Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3132372e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          Dkl9l1QjROQyvA7AYyTrivohP7FInSuJwXLseyRdFFE=
Subject key identifier:   99:1A:45:4E:B5:B2:A6:0B:ED:93:95:84:39:E8:7C:5E:7C:DE:4E:A3
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       15963EC90E38EE37E679D5370F3181DFB180E00F
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:00 +0000
ROA not before:           Tue 10 Sep 2024 13:05:00 +0000
ROA not after:            Tue 09 Sep 2025 13:10:00 +0000
asID:                     174
IP address blocks:        190.93.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:96:3e:c9:0e:38:ee:37:e6:79:d5:37:0f:31:81:df:b1:80:e0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:00 2024 GMT
            Not After : Sep  9 13:10:00 2025 GMT
        Subject: CN=991A454EB5B2A60BED93958439E87C5E7CDE4EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:2e:25:15:03:33:b8:ac:41:77:af:fc:b0:
                    fe:d2:f7:74:2c:b9:42:c8:7d:e5:4c:81:20:0a:27:
                    a2:bc:c8:4b:2d:4e:22:83:a8:eb:16:d2:ac:35:e8:
                    ba:1f:a6:be:33:4c:a7:8b:c2:14:5f:ad:44:50:f3:
                    72:93:52:4c:4b:c0:cc:11:6a:24:a9:b5:3d:87:9e:
                    a6:80:c4:ca:c0:ae:5e:a5:31:92:a6:41:50:ea:ff:
                    9f:e5:0a:48:7d:fc:77:46:c3:15:02:4f:c8:91:0a:
                    87:0a:47:8e:55:1b:8b:32:1f:c5:15:70:4c:5a:0d:
                    94:09:48:39:80:f8:dd:be:0a:8c:66:42:3b:6a:ff:
                    08:16:15:fd:d5:8f:6b:93:d4:3e:80:70:82:19:20:
                    90:2f:bd:1c:15:07:a4:e6:e7:cf:a6:4a:ec:90:71:
                    e1:49:52:33:d5:a7:1e:78:d5:1a:82:f4:31:ef:69:
                    71:72:96:28:de:26:96:60:e1:49:11:1d:20:c0:da:
                    3e:da:e2:7c:6c:e3:f0:f9:f5:8d:27:e7:69:4f:d4:
                    0f:3c:28:b9:9e:50:6c:b5:0b:a6:9a:ab:ba:ae:c1:
                    73:6e:b0:4d:14:43:da:24:00:b5:2e:2d:04:d1:9b:
                    57:29:96:00:c1:93:11:a0:f6:b0:e6:98:73:05:d6:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:45:4E:B5:B2:A6:0B:ED:93:95:84:39:E8:7C:5E:7C:DE:4E:A3
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132372e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:b0:74:56:81:45:d1:06:28:a0:6c:63:df:63:1d:50:0b:
         5e:25:a1:52:c1:28:83:59:a5:00:86:16:36:b9:1b:d1:25:c1:
         9b:40:78:0d:65:7e:36:79:ba:d5:af:a5:82:d7:06:ce:db:4c:
         64:eb:e7:f6:b5:0a:37:bc:1f:48:0c:90:60:d2:f6:58:9f:77:
         c2:6c:6f:d2:ec:9d:94:03:09:18:03:82:92:ce:68:39:f1:4b:
         0a:27:cd:72:38:19:5b:11:af:7c:18:15:d7:66:97:5f:d5:34:
         e1:35:5d:26:a3:84:93:1a:89:23:71:b0:02:a6:44:55:8f:4e:
         33:aa:d1:d2:d2:92:08:de:2f:2a:93:1a:d6:a5:09:30:20:02:
         65:b8:84:7b:0e:79:d9:48:c3:6a:1d:e9:a8:05:26:46:7e:50:
         a0:d5:f1:94:2f:70:f6:3c:05:b1:15:b4:04:16:ce:9b:5f:43:
         e7:7e:a7:bc:2c:ce:7e:ac:d4:d3:ca:22:26:4e:74:84:4f:81:
         e5:b6:73:29:23:d8:16:c1:da:af:d2:a4:fe:75:74:b6:41:03:
         08:1f:f1:34:43:ec:a7:dd:f7:d5:58:7c:d8:90:00:7e:0b:ad:
         dc:a6:5c:e6:af:81:40:5c:b1:f7:46:4c:58:f6:b3:71:3e:c6:
         7b:86:f9:6f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFZY+yQ447jfmedU3DzGB37GA4A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDA5MTAxMzA1MDBaFw0yNTA5MDkxMzEwMDBaMDMxMTAvBgNV
BAMTKDk5MUE0NTRFQjVCMkE2MEJFRDkzOTU4NDM5RTg3QzVFN0NERTRFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjS4lFQMzuKxBd6/8sP7S93Qs
uULIfeVMgSAKJ6K8yEstTiKDqOsW0qw16Lofpr4zTKeLwhRfrURQ83KTUkxLwMwR
aiSptT2HnqaAxMrArl6lMZKmQVDq/5/lCkh9/HdGwxUCT8iRCocKR45VG4syH8UV
cExaDZQJSDmA+N2+CoxmQjtq/wgWFf3Vj2uT1D6AcIIZIJAvvRwVB6Tm58+mSuyQ
ceFJUjPVpx541RqC9DHvaXFylijeJpZg4UkRHSDA2j7a4nxs4/D59Y0n52lP1A88
KLmeUGy1C6aaq7quwXNusE0UQ9okALUuLQTRm1cplgDBkxGg9rDmmHMF1o77AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmRpFTrWypgvtk5WEOeh8XnzeTqMwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl1/MA0GCSqG
SIb3DQEBCwUAA4IBAQCl1bB0VoFF0QYooGxj32MdUAteJaFSwSiDWaUAhhY2uRvR
JcGbQHgNZX42ebrVr6WC1wbO20xk6+f2tQo3vB9IDJBg0vZYn3fCbG/S7J2UAwkY
A4KSzmg58UsKJ81yOBlbEa98GBXXZpdf1TThNV0mo4STGokjcbACpkRVj04zqtHS
0pII3i8qkxrWpQkwIAJluIR7DnnZSMNqHemoBSZGflCg1fGUL3D2PAWxFbQEFs6b
X0Pnfqe8LM5+rNTTyiImTnSET4HltnMpI9gWwdqv0qT+dXS2QQMIH/E0Q+yn3ffV
WHzYkAB+C63cplzmr4FAXLH3RkxY9rNxPsZ7hvlv
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org