Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230352e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230352e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          0yJZIARukvjWlo5Th1t7q+lXGAA2Rj7ZLtw3n1U2rUc=
Subject key identifier:   21:0B:F6:D4:F1:87:96:70:38:05:46:C5:B4:84:E6:2A:11:A4:C5:23
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       0C65FB0CC707DDC1624AEA1617F6AEADB01F9A6B
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230352e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:41 +0000
ROA not before:           Tue 05 Mar 2024 18:13:41 +0000
ROA not after:            Tue 04 Mar 2025 18:18:41 +0000
asID:                     52253
IP address blocks:        190.108.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:65:fb:0c:c7:07:dd:c1:62:4a:ea:16:17:f6:ae:ad:b0:1f:9a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:41 2024 GMT
            Not After : Mar  4 18:18:41 2025 GMT
        Subject: CN=210BF6D4F1879670380546C5B484E62A11A4C523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:ec:c2:44:8a:ca:13:56:c4:c7:c2:2a:8f:
                    cd:64:b1:2c:c0:23:3d:33:de:4e:7d:26:4c:7b:a3:
                    86:fd:ee:e7:80:e3:07:b9:c2:ae:01:d7:23:eb:f4:
                    d0:33:c3:2d:48:60:1a:8e:34:08:63:bc:68:c6:9b:
                    49:c0:36:0f:bc:57:12:18:d7:38:81:e5:48:8b:07:
                    6d:09:ea:34:a9:ca:1c:07:47:9e:44:4f:c0:07:93:
                    c5:7d:39:c6:c5:54:4f:a8:f5:74:48:bb:b7:21:9b:
                    68:f4:be:92:cc:57:64:cb:0a:65:1c:9c:9e:21:93:
                    ea:3f:0c:08:81:eb:84:c9:f4:47:88:ca:1b:8d:dc:
                    ee:b2:96:f0:c1:58:2b:23:4d:66:2e:4c:48:28:ed:
                    5f:56:c3:72:ed:ce:b6:ce:b3:12:8b:a6:18:48:30:
                    dc:47:18:aa:f2:44:1e:28:b7:54:28:64:70:f0:88:
                    13:90:c9:f7:b6:e6:99:b1:41:6c:bd:a1:19:4c:1d:
                    1d:b6:eb:b2:d2:20:5e:59:95:82:6b:98:2e:6e:89:
                    14:ad:ff:a7:e1:dd:95:b9:79:b7:d9:b8:9f:d0:25:
                    37:ba:50:17:cd:29:e6:04:e6:f0:a3:a5:7f:f1:8c:
                    b9:10:64:8e:c0:c2:26:32:99:fb:a6:35:c8:a2:4e:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0B:F6:D4:F1:87:96:70:38:05:46:C5:B4:84:E6:2A:11:A4:C5:23
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230352e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:62:6a:40:d7:fd:fe:00:d2:98:53:64:19:2a:ae:82:3e:
         1d:37:cf:17:69:7d:4d:7e:4a:0e:f6:db:13:1b:f5:e8:e8:02:
         4f:41:59:c1:fd:88:81:24:f4:f9:db:0c:ef:07:b0:de:76:7f:
         60:ab:e8:82:f9:a7:fe:69:de:0f:98:1c:8d:5f:60:4e:97:87:
         47:66:11:db:02:ec:34:53:ab:26:3c:4b:ea:9f:4b:d2:4e:e5:
         ce:42:fc:34:02:7e:51:96:4e:56:2e:6e:f5:7b:e9:c0:ce:24:
         0d:4d:e8:64:e8:f7:6f:3e:2e:61:67:8c:f9:20:96:8d:ad:19:
         e5:e4:b8:45:12:96:94:ee:3d:ad:ef:1c:fe:78:45:e9:a9:17:
         2e:2d:de:cc:08:7d:2b:da:fb:18:40:7a:58:c6:66:c8:ee:08:
         e8:45:77:6f:5d:43:04:4e:21:3e:06:cb:fd:16:7d:29:3b:46:
         d3:eb:79:3a:ee:dc:b4:73:78:6c:81:7e:22:f4:41:46:4d:b4:
         2a:01:98:78:28:31:d7:26:3c:b4:78:70:e2:cf:b8:84:2d:96:
         6f:de:15:b2:5e:a9:d2:87:3f:60:ce:78:cc:f1:b7:89:7d:6f:
         8b:b5:a6:16:43:84:dd:6e:f6:06:c6:cf:3d:2e:3f:90:04:67:
         a1:69:8d:d3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDGX7DMcH3cFiSuoWF/aurbAfmmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNDAzMDUxODEzNDFaFw0yNTAzMDQxODE4NDFaMDMxMTAvBgNV
BAMTKDIxMEJGNkQ0RjE4Nzk2NzAzODA1NDZDNUI0ODRFNjJBMTFBNEM1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS8ezCRIrKE1bEx8Iqj81ksSzA
Iz0z3k59Jkx7o4b97ueA4we5wq4B1yPr9NAzwy1IYBqONAhjvGjGm0nANg+8VxIY
1ziB5UiLB20J6jSpyhwHR55ET8AHk8V9OcbFVE+o9XRIu7chm2j0vpLMV2TLCmUc
nJ4hk+o/DAiB64TJ9EeIyhuN3O6ylvDBWCsjTWYuTEgo7V9Ww3LtzrbOsxKLphhI
MNxHGKryRB4ot1QoZHDwiBOQyfe25pmxQWy9oRlMHR2267LSIF5ZlYJrmC5uiRSt
/6fh3ZW5ebfZuJ/QJTe6UBfNKeYE5vCjpX/xjLkQZI7AwiYymfumNciiTqfPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIQv21PGHlnA4BUbFtITmKhGkxSMwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzN
MA0GCSqGSIb3DQEBCwUAA4IBAQAvMGJqQNf9/gDSmFNkGSqugj4dN88XaX1NfkoO
9tsTG/Xo6AJPQVnB/YiBJPT52wzvB7Dedn9gq+iC+af+ad4PmByNX2BOl4dHZhHb
Auw0U6smPEvqn0vSTuXOQvw0An5Rlk5WLm71e+nAziQNTehk6PdvPi5hZ4z5IJaN
rRnl5LhFEpaU7j2t7xz+eEXpqRcuLd7MCH0r2vsYQHpYxmbI7gjoRXdvXUMETiE+
Bsv9Fn0pO0bT63k67ty0c3hsgX4i9EFGTbQqAZh4KDHXJjy0eHDiz7iELZZv3hWy
XqnShz9gznjM8beJfW+LtaYWQ4TdbvYGxs89Lj+QBGehaY3T
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org