Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          RvBOnnwrxBHl7dMd5xyOtpgutqlbhb9Eg7+E0mncLl4=
Subject key identifier:   CE:8C:FE:24:3B:1F:F8:32:5F:A8:73:CE:B9:C0:FA:8C:8B:96:E8:F2
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       12287B77D10D575EF1F8097155B783F05F66E37F
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     262171
IP address blocks:        190.93.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:28:7b:77:d1:0d:57:5e:f1:f8:09:71:55:b7:83:f0:5f:66:e3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=CE8CFE243B1FF8325FA873CEB9C0FA8C8B96E8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:d7:f7:69:ad:0d:c5:5d:c0:ce:2f:9a:a6:
                    4f:54:c8:ef:5b:4b:78:bf:c9:9e:28:6f:d0:50:4c:
                    50:00:80:66:7a:32:d4:8d:c1:a3:ed:a5:06:cf:b6:
                    25:26:88:06:01:a5:f9:a9:67:16:af:f7:ec:c2:33:
                    bf:c5:1d:e9:c7:b1:b8:b6:f9:6f:fa:b4:0f:6f:fd:
                    88:18:8a:55:60:d4:3a:34:fc:38:e9:ea:35:c9:75:
                    a8:37:6b:b9:e4:b3:1f:f1:42:92:dd:cd:24:0e:1c:
                    17:8b:6c:b9:70:8e:c5:28:cc:38:93:70:8f:7d:b7:
                    87:67:7d:d4:a1:be:01:73:65:ea:67:64:3e:7b:05:
                    fb:9e:2b:d4:b5:3a:d1:1e:2a:18:f3:6a:28:56:8e:
                    fd:e7:5c:19:07:db:57:31:1b:f2:84:23:34:cf:cb:
                    ac:da:a9:04:fe:60:2c:a0:12:5c:20:90:55:be:3f:
                    8d:95:46:7c:a3:0a:5f:47:0d:13:ef:06:af:d6:7a:
                    0e:18:08:13:27:71:34:3f:4f:7b:ed:6b:d4:b9:c2:
                    89:b5:37:d3:cc:63:3a:4f:22:0f:32:e7:57:39:53:
                    47:b5:23:b4:98:56:fe:75:1f:b4:45:46:8b:62:e9:
                    63:94:dc:7a:e0:d3:20:ce:b2:ce:cf:38:0f:f7:38:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8C:FE:24:3B:1F:F8:32:5F:A8:73:CE:B9:C0:FA:8C:8B:96:E8:F2
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137332e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:94:ce:50:a6:e7:88:2c:a9:5a:62:b4:40:b5:7a:57:ce:30:
         6f:58:48:7c:33:67:73:f0:72:68:de:0b:d2:d5:3e:fa:f3:82:
         fd:7b:0d:63:ba:64:55:e0:0a:d1:dc:7a:12:97:db:7f:a2:2c:
         2e:46:98:da:55:da:98:cb:d8:68:71:bc:fe:9e:cd:62:53:e7:
         ad:26:0d:2c:32:e5:3e:ce:50:ac:a2:78:49:e5:2a:3a:1d:0a:
         9a:82:02:b7:cb:26:14:df:11:ff:72:6b:71:28:e8:29:57:01:
         13:de:cc:26:85:8b:27:e3:4d:b8:14:65:0c:de:63:d5:90:da:
         6f:fb:ec:33:bb:2f:72:b0:4d:bc:b3:a5:b7:cc:42:a4:ea:e7:
         4d:db:d0:64:82:9b:c9:7e:98:e7:95:13:02:2e:94:f9:78:cd:
         be:7a:80:91:6b:12:50:29:5a:d1:77:eb:ed:5f:ad:b2:96:f5:
         02:be:aa:37:5e:e1:b5:ae:cb:05:a5:18:6a:33:18:e0:df:6b:
         75:bd:d0:7d:1d:e2:2f:13:b7:99:27:eb:37:34:69:57:94:1c:
         6e:ba:47:62:72:2f:6c:d5:51:2d:ae:46:24:d8:ed:ba:1b:54:
         c7:77:77:88:bd:36:ca:46:68:a8:c8:4f:e0:30:91:3e:f9:26:
         38:d3:50:3f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEih7d9ENV17x+AlxVbeD8F9m438wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4QTdDQzVGRkQ4RDE2NThBOTEwODJGNjM5Njg4RDY4
REE5Mzg5OTAeFw0yNDAzMDUxNzM1NTVaFw0yNTAzMDQxNzQwNTVaMDMxMTAvBgNV
BAMTKENFOENGRTI0M0IxRkY4MzI1RkE4NzNDRUI5QzBGQThDOEI5NkU4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0utf3aa0NxV3Azi+apk9UyO9b
S3i/yZ4ob9BQTFAAgGZ6MtSNwaPtpQbPtiUmiAYBpfmpZxav9+zCM7/FHenHsbi2
+W/6tA9v/YgYilVg1Do0/Djp6jXJdag3a7nksx/xQpLdzSQOHBeLbLlwjsUozDiT
cI99t4dnfdShvgFzZepnZD57BfueK9S1OtEeKhjzaihWjv3nXBkH21cxG/KEIzTP
y6zaqQT+YCygElwgkFW+P42VRnyjCl9HDRPvBq/Weg4YCBMncTQ/T3vta9S5wom1
N9PMYzpPIg8y51c5U0e1I7SYVv51H7RFRoti6WOU3Hrg0yDOss7POA/3ONGbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzoz+JDsf+DJfqHPOucD6jIuW6PIwHwYDVR0j
BBgwFoAUjYp8xf/Y0WWKkQgvY5aI1o2pOJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjAzNTJENUQ1Qjc5REZFNTVCNUFDMkEwNzMwRDU4Qzgw
NTVBQ0NBM0FDNjREN0ExODNFQzY1NEZFNDc5QjUwLzAvOEQ4QTdDQzVGRkQ4RDE2
NThBOTEwODJGNjM5Njg4RDY4REE5Mzg5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDhBN0NDNUZGRDhEMTY1OEE5
MTA4MkY2Mzk2ODhENjhEQTkzODk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YwMzUyRDVENUI3OURGRTU1QjVBQzJBMDczMEQ1OEM4MDU1QUNDQTNB
QzY0RDdBMTgzRUM2NTRGRTQ3OUI1MC8wLzMxMzkzMDJlMzkzMzJlMzEzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl2t
MA0GCSqGSIb3DQEBCwUAA4IBAQCFlM5QpueILKlaYrRAtXpXzjBvWEh8M2dz8HJo
3gvS1T7684L9ew1jumRV4ArR3HoSl9t/oiwuRpjaVdqYy9hocbz+ns1iU+etJg0s
MuU+zlCsonhJ5So6HQqaggK3yyYU3xH/cmtxKOgpVwET3swmhYsn4024FGUM3mPV
kNpv++wzuy9ysE28s6W3zEKk6udN29BkgpvJfpjnlRMCLpT5eM2+eoCRaxJQKVrR
d+vtX62ylvUCvqo3XuG1rssFpRhqMxjg32t1vdB9HeIvE7eZJ+s3NGlXlBxuukdi
ci9s1VEtrkYk2O26G1THd3eIvTbKRmioyE/gMJE++SY401A/
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org