Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          JiCU/N3Ap6rTkM7O8hIwxHCtrVkFQbkj/F5xxfmtGjU=
Subject key identifier:   3F:4C:27:1B:D6:A0:E8:0E:70:9A:85:8C:65:0E:CF:40:95:5E:ED:F4
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       6CACAB6FD7248E74E6BE3DF096A2C04D962CA1F0
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:39 +0000
ROA not before:           Tue 05 Mar 2024 18:13:39 +0000
ROA not after:            Tue 04 Mar 2025 18:18:39 +0000
asID:                     52253
IP address blocks:        190.108.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ac:ab:6f:d7:24:8e:74:e6:be:3d:f0:96:a2:c0:4d:96:2c:a1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:39 2024 GMT
            Not After : Mar  4 18:18:39 2025 GMT
        Subject: CN=3F4C271BD6A0E80E709A858C650ECF40955EEDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:66:d5:16:eb:8f:38:3d:82:5a:d7:03:32:
                    a2:e0:9c:8d:8e:00:a6:1b:c9:5c:e6:be:5b:fa:ee:
                    3c:75:fc:76:db:e4:54:9d:64:5b:0c:16:02:f8:ac:
                    ad:ce:5f:1c:10:59:db:32:37:51:7b:ff:04:94:f4:
                    46:51:20:1e:1a:58:54:3a:4c:5e:13:4e:60:6c:dd:
                    61:31:20:f9:d4:68:35:e7:d3:9e:6e:87:ab:47:27:
                    4b:b9:f6:c4:17:0d:90:51:94:19:71:22:36:92:14:
                    0a:39:de:5b:85:9f:5a:b9:18:6e:49:ab:24:38:9d:
                    db:4d:92:24:82:38:7a:39:70:1d:bd:3b:f3:5f:82:
                    06:96:ba:e9:5f:78:33:43:6f:ad:f1:4e:55:6c:80:
                    32:61:dd:59:33:6e:6e:3e:5e:5a:9b:59:56:b3:8a:
                    37:ea:39:b5:a2:6b:7f:9e:44:af:12:c8:ad:0c:af:
                    a2:23:80:36:e1:fe:f2:ec:39:c1:dc:6f:3f:96:50:
                    60:48:3d:15:7e:95:20:4e:28:b5:f7:cd:a7:40:71:
                    74:f7:64:52:ca:f0:1c:f5:2a:2b:b7:46:00:e9:b6:
                    9f:3e:be:a9:5d:67:fb:b4:58:f4:5f:de:da:af:40:
                    88:45:b5:ff:31:63:25:f2:89:4b:0e:14:34:31:c8:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:27:1B:D6:A0:E8:0E:70:9A:85:8C:65:0E:CF:40:95:5E:ED:F4
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:50:57:d7:f7:6d:82:c9:3c:ba:82:60:f3:a8:f7:d9:b1:f2:
         83:b0:e1:f8:35:6c:e0:e2:a5:2e:02:7a:eb:12:f0:fe:68:1e:
         dd:3d:87:da:ed:e9:ec:8f:5b:7b:ee:ea:09:a5:63:0b:66:3c:
         e7:3b:82:60:01:3c:87:48:cb:73:78:14:6a:0a:fc:57:58:34:
         42:13:00:8a:75:64:02:3e:34:53:d4:23:36:dc:f8:02:89:73:
         25:f1:28:d0:2e:dc:46:e3:1e:b0:55:a8:77:c9:c1:ae:6a:8d:
         cc:af:e0:46:be:e6:14:27:ca:8d:40:c9:5b:6b:7b:54:2e:e3:
         6d:b3:d3:a5:2a:58:27:ff:95:92:db:cb:0f:12:19:c4:c0:fb:
         b6:9c:9b:8f:94:30:5f:5a:cf:fd:cf:da:5f:2f:95:11:27:29:
         45:81:b8:34:f2:5b:8e:aa:d5:b8:d4:ea:13:89:c1:93:14:fa:
         29:c3:f7:78:1e:57:0c:b0:7f:c4:08:cb:f6:e7:de:df:c0:df:
         3e:aa:b4:cf:b1:b7:c9:2f:bf:fe:5c:ba:87:31:f4:63:2e:7d:
         dd:4f:1f:55:6c:cb:5d:db:66:d5:b4:5a:91:b1:61:86:1f:c1:
         93:9f:ba:1f:c1:4c:0d:08:20:ec:53:f4:d3:6f:fd:78:e4:82:
         36:28:5e:b7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbKyrb9ckjnTmvj3wlqLATZYsofAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNDAzMDUxODEzMzlaFw0yNTAzMDQxODE4MzlaMDMxMTAvBgNV
BAMTKDNGNEMyNzFCRDZBMEU4MEU3MDlBODU4QzY1MEVDRjQwOTU1RUVERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72WbVFuuPOD2CWtcDMqLgnI2O
AKYbyVzmvlv67jx1/Hbb5FSdZFsMFgL4rK3OXxwQWdsyN1F7/wSU9EZRIB4aWFQ6
TF4TTmBs3WExIPnUaDXn055uh6tHJ0u59sQXDZBRlBlxIjaSFAo53luFn1q5GG5J
qyQ4ndtNkiSCOHo5cB29O/NfggaWuulfeDNDb63xTlVsgDJh3Vkzbm4+XlqbWVaz
ijfqObWia3+eRK8SyK0Mr6IjgDbh/vLsOcHcbz+WUGBIPRV+lSBOKLX3zadAcXT3
ZFLK8Bz1Kiu3RgDptp8+vqldZ/u0WPRf3tqvQIhFtf8xYyXyiUsOFDQxyLi7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUP0wnG9ag6A5wmoWMZQ7PQJVe7fQwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMwMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzK
MA0GCSqGSIb3DQEBCwUAA4IBAQDAUFfX922CyTy6gmDzqPfZsfKDsOH4NWzg4qUu
AnrrEvD+aB7dPYfa7ensj1t77uoJpWMLZjznO4JgATyHSMtzeBRqCvxXWDRCEwCK
dWQCPjRT1CM23PgCiXMl8SjQLtxG4x6wVah3ycGuao3Mr+BGvuYUJ8qNQMlba3tU
LuNts9OlKlgn/5WS28sPEhnEwPu2nJuPlDBfWs/9z9pfL5URJylFgbg08luOqtW4
1OoTicGTFPopw/d4HlcMsH/ECMv2597fwN8+qrTPsbfJL7/+XLqHMfRjLn3dTx9V
bMtd22bVtFqRsWGGH8GTn7ofwUwNCCDsU/TTb/145II2KF63
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:28 2024 by rpki-client on console-fra.rpki-client.org