Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa
File:                     3139302e352e3139322e302f32332d3234203d3e203237363530.roa (raw, json)
Hash identifier:          tCAJEFVSR3gY+n4EPfGWXN8WyAfaktaCihFV425IfAo=
Subject key identifier:   39:4C:E0:D6:2C:A0:97:B0:FE:FE:C9:4E:7B:0A:97:0F:65:46:72:20
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       65DC6EA1C77EBA60459461DA7961840C10F2AD4A
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa
Signing time:             Tue 05 Mar 2024 18:03:08 +0000
ROA not before:           Tue 05 Mar 2024 17:58:08 +0000
ROA not after:            Tue 04 Mar 2025 18:03:08 +0000
asID:                     27650
IP address blocks:        190.5.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dc:6e:a1:c7:7e:ba:60:45:94:61:da:79:61:84:0c:10:f2:ad:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Mar  5 17:58:08 2024 GMT
            Not After : Mar  4 18:03:08 2025 GMT
        Subject: CN=394CE0D62CA097B0FEFEC94E7B0A970F65467220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:95:54:ba:8e:9e:67:c5:26:31:53:1a:80:
                    5a:7f:05:06:9b:cb:6e:1f:7d:0c:e7:01:6b:15:68:
                    b7:6c:3c:6e:f8:63:1b:02:75:33:f2:a1:99:19:10:
                    f6:52:7e:20:aa:aa:d0:9d:60:82:55:e9:57:91:c2:
                    01:73:e5:32:86:2e:1d:a9:f6:6b:2a:e0:b5:11:01:
                    76:7d:e3:b0:ac:c7:c9:f1:6b:2c:2b:7a:ab:e9:f4:
                    23:8c:e9:e9:61:e2:d1:d7:81:14:21:5a:9e:7a:57:
                    e4:72:66:84:7d:bf:fe:9d:4d:52:d1:04:ae:3f:83:
                    46:50:f9:b9:2d:8b:99:13:bc:46:0a:8a:f0:a7:23:
                    e8:ee:03:2a:2c:db:d6:c3:7e:46:55:a3:ac:51:fe:
                    0f:af:48:ec:4a:e2:d8:54:b9:bf:48:ea:1a:08:b4:
                    6f:da:0f:45:99:58:46:ff:c7:27:17:6c:7c:00:4b:
                    89:a0:1a:64:93:46:9a:46:e7:51:50:1c:e8:d2:e2:
                    37:db:00:16:9f:13:10:2a:08:c7:15:04:7b:7c:e6:
                    d6:3f:9d:ec:1b:fc:11:74:0e:b1:de:c7:6b:fb:6e:
                    a5:f3:32:be:01:8d:62:00:2d:51:4a:a2:11:c1:6b:
                    a2:35:73:a5:94:b4:b0:43:3c:21:cd:f2:75:28:b4:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4C:E0:D6:2C:A0:97:B0:FE:FE:C9:4E:7B:0A:97:0F:65:46:72:20
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139322e302f32332d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:53:d4:01:28:6d:b6:1a:a2:b7:3f:9d:23:33:85:ec:09:fa:
         6e:28:a3:13:e5:7b:8f:95:1b:05:70:8d:18:cd:09:b6:55:7e:
         a3:f0:d7:76:b1:f6:cd:70:b9:4b:d7:91:a3:39:cc:41:ca:38:
         24:2d:2c:98:5c:5f:4d:bc:9b:7b:13:65:51:58:77:00:bf:70:
         6d:7f:a1:4e:20:42:48:b7:49:b4:1d:30:91:f6:84:18:91:7b:
         61:6b:c5:bd:a0:2c:fc:3e:42:94:b0:80:ac:ae:15:02:38:ce:
         a9:2c:72:79:39:ba:fc:a4:58:f3:53:65:85:25:96:a2:94:21:
         0d:51:aa:00:2b:e6:af:fb:dc:c0:ca:c0:a5:b4:18:85:ba:ac:
         58:7f:06:22:c5:44:93:92:ed:02:53:87:8c:ee:bf:4f:ac:54:
         d3:46:f3:2c:7e:d5:b0:2c:4c:af:56:37:dc:bf:d0:a6:d0:84:
         d0:bd:5e:76:32:81:f9:f9:50:c1:ee:33:e0:1e:26:d0:96:fd:
         e4:d2:09:10:a7:59:15:93:8c:b9:b8:94:97:70:c4:16:e1:98:
         28:3a:48:12:08:59:40:75:35:41:5c:e7:48:1f:56:49:19:bc:
         09:d2:f3:53:9e:09:38:da:3e:98:f5:89:0d:1f:a7:e9:54:f6:
         75:62:9d:bb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZdxuocd+umBFlGHaeWGEDBDyrUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIwOTUyMjg4OUIyOEY1RDg1NzRCOUY1OUJEM0M4Q0Qw
MTQwMDA4MTAeFw0yNDAzMDUxNzU4MDhaFw0yNTAzMDQxODAzMDhaMDMxMTAvBgNV
BAMTKDM5NENFMEQ2MkNBMDk3QjBGRUZFQzk0RTdCMEE5NzBGNjU0NjcyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/F5VUuo6eZ8UmMVMagFp/BQab
y24ffQznAWsVaLdsPG74YxsCdTPyoZkZEPZSfiCqqtCdYIJV6VeRwgFz5TKGLh2p
9msq4LURAXZ947Csx8nxaywreqvp9COM6elh4tHXgRQhWp56V+RyZoR9v/6dTVLR
BK4/g0ZQ+bkti5kTvEYKivCnI+juAyos29bDfkZVo6xR/g+vSOxK4thUub9I6hoI
tG/aD0WZWEb/xycXbHwAS4mgGmSTRppG51FQHOjS4jfbABafExAqCMcVBHt85tY/
newb/BF0DrHex2v7bqXzMr4BjWIALVFKohHBa6I1c6WUtLBDPCHN8nUotDBZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOUzg1iygl7D+/slOewqXD2VGciAwHwYDVR0j
BBgwFoAUmwlSKImyj12FdLn1m9PIzQFAAIEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTk1MkZFN0IxOENFMjc3NzVCMTM0MDM4NzRBNkVCOTlC
RjRDNTc3NTk3MjYyQ0RGMUU2RTMwMTA0RjY5RkFCLzAvOUIwOTUyMjg4OUIyOEY1
RDg1NzRCOUY1OUJEM0M4Q0QwMTQwMDA4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjA5NTIyODg5QjI4RjVEODU3
NEI5RjU5QkQzQzhDRDAxNDAwMDgxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE5NTJGRTdCMThDRTI3Nzc1QjEzNDAzODc0QTZFQjk5QkY0QzU3NzU5
NzI2MkNERjFFNkUzMDEwNEY2OUZBQi8wLzMxMzkzMDJlMzUyZTMxMzkzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczNjM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+BcAwDQYJ
KoZIhvcNAQELBQADggEBAGdT1AEobbYaorc/nSMzhewJ+m4ooxPle4+VGwVwjRjN
CbZVfqPw13ax9s1wuUvXkaM5zEHKOCQtLJhcX028m3sTZVFYdwC/cG1/oU4gQki3
SbQdMJH2hBiRe2Frxb2gLPw+QpSwgKyuFQI4zqkscnk5uvykWPNTZYUllqKUIQ1R
qgAr5q/73MDKwKW0GIW6rFh/BiLFRJOS7QJTh4zuv0+sVNNG8yx+1bAsTK9WN9y/
0KbQhNC9XnYygfn5UMHuM+AeJtCW/eTSCRCnWRWTjLm4lJdwxBbhmCg6SBIIWUB1
NUFc50gfVkkZvAnS81OeCTjaPpj1iQ0fp+lU9nVinbs=
-----END CERTIFICATE-----
Generated at Sun May 5 11:44:53 2024 by rpki-client on console-ams.rpki-client.org