Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3230203d3e203238313037.roa
File:                     3139302e3132342e3232342e302f32302d3230203d3e203238313037.roa (raw, json)
Hash identifier:          wvgzMSTj/uPTowWHuyI5RhwNSbuCa/Mbr+6UEF7T3Vk=
Subject key identifier:   5E:C6:C7:7F:3B:E2:BA:0B:55:F3:FD:E3:61:38:C7:55:63:AA:DB:06
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       434A0EE9C2D5D1A6EF572103BB373C1A5B590AEB
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3230203d3e203238313037.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     28107
IP address blocks:        190.124.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4a:0e:e9:c2:d5:d1:a6:ef:57:21:03:bb:37:3c:1a:5b:59:0a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=5EC6C77F3BE2BA0B55F3FDE36138C75563AADB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:b6:65:b5:f6:25:32:8e:dd:75:ba:f3:d8:
                    1d:3f:a7:13:06:01:4f:f4:9e:42:41:67:4b:58:96:
                    a5:9b:f6:4c:00:ef:2c:b7:60:f2:da:0d:74:34:32:
                    92:af:84:34:40:f0:a9:23:ae:ef:a7:dd:00:9b:73:
                    35:e3:cf:ae:41:52:77:fb:ec:0e:14:8a:93:3d:0a:
                    8c:30:97:28:25:52:e4:9b:e8:c8:e0:e4:f5:da:a8:
                    f4:98:27:c0:55:f3:2b:14:96:9d:09:5f:86:42:af:
                    2d:41:25:a2:6f:de:4c:8c:95:3a:b9:27:40:e5:39:
                    c6:49:1d:77:87:69:e2:f0:5e:0b:d1:96:83:a1:9c:
                    13:e8:c6:08:72:dd:a4:57:5f:0b:a2:5a:a9:03:ef:
                    fa:47:d5:91:cf:46:34:d4:a3:1b:4b:eb:62:5d:f7:
                    9a:15:eb:d2:09:2f:d8:e2:0e:1d:92:85:3e:6c:31:
                    18:3a:74:e3:97:33:20:dc:a0:4f:e9:a6:c0:97:39:
                    0d:86:f7:a8:87:5f:3e:89:2c:7b:54:88:55:36:80:
                    82:5b:2c:9d:b7:5a:a5:df:fe:db:27:3f:4f:d4:38:
                    8d:71:ff:d4:88:f8:72:83:b6:ac:0e:a0:1e:bb:03:
                    a9:3b:6e:17:f3:69:19:74:f0:94:31:c8:5c:8b:62:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C6:C7:7F:3B:E2:BA:0B:55:F3:FD:E3:61:38:C7:55:63:AA:DB:06
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3232342e302f32302d3230203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:56:07:18:d9:bc:b4:d9:df:a2:ba:b6:4a:0c:d1:29:d6:
         5d:4f:fa:80:79:b2:69:60:76:e9:ef:80:ae:07:95:74:8c:54:
         90:3e:82:90:f1:bb:2e:11:47:85:5e:97:ea:52:f1:c0:7c:0c:
         3c:6e:8d:1a:9b:24:a4:96:23:76:9f:ed:7f:74:c0:5f:f4:33:
         9e:4e:e4:ba:73:58:d0:b6:53:7e:91:ea:5d:1d:4c:b5:57:06:
         de:16:aa:8f:ba:c2:84:7d:9a:b8:2f:a5:5d:8b:81:32:d8:fe:
         e1:50:b9:33:b0:fa:42:09:6a:e0:8e:c0:34:24:41:e7:36:67:
         d7:6a:98:67:4a:e9:d0:93:f8:5a:2b:34:39:1d:52:f9:bf:28:
         6f:f4:a8:2f:8a:7e:39:3f:1a:5b:49:5e:8f:5a:a0:23:1a:c5:
         3c:99:89:cd:8b:d1:14:a6:12:ea:61:1f:7a:86:04:75:7d:a9:
         0e:fe:6c:bc:6f:1d:49:ed:d5:0b:18:5b:64:5e:9d:1c:93:e5:
         65:f7:61:c0:7e:0b:35:75:e0:05:d5:77:de:9e:c3:25:ae:02:
         22:8d:8a:56:d8:1f:10:41:99:ce:a9:ed:9a:30:ff:93:ec:c3:
         47:40:4d:ee:cc:37:02:f6:fd:b7:55:0f:40:80:fb:b6:b6:e2:
         0b:6c:67:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ0oO6cLV0abvVyEDuzc8GltZCuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ5MDRCQUZBNEZBNUM3QjRDNjA5OTI5QUUyMTU1NkI5
NEFGODk5NTAeFw0yNDAzMDUxODA1MjlaFw0yNTAzMDQxODEwMjlaMDMxMTAvBgNV
BAMTKDVFQzZDNzdGM0JFMkJBMEI1NUYzRkRFMzYxMzhDNzU1NjNBQURCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQbZltfYlMo7ddbrz2B0/pxMG
AU/0nkJBZ0tYlqWb9kwA7yy3YPLaDXQ0MpKvhDRA8Kkjru+n3QCbczXjz65BUnf7
7A4UipM9CowwlyglUuSb6Mjg5PXaqPSYJ8BV8ysUlp0JX4ZCry1BJaJv3kyMlTq5
J0DlOcZJHXeHaeLwXgvRloOhnBPoxghy3aRXXwuiWqkD7/pH1ZHPRjTUoxtL62Jd
95oV69IJL9jiDh2ShT5sMRg6dOOXMyDcoE/ppsCXOQ2G96iHXz6JLHtUiFU2gIJb
LJ23WqXf/tsnP0/UOI1x/9SI+HKDtqwOoB67A6k7bhfzaRl08JQxyFyLYns7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXsbHfzviugtV8/3jYTjHVWOq2wYwHwYDVR0j
BBgwFoAU/ZBLr6T6XHtMYJkpriFVa5SviZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkM2RjAyRDRBQ0ZBMzg0MkQzQzE2MDE1MDBFQjBGRjJD
NUI3MUFDOTI1ODczMEZBRTc5OEM2OEI4RjM2MkE4LzAvRkQ5MDRCQUZBNEZBNUM3
QjRDNjA5OTI5QUUyMTU1NkI5NEFGODk5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDkwNEJBRkE0RkE1QzdCNEM2
MDk5MjlBRTIxNTU2Qjk0QUY4OTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJDNkYwMkQ0QUNGQTM4NDJEM0MxNjAxNTAwRUIwRkYyQzVCNzFBQzky
NTg3MzBGQUU3OThDNjhCOEYzNjJBOC8wLzMxMzkzMDJlMzEzMjM0MmUzMjMyMzQy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4MzEzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnzg
MA0GCSqGSIb3DQEBCwUAA4IBAQBWW1YHGNm8tNnforq2SgzRKdZdT/qAebJpYHbp
74CuB5V0jFSQPoKQ8bsuEUeFXpfqUvHAfAw8bo0amySkliN2n+1/dMBf9DOeTuS6
c1jQtlN+kepdHUy1VwbeFqqPusKEfZq4L6Vdi4Ey2P7hULkzsPpCCWrgjsA0JEHn
NmfXaphnSunQk/haKzQ5HVL5vyhv9Kgvin45PxpbSV6PWqAjGsU8mYnNi9EUphLq
YR96hgR1fakO/my8bx1J7dULGFtkXp0ck+Vl92HAfgs1deAF1XfensMlrgIijYpW
2B8QQZnOqe2aMP+T7MNHQE3uzDcC9v23VQ9AgPu2tuILbGf/
-----END CERTIFICATE-----
Generated at Mon Jun 24 05:42:51 2024 by rpki-client on console-fra.rpki-client.org