Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa
File:                     3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa (raw, json)
Hash identifier:          pnVklyl+zct+cVHyGdRzK1zf1xpqbSNmUS99N8Kc06w=
Subject key identifier:   AB:94:5E:01:41:AA:E0:C2:2F:E0:15:44:0F:D7:6B:54:23:FE:4F:5B
Certificate issuer:       /CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
Certificate serial:       181E10D17F5D3ABDE63081210AC204D84082B71B
Authority key identifier: FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa
Signing time:             Tue 04 Feb 2025 01:45:00 +0000
ROA not before:           Tue 04 Feb 2025 01:40:00 +0000
ROA not after:            Tue 03 Feb 2026 01:45:00 +0000
asID:                     269897
IP address blocks:        190.112.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1e:10:d1:7f:5d:3a:bd:e6:30:81:21:0a:c2:04:d8:40:82:b7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
        Validity
            Not Before: Feb  4 01:40:00 2025 GMT
            Not After : Feb  3 01:45:00 2026 GMT
        Subject: CN=AB945E0141AAE0C22FE015440FD76B5423FE4F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:4d:f7:28:bc:e7:79:51:6d:98:b3:32:fc:d3:
                    44:d2:02:4f:cb:ef:46:53:a7:48:51:ee:a6:66:80:
                    1d:69:1d:b7:24:d5:e8:1c:47:17:a3:ce:f1:7d:91:
                    39:6e:82:87:35:6b:e3:ca:2d:f2:a2:50:26:5c:78:
                    e5:1e:e0:93:e6:7d:85:e6:e0:1d:10:b6:23:7d:31:
                    70:c2:df:a8:01:df:48:77:00:9c:b8:64:6e:cc:c1:
                    cf:ef:8c:44:29:1c:10:0e:83:a3:9b:75:9c:8d:5c:
                    d9:ff:13:92:6b:a7:55:2a:f4:ef:6a:7d:d9:05:58:
                    41:e0:50:53:54:c7:0b:bd:78:b1:0b:e2:12:37:f8:
                    f9:39:2b:0e:a6:9f:2f:cf:8d:25:fe:3a:aa:7c:eb:
                    fb:a2:36:e2:2f:7f:ee:b0:03:dc:ed:1e:8e:16:a2:
                    5d:96:7d:b6:31:cb:68:56:01:6d:fd:82:47:d9:0e:
                    17:37:f0:2a:a3:e4:79:55:b5:24:05:aa:36:f0:5e:
                    3c:9e:38:06:a9:e7:bb:aa:7d:a0:b6:fa:55:0a:bb:
                    0e:56:25:79:66:5d:b0:07:e1:9d:3b:24:b6:7c:32:
                    f9:e0:1d:eb:09:f6:66:81:8e:39:34:07:f7:c6:a2:
                    22:7b:b0:af:73:df:5d:ac:48:bd:8e:13:1e:0f:fb:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:5E:01:41:AA:E0:C2:2F:E0:15:44:0F:D7:6B:54:23:FE:4F:5B
            X509v3 Authority Key Identifier:
                keyid:FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:73:30:4b:53:04:e6:55:4b:c0:de:57:08:22:46:4c:87:
         65:3c:91:cc:dc:05:0a:fe:49:f1:7a:12:b1:9a:6d:9d:fc:71:
         19:77:96:c8:3a:d6:46:e2:bc:f2:48:b6:2d:8d:37:1b:92:81:
         ed:71:c1:bc:62:fc:c9:43:58:6b:97:33:d7:c2:91:9c:41:b9:
         bb:73:73:d5:71:fd:1f:bb:ee:af:f1:40:0d:d4:6d:13:1d:e5:
         87:88:75:8e:ad:94:3e:4f:7f:39:6f:4f:52:14:5a:df:46:84:
         bb:aa:49:c2:2b:b2:83:df:08:ac:f3:c7:9e:7e:ec:50:c1:c1:
         c7:22:3b:a2:5e:5c:fe:18:4b:8c:c9:81:00:dc:cc:a7:e1:02:
         1b:8c:a8:f6:c0:bf:d6:5a:ce:2a:20:09:4f:7c:28:40:be:60:
         85:1b:35:4f:aa:dc:b6:79:3b:35:ae:9e:c5:51:6b:0f:fa:e8:
         72:01:4a:91:7a:29:04:80:44:54:c9:25:03:d1:f0:df:44:ab:
         95:1c:3c:78:c1:38:3b:8a:8a:cd:0a:e1:48:10:2b:f8:67:c9:
         a6:7a:1c:40:44:9b:09:2b:b5:28:1c:43:b5:6c:e2:5c:f4:99:
         3d:b9:31:0f:a4:00:b9:a0:12:46:e2:e2:ba:34:2b:93:77:83:
         7f:f9:12:7b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGB4Q0X9dOr3mMIEhCsIE2ECCtxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ0MDE1QkY1RjRDMDc0Q0E0RDUyMzAyRUJGQkUzOTJD
NUZGRTZBNDAeFw0yNTAyMDQwMTQwMDBaFw0yNjAyMDMwMTQ1MDBaMDMxMTAvBgNV
BAMTKEFCOTQ1RTAxNDFBQUUwQzIyRkUwMTU0NDBGRDc2QjU0MjNGRTRGNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5TfcovOd5UW2YszL800TSAk/L
70ZTp0hR7qZmgB1pHbck1egcRxejzvF9kTlugoc1a+PKLfKiUCZceOUe4JPmfYXm
4B0QtiN9MXDC36gB30h3AJy4ZG7Mwc/vjEQpHBAOg6ObdZyNXNn/E5Jrp1Uq9O9q
fdkFWEHgUFNUxwu9eLEL4hI3+Pk5Kw6mny/PjSX+Oqp86/uiNuIvf+6wA9ztHo4W
ol2WfbYxy2hWAW39gkfZDhc38Cqj5HlVtSQFqjbwXjyeOAap57uqfaC2+lUKuw5W
JXlmXbAH4Z07JLZ8MvngHesJ9maBjjk0B/fGoiJ7sK9z312sSL2OEx4P+/mLAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUq5ReAUGq4MIv4BVED9drVCP+T1swHwYDVR0j
BBgwFoAU/UAVv19MB0yk1SMC6/vjksX/5qQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RTY5NzA2MTY0MDExNkNFQTU3QzlEOUZEOEM5RENFODRF
QkRFOTREMjdCODg3QzZEMzlDMDhBQjkxM0Y0NTcxLzAvRkQ0MDE1QkY1RjRDMDc0
Q0E0RDUyMzAyRUJGQkUzOTJDNUZGRTZBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDQwMTVCRjVGNEMwNzRDQTRE
NTIzMDJFQkZCRTM5MkM1RkZFNkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUU2OTcwNjE2NDAxMTZDRUE1N0M5RDlGRDhDOURDRTg0RUJERTk0RDI3
Qjg4N0M2RDM5QzA4QUI5MTNGNDU3MS8wLzMxMzkzMDJlMzEzMTMyMmUzMTMzMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzODM5Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
cIgwDQYJKoZIhvcNAQELBQADggEBACEaczBLUwTmVUvA3lcIIkZMh2U8kczcBQr+
SfF6ErGabZ38cRl3lsg61kbivPJIti2NNxuSge1xwbxi/MlDWGuXM9fCkZxBubtz
c9Vx/R+77q/xQA3UbRMd5YeIdY6tlD5PfzlvT1IUWt9GhLuqScIrsoPfCKzzx55+
7FDBwcciO6JeXP4YS4zJgQDczKfhAhuMqPbAv9ZaziogCU98KEC+YIUbNU+q3LZ5
OzWunsVRaw/66HIBSpF6KQSARFTJJQPR8N9Eq5UcPHjBODuKis0K4UgQK/hnyaZ6
HEBEmwkrtSgcQ7Vs4lz0mT25MQ+kALmgEkbi4ro0K5N3g3/5Ens=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:57 2025 by rpki-client