Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137322e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137322e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          nVgv3501qYusYpBj1B4XqiVzebGjFWsb/Qq5owJx4ps=
Subject key identifier:   ED:21:40:EB:57:57:04:21:0F:43:C4:5F:52:3D:7B:5E:55:23:97:4A
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       77DB0AF231914EC2BDB6119D57CEC06748569A2F
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137322e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:57 +0000
ROA not before:           Tue 05 Mar 2024 17:35:57 +0000
ROA not after:            Tue 04 Mar 2025 17:40:57 +0000
asID:                     262171
IP address blocks:        190.93.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:0a:f2:31:91:4e:c2:bd:b6:11:9d:57:ce:c0:67:48:56:9a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:57 2024 GMT
            Not After : Mar  4 17:40:57 2025 GMT
        Subject: CN=ED2140EB575704210F43C45F523D7B5E5523974A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:09:b9:4e:d3:9f:d4:65:d0:c4:38:48:69:
                    0e:dc:df:4f:b4:1c:c9:1d:74:71:38:c9:b8:81:49:
                    ad:6a:0e:e6:87:f6:db:9e:ea:27:ea:9a:fb:e9:31:
                    04:7c:16:7e:bb:e6:e8:6d:16:e8:8e:e7:e9:20:69:
                    57:cf:47:21:a9:44:c9:6f:00:7b:a2:6b:b4:37:98:
                    46:71:ec:d9:bc:58:a3:fd:a6:b3:ec:5c:3c:52:95:
                    dc:e9:12:27:3a:21:fe:9d:5e:10:5f:78:32:fe:de:
                    c4:ba:34:15:a0:97:e1:c6:92:15:74:d4:18:e6:1f:
                    63:e8:6f:57:79:70:7b:00:6a:93:d4:50:d1:cf:a5:
                    11:12:e9:17:1c:67:03:c9:8c:de:3b:3a:4f:6c:dd:
                    3d:64:4f:9f:e5:a4:0e:fd:98:69:f2:a5:c2:6a:6e:
                    fe:28:ab:3d:2a:8f:a3:33:07:19:47:6d:a8:ba:f2:
                    d0:2c:1e:e8:07:69:d8:95:ee:0c:1d:4c:00:0e:2a:
                    be:26:73:c9:4e:6a:bb:ea:c3:ab:0e:81:8b:8b:7b:
                    17:1f:43:89:b6:e1:ca:cf:aa:c5:09:b5:1c:aa:32:
                    a4:31:96:4b:b9:e8:18:a2:b2:f2:24:ad:23:30:26:
                    85:5a:e6:64:6d:9c:81:29:5c:52:a5:67:33:5c:e2:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:40:EB:57:57:04:21:0F:43:C4:5F:52:3D:7B:5E:55:23:97:4A
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137322e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f2:75:58:fa:1a:ef:f3:e9:3f:76:eb:a1:38:1d:b7:f6:a5:
         7b:10:13:11:c1:31:ac:4a:7b:56:88:68:6b:71:55:57:bb:ba:
         7c:d7:11:16:97:cf:96:60:15:6a:41:e0:af:a5:4f:fa:22:7a:
         0a:6b:04:40:ce:25:56:55:97:55:d4:c9:67:40:d3:5c:a1:89:
         cf:8e:94:8f:82:98:25:3e:43:68:4c:6c:bc:65:f3:7d:c2:33:
         82:c6:e8:1f:3b:37:99:67:60:ca:96:99:df:81:12:41:bf:b2:
         0a:ed:d5:73:cb:65:06:7f:43:1a:f2:e7:d9:c3:6e:9e:cd:75:
         7b:da:0e:4a:06:1e:df:8c:87:15:1e:30:09:ad:f7:56:27:3e:
         74:74:74:ba:97:bd:c3:9e:56:82:51:c1:cc:28:ee:49:68:09:
         e0:21:ac:05:23:50:48:8f:53:e6:aa:b5:2e:68:04:ae:8c:b6:
         b8:23:e7:80:8d:b2:b6:a5:8b:0d:0e:7b:0c:52:80:af:0d:74:
         2e:1c:95:0b:8b:48:b8:fd:aa:34:99:9c:d5:25:2e:bc:d4:f0:
         28:01:b7:27:27:9f:39:23:ae:8a:20:21:7c:82:40:fc:b3:bf:
         36:4d:29:84:f1:34:ec:ea:d9:5e:e1:41:54:e5:43:ae:c9:a6:
         09:03:69:52
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd9sK8jGRTsK9thGdV87AZ0hWmi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4QTdDQzVGRkQ4RDE2NThBOTEwODJGNjM5Njg4RDY4
REE5Mzg5OTAeFw0yNDAzMDUxNzM1NTdaFw0yNTAzMDQxNzQwNTdaMDMxMTAvBgNV
BAMTKEVEMjE0MEVCNTc1NzA0MjEwRjQzQzQ1RjUyM0Q3QjVFNTUyMzk3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNgm5TtOf1GXQxDhIaQ7c30+0
HMkddHE4ybiBSa1qDuaH9tue6ifqmvvpMQR8Fn675uhtFuiO5+kgaVfPRyGpRMlv
AHuia7Q3mEZx7Nm8WKP9prPsXDxSldzpEic6If6dXhBfeDL+3sS6NBWgl+HGkhV0
1BjmH2Pob1d5cHsAapPUUNHPpRES6RccZwPJjN47Ok9s3T1kT5/lpA79mGnypcJq
bv4oqz0qj6MzBxlHbai68tAsHugHadiV7gwdTAAOKr4mc8lOarvqw6sOgYuLexcf
Q4m24crPqsUJtRyqMqQxlku56BiisvIkrSMwJoVa5mRtnIEpXFKlZzNc4g11AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7SFA61dXBCEPQ8RfUj17XlUjl0owHwYDVR0j
BBgwFoAUjYp8xf/Y0WWKkQgvY5aI1o2pOJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjAzNTJENUQ1Qjc5REZFNTVCNUFDMkEwNzMwRDU4Qzgw
NTVBQ0NBM0FDNjREN0ExODNFQzY1NEZFNDc5QjUwLzAvOEQ4QTdDQzVGRkQ4RDE2
NThBOTEwODJGNjM5Njg4RDY4REE5Mzg5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDhBN0NDNUZGRDhEMTY1OEE5
MTA4MkY2Mzk2ODhENjhEQTkzODk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YwMzUyRDVENUI3OURGRTU1QjVBQzJBMDczMEQ1OEM4MDU1QUNDQTNB
QzY0RDdBMTgzRUM2NTRGRTQ3OUI1MC8wLzMxMzkzMDJlMzkzMzJlMzEzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl2s
MA0GCSqGSIb3DQEBCwUAA4IBAQCM8nVY+hrv8+k/duuhOB239qV7EBMRwTGsSntW
iGhrcVVXu7p81xEWl8+WYBVqQeCvpU/6InoKawRAziVWVZdV1MlnQNNcoYnPjpSP
gpglPkNoTGy8ZfN9wjOCxugfOzeZZ2DKlpnfgRJBv7IK7dVzy2UGf0Ma8ufZw26e
zXV72g5KBh7fjIcVHjAJrfdWJz50dHS6l73DnlaCUcHMKO5JaAngIawFI1BIj1Pm
qrUuaASujLa4I+eAjbK2pYsNDnsMUoCvDXQuHJULi0i4/ao0mZzVJS681PAoAbcn
J585I66KICF8gkD8s782TSmE8TTs6tle4UFU5UOuyaYJA2lS
-----END CERTIFICATE-----
Generated at Wed May 1 07:05:34 2024 by rpki-client on console-fra.rpki-client.org