Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa
File:                     3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa (raw, json)
Hash identifier:          nNH/gLDsxhgvj60+x8q2ldwrO73cVU9t5r2ZQCpukvs=
Subject key identifier:   46:05:00:0C:F5:9A:21:24:98:92:2C:3A:21:83:EA:1C:6F:B5:93:60
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2FD1ACB03C18AB1D8EF1EF1B636AA34F0305A073
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa
Signing time:             Wed 16 Oct 2024 11:25:00 +0000
ROA not before:           Wed 16 Oct 2024 11:20:00 +0000
ROA not after:            Wed 15 Oct 2025 11:25:00 +0000
asID:                     272011
IP address blocks:        190.93.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:ac:b0:3c:18:ab:1d:8e:f1:ef:1b:63:6a:a3:4f:03:05:a0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Oct 16 11:20:00 2024 GMT
            Not After : Oct 15 11:25:00 2025 GMT
        Subject: CN=4605000CF59A212498922C3A2183EA1C6FB59360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:5b:5a:5c:7b:3c:e1:ee:03:a4:b1:66:86:
                    7a:fb:d8:e6:35:c1:a2:8f:dc:9a:c3:26:3e:aa:3f:
                    40:38:e7:08:0a:ed:cb:b4:d2:4f:a4:78:af:3d:d5:
                    6a:95:bd:b3:4d:6b:4c:04:5b:35:9b:30:cb:56:5a:
                    d8:01:a2:c4:10:1b:d3:db:88:e2:9e:c2:5d:16:db:
                    3e:bb:17:22:b6:1e:ee:08:1d:53:51:1d:8b:58:92:
                    ff:90:21:ea:0e:cc:11:41:16:1c:a4:94:10:3c:41:
                    66:62:e6:a8:16:1f:08:ae:4c:d1:ee:dc:7f:5e:fa:
                    cf:52:59:08:b5:da:96:fe:ef:44:80:d7:ee:5d:37:
                    eb:cd:fb:d0:a7:3e:8d:4f:ce:f6:7c:4e:4d:b2:5a:
                    35:59:a9:2c:3f:6d:18:27:34:df:64:b6:1e:17:59:
                    2a:64:c9:1a:65:54:e3:6f:0d:1e:8d:56:5a:20:8b:
                    3e:c8:fe:a6:12:45:c5:39:3a:db:d5:9a:bc:80:ba:
                    57:f9:3d:ce:67:5b:68:6e:38:35:68:a2:84:00:40:
                    c9:7a:0a:a8:7b:62:0d:06:18:11:59:4c:50:f9:c1:
                    77:9b:e4:33:e3:fd:06:02:65:82:07:12:47:00:6f:
                    8f:83:d5:ce:37:2b:91:6a:83:5d:7b:4b:19:67:c2:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:00:0C:F5:9A:21:24:98:92:2C:3A:21:83:EA:1C:6F:B5:93:60
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32342d3234203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:85:58:ec:f4:de:fe:01:d9:4f:ab:c8:29:dc:71:14:61:
         a0:27:b1:db:14:33:e6:fd:8d:57:33:93:a4:a1:2b:a2:1d:ee:
         dd:cc:25:02:77:38:8c:4e:0e:78:18:03:eb:ea:2e:3b:79:0d:
         5e:9d:53:9a:d2:45:12:36:25:32:71:8a:33:96:d7:40:1a:5a:
         8a:47:2d:4f:fb:aa:8f:f4:2c:db:65:ed:63:94:0d:80:c0:09:
         85:af:29:e2:b8:8d:6e:d7:ba:01:e8:55:67:3d:9a:b4:64:ab:
         a1:29:68:d4:cd:00:19:2e:bb:f6:47:d6:d5:2d:21:6a:e9:55:
         27:e2:f3:f8:12:31:d2:8a:ec:9c:64:44:73:35:aa:24:b9:9f:
         c6:15:aa:fc:cd:e6:03:9d:69:1e:77:8c:5a:2a:57:e0:63:29:
         50:64:ff:40:73:ed:18:17:6b:ca:4a:66:c1:f4:72:3d:98:a2:
         00:f7:57:d6:de:3b:6c:fe:de:40:90:dd:ed:67:19:10:25:d9:
         85:91:f0:79:25:c3:f5:1f:c3:99:f7:59:db:4b:32:34:0c:2c:
         83:c8:dd:65:c9:33:85:3b:e2:90:64:03:79:06:56:b2:56:b2:
         2c:3c:62:94:6a:71:d0:12:ce:05:6b:38:bc:f4:28:67:a2:c3:
         2e:99:25:b1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL9GssDwYqx2O8e8bY2qjTwMFoHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDEwMTYxMTIwMDBaFw0yNTEwMTUxMTI1MDBaMDMxMTAvBgNV
BAMTKDQ2MDUwMDBDRjU5QTIxMjQ5ODkyMkMzQTIxODNFQTFDNkZCNTkzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflltaXHs84e4DpLFmhnr72OY1
waKP3JrDJj6qP0A45wgK7cu00k+keK891WqVvbNNa0wEWzWbMMtWWtgBosQQG9Pb
iOKewl0W2z67FyK2Hu4IHVNRHYtYkv+QIeoOzBFBFhyklBA8QWZi5qgWHwiuTNHu
3H9e+s9SWQi12pb+70SA1+5dN+vN+9CnPo1PzvZ8Tk2yWjVZqSw/bRgnNN9kth4X
WSpkyRplVONvDR6NVlogiz7I/qYSRcU5OtvVmryAulf5Pc5nW2huODVoooQAQMl6
Cqh7Yg0GGBFZTFD5wXeb5DPj/QYCZYIHEkcAb4+D1c43K5Fqg117SxlnwpGzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURgUADPWaISSYkiw6IYPqHG+1k2AwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl1+
MA0GCSqGSIb3DQEBCwUAA4IBAQAg84VY7PTe/gHZT6vIKdxxFGGgJ7HbFDPm/Y1X
M5OkoSuiHe7dzCUCdziMTg54GAPr6i47eQ1enVOa0kUSNiUycYozltdAGlqKRy1P
+6qP9CzbZe1jlA2AwAmFryniuI1u17oB6FVnPZq0ZKuhKWjUzQAZLrv2R9bVLSFq
6VUn4vP4EjHSiuycZERzNaokuZ/GFar8zeYDnWked4xaKlfgYylQZP9Ac+0YF2vK
SmbB9HI9mKIA91fW3jts/t5AkN3tZxkQJdmFkfB5JcP1H8OZ91nbSzI0DCyDyN1l
yTOFO+KQZAN5BlayVrIsPGKUanHQEs4Fazi89ChnosMumSWx
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org