Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3136203d3e203133343839.roa
File:                     3139302e3234302e302e302f31362d3136203d3e203133343839.roa (raw, json)
Hash identifier:          f1iOJGEkZxnJJ3lN4Dz5VDIgfhn0+Bu3jOioC3Axf98=
Subject key identifier:   64:48:80:A3:75:12:24:C1:D4:DE:93:4D:9C:21:67:1E:0D:01:EF:E6
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       04E9E591C32E141945815B1EA3A44F1094C96541
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3136203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     13489
IP address blocks:        190.240.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:e5:91:c3:2e:14:19:45:81:5b:1e:a3:a4:4f:10:94:c9:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=644880A3751224C1D4DE934D9C21671E0D01EFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:09:02:b2:51:89:60:ee:f6:0f:2f:52:7e:
                    da:9b:d5:f5:38:ab:79:53:3f:93:5c:10:85:76:d5:
                    c8:8b:fe:09:88:a4:a4:bf:f5:08:d1:78:88:ff:e5:
                    1c:19:84:c3:ad:5e:05:e8:4a:c4:90:47:bd:ee:28:
                    71:f4:c8:21:55:b5:55:82:83:f7:38:a0:1e:c4:39:
                    a2:86:70:65:d7:53:f0:1c:99:80:10:6a:fb:6e:da:
                    9e:65:2f:81:32:88:2b:59:0f:37:3a:63:e1:d9:40:
                    3f:b0:5e:67:d5:4c:c7:9b:c0:18:f8:b0:f6:6b:f3:
                    5b:91:d8:07:ba:e9:39:c2:e2:0b:de:10:dd:e6:22:
                    1d:66:db:1b:68:f2:7a:c0:24:95:87:a1:6a:da:10:
                    ed:32:1b:9c:ee:d2:98:62:c6:9c:81:6a:4c:ac:11:
                    02:76:9b:d3:a3:a4:92:0e:3f:d6:dd:54:f0:a0:7d:
                    a8:c7:cc:43:e1:30:ac:86:f5:09:ff:99:cf:c5:29:
                    78:94:7e:36:d8:22:fd:68:09:81:02:f5:26:24:93:
                    49:24:8a:5c:56:61:25:3a:83:00:68:de:e3:08:ea:
                    17:7a:44:ca:5d:b8:2a:81:22:8d:b0:3b:d5:85:ce:
                    eb:02:6e:92:a7:dd:95:ba:d7:f3:37:9e:81:45:9a:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:80:A3:75:12:24:C1:D4:DE:93:4D:9C:21:67:1E:0D:01:EF:E6
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234302e302e302f31362d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:af:4e:f0:91:2c:d0:47:27:7f:b3:a0:4a:b1:0d:76:ac:
         6f:a9:0c:0f:ab:12:aa:e4:57:1b:0a:7c:a8:a0:19:ca:a0:ae:
         f7:ee:1d:29:fc:9b:1e:bb:79:e6:8b:9f:43:c6:75:20:ef:fe:
         03:d8:33:0f:f3:34:54:9c:87:84:46:9d:bc:69:de:2e:c8:38:
         42:ed:4e:73:2a:d6:9c:71:a4:05:23:d5:38:a3:fe:f2:5b:86:
         d3:2a:86:a8:01:ef:15:15:37:fa:e9:23:27:60:9c:67:26:e3:
         32:0a:d4:d1:0f:58:b5:38:32:ee:9b:93:71:c3:77:44:32:47:
         95:fe:fd:99:bb:6e:f6:a4:aa:fa:42:cc:01:45:4a:fc:86:bd:
         62:94:23:3d:90:c7:48:d5:fe:ac:40:4e:59:81:d6:42:8a:99:
         6f:60:6d:02:b8:74:79:8d:c1:75:68:90:f7:4a:b9:f1:61:c8:
         84:b7:ee:f3:71:29:11:8f:09:8a:1f:7e:be:c3:e0:2a:7b:ae:
         da:5c:b9:47:c9:a4:6e:2f:a0:de:8f:21:5e:73:93:f5:14:78:
         6b:e8:52:4a:ef:a1:61:b8:53:8e:f4:26:7a:21:9e:d5:ff:5c:
         3d:08:90:6a:9f:52:56:fb:1b:1a:16:23:1e:a2:6e:2b:8c:b8:
         f0:e3:4f:de
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBOnlkcMuFBlFgVseo6RPEJTJZUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDAzMDUxODAxNTJaFw0yNTAzMDQxODA2NTJaMDMxMTAvBgNV
BAMTKDY0NDg4MEEzNzUxMjI0QzFENERFOTM0RDlDMjE2NzFFMEQwMUVGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKAkCslGJYO72Dy9Sftqb1fU4
q3lTP5NcEIV21ciL/gmIpKS/9QjReIj/5RwZhMOtXgXoSsSQR73uKHH0yCFVtVWC
g/c4oB7EOaKGcGXXU/AcmYAQavtu2p5lL4EyiCtZDzc6Y+HZQD+wXmfVTMebwBj4
sPZr81uR2Ae66TnC4gveEN3mIh1m2xto8nrAJJWHoWraEO0yG5zu0phixpyBakys
EQJ2m9OjpJIOP9bdVPCgfajHzEPhMKyG9Qn/mc/FKXiUfjbYIv1oCYEC9SYkk0kk
ilxWYSU6gwBo3uMI6hd6RMpduCqBIo2wO9WFzusCbpKn3ZW61/M3noFFmtrvAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUZEiAo3USJMHU3pNNnCFnHg0B7+YwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzIzNDMwMmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC+8DANBgkq
hkiG9w0BAQsFAAOCAQEATNKvTvCRLNBHJ3+zoEqxDXasb6kMD6sSquRXGwp8qKAZ
yqCu9+4dKfybHrt55oufQ8Z1IO/+A9gzD/M0VJyHhEadvGneLsg4Qu1OcyrWnHGk
BSPVOKP+8luG0yqGqAHvFRU3+ukjJ2CcZybjMgrU0Q9YtTgy7puTccN3RDJHlf79
mbtu9qSq+kLMAUVK/Ia9YpQjPZDHSNX+rEBOWYHWQoqZb2BtArh0eY3BdWiQ90q5
8WHIhLfu83EpEY8Jih9+vsPgKnuu2ly5R8mkbi+g3o8hXnOT9RR4a+hSSu+hYbhT
jvQmeiGe1f9cPQiQap9SVvsbGhYjHqJuK4y48ONP3g==
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org