Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa
File:                     3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          ecpLkjQsSK4gTytZutXzWANEPR75wkNPMQwAOMa32x8=
Subject key identifier:   A3:63:8A:A9:1B:CA:4F:B7:29:AF:54:C1:AA:60:3D:6D:C4:66:62:F5
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       305AC405102BAB47A016D322028989C91DD133EA
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     60781
IP address blocks:        190.105.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5a:c4:05:10:2b:ab:47:a0:16:d3:22:02:89:89:c9:1d:d1:33:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=A3638AA91BCA4FB729AF54C1AA603D6DC46662F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:28:25:8f:26:07:59:ec:dd:8a:3f:75:91:
                    36:b4:c3:88:2f:df:c1:22:28:06:11:65:05:1f:11:
                    c0:a2:53:c5:08:95:b9:01:9e:49:ef:c8:1d:9b:eb:
                    10:0e:dd:a0:bb:78:38:63:97:87:e8:b3:c8:40:18:
                    ed:bf:d0:4d:2d:fd:47:44:78:1b:e8:a4:d7:47:48:
                    0a:b4:0a:fd:9a:1c:c0:88:dc:f0:1b:b6:5f:ec:ea:
                    aa:88:2e:a4:0f:32:8c:96:50:45:0c:7a:24:86:7c:
                    ac:38:2a:af:ea:be:2f:1c:bd:8a:7a:08:eb:52:5a:
                    59:53:6b:8c:80:ef:ad:66:d7:03:a9:e6:3f:77:79:
                    a8:97:2d:08:9a:58:37:c1:cf:09:8d:03:a9:b7:7b:
                    b7:06:0f:9f:ef:6b:c9:24:16:b8:78:ae:8e:9c:d0:
                    bd:e3:9e:15:9d:cb:32:38:0e:65:43:0a:8e:a5:b1:
                    2e:f7:00:54:7d:34:f2:1b:55:34:78:14:f7:cb:60:
                    de:61:33:91:39:d4:12:15:ab:d8:d0:84:3b:b5:67:
                    a4:0e:3b:45:8f:ba:75:ca:7a:5c:30:7e:c9:14:7c:
                    c5:1b:43:92:ae:d1:6c:27:76:2b:c2:5b:1d:99:8c:
                    6f:bc:ae:85:02:70:76:a8:1c:d0:08:89:97:58:60:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:8A:A9:1B:CA:4F:B7:29:AF:54:C1:AA:60:3D:6D:C4:66:62:F5
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139352e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:cb:ab:72:78:85:cd:79:75:b2:11:6b:76:d6:5b:4f:7d:
         77:d1:b1:a7:98:4f:e1:a0:6b:1e:88:e9:c0:c4:1a:e0:51:b5:
         f4:ad:16:3d:0b:c0:12:c6:bc:e6:60:83:5d:d5:12:73:fc:77:
         82:4a:6c:98:b2:6b:46:a3:42:26:be:10:83:99:62:0a:b4:6b:
         1c:af:21:d6:40:2f:00:4c:11:94:03:34:44:df:bf:0f:25:42:
         47:b4:50:80:24:eb:5d:83:a1:7d:59:49:ea:8f:21:a7:91:1c:
         13:ba:8e:a0:59:dd:b3:90:8a:68:a5:cc:70:e2:bb:ac:ae:e4:
         0d:db:c7:3c:da:1c:5c:5b:28:1d:db:cf:d4:09:0a:12:82:d3:
         9f:0f:16:1a:2a:89:f2:65:ac:2e:80:97:69:e8:d9:de:11:04:
         f5:b5:9a:a8:6b:38:17:73:46:ed:dd:7f:b0:c5:09:39:f1:81:
         c8:9d:f6:dc:30:86:d8:dd:fc:6a:a9:e7:86:fc:70:8f:39:5f:
         d2:e9:1b:83:3e:8a:9f:76:d2:1a:fa:da:61:f6:98:da:34:4c:
         58:fd:35:2e:0a:fa:5b:6c:40:9e:2a:7b:fd:38:7a:1c:44:2b:
         a5:e1:fc:9f:e4:46:53:65:f5:d2:3e:c0:3b:5f:4a:37:5d:16:
         1e:7b:dd:af
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMFrEBRArq0egFtMiAomJyR3RM+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RDA2QzI0QUYxQzI5RDIyMzI5MjY4OUY0MjAxRkRC
Q0MwQzA5MTAeFw0yNDAzMDUxNzU5MjJaFw0yNTAzMDQxODA0MjJaMDMxMTAvBgNV
BAMTKEEzNjM4QUE5MUJDQTRGQjcyOUFGNTRDMUFBNjAzRDZEQzQ2NjYyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17igljyYHWezdij91kTa0w4gv
38EiKAYRZQUfEcCiU8UIlbkBnknvyB2b6xAO3aC7eDhjl4fos8hAGO2/0E0t/UdE
eBvopNdHSAq0Cv2aHMCI3PAbtl/s6qqILqQPMoyWUEUMeiSGfKw4Kq/qvi8cvYp6
COtSWllTa4yA761m1wOp5j93eaiXLQiaWDfBzwmNA6m3e7cGD5/va8kkFrh4ro6c
0L3jnhWdyzI4DmVDCo6lsS73AFR9NPIbVTR4FPfLYN5hM5E51BIVq9jQhDu1Z6QO
O0WPunXKelwwfskUfMUbQ5Ku0WwndivCWx2ZjG+8roUCcHaoHNAIiZdYYP+tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUo2OKqRvKT7cpr1TBqmA9bcRmYvUwHwYDVR0j
BBgwFoAUMF0Gwkrxwp0iMpJon0IB/bzAwJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTJDOUFEMDdFRDg2M0ZFMzcxNENEMjQyRjE1MUFGODBG
RUQ5MUIxQzgzRjI3RUZGRjYzNUVFRTNGRDlGMzI3LzAvMzA1RDA2QzI0QUYxQzI5
RDIyMzI5MjY4OUY0MjAxRkRCQ0MwQzA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDVEMDZDMjRBRjFDMjlEMjIz
MjkyNjg5RjQyMDFGREJDQzBDMDkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyQzlBRDA3RUQ4NjNGRTM3MTRDRDI0MkYxNTFBRjgwRkVEOTFCMUM4
M0YyN0VGRkY2MzVFRUUzRkQ5RjMyNy8wLzMxMzkzMDJlMzEzMDM1MmUzMTM5MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmnD
MA0GCSqGSIb3DQEBCwUAA4IBAQCZOsurcniFzXl1shFrdtZbT3130bGnmE/hoGse
iOnAxBrgUbX0rRY9C8ASxrzmYINd1RJz/HeCSmyYsmtGo0ImvhCDmWIKtGscryHW
QC8ATBGUAzRE378PJUJHtFCAJOtdg6F9WUnqjyGnkRwTuo6gWd2zkIpopcxw4rus
ruQN28c82hxcWygd28/UCQoSgtOfDxYaKonyZawugJdp6NneEQT1tZqoazgXc0bt
3X+wxQk58YHInfbcMIbY3fxqqeeG/HCPOV/S6RuDPoqfdtIa+tph9pjaNExY/TUu
CvpbbECeKnv9OHocRCul4fyf5EZTZfXSPsA7X0o3XRYee92v
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org