Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3139362e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          nXyEFE0UjKTWELTlljrJLw5k+sgJShmTCgQ+CTocXJA=
Subject key identifier:   D6:BE:D9:C5:AF:95:46:DA:3B:5B:98:57:AD:2B:43:E5:BB:94:B8:54
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       5F7C0A0749056820DD5695221D44C6B1ACDBF7D1
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:37 +0000
ROA not before:           Tue 04 Feb 2025 18:23:37 +0000
ROA not after:            Tue 03 Feb 2026 18:28:37 +0000
asID:                     52253
IP address blocks:        190.108.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7c:0a:07:49:05:68:20:dd:56:95:22:1d:44:c6:b1:ac:db:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:37 2025 GMT
            Not After : Feb  3 18:28:37 2026 GMT
        Subject: CN=D6BED9C5AF9546DA3B5B9857AD2B43E5BB94B854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:f7:5c:e1:a4:3b:59:55:da:f7:a2:13:53:
                    f8:02:02:d1:4d:ab:5c:23:44:02:95:f2:43:c2:27:
                    fa:fb:87:2e:ca:55:96:40:51:f8:9e:b1:5f:88:6a:
                    a3:98:ba:9d:43:62:14:fc:8d:54:6f:5d:19:30:3b:
                    d9:7b:24:c3:b4:72:21:7b:5e:18:79:75:e8:f1:4f:
                    10:aa:38:f1:73:0b:c8:b5:e4:db:e9:91:3d:aa:00:
                    d7:e2:42:ac:e2:f1:19:25:ac:de:5a:72:98:81:64:
                    bf:d6:9f:7b:cd:4b:ed:72:16:ce:6b:77:78:a6:85:
                    0c:5a:39:37:6a:fe:be:29:8b:4e:a6:8a:ea:e1:a5:
                    b5:47:5b:c2:43:6e:41:ec:93:08:26:ac:fa:e2:e0:
                    55:32:49:46:1b:c7:21:8c:9a:f5:06:ab:ea:25:26:
                    22:bd:c6:c9:1c:9d:7c:e7:59:2f:4b:e7:86:7a:a6:
                    fe:01:b8:18:a3:58:9d:92:5b:75:54:de:b8:6e:56:
                    b5:1b:4c:93:6a:eb:f7:9b:b4:56:fc:a7:62:26:7c:
                    35:88:eb:6d:69:c9:8a:7c:99:a0:33:ec:98:f5:e0:
                    b6:35:d3:04:b4:a7:51:02:ef:4f:09:2a:1a:63:8e:
                    ec:31:3c:cb:8b:e7:ae:42:a1:bb:76:03:bb:7c:df:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BE:D9:C5:AF:95:46:DA:3B:5B:98:57:AD:2B:43:E5:BB:94:B8:54
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:c5:84:bf:e3:46:73:b7:1c:15:89:c6:a1:13:56:8e:68:
         d0:74:05:43:79:db:a3:97:59:fe:82:c6:2c:5a:f5:dc:79:eb:
         fa:87:56:9f:be:47:64:ff:08:63:72:06:f8:b1:b5:50:e3:27:
         04:c9:6f:77:a5:0d:ac:99:ba:09:fe:13:40:99:37:4f:97:70:
         f1:7c:a2:eb:f5:96:49:85:07:4c:d6:1a:19:ef:63:21:fa:df:
         d9:fc:5d:a0:f8:c7:53:ae:45:2b:02:a9:19:89:4b:b4:bc:34:
         4f:e4:29:f8:37:bc:83:a0:e1:a6:87:27:7e:72:fc:b7:22:23:
         41:8f:a0:a5:63:a9:75:02:60:e9:93:99:36:0c:46:19:6b:65:
         47:e7:d8:8b:22:8e:06:ae:a1:3a:89:9c:ff:70:8f:7f:68:85:
         c1:b5:e8:34:40:1a:6a:58:46:d2:8c:af:42:4a:e3:45:76:e4:
         ea:e4:94:c2:eb:5f:2d:82:52:f7:94:f4:a5:c3:ae:1f:83:7a:
         c9:9a:ca:71:f6:25:8b:05:0d:fe:12:43:f1:69:5f:52:4b:ce:
         5e:8c:cf:04:aa:18:15:c8:7f:96:ff:b5:d8:de:df:47:b9:af:
         a8:b6:c4:37:0b:3b:ad:79:16:33:f5:a8:37:bc:03:2d:d6:48:
         0d:2c:fa:31
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX3wKB0kFaCDdVpUiHUTGsazb99EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNTAyMDQxODIzMzdaFw0yNjAyMDMxODI4MzdaMDMxMTAvBgNV
BAMTKEQ2QkVEOUM1QUY5NTQ2REEzQjVCOTg1N0FEMkI0M0U1QkI5NEI4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuvdc4aQ7WVXa96ITU/gCAtFN
q1wjRAKV8kPCJ/r7hy7KVZZAUfiesV+IaqOYup1DYhT8jVRvXRkwO9l7JMO0ciF7
Xhh5dejxTxCqOPFzC8i15NvpkT2qANfiQqzi8RklrN5acpiBZL/Wn3vNS+1yFs5r
d3imhQxaOTdq/r4pi06miurhpbVHW8JDbkHskwgmrPri4FUySUYbxyGMmvUGq+ol
JiK9xskcnXznWS9L54Z6pv4BuBijWJ2SW3VU3rhuVrUbTJNq6/ebtFb8p2ImfDWI
621pyYp8maAz7Jj14LY10wS0p1EC708JKhpjjuwxPMuL565Cobt2A7t83+8zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1r7Zxa+VRto7W5hXrStD5buUuFQwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzE
MA0GCSqGSIb3DQEBCwUAA4IBAQBuusWEv+NGc7ccFYnGoRNWjmjQdAVDedujl1n+
gsYsWvXceev6h1afvkdk/whjcgb4sbVQ4ycEyW93pQ2smboJ/hNAmTdPl3DxfKLr
9ZZJhQdM1hoZ72Mh+t/Z/F2g+MdTrkUrAqkZiUu0vDRP5Cn4N7yDoOGmhyd+cvy3
IiNBj6ClY6l1AmDpk5k2DEYZa2VH59iLIo4GrqE6iZz/cI9/aIXBteg0QBpqWEbS
jK9CSuNFduTq5JTC618tglL3lPSlw64fg3rJmspx9iWLBQ3+EkPxaV9SS85ejM8E
qhgVyH+W/7XY3t9Hua+otsQ3CzuteRYz9ag3vAMt1kgNLPox
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:04:16 2025 by rpki-client