Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa
File:                     3139302e37362e3234382e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier:          RhBPPRf7edFxVM+Zzl6pFEQzVzwjFdzgFjYh3T5QD48=
Subject key identifier:   22:9D:56:D9:35:24:06:49:8A:54:4C:B8:8C:31:E0:15:5B:59:BF:DB
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       7A4BB980C601D112F4C75E25CC1CC6E6A0A939A9
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa
Signing time:             Tue 05 Mar 2024 18:15:05 +0000
ROA not before:           Tue 05 Mar 2024 18:10:05 +0000
ROA not after:            Tue 04 Mar 2025 18:15:05 +0000
asID:                     27889
IP address blocks:        190.76.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4b:b9:80:c6:01:d1:12:f4:c7:5e:25:cc:1c:c6:e6:a0:a9:39:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:05 2024 GMT
            Not After : Mar  4 18:15:05 2025 GMT
        Subject: CN=229D56D9352406498A544CB88C31E0155B59BFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:d5:2d:e9:3e:51:d1:f9:a7:35:cc:01:57:
                    99:4e:30:28:5c:00:15:75:e2:40:49:41:8a:2d:2b:
                    76:d2:10:1e:9e:fa:fe:ba:1d:3c:59:19:54:66:ce:
                    fe:86:4f:54:14:4d:19:1f:d5:03:ca:26:48:08:f2:
                    99:a5:25:da:14:01:d2:77:c5:6d:e8:cd:03:c0:e9:
                    bd:36:1b:fa:ea:69:d7:f4:65:77:5b:f7:26:0a:08:
                    77:a0:88:e7:56:22:74:7f:4f:5b:50:97:8e:a7:75:
                    25:a9:88:8d:07:d5:7b:40:ac:52:34:c7:55:7a:6b:
                    f1:b9:0b:e1:73:48:7f:2e:4e:d8:40:d0:3c:b8:ec:
                    f8:6f:86:b6:5b:b5:81:f4:33:0f:3d:8d:1d:a6:47:
                    1c:39:33:d4:77:9a:57:ed:49:65:6a:c5:23:cc:87:
                    7a:a7:25:e2:7a:7e:a8:70:dc:05:6b:e1:bd:65:ff:
                    71:73:cc:94:ac:6a:55:1f:bd:74:4d:aa:f9:fb:9f:
                    d1:78:7a:45:30:ac:c3:c9:33:39:65:b5:62:f9:76:
                    ef:28:02:1a:5c:14:bb:12:10:cb:98:7b:07:64:61:
                    61:2e:c1:85:55:cf:f9:40:77:b2:d0:92:42:d7:03:
                    92:28:55:60:05:39:20:ec:95:7b:b2:c7:76:e1:cb:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:56:D9:35:24:06:49:8A:54:4C:B8:8C:31:E0:15:5B:59:BF:DB
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3234382e302f32342d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:73:51:fb:d3:bb:46:71:42:10:13:d1:81:45:78:84:fd:
         b5:8b:51:97:e1:32:6a:e6:44:6b:95:26:01:0a:4f:f0:23:f2:
         e8:3d:70:21:e0:af:51:02:ce:0e:47:0e:79:bc:d4:e1:64:7c:
         6f:7d:3a:4f:48:f7:e6:90:57:a4:74:b3:ba:8f:08:85:18:87:
         5d:85:8d:0e:ad:57:f5:d8:28:f7:dc:3d:75:f8:82:2f:25:a2:
         55:24:07:ba:fb:4d:29:b5:36:ad:e9:67:bc:d0:18:96:2f:10:
         61:a4:ab:a0:fd:09:82:28:2b:6b:fd:74:1d:9f:03:3e:16:e1:
         18:3f:cb:39:b1:45:bc:e5:86:2d:77:2c:24:90:c8:80:9d:67:
         da:2a:01:4d:18:85:a7:f2:da:f3:42:4b:ef:eb:b8:67:f0:ab:
         25:d4:79:8d:a8:43:c5:cf:2f:9b:9c:e4:a6:50:08:04:65:aa:
         3d:45:56:92:c9:46:88:16:9b:15:f5:2b:3d:a8:6f:3c:e2:4a:
         d3:88:6b:7f:41:9e:e5:40:eb:37:c2:24:82:5a:03:cf:01:80:
         6b:71:7a:ad:b4:20:29:31:b8:4a:99:dc:a6:aa:f8:9d:e3:1a:
         08:25:ec:60:83:62:97:d3:0b:8a:3c:5f:d1:f9:df:61:df:a3:
         cf:68:59:8b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeku5gMYB0RL0x14lzBzG5qCpOakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkZDMjNBOEM1RkMwNjdCN0QwQkZENjA1QzBGNUEz
M0QwMzZCNDAeFw0yNDAzMDUxODEwMDVaFw0yNTAzMDQxODE1MDVaMDMxMTAvBgNV
BAMTKDIyOUQ1NkQ5MzUyNDA2NDk4QTU0NENCODhDMzFFMDE1NUI1OUJGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVidUt6T5R0fmnNcwBV5lOMChc
ABV14kBJQYotK3bSEB6e+v66HTxZGVRmzv6GT1QUTRkf1QPKJkgI8pmlJdoUAdJ3
xW3ozQPA6b02G/rqadf0ZXdb9yYKCHegiOdWInR/T1tQl46ndSWpiI0H1XtArFI0
x1V6a/G5C+FzSH8uTthA0Dy47PhvhrZbtYH0Mw89jR2mRxw5M9R3mlftSWVqxSPM
h3qnJeJ6fqhw3AVr4b1l/3FzzJSsalUfvXRNqvn7n9F4ekUwrMPJMzlltWL5du8o
AhpcFLsSEMuYewdkYWEuwYVVz/lAd7LQkkLXA5IoVWAFOSDslXuyx3bhyx5lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIp1W2TUkBkmKVEy4jDHgFVtZv9swHwYDVR0j
BBgwFoAUn1b8I6jF/AZ7fQv9YFwPWjPQNrQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0NDNTcwNDIzRkFGODE2M0Q4NkNDMjFGMUJBMDNEODk1
MDJBRTlDMTI0RkVGODlBRjYxRjQwMkVBRUU4QjgzLzAvOUY1NkZDMjNBOEM1RkMw
NjdCN0QwQkZENjA1QzBGNUEzM0QwMzZCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU2RkMyM0E4QzVGQzA2N0I3
RDBCRkQ2MDVDMEY1QTMzRDAzNkI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNDQzU3MDQyM0ZBRjgxNjNEODZDQzIxRjFCQTAzRDg5NTAyQUU5QzEy
NEZFRjg5QUY2MUY0MDJFQUVFOEI4My8wLzMxMzkzMDJlMzczNjJlMzIzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5M+DAN
BgkqhkiG9w0BAQsFAAOCAQEAN7RzUfvTu0ZxQhAT0YFFeIT9tYtRl+EyauZEa5Um
AQpP8CPy6D1wIeCvUQLODkcOebzU4WR8b306T0j35pBXpHSzuo8IhRiHXYWNDq1X
9dgo99w9dfiCLyWiVSQHuvtNKbU2relnvNAYli8QYaSroP0Jgigra/10HZ8DPhbh
GD/LObFFvOWGLXcsJJDIgJ1n2ioBTRiFp/La80JL7+u4Z/CrJdR5jahDxc8vm5zk
plAIBGWqPUVWkslGiBabFfUrPahvPOJK04hrf0Ge5UDrN8IkgloDzwGAa3F6rbQg
KTG4Spncpqr4neMaCCXsYINil9MLijxf0fnfYd+jz2hZiw==
-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org