Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3136203d3e203133343839.roa
File:                     3139302e37302e302e302f31352d3136203d3e203133343839.roa (raw, json)
Hash identifier:          Zhj1XvN3Xer1nIMdlY+GDaaGpph1eDGG4CjhLoZZusw=
Subject key identifier:   05:DF:3F:64:D1:24:9B:52:5F:2B:E6:D3:28:9E:9A:A5:D1:2D:4A:9C
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4758FFC4FC43921555A28B1FC35684F9ADF91A66
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3136203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:58 +0000
ROA not before:           Tue 05 Mar 2024 18:01:58 +0000
ROA not after:            Tue 04 Mar 2025 18:06:58 +0000
asID:                     13489
IP address blocks:        190.70.0.0/15 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 11:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:ff:c4:fc:43:92:15:55:a2:8b:1f:c3:56:84:f9:ad:f9:1a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:58 2024 GMT
            Not After : Mar  4 18:06:58 2025 GMT
        Subject: CN=05DF3F64D1249B525F2BE6D3289E9AA5D12D4A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:ac:5e:8a:8c:1a:86:97:2a:e7:21:0f:53:
                    62:25:04:86:13:ab:31:1c:68:48:79:49:ec:4e:9b:
                    71:dd:43:0d:df:19:7d:7e:68:22:4a:1b:35:24:85:
                    e0:33:a3:f5:0f:07:92:00:5d:7d:59:79:07:43:b1:
                    aa:66:e2:50:95:38:5f:4c:0c:a7:e8:f1:09:aa:76:
                    36:98:32:14:2a:ab:5b:da:42:9a:8f:fb:1f:7b:57:
                    aa:50:f1:6a:79:39:ae:c0:82:5b:28:dd:f6:2d:73:
                    44:91:2c:5b:14:e9:a3:c0:a4:d2:eb:d4:84:59:fd:
                    82:22:4f:6f:74:3b:18:5f:d6:6b:56:be:e4:13:dd:
                    6e:41:54:ff:96:b2:60:93:21:72:1f:39:8b:0c:a7:
                    45:a6:cb:c0:61:c0:ae:3f:f0:d3:e5:65:41:5e:3d:
                    2b:b3:e1:17:f7:a7:26:65:83:fc:36:41:ba:21:79:
                    17:14:3f:62:56:c0:fb:70:f3:31:c6:10:3b:a0:90:
                    3a:5f:1e:d6:39:89:16:3b:8c:01:13:37:25:25:a2:
                    ef:01:20:af:49:83:fd:21:b6:13:67:37:99:02:8b:
                    c1:17:97:02:f1:3b:e3:e1:5e:e7:7f:b7:bd:fd:17:
                    d0:22:5e:5d:0c:d4:5c:93:4c:8e:c9:f5:3b:8e:2c:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:3F:64:D1:24:9B:52:5F:2B:E6:D3:28:9E:9A:A5:D1:2D:4A:9C
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37302e302e302f31352d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:60:9b:0e:fa:13:c7:99:de:e3:e4:d9:c7:5b:0f:94:b1:
         a2:1c:39:fc:b0:42:fd:6f:06:bc:2c:dc:fc:a8:3f:ad:72:70:
         21:a5:9a:d1:6f:9b:a1:98:9b:4d:68:01:07:c6:4b:29:1b:1b:
         d3:51:99:79:3e:59:46:2d:a5:cc:8c:76:18:76:95:40:c2:a5:
         0e:b1:86:c6:b4:a5:da:52:af:90:03:0b:c0:27:9f:68:56:e0:
         ad:3f:1b:87:59:b8:a9:b4:f4:e4:8c:22:79:e3:04:d2:42:dc:
         f5:e2:e9:b3:a6:4b:3d:f0:19:e8:36:30:94:9c:34:7d:06:67:
         30:d3:2e:f4:44:86:d8:b3:81:e3:95:74:99:e1:3a:91:d2:fb:
         eb:b6:08:22:83:af:12:c6:68:e5:7b:82:a9:0e:a9:5c:cd:28:
         e9:98:e1:1a:07:24:63:56:79:20:b6:55:f3:b2:ce:b3:9e:2d:
         ec:4a:a9:46:71:37:d3:e6:ed:81:95:c7:eb:49:32:9e:a3:7c:
         4b:44:f3:4a:3b:73:84:94:94:40:91:7c:b9:e2:12:ff:05:8f:
         56:85:55:cd:a9:80:9f:58:07:42:be:f9:82:3c:b2:49:41:5e:
         42:82:ef:21:04:4b:27:01:65:d1:a3:bf:15:2f:0a:b7:51:9d:
         b6:4d:28:38
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUR1j/xPxDkhVVoosfw1aE+a35GmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDAzMDUxODAxNThaFw0yNTAzMDQxODA2NThaMDMxMTAvBgNV
BAMTKDA1REYzRjY0RDEyNDlCNTI1RjJCRTZEMzI4OUU5QUE1RDEyRDRBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjb6xeiowahpcq5yEPU2IlBIYT
qzEcaEh5SexOm3HdQw3fGX1+aCJKGzUkheAzo/UPB5IAXX1ZeQdDsapm4lCVOF9M
DKfo8QmqdjaYMhQqq1vaQpqP+x97V6pQ8Wp5Oa7Aglso3fYtc0SRLFsU6aPApNLr
1IRZ/YIiT290Oxhf1mtWvuQT3W5BVP+WsmCTIXIfOYsMp0Wmy8BhwK4/8NPlZUFe
PSuz4Rf3pyZlg/w2QboheRcUP2JWwPtw8zHGEDugkDpfHtY5iRY7jAETNyUlou8B
IK9Jg/0hthNnN5kCi8EXlwLxO+PhXud/t739F9AiXl0M1FyTTI7J9TuOLP8JAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUBd8/ZNEkm1JfK+bTKJ6apdEtSpwwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzczMDJlMzAyZTMwMmYz
MTM1MmQzMTM2MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBvkYwDQYJKoZI
hvcNAQELBQADggEBADekYJsO+hPHmd7j5NnHWw+UsaIcOfywQv1vBrws3PyoP61y
cCGlmtFvm6GYm01oAQfGSykbG9NRmXk+WUYtpcyMdhh2lUDCpQ6xhsa0pdpSr5AD
C8Ann2hW4K0/G4dZuKm09OSMInnjBNJC3PXi6bOmSz3wGeg2MJScNH0GZzDTLvRE
htizgeOVdJnhOpHS++u2CCKDrxLGaOV7gqkOqVzNKOmY4RoHJGNWeSC2VfOyzrOe
LexKqUZxN9Pm7YGVx+tJMp6jfEtE80o7c4SUlECRfLniEv8Fj1aFVc2pgJ9YB0K+
+YI8sklBXkKC7yEESycBZdGjvxUvCrdRnbZNKDg=
-----END CERTIFICATE-----
Generated at Mon May 13 12:49:21 2024 by rpki-client on console-fra.rpki-client.org