Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231332e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231332e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          AyPejKKfFv1ZLOwUI1x0cubYhK27+QDC6wN3TmjmhpM=
Subject key identifier:   2A:05:28:0A:E3:6A:61:D0:86:A0:BB:DF:F3:A1:B4:30:10:80:CD:45
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       36735F1EF04BBABFE8CA3911D1C769CEE3C6CA17
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231332e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:49 +0000
ROA not before:           Tue 05 Mar 2024 17:42:49 +0000
ROA not after:            Tue 04 Mar 2025 17:47:49 +0000
asID:                     262237
IP address blocks:        190.196.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:5f:1e:f0:4b:ba:bf:e8:ca:39:11:d1:c7:69:ce:e3:c6:ca:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:49 2024 GMT
            Not After : Mar  4 17:47:49 2025 GMT
        Subject: CN=2A05280AE36A61D086A0BBDFF3A1B4301080CD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:18:22:27:63:ad:79:45:c3:9f:1c:52:a8:
                    13:f9:b9:9b:bb:3a:41:ac:43:fb:a2:b0:b6:d3:97:
                    e8:6f:c1:f7:ed:4b:21:7c:7d:16:a0:92:1a:68:e2:
                    3f:a4:0d:d6:ff:2f:74:b3:fe:f4:07:31:e5:a7:c0:
                    b2:49:38:e0:24:7a:fe:88:d4:5f:0d:4d:37:59:0b:
                    be:0f:ab:59:0c:4c:42:5b:97:a9:34:4b:8f:fa:fe:
                    54:81:13:fb:27:4a:ae:d3:10:22:49:33:52:92:ff:
                    d4:35:fc:b1:86:7a:33:cb:64:bc:a9:95:3b:11:7a:
                    c4:1b:e6:4a:87:6f:da:ce:72:66:c5:87:18:0f:a5:
                    f3:a2:c4:cd:f8:66:dd:14:8f:98:76:82:f9:8f:95:
                    c2:4c:0c:6c:85:b1:08:6a:e3:ef:3c:94:57:ba:04:
                    d3:19:5f:0a:57:e7:e9:a7:63:ca:d6:90:c9:be:0b:
                    23:c6:42:d3:42:00:29:59:fe:45:6a:0e:55:4d:e9:
                    20:e6:86:84:8e:64:6f:a4:6f:30:b7:db:8d:c8:37:
                    d6:54:c6:24:b5:fc:fa:bf:60:77:13:1d:d1:9a:a4:
                    62:74:c1:77:96:6c:b1:06:a8:16:af:72:d6:26:f5:
                    cc:06:27:13:6c:c1:eb:e4:7a:92:73:6e:5c:28:3a:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:28:0A:E3:6A:61:D0:86:A0:BB:DF:F3:A1:B4:30:10:80:CD:45
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231332e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:ce:6b:03:45:7e:36:f9:b5:17:d8:82:a2:76:fa:2e:75:
         35:12:47:c8:bc:65:61:54:08:20:68:c1:2e:6d:92:09:8f:27:
         73:54:cc:45:6a:88:78:da:8e:05:08:a3:be:02:7e:4e:1d:7d:
         54:cf:44:5f:03:1b:5b:94:07:92:cb:f6:bc:88:8f:cd:9f:60:
         fc:f6:d8:ed:1d:b2:2d:13:ed:56:d9:75:a3:de:5e:9d:37:36:
         0e:8d:85:a1:0b:89:cf:c9:dc:20:e6:0d:6e:74:ed:70:b7:04:
         61:5f:58:63:ef:6f:55:f1:80:3b:36:2c:25:c2:92:2d:77:1d:
         38:79:c8:71:ed:43:c1:11:6a:eb:52:01:f4:1a:ca:06:73:4c:
         49:3b:26:5c:65:12:51:39:d8:74:1b:3e:fc:f4:4d:70:e0:39:
         39:5b:a7:e8:07:40:7e:2f:cc:eb:5d:de:b7:f9:4a:2a:a6:2c:
         c5:86:e1:41:94:c5:8e:df:dc:f9:c6:f4:1c:ff:02:a3:b1:34:
         00:95:48:e9:e1:53:c9:b2:7a:14:46:f2:2f:67:50:1a:80:d7:
         e5:f1:c2:c2:cc:90:c1:e8:1e:d1:74:6a:c9:e1:1d:41:d7:22:
         3a:02:27:a1:fb:6a:3a:97:f8:4c:ac:76:0b:18:31:7a:08:58:
         1a:a0:0d:71
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUNnNfHvBLur/oyjkR0cdpzuPGyhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMDcxNkM2ODc4MTNEMEYxMDk0QkM1NTY3NEIyNkE2
OEFGOTBERjAeFw0yNDAzMDUxNzQyNDlaFw0yNTAzMDQxNzQ3NDlaMDMxMTAvBgNV
BAMTKDJBMDUyODBBRTM2QTYxRDA4NkEwQkJERkYzQTFCNDMwMTA4MENENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyxgiJ2OteUXDnxxSqBP5uZu7
OkGsQ/uisLbTl+hvwfftSyF8fRagkhpo4j+kDdb/L3Sz/vQHMeWnwLJJOOAkev6I
1F8NTTdZC74Pq1kMTEJbl6k0S4/6/lSBE/snSq7TECJJM1KS/9Q1/LGGejPLZLyp
lTsResQb5kqHb9rOcmbFhxgPpfOixM34Zt0Uj5h2gvmPlcJMDGyFsQhq4+88lFe6
BNMZXwpX5+mnY8rWkMm+CyPGQtNCAClZ/kVqDlVN6SDmhoSOZG+kbzC3243IN9ZU
xiS1/Pq/YHcTHdGapGJ0wXeWbLEGqBavctYm9cwGJxNswevkepJzblwoOttRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUKgUoCuNqYdCGoLvf86G0MBCAzUUwHwYDVR0j
BBgwFoAUR6BxbGh4E9DxCUvFVnSyamivkN8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUNDNUI4MkZCRDBFOEUwOUVDNDQyN0MwQTg4OEY2MTBC
M0NCMzgxRjdBMTAyQjAxQzI1RDQ5RTY2M0U1NkVBLzAvNDdBMDcxNkM2ODc4MTNE
MEYxMDk0QkM1NTY3NEIyNkE2OEFGOTBERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80N0EwNzE2QzY4NzgxM0QwRjEw
OTRCQzU1Njc0QjI2QTY4QUY5MERGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlDQzVCODJGQkQwRThFMDlFQzQ0MjdDMEE4ODhGNjEwQjNDQjM4MUY3
QTEwMkIwMUMyNUQ0OUU2NjNFNTZFQS8wLzMxMzkzMDJlMzEzOTM2MmUzMjMxMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMzMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xNUwDQYJKoZIhvcNAQELBQADggEBACC/zmsDRX42+bUX2IKidvoudTUSR8i8ZWFU
CCBowS5tkgmPJ3NUzEVqiHjajgUIo74Cfk4dfVTPRF8DG1uUB5LL9ryIj82fYPz2
2O0dsi0T7VbZdaPeXp03Ng6NhaELic/J3CDmDW507XC3BGFfWGPvb1XxgDs2LCXC
ki13HTh5yHHtQ8ERautSAfQaygZzTEk7JlxlElE52HQbPvz0TXDgOTlbp+gHQH4v
zOtd3rf5SiqmLMWG4UGUxY7f3PnG9Bz/AqOxNACVSOnhU8myehRG8i9nUBqA1+Xx
wsLMkMHoHtF0asnhHUHXIjoCJ6H7ajqX+EysdgsYMXoIWBqgDXE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org