Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e3132382e302f31382d3234203d3e203237373338.roa
File:                     3139302e3133312e3132382e302f31382d3234203d3e203237373338.roa (raw, json)
Hash identifier:          aO/YArgMN+t2XwSz7DS97/+IKw/sGo4iZzmD911M1O4=
Subject key identifier:   34:82:F3:C8:0B:F6:B3:D6:9C:89:93:98:47:5B:A7:83:80:7A:A1:D0
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       2371FDBFDEAE82EAC85BD5991239DA75246426EF
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e3132382e302f31382d3234203d3e203237373338.roa
Signing time:             Tue 05 Mar 2024 18:19:15 +0000
ROA not before:           Tue 05 Mar 2024 18:14:15 +0000
ROA not after:            Tue 04 Mar 2025 18:19:15 +0000
asID:                     27738
IP address blocks:        190.131.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:71:fd:bf:de:ae:82:ea:c8:5b:d5:99:12:39:da:75:24:64:26:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Mar  5 18:14:15 2024 GMT
            Not After : Mar  4 18:19:15 2025 GMT
        Subject: CN=3482F3C80BF6B3D69C899398475BA783807AA1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:9f:7d:63:2b:73:5d:06:2a:ff:f7:9a:cc:
                    32:9c:b7:aa:3d:c7:79:93:dd:af:5a:ae:b8:a7:4f:
                    bf:97:d5:43:d5:24:6b:df:c3:01:5c:bd:67:b0:ed:
                    5b:4b:e2:89:b2:36:96:51:ec:ea:ad:81:bf:10:55:
                    c4:5c:5b:f1:4b:42:81:6c:f9:26:d3:70:06:4f:74:
                    f2:d3:1e:84:97:e2:44:91:3e:7c:6f:14:b4:c5:f6:
                    c4:f2:25:b7:0e:ff:69:fe:d1:28:aa:35:5f:80:c9:
                    35:29:f8:2e:d8:e1:c0:be:1e:f3:44:e3:cf:30:45:
                    52:9b:3d:59:7f:29:3b:d6:e4:5e:c1:07:46:7a:6f:
                    6f:c4:8f:95:08:c6:18:7f:4b:a6:c7:02:a2:c0:b9:
                    9f:1d:a0:3e:ca:c2:ce:d8:91:16:97:57:55:e9:b4:
                    c8:a2:d9:c8:d4:9a:2a:41:ed:73:c1:eb:ab:12:14:
                    a3:37:49:9f:fe:ae:7d:1d:c1:ed:ec:81:35:50:7c:
                    db:0f:f9:86:b5:95:b1:7c:36:f9:25:dd:03:36:e1:
                    9e:29:e5:e4:12:6a:41:11:57:b4:5b:d1:cc:ee:12:
                    d9:80:30:70:49:bd:68:58:fd:69:4b:28:13:07:d2:
                    f0:4a:d5:b0:90:40:be:96:48:c0:ae:23:db:77:f0:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:F3:C8:0B:F6:B3:D6:9C:89:93:98:47:5B:A7:83:80:7A:A1:D0
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e3132382e302f31382d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:24:9f:9f:43:5b:d0:f3:2f:b5:44:c9:54:b8:d7:21:89:
         0c:62:1d:df:bf:7f:fe:89:fb:f0:e3:5a:45:09:f0:f5:dc:b4:
         86:18:49:3e:85:1f:e0:e8:05:27:4e:2c:5e:78:db:88:57:f1:
         7f:e7:a1:aa:8c:2f:ca:09:60:1f:5c:68:a8:38:f1:0e:d9:94:
         2f:db:3a:f6:c6:3c:5e:f7:47:3c:c1:af:33:1a:c5:17:3e:1d:
         e8:58:ad:3f:f4:96:6f:d4:f7:54:19:69:96:f7:c2:e0:ce:3f:
         97:13:42:6f:c7:65:3d:c2:2c:32:cd:45:e3:95:f4:2e:4a:b4:
         b5:19:5b:ee:ad:89:36:29:1a:91:d6:6c:5b:3e:2f:08:6e:99:
         18:4c:16:7c:25:8e:a7:82:a1:6e:41:0d:58:46:6b:51:c8:ca:
         41:3e:e8:24:bb:3d:60:b9:26:4b:44:e5:76:f9:9d:df:d8:a7:
         fb:c8:9a:10:ab:63:83:b6:b1:3c:b8:96:82:cc:84:37:af:91:
         1e:74:b1:15:c3:c2:9e:ab:e9:e6:17:5a:e0:ca:1b:9d:2c:79:
         91:86:d4:a4:7f:41:27:e9:d4:b6:3f:cb:0f:7a:85:52:18:f0:
         c9:73:5a:53:06:24:d5:3c:b8:83:c7:27:0e:86:9f:96:12:0d:
         7b:0e:ae:b5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUI3H9v96ugurIW9WZEjnadSRkJu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQTBCNjQzNDhFNzA2MDFERTg2N0M1OTRGMzRBOEJC
ODdFQzkxMTAeFw0yNDAzMDUxODE0MTVaFw0yNTAzMDQxODE5MTVaMDMxMTAvBgNV
BAMTKDM0ODJGM0M4MEJGNkIzRDY5Qzg5OTM5ODQ3NUJBNzgzODA3QUExRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrg599YytzXQYq//eazDKct6o9
x3mT3a9arrinT7+X1UPVJGvfwwFcvWew7VtL4omyNpZR7Oqtgb8QVcRcW/FLQoFs
+SbTcAZPdPLTHoSX4kSRPnxvFLTF9sTyJbcO/2n+0SiqNV+AyTUp+C7Y4cC+HvNE
488wRVKbPVl/KTvW5F7BB0Z6b2/Ej5UIxhh/S6bHAqLAuZ8doD7Kws7YkRaXV1Xp
tMii2cjUmipB7XPB66sSFKM3SZ/+rn0dwe3sgTVQfNsP+Ya1lbF8Nvkl3QM24Z4p
5eQSakERV7Rb0czuEtmAMHBJvWhY/WlLKBMH0vBK1bCQQL6WSMCuI9t38GKzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNILzyAv2s9aciZOYR1ung4B6odAwHwYDVR0j
BBgwFoAU5joLZDSOcGAd6GfFlPNKi7h+yREwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Qjg1REQ2NDUzNTg0MTJGNTAxODc1MDcwMjJEMEUyMUND
MkU1NjhCNEU0MDkyNDc3RkM5RDUyNTk4MkJEMzcxLzAvRTYzQTBCNjQzNDhFNzA2
MDFERTg2N0M1OTRGMzRBOEJCODdFQzkxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjNBMEI2NDM0OEU3MDYwMURF
ODY3QzU5NEYzNEE4QkI4N0VDOTExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI4NURENjQ1MzU4NDEyRjUwMTg3NTA3MDIyRDBFMjFDQzJFNTY4QjRF
NDA5MjQ3N0ZDOUQ1MjU5ODJCRDM3MS8wLzMxMzkzMDJlMzEzMzMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjM3MzczMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvoOA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+miSfn0Nb0PMvtUTJVLjXIYkMYh3fv3/+ifvw
41pFCfD13LSGGEk+hR/g6AUnTixeeNuIV/F/56GqjC/KCWAfXGioOPEO2ZQv2zr2
xjxe90c8wa8zGsUXPh3oWK0/9JZv1PdUGWmW98Lgzj+XE0Jvx2U9wiwyzUXjlfQu
SrS1GVvurYk2KRqR1mxbPi8IbpkYTBZ8JY6ngqFuQQ1YRmtRyMpBPugkuz1guSZL
ROV2+Z3f2Kf7yJoQq2ODtrE8uJaCzIQ3r5EedLEVw8Keq+nmF1rgyhudLHmRhtSk
f0En6dS2P8sPeoVSGPDJc1pTBiTVPLiDxycOhp+WEg17Dq61
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:13:32 2024 by rpki-client on console-ams.rpki-client.org