Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa
File:                     3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa (raw, json)
Hash identifier:          S1AmP4+0d22v3cc8L/5mYC6ljQE4njHF/15L4xlQwVI=
Subject key identifier:   0B:CB:83:6A:8C:FE:0B:0A:11:BD:CF:AB:C1:34:83:EB:97:ED:ED:89
Certificate issuer:       /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial:       3E5C4A3D4BD9821E62AB3E4B2522D55EA4BD5DA7
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa
Signing time:             Tue 05 Mar 2024 18:23:21 +0000
ROA not before:           Tue 05 Mar 2024 18:18:21 +0000
ROA not after:            Tue 04 Mar 2025 18:23:21 +0000
asID:                     271952
IP address blocks:        190.109.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:4a:3d:4b:d9:82:1e:62:ab:3e:4b:25:22:d5:5e:a4:bd:5d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
        Validity
            Not Before: Mar  5 18:18:21 2024 GMT
            Not After : Mar  4 18:23:21 2025 GMT
        Subject: CN=0BCB836A8CFE0B0A11BDCFABC13483EB97EDED89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:86:71:3d:33:c8:1a:6c:e0:90:e5:c3:7a:
                    05:86:2f:98:4b:31:4b:70:2d:51:cb:92:1b:be:c5:
                    3c:7d:2d:4c:25:be:b4:42:7f:24:4b:55:2e:b4:08:
                    25:99:fa:15:b6:ae:13:56:f2:90:6c:ee:84:1f:b9:
                    ff:3c:ad:7a:95:0a:61:c3:4b:08:1b:08:e1:bf:c9:
                    11:44:25:ef:31:ca:6b:39:34:0b:bd:cf:0a:3e:e9:
                    d9:0a:88:0b:12:8b:8a:07:52:3e:10:4e:6d:0e:d9:
                    0d:19:5b:c1:f0:e1:6a:7b:b5:8c:86:6a:5a:8c:cf:
                    88:da:46:2b:3b:5a:4d:96:a8:52:01:27:90:30:60:
                    65:42:9d:5b:b6:6e:43:9e:1c:d4:87:48:03:ba:47:
                    8b:b4:24:ae:b7:65:db:fa:b4:38:6b:c6:1c:f2:89:
                    b3:8e:b3:05:52:95:f6:d5:5e:fa:08:73:f7:33:6a:
                    28:11:6b:4d:88:d7:b3:92:92:02:87:1c:f5:83:a4:
                    8a:9a:63:da:9d:b5:af:8d:b7:9d:e3:2a:d5:e4:48:
                    9e:b3:dc:09:24:53:54:5a:dd:b6:06:c2:f2:05:e3:
                    a9:04:0e:e8:6b:34:66:5d:46:2e:d8:de:64:c0:10:
                    59:32:ad:4b:f6:17:ed:32:84:3a:a4:ba:6c:75:d3:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:83:6A:8C:FE:0B:0A:11:BD:CF:AB:C1:34:83:EB:97:ED:ED:89
            X509v3 Authority Key Identifier:
                keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:c6:e4:9c:2a:9a:8f:d3:c9:bb:fc:f7:0f:7e:ec:d3:98:
         b3:83:16:3b:28:42:26:f5:f1:c1:54:3b:52:03:81:a6:dd:ed:
         af:10:5c:60:b0:ee:64:21:3b:67:e8:60:4d:7a:93:7d:d2:92:
         44:b4:cf:6a:d8:9c:48:34:0b:ba:72:ac:20:55:94:36:63:9b:
         30:28:a6:4b:7b:a7:40:85:7d:8d:f3:3b:88:5a:60:df:14:88:
         9e:e7:bb:ef:9b:f0:61:96:08:e1:c4:82:00:61:f6:8b:58:60:
         05:58:88:7f:61:bd:63:5c:a1:60:69:1c:27:04:55:1a:36:36:
         f9:bb:b1:46:5b:5d:0b:ec:38:b6:89:75:d8:ad:2a:a8:41:b5:
         ea:6c:19:67:85:59:22:6d:8a:f2:67:19:f6:c6:55:8e:ce:00:
         00:f5:b0:cb:08:b7:2c:38:1f:02:c7:11:93:62:5d:64:70:9a:
         3c:00:73:89:15:8e:bd:d9:1b:a8:66:b8:d0:1c:75:81:79:a0:
         e0:c8:94:55:6d:c8:63:fc:92:3c:cc:c1:79:32:19:19:83:76:
         25:7f:5b:51:5c:84:7a:e8:2d:7c:62:bf:b5:9c:2a:10:b0:32:
         ec:60:9f:39:30:a5:5f:5a:7d:4c:47:1f:7f:f9:2b:64:c0:aa:
         a3:19:5b:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPlxKPUvZgh5iqz5LJSLVXqS9XacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI4RUU2RkY0NDQ5RDgzMEE3REQzNUFDRTQ3Nzc4QUI4
Q0EwRTI3NDAeFw0yNDAzMDUxODE4MjFaFw0yNTAzMDQxODIzMjFaMDMxMTAvBgNV
BAMTKDBCQ0I4MzZBOENGRTBCMEExMUJEQ0ZBQkMxMzQ4M0VCOTdFREVEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBIZxPTPIGmzgkOXDegWGL5hL
MUtwLVHLkhu+xTx9LUwlvrRCfyRLVS60CCWZ+hW2rhNW8pBs7oQfuf88rXqVCmHD
SwgbCOG/yRFEJe8xyms5NAu9zwo+6dkKiAsSi4oHUj4QTm0O2Q0ZW8Hw4Wp7tYyG
alqMz4jaRis7Wk2WqFIBJ5AwYGVCnVu2bkOeHNSHSAO6R4u0JK63Zdv6tDhrxhzy
ibOOswVSlfbVXvoIc/czaigRa02I17OSkgKHHPWDpIqaY9qdta+Nt53jKtXkSJ6z
3AkkU1Ra3bYGwvIF46kEDuhrNGZdRi7Y3mTAEFkyrUv2F+0yhDqkumx1058hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUC8uDaoz+CwoRvc+rwTSD65ft7YkwHwYDVR0j
BBgwFoAUco7m/0RJ2DCn3TWs5Hd4q4yg4nQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0M5MzJCMDNENjk1MkQ5Q0ZCN0RENDg4NjgwRDFFNjhE
N0QzMDI3M0U3NUE4MjU4OEE0MUYwM0Y5RUUyQjE0LzAvNzI4RUU2RkY0NDQ5RDgz
MEE3REQzNUFDRTQ3Nzc4QUI4Q0EwRTI3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjhFRTZGRjQ0NDlEODMwQTdE
RDM1QUNFNDc3NzhBQjhDQTBFMjc0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENDOTMyQjAzRDY5NTJEOUNGQjdERDQ4ODY4MEQxRTY4RDdEMzAyNzNF
NzVBODI1ODhBNDFGMDNGOUVFMkIxNC8wLzMxMzkzMDJlMzEzMDM5MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm0x
MA0GCSqGSIb3DQEBCwUAA4IBAQAdP8bknCqaj9PJu/z3D37s05izgxY7KEIm9fHB
VDtSA4Gm3e2vEFxgsO5kITtn6GBNepN90pJEtM9q2JxINAu6cqwgVZQ2Y5swKKZL
e6dAhX2N8zuIWmDfFIie57vvm/BhlgjhxIIAYfaLWGAFWIh/Yb1jXKFgaRwnBFUa
Njb5u7FGW10L7Di2iXXYrSqoQbXqbBlnhVkibYryZxn2xlWOzgAA9bDLCLcsOB8C
xxGTYl1kcJo8AHOJFY692RuoZrjQHHWBeaDgyJRVbchj/JI8zMF5MhkZg3Ylf1tR
XIR66C18Yr+1nCoQsDLsYJ85MKVfWn1MRx9/+StkwKqjGVu+
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:02 2024 by rpki-client on console-fra.rpki-client.org