Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa
File:                     3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa (raw, json)
Hash identifier:          95FTqkr2tvld4anJ2JsdCx/5TL93+jeacp6eB9wFr2U=
Subject key identifier:   23:14:96:29:A6:96:FF:18:5B:97:D6:6A:29:25:D8:6A:F0:94:C4:3A
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       6BCF8D2DEDC62E3A78BA674C0EA0D3106CB232C6
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:13 +0000
ROA not before:           Tue 05 Mar 2024 17:50:13 +0000
ROA not after:            Tue 04 Mar 2025 17:55:13 +0000
asID:                     11014
IP address blocks:        190.104.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cf:8d:2d:ed:c6:2e:3a:78:ba:67:4c:0e:a0:d3:10:6c:b2:32:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:13 2024 GMT
            Not After : Mar  4 17:55:13 2025 GMT
        Subject: CN=23149629A696FF185B97D66A2925D86AF094C43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:c3:cd:3e:6e:80:e4:fe:4c:c4:5f:e2:22:
                    4f:f6:42:36:80:7a:62:9a:57:aa:5d:fa:56:5b:e5:
                    9a:c2:19:fe:f4:76:23:ce:82:31:8d:76:51:59:77:
                    4b:83:c6:3f:fa:27:aa:ab:fb:96:43:bc:e9:dc:a0:
                    12:1f:ab:77:1b:50:5b:8a:b9:6c:3a:fa:8f:74:16:
                    95:37:83:ea:f8:ac:5d:21:b6:61:35:de:b5:63:c3:
                    b9:cd:6e:5e:63:49:79:3b:15:86:21:1f:47:80:38:
                    86:11:c2:39:06:8f:39:21:01:4c:b4:d2:1b:0c:ef:
                    ac:94:27:0d:72:58:19:a1:4d:b5:50:f7:25:8c:c4:
                    29:bd:83:45:a6:78:46:94:b8:b9:a2:81:4d:25:ae:
                    36:29:b2:ff:37:06:83:f1:52:99:e3:bb:05:92:cf:
                    f5:49:66:7c:fa:08:83:91:05:ec:33:49:1c:35:e1:
                    f2:3d:8c:6d:22:79:13:74:54:1a:29:88:81:98:5d:
                    45:5c:2d:ca:e3:2d:6c:c0:77:f2:d8:07:2c:52:04:
                    a3:cf:88:40:51:de:e7:5a:32:72:97:b5:86:3d:46:
                    56:fd:ac:14:56:f9:b2:ee:79:78:8b:0d:be:90:91:
                    11:7d:99:8e:07:cb:de:7f:9c:8b:15:56:e2:1a:4a:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:96:29:A6:96:FF:18:5B:97:D6:6A:29:25:D8:6A:F0:94:C4:3A
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230382e302f32302d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:40:30:ab:f7:7a:0f:62:63:84:ab:6a:f5:47:61:9c:cc:53:
         85:f1:7f:f1:88:68:fd:77:f2:05:5d:8d:13:21:d8:7d:2b:ce:
         05:bd:f4:2c:bb:f6:a3:ed:7f:03:db:2d:00:f0:18:3d:a3:b1:
         01:bf:1a:da:03:11:f7:fe:c2:5b:18:e4:06:0a:35:04:18:4e:
         c5:f8:d5:d3:0b:6b:fd:d9:aa:28:28:42:3e:db:bd:98:18:b3:
         fb:54:e1:2c:d6:bc:b8:dd:81:16:d6:31:1b:05:bd:88:18:da:
         ce:2d:ee:fb:f5:23:69:01:43:48:1c:52:ce:3d:a8:4b:2f:91:
         8a:1c:6e:7a:cc:ea:6d:e8:3d:ca:16:5f:af:52:28:87:51:f9:
         08:b4:86:5e:b8:55:7e:20:fd:7b:e9:39:7b:68:fb:a4:1f:e0:
         1a:d4:a5:f6:db:ff:9d:1f:57:b5:0f:54:7f:e2:ab:32:5b:ca:
         9b:51:69:3e:6f:0f:95:c7:4c:f4:bc:95:a1:b3:9b:4a:ef:72:
         df:03:a4:dd:60:c7:1a:33:e2:11:06:59:75:a0:fb:6a:d5:2a:
         d8:93:a6:76:af:48:c1:63:8e:ff:12:45:8f:27:7c:f4:6a:3a:
         db:d9:5f:73:2c:9a:e2:46:0c:d5:83:4b:07:ae:c1:2c:6f:b8:
         6a:b9:2f:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUa8+NLe3GLjp4umdMDqDTEGyyMsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OTEwRjNDMzk5NUQ3Q0NDMDZBREMyRjE1MkZGRDRB
MTY4RjI0QzAeFw0yNDAzMDUxNzUwMTNaFw0yNTAzMDQxNzU1MTNaMDMxMTAvBgNV
BAMTKDIzMTQ5NjI5QTY5NkZGMTg1Qjk3RDY2QTI5MjVEODZBRjA5NEM0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzc8PNPm6A5P5MxF/iIk/2QjaA
emKaV6pd+lZb5ZrCGf70diPOgjGNdlFZd0uDxj/6J6qr+5ZDvOncoBIfq3cbUFuK
uWw6+o90FpU3g+r4rF0htmE13rVjw7nNbl5jSXk7FYYhH0eAOIYRwjkGjzkhAUy0
0hsM76yUJw1yWBmhTbVQ9yWMxCm9g0WmeEaUuLmigU0lrjYpsv83BoPxUpnjuwWS
z/VJZnz6CIORBewzSRw14fI9jG0ieRN0VBopiIGYXUVcLcrjLWzAd/LYByxSBKPP
iEBR3udaMnKXtYY9Rlb9rBRW+bLueXiLDb6QkRF9mY4Hy95/nIsVVuIaSiGvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIxSWKaaW/xhbl9ZqKSXYavCUxDowHwYDVR0j
BBgwFoAUo2kQ88OZXXzMBq3C8VL/1KFo8kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzM5OUM1MTNCNjNBODczNzI3NUMxMjk3QjM3MDkwNEUw
NDcyMDk5N0ZFN0Y4RDEyNEQ5QjU0N0NDM0VERTdBLzAvQTM2OTEwRjNDMzk5NUQ3
Q0NDMDZBREMyRjE1MkZGRDRBMTY4RjI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5MTBGM0MzOTk1RDdDQ0Mw
NkFEQzJGMTUyRkZENEExNjhGMjRDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczOTlDNTEzQjYzQTg3MzcyNzVDMTI5N0IzNzA5MDRFMDQ3MjA5OTdG
RTdGOEQxMjREOUI1NDdDQzNFREU3QS8wLzMxMzkzMDJlMzEzMDM0MmUzMjMwMzgy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTMxMzAzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvmjQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB3QDCr93oPYmOEq2r1R2GczFOF8X/xiGj9d/IF
XY0TIdh9K84FvfQsu/aj7X8D2y0A8Bg9o7EBvxraAxH3/sJbGOQGCjUEGE7F+NXT
C2v92aooKEI+272YGLP7VOEs1ry43YEW1jEbBb2IGNrOLe779SNpAUNIHFLOPahL
L5GKHG56zOpt6D3KFl+vUiiHUfkItIZeuFV+IP176Tl7aPukH+Aa1KX22/+dH1e1
D1R/4qsyW8qbUWk+bw+Vx0z0vJWhs5tK73LfA6TdYMcaM+IRBll1oPtq1SrYk6Z2
r0jBY47/EkWPJ3z0ajrb2V9zLJriRgzVg0sHrsEsb7hquS+8
-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org