuE+wVQRsLeKRTEMIgBljnanu6YGr7t16J+adygnvWKUgfxv8eN
mIQYwEHkNoR+kiffvhKeht9YEjm1SLMoaYNZLMbS1OuGXd5vH7IyD3K4Npa5gJ33
NsJEl6C1aTxSYNzcJnru+L/j+2poG/supG6a+68lRvU2E9N5oPES/pj4DN2hFSSQ
UVZkDLUCmTyIxyh1WFwfhhnFZ8gJTUPQs06nxXDmUQLjpkbotxtVXfiXJ9zC7uyk
/E6M9ViK4c3eEIsqOlQt0fn/Nx6s4sjrnqrUdWaRexiRDjzv
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org