Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa
File:                     3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          SCc72Pmjc/OZkYzFaLfg0ss7F0Mx1iofYPddM1zTz0E=
Subject key identifier:   A7:27:52:D2:B1:7E:CE:54:75:B5:0D:E4:49:6B:B4:D1:37:D4:6B:3B
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       2CF8FDE26340E6BCD3684E6C387BEDE8F3B796DE
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:51:23 +0000
ROA not before:           Tue 05 Mar 2024 17:46:23 +0000
ROA not after:            Tue 04 Mar 2025 17:51:23 +0000
asID:                     394684
IP address blocks:        190.114.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:fd:e2:63:40:e6:bc:d3:68:4e:6c:38:7b:ed:e8:f3:b7:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:23 2024 GMT
            Not After : Mar  4 17:51:23 2025 GMT
        Subject: CN=A72752D2B17ECE5475B50DE4496BB4D137D46B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:2d:57:76:4d:5e:ce:64:91:46:8a:dd:8c:
                    93:46:f7:60:86:13:db:72:59:a8:b6:95:3a:a8:fa:
                    29:79:a7:60:d9:03:8a:b3:7a:73:d2:b6:f5:8c:26:
                    35:0f:27:39:ab:ef:48:f3:ed:d2:67:5f:1d:e0:ae:
                    e4:f8:8a:cb:59:ee:1a:98:67:fe:bb:88:0a:92:a6:
                    2d:cc:47:bf:67:f1:42:6e:a4:49:85:a7:98:4e:4e:
                    a4:2c:c2:9f:60:df:92:eb:6c:2c:19:42:9a:2c:a5:
                    98:66:00:ec:9e:ce:38:1c:1a:f0:6c:c2:c7:f7:cd:
                    91:1d:89:65:77:b1:7f:d2:1f:d3:68:2e:ca:32:06:
                    96:f2:c4:21:f1:4a:ba:f7:94:d7:f5:9f:47:ec:20:
                    4b:09:22:13:ee:a1:20:85:a4:ad:5c:75:79:eb:73:
                    cf:bf:d3:9f:42:1f:ab:de:12:a3:ad:bd:72:9e:3e:
                    4a:5e:17:c0:a1:66:66:7d:12:3f:3e:36:8e:8b:75:
                    c3:75:19:b4:9f:d1:ce:12:7d:28:e8:83:b3:ec:8e:
                    c2:7c:28:00:9d:d5:b3:f7:8b:7c:9f:49:88:17:a1:
                    93:12:68:8f:63:3c:ca:4d:46:24:83:45:e0:6b:2d:
                    7c:c2:a4:4c:b2:4d:dc:f5:87:4e:7c:c0:75:f5:dd:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:27:52:D2:B1:7E:CE:54:75:B5:0D:E4:49:6B:B4:D1:37:D4:6B:3B
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:2f:aa:27:57:a1:d0:51:38:05:c1:1e:17:1a:a9:6a:bd:
         e8:5c:34:84:7e:05:1f:2f:5f:d7:21:13:1a:56:4a:09:c0:d1:
         82:90:6d:49:6c:27:d3:e3:e6:a1:66:65:ca:0b:23:ca:b2:8a:
         9b:bb:40:00:24:db:3b:ee:76:8a:4a:c1:04:db:b7:b2:eb:c5:
         ee:c8:2a:9d:0a:f3:57:36:af:a3:66:9d:5a:12:b7:57:15:fd:
         cc:3f:98:13:45:d2:86:5a:f7:39:2c:15:0b:55:0e:11:11:19:
         e2:31:5f:b3:60:51:42:48:34:4c:5d:70:a1:31:dc:46:64:46:
         a0:b0:a7:96:ef:6d:84:dd:43:9d:e0:4c:02:c1:e9:f0:20:ee:
         25:9b:a9:df:9b:37:a8:e2:d5:ae:b1:9c:bb:7e:32:90:ca:92:
         63:07:2f:3a:a1:7a:4d:9f:0c:65:df:5d:2e:0a:71:60:dc:b8:
         7a:13:b5:d2:4f:6c:86:2f:bb:0b:88:a3:f7:74:99:60:6b:c7:
         90:3f:0e:6b:bf:5a:a9:7a:62:ec:0a:04:ea:a6:56:c4:3b:c0:
         8a:e8:66:86:dd:50:4b:c4:cc:99:b2:ba:82:53:c2:22:48:f3:
         b0:1f:aa:35:0b:12:10:78:8a:4b:c7:ec:69:a3:f8:e2:5a:9c:
         0c:dc:d9:e9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIULPj94mNA5rzTaE5sOHvt6PO3lt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNDAzMDUxNzQ2MjNaFw0yNTAzMDQxNzUxMjNaMDMxMTAvBgNV
BAMTKEE3Mjc1MkQyQjE3RUNFNTQ3NUI1MERFNDQ5NkJCNEQxMzdENDZCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyC1Xdk1ezmSRRordjJNG92CG
E9tyWai2lTqo+il5p2DZA4qzenPStvWMJjUPJzmr70jz7dJnXx3gruT4istZ7hqY
Z/67iAqSpi3MR79n8UJupEmFp5hOTqQswp9g35LrbCwZQpospZhmAOyezjgcGvBs
wsf3zZEdiWV3sX/SH9NoLsoyBpbyxCHxSrr3lNf1n0fsIEsJIhPuoSCFpK1cdXnr
c8+/059CH6veEqOtvXKePkpeF8ChZmZ9Ej8+No6LdcN1GbSf0c4SfSjog7PsjsJ8
KACd1bP3i3yfSYgXoZMSaI9jPMpNRiSDReBrLXzCpEyyTdz1h058wHX13V6XAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUpydS0rF+zlR1tQ3kSWu00TfUazswHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMxMzkzMDJlMzEzMTM0MmUzMjM0MzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzM5MzQzNjM4MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+
cvAwDQYJKoZIhvcNAQELBQADggEBAFOoL6onV6HQUTgFwR4XGqlqvehcNIR+BR8v
X9chExpWSgnA0YKQbUlsJ9Pj5qFmZcoLI8qyipu7QAAk2zvudopKwQTbt7Lrxe7I
Kp0K81c2r6NmnVoSt1cV/cw/mBNF0oZa9zksFQtVDhERGeIxX7NgUUJINExdcKEx
3EZkRqCwp5bvbYTdQ53gTALB6fAg7iWbqd+bN6ji1a6xnLt+MpDKkmMHLzqhek2f
DGXfXS4KcWDcuHoTtdJPbIYvuwuIo/d0mWBrx5A/Dmu/Wql6YuwKBOqmVsQ7wIro
ZobdUEvEzJmyuoJTwiJI87AfqjULEhB4ikvH7Gmj+OJanAzc2ek=
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:28:57 2024 by rpki-client on console-ams.rpki-client.org