Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa
File:                     3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa (raw, json)
Hash identifier:          dttZlwK2sgbhMNdqLU1fdLWaSjfH79rhcnkoq6osOo0=
Subject key identifier:   D3:6C:BB:59:C2:D6:7B:26:CB:30:8E:D5:09:3C:68:5F:D3:AA:CD:9F
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       6ABCD5C4AFF5123242E1254AA1DF5A441669C60F
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     272140
IP address blocks:        190.103.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bc:d5:c4:af:f5:12:32:42:e1:25:4a:a1:df:5a:44:16:69:c6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=D36CBB59C2D67B26CB308ED5093C685FD3AACD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:17:f2:79:4e:ad:ca:bb:2f:d2:08:79:09:
                    10:93:43:34:40:ce:c7:52:b3:7e:21:73:0b:e4:ad:
                    4c:22:a9:f0:d1:dc:31:83:c3:4a:d6:5e:d8:0e:27:
                    56:17:0e:ae:82:69:f3:88:85:85:49:17:4f:ae:2d:
                    b1:33:3a:e2:16:df:50:c7:af:0b:b9:cb:ed:ac:0a:
                    2a:d7:81:95:26:6f:77:fd:85:42:1d:08:bf:57:65:
                    f5:7a:70:af:72:68:0c:e7:a9:4a:7e:61:f5:aa:36:
                    83:72:59:10:a2:a0:1e:9c:e7:3e:8c:2d:fa:f6:5f:
                    1c:55:db:22:db:16:94:ba:63:c6:37:ad:c7:f2:6c:
                    83:df:31:09:e5:a6:c2:0f:fb:bf:71:b4:2d:9b:ca:
                    94:7c:27:f9:14:2b:8a:ab:ab:87:1d:d9:ac:38:13:
                    79:ae:12:22:5b:91:08:19:65:65:36:2a:4d:78:3e:
                    0c:c7:ad:2a:8d:0b:88:f1:70:b7:4e:8b:bc:ee:77:
                    cf:09:4c:eb:70:d4:0c:10:30:86:94:b4:d7:dd:09:
                    2e:d8:ad:2a:fd:80:f9:63:c9:e9:fc:9a:ab:00:39:
                    16:40:a9:f6:7b:23:95:42:8b:a4:02:6a:74:6c:43:
                    63:f8:fd:24:0c:e0:a7:8a:04:17:83:be:64:9c:ba:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6C:BB:59:C2:D6:7B:26:CB:30:8E:D5:09:3C:68:5F:D3:AA:CD:9F
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b7:38:b9:90:57:c6:17:be:d0:27:19:fd:4c:52:4a:41:60:
         42:6a:68:c7:77:d2:aa:c5:a1:80:c9:91:17:25:3e:dc:6d:cf:
         a1:b9:09:f9:3d:59:2b:55:be:ce:2a:4b:3d:13:a6:4d:f4:9b:
         db:4a:3f:39:1e:4f:21:ea:9c:18:6f:b4:4b:fc:e2:9d:9f:e2:
         87:47:28:d5:29:9b:cc:b2:2d:9c:f7:60:0e:36:b6:3e:2d:ed:
         2c:be:56:ea:8c:8f:fd:f9:f5:40:0b:f4:35:23:96:a3:48:73:
         3b:bb:c4:6f:db:36:2e:7c:8d:8b:da:ee:bf:e7:fc:f4:b5:82:
         23:04:27:fe:a3:8b:de:6e:ee:ef:77:8d:e5:37:8e:ec:7c:89:
         89:9f:64:03:e3:76:3d:01:76:de:42:07:a1:5c:cd:99:3b:d3:
         6a:dc:b0:72:4e:85:ee:b9:57:42:eb:33:cb:d8:5c:1c:a5:6f:
         20:09:e7:a8:bf:95:ba:2e:2c:5d:a3:49:85:26:df:a4:64:50:
         0e:6b:d1:c2:5b:3e:9b:12:8d:51:cb:ab:ba:59:c6:7b:18:dc:
         96:26:20:ce:8e:49:7d:8f:b2:44:58:3b:73:d8:86:4d:93:65:
         7b:23:be:40:e1:66:43:60:90:06:27:0e:ee:fc:15:83:9e:3a:
         30:ec:ea:7a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUarzVxK/1EjJC4SVKod9aRBZpxg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI0OUY5RjJEMDM2OUZGMDZFOUIyNjUxNjYzRUZBMjQy
M0U0MkFGQzAeFw0yNDAzMDUxODAyMjBaFw0yNTAzMDQxODA3MjBaMDMxMTAvBgNV
BAMTKEQzNkNCQjU5QzJENjdCMjZDQjMwOEVENTA5M0M2ODVGRDNBQUNEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAhfyeU6tyrsv0gh5CRCTQzRA
zsdSs34hcwvkrUwiqfDR3DGDw0rWXtgOJ1YXDq6CafOIhYVJF0+uLbEzOuIW31DH
rwu5y+2sCirXgZUmb3f9hUIdCL9XZfV6cK9yaAznqUp+YfWqNoNyWRCioB6c5z6M
Lfr2XxxV2yLbFpS6Y8Y3rcfybIPfMQnlpsIP+79xtC2bypR8J/kUK4qrq4cd2aw4
E3muEiJbkQgZZWU2Kk14PgzHrSqNC4jxcLdOi7zud88JTOtw1AwQMIaUtNfdCS7Y
rSr9gPljyen8mqsAORZAqfZ7I5VCi6QCanRsQ2P4/SQM4KeKBBeDvmScupA1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU02y7WcLWeybLMI7VCTxoX9OqzZ8wHwYDVR0j
BBgwFoAUMkn58tA2n/BumyZRZj76JCPkKvwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTJDRTBGRjhDMzNEMkFDRDA0NTNCNDI5NDE0NTk0QURD
QjRGNzk3NDNFQTcyRUM3NDQwNjI2MUE4MDBEMEZBLzAvMzI0OUY5RjJEMDM2OUZG
MDZFOUIyNjUxNjYzRUZBMjQyM0U0MkFGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjQ5RjlGMkQwMzY5RkYwNkU5
QjI2NTE2NjNFRkEyNDIzRTQyQUZDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzEyQ0UwRkY4QzMzRDJBQ0QwNDUzQjQyOTQxNDU5NEFEQ0I0Rjc5NzQz
RUE3MkVDNzQ0MDYyNjFBODAwRDBGQS8wLzMxMzkzMDJlMzEzMDMzMmUzMTM5MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMTM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
Z78wDQYJKoZIhvcNAQELBQADggEBAEu3OLmQV8YXvtAnGf1MUkpBYEJqaMd30qrF
oYDJkRclPtxtz6G5Cfk9WStVvs4qSz0Tpk30m9tKPzkeTyHqnBhvtEv84p2f4odH
KNUpm8yyLZz3YA42tj4t7Sy+VuqMj/359UAL9DUjlqNIczu7xG/bNi58jYva7r/n
/PS1giMEJ/6ji95u7u93jeU3jux8iYmfZAPjdj0Bdt5CB6FczZk702rcsHJOhe65
V0LrM8vYXBylbyAJ56i/lbouLF2jSYUm36RkUA5r0cJbPpsSjVHLq7pZxnsY3JYm
IM6OSX2PskRYO3PYhk2TZXsjvkDhZkNgkAYnDu78FYOeOjDs6no=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org