Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e203233353230.roa
File:                     3139302e37312e38352e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          ABxv3t6Qo31nF9FbBqeXiM5jIlZKwTYS1YHXCoOg3iY=
Subject key identifier:   7E:14:06:AE:6D:DB:71:0D:6E:CA:B6:07:0D:D9:CF:80:CB:8C:5B:BB
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       57CAD77BCA4022EFAFCE33772B0D8895C7358E6B
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     23520
IP address blocks:        190.71.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:d7:7b:ca:40:22:ef:af:ce:33:77:2b:0d:88:95:c7:35:8e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=7E1406AE6DDB710D6ECAB6070DD9CF80CB8C5BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:09:21:9e:9e:d9:91:1b:44:2f:52:22:fd:
                    20:b2:74:e0:a9:d1:4b:8d:72:28:fa:a2:75:cd:47:
                    0d:1f:3c:8f:6c:ed:ca:3a:16:5b:da:30:52:1f:f2:
                    dd:01:cd:89:a6:5b:02:d0:8a:e0:ba:28:39:39:66:
                    03:4a:84:19:52:9b:d8:7e:3c:e1:87:5f:36:e5:fe:
                    31:c7:df:e4:dd:3a:eb:9a:5f:6c:59:e5:b7:91:fa:
                    a0:19:93:96:88:cb:4f:9e:81:ac:0f:f8:30:b1:4b:
                    ce:ef:98:c6:66:56:19:cd:f3:50:58:8e:3f:b6:b1:
                    08:0f:ef:29:b5:23:ba:1c:ac:c6:cc:69:cc:e9:6f:
                    6b:f9:a8:cd:d8:72:c7:99:f5:36:00:d8:61:b6:3d:
                    d0:27:5f:e2:66:2e:a9:e6:0e:71:52:84:8e:b4:cc:
                    6e:57:d8:44:41:fb:6b:c7:3e:c2:ff:fc:23:69:12:
                    b6:55:81:4f:a9:34:8e:74:f1:08:1c:35:64:33:b8:
                    7f:2a:0b:d7:f4:a4:73:9c:e6:ac:fa:16:19:a4:8b:
                    20:2f:8d:7c:d3:ce:25:f2:dd:3e:1b:ff:7b:f1:d2:
                    72:65:9b:5e:68:c0:0d:56:ae:07:07:fd:b9:49:5e:
                    18:bc:b8:16:a0:84:1b:8a:ca:d1:a9:25:24:33:9b:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:06:AE:6D:DB:71:0D:6E:CA:B6:07:0D:D9:CF:80:CB:8C:5B:BB
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:52:4c:ab:f0:85:e9:39:e3:84:07:d9:e7:ff:c5:70:56:06:
         69:9f:5a:e7:cd:38:38:42:4f:8e:c2:50:da:62:1c:dd:77:79:
         0b:c3:55:56:a1:9e:d0:3d:ec:ae:f5:69:43:5e:b1:c7:98:c2:
         2e:ee:28:59:b7:e0:49:77:c6:52:0f:de:12:4b:e3:f8:42:4c:
         da:8c:24:51:77:dd:78:e0:44:e1:d6:44:6f:e9:16:48:56:bf:
         80:30:1a:54:6a:fe:0f:be:9b:28:4b:0a:a2:34:18:a8:74:ee:
         d5:05:60:5f:dc:8a:d5:ea:93:05:5c:dc:30:1d:01:9e:76:72:
         5d:7e:21:b2:86:22:99:de:86:55:57:c8:ae:58:bf:e9:41:81:
         56:23:f1:b5:97:19:8e:6b:25:f4:15:e3:e5:e1:cf:6f:61:f1:
         29:c1:55:f1:42:c5:18:7e:ba:5d:fd:9c:27:55:2a:81:6a:af:
         6c:e9:a8:1d:39:81:67:a7:5b:45:10:00:da:fb:05:44:d6:c4:
         8c:71:04:02:e2:8e:ae:bf:87:ca:b3:6c:a7:2c:93:31:79:fa:
         72:fa:37:85:08:1e:01:5a:8d:7c:0b:8b:f7:04:70:82:d4:23:
         e5:ca:21:c8:88:6a:95:19:eb:58:2f:75:1c:6c:e4:4b:ff:b2:
         42:76:01:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUV8rXe8pAIu+vzjN3Kw2Ilcc1jmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDAzMDUxODAxNTJaFw0yNTAzMDQxODA2NTJaMDMxMTAvBgNV
BAMTKDdFMTQwNkFFNkREQjcxMEQ2RUNBQjYwNzBERDlDRjgwQ0I4QzVCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSAkhnp7ZkRtEL1Ii/SCydOCp
0UuNcij6onXNRw0fPI9s7co6FlvaMFIf8t0BzYmmWwLQiuC6KDk5ZgNKhBlSm9h+
POGHXzbl/jHH3+TdOuuaX2xZ5beR+qAZk5aIy0+egawP+DCxS87vmMZmVhnN81BY
jj+2sQgP7ym1I7ocrMbMaczpb2v5qM3YcseZ9TYA2GG2PdAnX+JmLqnmDnFShI60
zG5X2ERB+2vHPsL//CNpErZVgU+pNI508QgcNWQzuH8qC9f0pHOc5qz6FhmkiyAv
jXzTziXy3T4b/3vx0nJlm15owA1WrgcH/blJXhi8uBaghBuKytGpJSQzmzk5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUfhQGrm3bcQ1uyrYHDdnPgMuMW7swHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzczMTJlMzgzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+R1UwDQYJ
KoZIhvcNAQELBQADggEBAGBSTKvwhek544QH2ef/xXBWBmmfWufNODhCT47CUNpi
HN13eQvDVVahntA97K71aUNesceYwi7uKFm34El3xlIP3hJL4/hCTNqMJFF33Xjg
ROHWRG/pFkhWv4AwGlRq/g++myhLCqI0GKh07tUFYF/citXqkwVc3DAdAZ52cl1+
IbKGIpnehlVXyK5Yv+lBgVYj8bWXGY5rJfQV4+Xhz29h8SnBVfFCxRh+ul39nCdV
KoFqr2zpqB05gWenW0UQANr7BUTWxIxxBALijq6/h8qzbKcskzF5+nL6N4UIHgFa
jXwLi/cEcILUI+XKIciIapUZ61gvdRxs5Ev/skJ2AZE=
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org