Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa
File:                     3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa (raw, json)
Hash identifier:          TlmDeamZAhpBtL/O66hqjYgNupwxXQ79I5MS8a+XveY=
Subject key identifier:   4D:3B:E7:05:68:56:D0:56:91:AA:54:BF:73:FF:A7:96:E7:47:7B:5C
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       0C0BD8FB65E3BF17BC571BF8428F9414E36A3731
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa
Signing time:             Tue 05 Mar 2024 17:40:22 +0000
ROA not before:           Tue 05 Mar 2024 17:35:22 +0000
ROA not after:            Tue 04 Mar 2025 17:40:22 +0000
asID:                     27833
IP address blocks:        190.211.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0b:d8:fb:65:e3:bf:17:bc:57:1b:f8:42:8f:94:14:e3:6a:37:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Mar  5 17:35:22 2024 GMT
            Not After : Mar  4 17:40:22 2025 GMT
        Subject: CN=4D3BE7056856D05691AA54BF73FFA796E7477B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:00:5d:6c:db:a0:b1:eb:80:05:37:ca:49:
                    05:04:83:cd:7a:15:a0:2c:11:86:1f:b8:0a:bc:39:
                    c3:ad:dc:17:70:db:ef:29:ab:48:06:4c:d3:07:c2:
                    f7:ca:3f:eb:2c:1d:fd:4d:2b:5d:44:69:3a:3c:bb:
                    5d:08:7e:a2:09:ea:75:74:b5:7b:8b:96:aa:f9:a5:
                    07:d8:fd:b4:b4:ca:b4:2b:41:38:3b:d3:94:f5:41:
                    b0:4e:04:c6:33:77:e1:cb:52:52:ac:be:d3:2a:04:
                    7a:2a:1c:3a:29:34:2e:d6:36:33:02:0d:34:c2:2a:
                    91:85:a5:79:29:2d:a8:e9:92:e4:df:73:68:cc:7b:
                    53:dc:48:09:5b:05:95:17:a8:f8:04:a1:42:5e:b2:
                    84:6c:fd:9e:1e:93:82:51:d3:09:74:da:e9:85:36:
                    aa:a2:0c:00:43:cb:78:b3:27:75:a7:22:f3:a2:89:
                    4e:17:31:6a:d5:3a:4d:d1:32:af:c6:47:f2:e5:48:
                    2f:d1:20:0f:76:1e:cd:dc:25:18:6a:38:11:38:90:
                    29:1f:7f:7f:a5:6c:e4:8a:72:b8:1e:bc:12:de:0c:
                    ba:c6:69:dd:0b:2c:22:ef:67:24:cf:c3:bc:98:be:
                    14:ca:14:0b:37:74:70:0f:c0:a9:8a:6a:93:a0:b2:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3B:E7:05:68:56:D0:56:91:AA:54:BF:73:FF:A7:96:E7:47:7B:5C
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e3231312e3139322e302f31392d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:c2:fe:3b:fe:be:1e:69:19:18:88:bf:f2:09:53:ff:cd:
         58:26:4e:2d:6f:c6:3f:2b:d2:29:71:2e:43:be:44:00:79:86:
         ab:54:5e:fe:28:0a:6e:44:20:2c:0d:ca:7e:52:96:dc:cd:5e:
         d2:c8:a5:1e:4e:ac:03:d7:b1:fa:d8:a2:91:22:0e:42:37:5e:
         a0:0f:dc:04:76:6d:17:39:a0:a4:fc:6f:f5:0a:e0:f9:b6:6c:
         c9:c5:d2:ad:39:4d:fc:7d:49:c8:bf:23:14:b0:8e:b4:ac:52:
         fc:e3:61:86:cf:00:ed:8c:7f:c9:a8:80:92:14:e8:ea:52:30:
         74:dc:90:9a:67:a7:a0:56:1e:5a:d1:04:7b:d7:01:1c:1e:74:
         d5:bb:65:22:79:55:40:9d:7d:1e:4b:5b:70:2f:16:85:a6:e0:
         2a:8e:02:a1:37:3e:63:31:51:0f:16:29:6c:99:82:34:1e:8f:
         b1:db:ce:0d:00:61:04:9a:8e:51:b7:39:2d:b0:56:9f:7b:14:
         69:1b:f2:a4:5b:33:e2:f4:37:05:08:a9:bf:23:70:a5:7d:39:
         00:41:ec:ec:08:31:d7:4e:13:f0:dd:da:e8:f2:3d:74:3b:8a:
         18:84:ea:7f:29:9d:ec:b0:eb:3b:33:cb:36:2a:dc:1c:af:98:
         82:92:85:d3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDAvY+2Xjvxe8Vxv4Qo+UFONqNzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwNDkwMjdBRUQzODQ3RUZFRjNFMkQyN0M2NkZFOUQ1
MjBFNDRCMTAeFw0yNDAzMDUxNzM1MjJaFw0yNTAzMDQxNzQwMjJaMDMxMTAvBgNV
BAMTKDREM0JFNzA1Njg1NkQwNTY5MUFBNTRCRjczRkZBNzk2RTc0NzdCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wQBdbNugseuABTfKSQUEg816
FaAsEYYfuAq8OcOt3Bdw2+8pq0gGTNMHwvfKP+ssHf1NK11EaTo8u10IfqIJ6nV0
tXuLlqr5pQfY/bS0yrQrQTg705T1QbBOBMYzd+HLUlKsvtMqBHoqHDopNC7WNjMC
DTTCKpGFpXkpLajpkuTfc2jMe1PcSAlbBZUXqPgEoUJesoRs/Z4ek4JR0wl02umF
NqqiDABDy3izJ3WnIvOiiU4XMWrVOk3RMq/GR/LlSC/RIA92Hs3cJRhqOBE4kCkf
f3+lbOSKcrgevBLeDLrGad0LLCLvZyTPw7yYvhTKFAs3dHAPwKmKapOgsnszAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTTvnBWhW0FaRqlS/c/+nludHe1wwHwYDVR0j
BBgwFoAUuwSQJ67ThH7+8+LSfGb+nVIORLEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0EyNTVGQ0UxMkJCMjZENUUxMjAyRjc5ODczNjJBRjk1
NTFCRkM1QjAzMzZCRDBFRDk3OUZEQUVCQTIwNTcxLzAvQkIwNDkwMjdBRUQzODQ3
RUZFRjNFMkQyN0M2NkZFOUQ1MjBFNDRCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjA0OTAyN0FFRDM4NDdFRkVG
M0UyRDI3QzY2RkU5RDUyMEU0NEIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNBMjU1RkNFMTJCQjI2RDVFMTIwMkY3OTg3MzYyQUY5NTUxQkZDNUIw
MzM2QkQwRUQ5NzlGREFFQkEyMDU3MS8wLzMxMzkzMDJlMzIzMTMxMmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzgzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvtPA
MA0GCSqGSIb3DQEBCwUAA4IBAQAVO8L+O/6+HmkZGIi/8glT/81YJk4tb8Y/K9Ip
cS5DvkQAeYarVF7+KApuRCAsDcp+UpbczV7SyKUeTqwD17H62KKRIg5CN16gD9wE
dm0XOaCk/G/1CuD5tmzJxdKtOU38fUnIvyMUsI60rFL842GGzwDtjH/JqICSFOjq
UjB03JCaZ6egVh5a0QR71wEcHnTVu2UieVVAnX0eS1twLxaFpuAqjgKhNz5jMVEP
FilsmYI0Ho+x284NAGEEmo5RtzktsFafexRpG/KkWzPi9DcFCKm/I3ClfTkAQezs
CDHXThPw3dro8j10O4oYhOp/KZ3ssOs7M8s2Ktwcr5iCkoXT
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org