Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
File:                     3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa (raw, json)
Hash identifier:          nfEQmu2p550zg6HxGFXU5MsGy9RJcYEazFg0C09bfaI=
Subject key identifier:   81:21:D6:39:F8:B5:F7:47:3D:E4:65:6B:A4:7E:BA:D4:24:87:2D:DF
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       23A1CF0D12A7B2D4C74F0C3C761E9E6CBDB5A4F8
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:51:22 +0000
ROA not before:           Tue 05 Mar 2024 17:46:22 +0000
ROA not after:            Tue 04 Mar 2025 17:51:22 +0000
asID:                     28007
IP address blocks:        190.114.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 09:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a1:cf:0d:12:a7:b2:d4:c7:4f:0c:3c:76:1e:9e:6c:bd:b5:a4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:22 2024 GMT
            Not After : Mar  4 17:51:22 2025 GMT
        Subject: CN=8121D639F8B5F7473DE4656BA47EBAD424872DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:49:0c:79:cb:41:ea:40:6b:77:79:f9:ef:
                    2c:c6:38:bc:b8:4e:6a:94:ef:ab:cf:1c:23:97:d8:
                    2e:cb:9b:f5:17:10:21:4f:01:73:59:58:18:1c:04:
                    07:bd:c3:87:4d:07:58:e3:57:c6:f6:54:fb:f4:e7:
                    c3:be:d8:89:1d:8c:34:97:d2:0a:2d:c7:01:9b:53:
                    a5:20:38:a7:5c:a7:89:ce:a5:b2:bf:97:a4:ed:fe:
                    ee:14:a6:b8:97:27:31:0e:ae:57:8a:f9:df:de:8b:
                    2a:0e:0a:de:1e:ed:ba:df:ee:6a:e5:4b:73:59:03:
                    1c:8f:ca:ed:bb:cd:cc:1d:37:f6:0b:65:68:40:09:
                    3f:be:1f:72:b3:8a:3b:fe:44:b7:00:cb:86:69:04:
                    0e:29:23:66:31:c1:ef:4d:bd:b5:48:37:90:e4:9d:
                    19:3c:a2:99:99:e0:f1:24:69:36:20:45:11:60:98:
                    d0:50:e0:7d:83:4b:4d:ae:71:76:18:38:67:ee:9b:
                    73:71:27:1d:b3:8f:d8:ee:c8:3a:33:44:77:88:0b:
                    e3:71:6a:80:f7:62:9f:c3:95:a9:5c:a6:fc:e1:4d:
                    dc:66:d1:26:e9:4c:1f:6e:e7:74:d7:5e:b9:20:0b:
                    68:5e:92:56:d0:42:70:06:b7:e1:e2:db:23:b8:97:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:21:D6:39:F8:B5:F7:47:3D:E4:65:6B:A4:7E:BA:D4:24:87:2D:DF
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:0b:c5:56:5c:dc:95:6b:e4:1c:3f:ef:d6:5c:7c:ef:fc:
         2b:ae:45:8d:9d:02:f2:03:85:57:8d:d7:bc:d0:f1:6c:fd:7a:
         19:79:a8:9a:b3:fe:e7:da:3d:1b:a0:7e:67:cf:15:92:b1:df:
         88:88:18:d4:2f:ee:e1:4b:79:5b:e1:94:69:f1:18:21:6c:25:
         6d:56:6c:0f:aa:f1:e6:5f:81:f3:db:dd:8b:c6:fa:ef:cb:ed:
         7f:43:6f:27:78:b0:f4:ed:b7:a5:94:e3:d3:53:01:c6:bf:24:
         dc:c4:4c:df:a0:b0:31:2b:75:4b:f0:20:75:46:52:bc:24:38:
         c7:dd:7d:3f:5c:62:d8:05:e6:4e:36:3a:00:e7:53:6f:24:41:
         dc:45:5e:40:74:19:46:6d:28:41:36:1c:3d:91:fb:90:99:fb:
         49:8b:3d:8c:38:02:f6:ee:f9:25:8f:8d:d8:c7:a6:2c:be:bb:
         03:a2:87:63:85:9c:18:a4:b2:4b:b1:4c:0d:76:ae:a9:97:22:
         1c:68:9b:2f:47:b0:90:af:fb:0a:78:90:bb:49:20:b1:48:a3:
         f2:84:17:19:96:67:ee:a6:ca:78:a4:42:5e:c9:ce:d7:b8:32:
         e3:c4:f8:47:c5:ea:0f:c8:0a:9a:6a:a1:d6:30:d2:ed:e2:6b:
         c0:94:e1:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUI6HPDRKnstTHTww8dh6ebL21pPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNDAzMDUxNzQ2MjJaFw0yNTAzMDQxNzUxMjJaMDMxMTAvBgNV
BAMTKDgxMjFENjM5RjhCNUY3NDczREU0NjU2QkE0N0VCQUQ0MjQ4NzJEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gUkMectB6kBrd3n57yzGOLy4
TmqU76vPHCOX2C7Lm/UXECFPAXNZWBgcBAe9w4dNB1jjV8b2VPv058O+2IkdjDSX
0gotxwGbU6UgOKdcp4nOpbK/l6Tt/u4UpriXJzEOrleK+d/eiyoOCt4e7brf7mrl
S3NZAxyPyu27zcwdN/YLZWhACT++H3Kzijv+RLcAy4ZpBA4pI2Yxwe9NvbVIN5Dk
nRk8opmZ4PEkaTYgRRFgmNBQ4H2DS02ucXYYOGfum3NxJx2zj9juyDozRHeIC+Nx
aoD3Yp/DlalcpvzhTdxm0SbpTB9u53TXXrkgC2heklbQQnAGt+Hi2yO4l6ypAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgSHWOfi190c95GVrpH661CSHLd8wHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMxMzkzMDJlMzEzMTM0MmUzMjM0MzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzAzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvnLw
MA0GCSqGSIb3DQEBCwUAA4IBAQBLJAvFVlzclWvkHD/v1lx87/wrrkWNnQLyA4VX
jde80PFs/XoZeaias/7n2j0boH5nzxWSsd+IiBjUL+7hS3lb4ZRp8RghbCVtVmwP
qvHmX4Hz292Lxvrvy+1/Q28neLD07bellOPTUwHGvyTcxEzfoLAxK3VL8CB1RlK8
JDjH3X0/XGLYBeZONjoA51NvJEHcRV5AdBlGbShBNhw9kfuQmftJiz2MOAL27vkl
j43Yx6YsvrsDoodjhZwYpLJLsUwNdq6plyIcaJsvR7CQr/sKeJC7SSCxSKPyhBcZ
lmfupsp4pEJeyc7XuDLjxPhHxeoPyAqaaqHWMNLt4mvAlOHI
-----END CERTIFICATE-----
Generated at Thu May 2 08:50:13 2024 by rpki-client on console-fra.rpki-client.org