Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f31392d3234203d3e20323632313435.roa
File:                     3139302e3231312e39362e302f31392d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          Az3siHiwWDL2XmtgkCCW/c7c9vMhiFeBMnC82f6ytxA=
Subject key identifier:   06:EA:44:01:39:3B:57:33:C2:2C:62:F9:7A:5D:C3:E9:20:BF:32:5B
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       50AE5931105544E3D3CD2EE0A1760156DBB1CF33
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f31392d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:12 +0000
ROA not before:           Tue 05 Mar 2024 17:42:12 +0000
ROA not after:            Tue 04 Mar 2025 17:47:12 +0000
asID:                     262145
IP address blocks:        190.211.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:59:31:10:55:44:e3:d3:cd:2e:e0:a1:76:01:56:db:b1:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:12 2024 GMT
            Not After : Mar  4 17:47:12 2025 GMT
        Subject: CN=06EA4401393B5733C22C62F97A5DC3E920BF325B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:07:a8:9a:00:84:b9:a5:2e:e2:fe:cd:05:
                    a0:7e:d7:f1:9f:29:35:2d:60:e0:e3:6c:e0:e0:af:
                    22:7f:0f:c6:23:ff:48:d4:80:9e:25:1a:79:f1:a0:
                    2c:ff:29:1c:df:91:6f:ca:8e:0b:f2:ef:15:65:46:
                    2a:ec:3f:d4:b4:d8:7d:f7:96:4b:dd:12:c8:ea:ed:
                    5c:b7:87:77:08:1e:88:f3:bd:2c:1c:8a:dc:dc:29:
                    a2:f5:2d:13:95:2b:e5:ed:4e:01:57:0d:49:73:3d:
                    3d:7d:77:06:de:00:cb:ab:44:e9:50:6f:68:1a:aa:
                    41:5c:9a:9f:87:d0:11:9c:97:8c:0a:af:75:bf:b6:
                    8b:31:66:cd:71:b0:fc:5a:a5:9a:7e:0c:ba:0c:8b:
                    28:93:09:6b:ff:ae:31:29:13:cc:69:9a:f9:42:f5:
                    0c:55:b0:f0:3e:74:9e:72:c9:f9:95:ca:a8:41:59:
                    85:29:5f:07:be:9e:6a:f6:39:87:0c:3f:97:08:33:
                    f1:81:48:ca:6a:23:b3:a3:67:ba:c1:2b:80:83:89:
                    14:5f:56:6a:d6:76:cb:0a:25:ff:c1:72:5e:dc:74:
                    6b:59:7a:1f:54:dd:6e:83:62:db:86:ea:ec:b7:c9:
                    23:2c:22:ee:fe:32:48:4c:21:6a:1c:f4:8b:4a:d5:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:44:01:39:3B:57:33:C2:2C:62:F9:7A:5D:C3:E9:20:BF:32:5B
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39362e302f31392d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:67:7a:be:4f:94:67:a5:f9:02:e0:fa:5b:0e:01:a1:36:de:
         d6:0e:18:f9:88:06:f0:3f:8f:44:16:77:4c:6a:ed:10:ca:ee:
         40:60:94:57:2b:8c:9d:79:00:ff:af:f6:38:76:e2:56:9d:42:
         3f:c9:b7:e4:25:6c:6c:e8:2f:bf:6a:5e:de:38:da:0f:6b:0e:
         8d:c4:ad:5f:18:e0:52:55:74:5d:15:f7:69:db:ca:51:7b:ef:
         1c:77:a5:e1:9c:73:d5:9b:8e:71:b9:f7:69:f0:a5:24:48:60:
         22:b1:21:4f:32:69:61:e5:77:30:c7:f8:99:b2:dd:fd:ee:1c:
         fb:1c:a3:53:8f:db:d9:c2:c0:46:f4:30:d7:58:e6:46:4d:51:
         d4:37:a8:80:01:2c:39:23:3b:a1:89:28:36:9b:41:71:eb:c0:
         a8:38:4d:af:7e:1b:c5:64:a5:e8:99:e0:e0:fe:c8:20:33:33:
         af:3b:a4:c6:0c:06:9d:48:3d:bf:a5:2e:86:1c:19:83:23:34:
         47:0a:03:f9:68:7a:1c:19:b9:f2:79:e1:8d:c2:b5:a5:35:b3:
         a0:c0:63:44:9d:30:9c:95:38:d7:dd:d7:40:e9:64:ca:1c:02:
         ed:c2:b0:f2:b6:3e:d6:bb:9b:ad:72:de:35:5f:f0:66:17:54:
         d4:98:cc:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUK5ZMRBVROPTzS7goXYBVtuxzzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNDAzMDUxNzQyMTJaFw0yNTAzMDQxNzQ3MTJaMDMxMTAvBgNV
BAMTKDA2RUE0NDAxMzkzQjU3MzNDMjJDNjJGOTdBNURDM0U5MjBCRjMyNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1geomgCEuaUu4v7NBaB+1/Gf
KTUtYODjbODgryJ/D8Yj/0jUgJ4lGnnxoCz/KRzfkW/Kjgvy7xVlRirsP9S02H33
lkvdEsjq7Vy3h3cIHojzvSwcitzcKaL1LROVK+XtTgFXDUlzPT19dwbeAMurROlQ
b2gaqkFcmp+H0BGcl4wKr3W/tosxZs1xsPxapZp+DLoMiyiTCWv/rjEpE8xpmvlC
9QxVsPA+dJ5yyfmVyqhBWYUpXwe+nmr2OYcMP5cIM/GBSMpqI7OjZ7rBK4CDiRRf
VmrWdssKJf/Bcl7cdGtZeh9U3W6DYtuG6uy3ySMsIu7+MkhMIWoc9ItK1ccdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBupEATk7VzPCLGL5el3D6SC/MlswHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzkzMDJlMzIzMTMxMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvtNg
MA0GCSqGSIb3DQEBCwUAA4IBAQBRZ3q+T5RnpfkC4PpbDgGhNt7WDhj5iAbwP49E
FndMau0Qyu5AYJRXK4ydeQD/r/Y4duJWnUI/ybfkJWxs6C+/al7eONoPaw6NxK1f
GOBSVXRdFfdp28pRe+8cd6XhnHPVm45xufdp8KUkSGAisSFPMmlh5Xcwx/iZst39
7hz7HKNTj9vZwsBG9DDXWOZGTVHUN6iAASw5IzuhiSg2m0Fx68CoOE2vfhvFZKXo
meDg/sggMzOvO6TGDAadSD2/pS6GHBmDIzRHCgP5aHocGbnyeeGNwrWlNbOgwGNE
nTCclTjX3ddA6WTKHALtwrDytj7Wu5utct41X/BmF1TUmMxG
-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org