Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132302e36342e302f32302d3234203d3e203238303235.roa
File:                     3139302e3132302e36342e302f32302d3234203d3e203238303235.roa (raw, json)
Hash identifier:          VPAHqjWPIRG0DghvEmKKgifHEUygFJwnmUabD7Q5KkE=
Subject key identifier:   6B:4E:10:0C:D5:B1:DB:9F:8E:72:82:9F:36:61:11:B9:06:5E:42:02
Certificate issuer:       /CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
Certificate serial:       77CABAE98D8B66B301C377BFCAA782BD7CAB9DA2
Authority key identifier: F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132302e36342e302f32302d3234203d3e203238303235.roa
Signing time:             Tue 05 Mar 2024 18:17:09 +0000
ROA not before:           Tue 05 Mar 2024 18:12:09 +0000
ROA not after:            Tue 04 Mar 2025 18:17:09 +0000
asID:                     28025
IP address blocks:        190.120.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ca:ba:e9:8d:8b:66:b3:01:c3:77:bf:ca:a7:82:bd:7c:ab:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
        Validity
            Not Before: Mar  5 18:12:09 2024 GMT
            Not After : Mar  4 18:17:09 2025 GMT
        Subject: CN=6B4E100CD5B1DB9F8E72829F366111B9065E4202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:59:d6:2c:04:dd:d8:e4:b1:c2:3d:4d:5f:
                    0f:a5:71:32:4a:0a:42:7f:14:30:88:0b:c5:53:10:
                    51:80:0a:fe:2b:cf:a3:f1:91:e1:e0:2d:82:0c:d4:
                    32:23:a7:f4:ea:a0:93:bd:9d:5a:a9:98:22:bf:38:
                    8c:8f:5a:1a:59:57:22:38:bd:b5:a3:3c:73:54:64:
                    12:5f:2f:76:e6:91:bf:a4:ae:fa:45:70:06:e2:ee:
                    96:b2:bb:73:b1:d4:d7:41:87:1c:c1:ae:11:22:a2:
                    22:77:e0:df:d2:40:b2:10:61:be:11:d3:df:26:b0:
                    af:57:60:dd:43:49:5a:f2:69:52:12:ff:80:51:c0:
                    b2:aa:68:aa:49:c6:eb:05:e5:ef:34:32:44:e6:f2:
                    8b:c8:a3:ff:0c:b9:47:fe:0c:c3:fe:1b:d7:ee:7f:
                    b5:13:f5:6e:10:41:dd:de:12:5f:18:28:c1:a0:72:
                    34:5d:2a:37:6b:44:11:40:3a:a9:35:a2:af:23:82:
                    60:18:53:42:4a:2a:56:33:a6:04:2c:1b:51:6e:40:
                    91:03:38:a9:14:be:fa:ef:b6:f4:00:f2:ba:2f:e1:
                    48:d1:9b:4f:8a:fa:1c:50:00:a4:6b:31:1b:83:21:
                    c5:04:5f:fa:9c:9f:96:df:cd:81:ba:e9:57:ee:87:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:10:0C:D5:B1:DB:9F:8E:72:82:9F:36:61:11:B9:06:5E:42:02
            X509v3 Authority Key Identifier:
                keyid:F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132302e36342e302f32302d3234203d3e203238303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:a2:77:90:07:0c:8d:3b:99:61:c8:1e:b5:be:4b:39:50:
         51:99:8d:c2:2d:16:25:e1:42:b0:10:0f:7e:e0:bb:15:81:0c:
         72:15:de:c9:b6:f0:3a:56:6a:dd:d9:35:1f:c6:f9:2a:4e:c0:
         87:7b:24:5d:2a:3a:20:a5:38:09:f0:ee:b3:95:02:35:b5:83:
         14:8a:06:f1:14:e0:f6:a0:47:b7:6c:b2:28:74:c5:9c:ef:55:
         fe:e3:c9:40:bd:ce:70:61:bf:39:53:5b:5c:a2:1c:ce:34:9a:
         fc:b7:53:25:d4:0f:ff:d4:a8:55:ef:08:38:8d:50:95:3d:1f:
         3d:88:c8:fb:cc:65:86:00:3d:79:25:0f:a8:1e:24:63:d2:4a:
         c7:35:28:18:fb:67:bf:0f:ff:26:3c:af:ef:9f:97:e0:df:97:
         b1:27:b8:ef:bf:0a:88:25:0d:e0:36:e0:b3:d0:ca:6f:c2:53:
         d3:9b:6d:bb:e6:62:2d:92:74:4f:0c:7f:ad:73:c3:ca:c9:f9:
         88:eb:87:ed:f1:96:12:04:00:2c:8e:75:b0:83:a0:46:5b:7c:
         c5:aa:55:9f:15:fc:03:9f:7c:09:88:92:56:dd:e9:23:8b:85:
         c7:7a:b6:e7:de:87:37:24:3f:de:b2:ad:ff:42:1f:aa:02:70:
         93:5e:5b:78
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd8q66Y2LZrMBw3e/yqeCvXyrnaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0QjlDNDNFRUVCMTlBMEVEMTA1ODAzREM4RTk5NDND
RURBMzVBQTAeFw0yNDAzMDUxODEyMDlaFw0yNTAzMDQxODE3MDlaMDMxMTAvBgNV
BAMTKDZCNEUxMDBDRDVCMURCOUY4RTcyODI5RjM2NjExMUI5MDY1RTQyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmFnWLATd2OSxwj1NXw+lcTJK
CkJ/FDCIC8VTEFGACv4rz6PxkeHgLYIM1DIjp/TqoJO9nVqpmCK/OIyPWhpZVyI4
vbWjPHNUZBJfL3bmkb+krvpFcAbi7payu3Ox1NdBhxzBrhEioiJ34N/SQLIQYb4R
098msK9XYN1DSVryaVIS/4BRwLKqaKpJxusF5e80MkTm8ovIo/8MuUf+DMP+G9fu
f7UT9W4QQd3eEl8YKMGgcjRdKjdrRBFAOqk1oq8jgmAYU0JKKlYzpgQsG1FuQJED
OKkUvvrvtvQA8rov4UjRm0+K+hxQAKRrMRuDIcUEX/qcn5bfzYG66Vfuh3pVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUa04QDNWx25+OcoKfNmERuQZeQgIwHwYDVR0j
BBgwFoAU9kucQ+7rGaDtEFgD3I6ZQ87aNaowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83Mzk2ODUxRDczQkVCRDNDODdGNTU1RTJGQUZGN0E1RTc3
REE0NzBFMkMyMTEyN0NGRkE1QjRBMkQ5RTYzNkE4LzAvRjY0QjlDNDNFRUVCMTlB
MEVEMTA1ODAzREM4RTk5NDNDRURBMzVBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjRCOUM0M0VFRUIxOUEwRUQx
MDU4MDNEQzhFOTk0M0NFREEzNUFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzM5Njg1MUQ3M0JFQkQzQzg3RjU1NUUyRkFGRjdBNUU3N0RBNDcwRTJD
MjExMjdDRkZBNUI0QTJEOUU2MzZBOC8wLzMxMzkzMDJlMzEzMjMwMmUzNjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMwMzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL54QDAN
BgkqhkiG9w0BAQsFAAOCAQEAgm2id5AHDI07mWHIHrW+SzlQUZmNwi0WJeFCsBAP
fuC7FYEMchXeybbwOlZq3dk1H8b5Kk7Ah3skXSo6IKU4CfDus5UCNbWDFIoG8RTg
9qBHt2yyKHTFnO9V/uPJQL3OcGG/OVNbXKIczjSa/LdTJdQP/9SoVe8IOI1QlT0f
PYjI+8xlhgA9eSUPqB4kY9JKxzUoGPtnvw//Jjyv75+X4N+XsSe4778KiCUN4Dbg
s9DKb8JT05ttu+ZiLZJ0Twx/rXPDysn5iOuH7fGWEgQALI51sIOgRlt8xapVnxX8
A598CYiSVt3pI4uFx3q2596HNyQ/3rKt/0IfqgJwk15beA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org