Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e302e302f31392d3234203d3e203237373839.roa
File:                     3139302e39332e302e302f31392d3234203d3e203237373839.roa (raw, json)
Hash identifier:          M3weU0u7dEn0pw59ppPsM/oBn+EAQ0d4OEv2bI3YmsM=
Subject key identifier:   01:03:B3:0D:43:1C:8B:60:D3:0D:83:CA:F1:13:2A:79:C5:79:25:B6
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       1B91AB16F6F34366BDEE3C16BAC84B0EFFBB38B7
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e302e302f31392d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:25 +0000
ROA not before:           Tue 05 Mar 2024 18:13:25 +0000
ROA not after:            Tue 04 Mar 2025 18:18:25 +0000
asID:                     27789
IP address blocks:        190.93.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:91:ab:16:f6:f3:43:66:bd:ee:3c:16:ba:c8:4b:0e:ff:bb:38:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:25 2024 GMT
            Not After : Mar  4 18:18:25 2025 GMT
        Subject: CN=0103B30D431C8B60D30D83CAF1132A79C57925B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:29:b7:a0:2f:79:36:c3:b4:b1:f7:0d:a8:
                    c4:08:0b:db:68:2c:82:54:85:0a:ab:24:5d:e6:03:
                    f5:49:b0:47:0a:9d:11:ff:f3:5e:08:8b:25:2b:7a:
                    77:e0:41:32:d8:b1:9b:64:c2:b6:2e:65:07:ea:2d:
                    71:1d:be:95:7e:b9:fc:8e:c0:29:73:82:93:5b:e6:
                    14:c2:1a:3b:ed:69:89:d4:6c:44:99:49:01:18:f5:
                    46:32:36:ac:13:b2:e9:cd:49:c6:a8:75:ae:b2:a2:
                    dd:b3:e8:af:0d:7b:25:da:0f:8d:33:65:f5:af:fe:
                    b9:8c:94:34:48:ba:16:8c:8d:5a:52:2a:dc:e9:be:
                    3b:d3:5a:19:f4:ef:9b:be:6a:e5:1f:d6:19:53:46:
                    e9:7a:cd:8b:e0:fe:97:57:49:26:a2:e3:1f:47:18:
                    31:0d:eb:b8:13:08:36:8b:09:74:5d:fd:0e:1b:df:
                    ef:0f:fc:89:df:f2:76:e3:0c:f3:e7:75:22:25:c1:
                    d9:ed:fd:68:db:50:ae:e5:a3:f8:9f:14:c2:e2:c3:
                    37:05:89:a1:83:89:42:ff:d5:5e:e8:7b:2d:c6:22:
                    73:6c:9c:d8:fe:d8:a1:77:00:f2:f3:4b:23:8b:63:
                    9a:1a:4c:5f:e3:ab:a1:24:20:01:c4:9c:1b:92:0e:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:B3:0D:43:1C:8B:60:D3:0D:83:CA:F1:13:2A:79:C5:79:25:B6
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e302e302f31392d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:3a:2d:35:70:76:4f:1f:30:58:77:c0:2d:55:4f:a3:ac:
         8b:a7:23:e7:fc:7b:a1:4d:a2:4b:cb:6a:79:30:ff:bd:df:c4:
         c2:63:57:9d:18:19:34:4c:30:36:f8:d4:32:02:af:26:90:4b:
         65:0c:ed:ea:59:39:da:63:d9:62:05:be:cd:a9:7c:db:59:37:
         4c:77:5d:e7:20:d8:d5:4e:53:26:95:eb:56:64:22:f4:ee:f6:
         66:da:b8:df:5b:8b:7d:f3:76:ee:fe:19:bc:9f:f1:c0:bc:45:
         d7:0a:50:6a:d9:cc:14:8e:03:35:af:9e:1a:a4:40:59:e9:58:
         c2:eb:2a:c2:7a:5c:62:51:cd:2f:3f:46:86:b8:02:6a:dd:ea:
         2d:50:4f:d7:b7:5b:c8:38:cb:15:ff:ca:6b:3c:15:8d:b3:13:
         37:2b:76:66:b8:78:a5:ad:13:5a:fa:d0:24:b9:dd:da:83:81:
         9d:f0:18:45:97:89:e4:10:1c:bd:51:c0:80:26:b6:19:0a:ba:
         3d:88:eb:3f:33:f5:d7:8c:53:af:1a:80:ba:7c:ae:5b:b9:de:
         69:78:a6:3a:8e:1f:e3:67:bd:e7:04:ff:4a:00:01:86:76:43:
         d7:d1:a3:46:c3:c2:d0:73:33:b8:f9:99:a2:48:04:dd:71:a6:
         52:f4:64:66
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUG5GrFvbzQ2a97jwWushLDv+7OLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDAzMDUxODEzMjVaFw0yNTAzMDQxODE4MjVaMDMxMTAvBgNV
BAMTKDAxMDNCMzBENDMxQzhCNjBEMzBEODNDQUYxMTMyQTc5QzU3OTI1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPQCm3oC95NsO0sfcNqMQIC9to
LIJUhQqrJF3mA/VJsEcKnRH/814IiyUrenfgQTLYsZtkwrYuZQfqLXEdvpV+ufyO
wClzgpNb5hTCGjvtaYnUbESZSQEY9UYyNqwTsunNScaoda6yot2z6K8NeyXaD40z
ZfWv/rmMlDRIuhaMjVpSKtzpvjvTWhn075u+auUf1hlTRul6zYvg/pdXSSai4x9H
GDEN67gTCDaLCXRd/Q4b3+8P/Inf8nbjDPPndSIlwdnt/WjbUK7lo/ifFMLiwzcF
iaGDiUL/1V7oey3GInNsnNj+2KF3APLzSyOLY5oaTF/jq6EkIAHEnBuSDt/NAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUAQOzDUMci2DTDYPK8RMqecV5JbYwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMjM3MzczODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvl0AMA0GCSqG
SIb3DQEBCwUAA4IBAQBXzzotNXB2Tx8wWHfALVVPo6yLpyPn/HuhTaJLy2p5MP+9
38TCY1edGBk0TDA2+NQyAq8mkEtlDO3qWTnaY9liBb7NqXzbWTdMd13nINjVTlMm
letWZCL07vZm2rjfW4t983bu/hm8n/HAvEXXClBq2cwUjgM1r54apEBZ6VjC6yrC
elxiUc0vP0aGuAJq3eotUE/Xt1vIOMsV/8prPBWNsxM3K3ZmuHilrRNa+tAkud3a
g4Gd8BhFl4nkEBy9UcCAJrYZCro9iOs/M/XXjFOvGoC6fK5bud5peKY6jh/jZ73n
BP9KAAGGdkPX0aNGw8LQczO4+ZmiSATdcaZS9GRm
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org