Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa
File:                     3139302e39322e39362e302f32312d3234203d3e203532343134.roa (raw, json)
Hash identifier:          YTsE1YSO7QV6O8QbpvkhcqKRvcGpMag31HrhRjYkEUY=
Subject key identifier:   B3:C7:FB:7A:2C:7A:86:94:D3:05:1A:6D:31:6E:3D:BE:E4:C0:34:CF
Certificate issuer:       /CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
Certificate serial:       740E149DBBAEE75CD5AD12C9C16230985B3B4A7B
Authority key identifier: 93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa
Signing time:             Tue 04 Feb 2025 19:56:46 +0000
ROA not before:           Tue 04 Feb 2025 19:51:46 +0000
ROA not after:            Tue 03 Feb 2026 19:56:46 +0000
asID:                     52414
IP address blocks:        190.92.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:14:9d:bb:ae:e7:5c:d5:ad:12:c9:c1:62:30:98:5b:3b:4a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
        Validity
            Not Before: Feb  4 19:51:46 2025 GMT
            Not After : Feb  3 19:56:46 2026 GMT
        Subject: CN=B3C7FB7A2C7A8694D3051A6D316E3DBEE4C034CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:c7:e4:a0:aa:35:61:ad:1e:95:f9:fa:c3:
                    0a:28:5a:1f:59:28:6e:3e:89:e1:3b:71:c7:91:4a:
                    59:34:f8:3d:e9:7d:47:41:1a:d9:07:94:a2:3c:60:
                    9f:2f:87:fe:76:5a:15:53:56:06:30:a0:33:32:80:
                    88:56:f7:96:b4:b9:44:92:c0:2f:25:c5:24:b0:f3:
                    e3:1f:ec:be:13:fc:8b:3e:e2:dd:23:e9:f8:70:ad:
                    50:22:a6:0c:e4:76:6b:85:68:76:05:f3:00:55:d5:
                    e1:13:fc:0e:46:b4:c9:f5:55:1a:07:10:3b:1b:ce:
                    d4:1f:df:a3:a1:40:16:b3:df:5d:ff:49:4f:9c:03:
                    fa:fa:2d:4d:b8:d0:1f:93:b1:41:4f:3a:cb:37:7d:
                    6d:6b:4f:b0:cb:85:79:ea:a3:13:8c:2f:69:81:20:
                    0f:7f:46:83:ab:01:f7:3d:92:48:7c:29:f8:5e:b8:
                    83:01:22:83:33:04:1c:4f:a2:88:c2:a3:8b:47:15:
                    f7:cd:33:4b:03:85:d4:ba:d9:1e:e7:4f:2d:42:ef:
                    80:6b:94:20:57:ab:06:65:3f:95:db:08:5c:09:b7:
                    8d:87:99:d8:6f:58:30:b4:0f:27:8f:0a:88:45:02:
                    99:18:87:19:10:4d:6e:7d:29:81:61:79:01:e6:63:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C7:FB:7A:2C:7A:86:94:D3:05:1A:6D:31:6E:3D:BE:E4:C0:34:CF
            X509v3 Authority Key Identifier:
                keyid:93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/3139302e39322e39362e302f32312d3234203d3e203532343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:66:87:ff:7e:6f:c4:eb:a8:68:69:e8:01:0e:a9:36:bf:4a:
         f0:dc:f8:36:67:ac:a2:dd:33:8c:cc:ab:25:d3:58:7c:f3:1f:
         bb:01:20:c9:85:01:70:44:49:ab:e5:fc:32:bc:83:9b:73:c0:
         65:4e:20:de:22:49:e9:93:01:2c:6e:78:cf:c4:ad:2e:83:96:
         00:1b:f7:5e:ce:1c:65:21:a7:f6:ac:32:60:06:20:72:43:bc:
         69:f0:5e:f1:13:75:4c:0f:ba:f0:20:50:37:c7:8e:d6:71:03:
         b9:98:50:7a:cc:58:ea:84:33:1d:ea:52:d8:f5:90:0e:87:4b:
         ab:af:0a:aa:fa:44:c6:cd:b1:f9:ab:d0:a7:27:1e:79:4e:f0:
         a3:fe:64:d0:80:f6:43:d9:f2:f8:31:a0:7e:9e:42:1e:65:e6:
         df:3e:2e:28:98:99:a0:5a:20:51:7f:44:65:f2:b4:6b:0f:3c:
         ac:7e:52:ff:ed:2a:59:84:b9:a9:c9:18:32:d7:f2:b0:95:a7:
         2d:df:50:a7:7f:57:b5:8b:d7:59:45:af:11:47:d5:65:1e:28:
         31:87:2c:ad:85:38:f1:50:1d:73:c8:09:2d:81:71:7b:75:35:
         d2:f7:03:6c:02:0c:c3:10:7a:c4:01:35:8b:6f:75:c3:48:2b:
         ac:6a:78:9d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdA4Unbuu51zVrRLJwWIwmFs7SnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENDFCMzk5MTU0MzMxQzRDMEFBMEM0RUJDMTk0QUEw
QTVERUVERTAeFw0yNTAyMDQxOTUxNDZaFw0yNjAyMDMxOTU2NDZaMDMxMTAvBgNV
BAMTKEIzQzdGQjdBMkM3QTg2OTREMzA1MUE2RDMxNkUzREJFRTRDMDM0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCODMfkoKo1Ya0elfn6wwooWh9Z
KG4+ieE7cceRSlk0+D3pfUdBGtkHlKI8YJ8vh/52WhVTVgYwoDMygIhW95a0uUSS
wC8lxSSw8+Mf7L4T/Is+4t0j6fhwrVAipgzkdmuFaHYF8wBV1eET/A5GtMn1VRoH
EDsbztQf36OhQBaz313/SU+cA/r6LU240B+TsUFPOss3fW1rT7DLhXnqoxOML2mB
IA9/RoOrAfc9kkh8KfheuIMBIoMzBBxPoojCo4tHFffNM0sDhdS62R7nTy1C74Br
lCBXqwZlP5XbCFwJt42HmdhvWDC0DyePCohFApkYhxkQTW59KYFheQHmY96PAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUs8f7eix6hpTTBRptMW49vuTANM8wHwYDVR0j
BBgwFoAUk9QbOZFUMxxMCqDE68GUqgpd7t4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0ZEMjE5NDE5RkU0RjU4MjBCNTFBNjNFM0JERDRFOUFF
QTQyNDAzOTE1MTBDRDY1M0ZENkIxMUVBQ0MxRUQwLzAvOTNENDFCMzk5MTU0MzMx
QzRDMEFBMEM0RUJDMTk0QUEwQTVERUVERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0Q0MUIzOTkxNTQzMzFDNEMw
QUEwQzRFQkMxOTRBQTBBNURFRURFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdGRDIxOTQxOUZFNEY1ODIwQjUxQTYzRTNCREQ0RTlBRUE0MjQwMzkx
NTEwQ0Q2NTNGRDZCMTFFQUNDMUVEMC8wLzMxMzkzMDJlMzkzMjJlMzkzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+XGAwDQYJ
KoZIhvcNAQELBQADggEBAG1mh/9+b8TrqGhp6AEOqTa/SvDc+DZnrKLdM4zMqyXT
WHzzH7sBIMmFAXBESavl/DK8g5tzwGVOIN4iSemTASxueM/ErS6DlgAb917OHGUh
p/asMmAGIHJDvGnwXvETdUwPuvAgUDfHjtZxA7mYUHrMWOqEMx3qUtj1kA6HS6uv
Cqr6RMbNsfmr0KcnHnlO8KP+ZNCA9kPZ8vgxoH6eQh5l5t8+LiiYmaBaIFF/RGXy
tGsPPKx+Uv/tKlmEuanJGDLX8rCVpy3fUKd/V7WL11lFrxFH1WUeKDGHLK2FOPFQ
HXPICS2BcXt1NdL3A2wCDMMQesQBNYtvdcNIK6xqeJ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:41 2025 by rpki-client