Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e31312e3234302e302f32302d3234203d3e203237373430.roa
File:                     3139302e31312e3234302e302f32302d3234203d3e203237373430.roa (raw, json)
Hash identifier:          CM2nmNvUN7yhzvfP+ozZYVlJ6u73oIrChkRGnWu0GA8=
Subject key identifier:   11:DF:E9:C5:DE:78:E2:57:0B:E1:5D:4D:18:50:A9:3F:C9:83:67:40
Certificate issuer:       /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Certificate serial:       0E45ADE69549DC42DAD394580B4D807121305D98
Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e31312e3234302e302f32302d3234203d3e203237373430.roa
Signing time:             Tue 05 Mar 2024 18:09:21 +0000
ROA not before:           Tue 05 Mar 2024 18:04:21 +0000
ROA not after:            Tue 04 Mar 2025 18:09:21 +0000
asID:                     27740
IP address blocks:        190.11.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:45:ad:e6:95:49:dc:42:da:d3:94:58:0b:4d:80:71:21:30:5d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
        Validity
            Not Before: Mar  5 18:04:21 2024 GMT
            Not After : Mar  4 18:09:21 2025 GMT
        Subject: CN=11DFE9C5DE78E2570BE15D4D1850A93FC9836740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:eb:68:d5:22:77:6d:95:ab:1b:9a:13:15:
                    7c:b2:19:1e:98:d4:29:b1:e2:d5:ef:3d:80:44:a9:
                    54:7f:ea:dc:1c:71:d3:65:09:fd:3a:5d:50:86:f2:
                    e0:c5:70:ce:3d:e6:4c:b7:eb:55:20:75:0c:b9:fd:
                    c5:89:86:ca:7c:a8:74:42:6f:a0:67:3f:68:84:72:
                    26:ff:0a:a9:2e:74:ce:71:e0:66:4e:9f:6c:38:61:
                    8f:64:b8:e7:52:5e:ed:03:b4:28:18:f2:64:da:56:
                    54:8e:38:f9:13:71:56:b3:fa:a7:ab:93:bc:62:92:
                    e7:61:77:80:43:a2:98:3d:2c:4f:e2:33:dd:74:1a:
                    c0:ad:fd:fa:f8:01:0a:1d:0c:df:99:50:d2:0d:2e:
                    a0:56:70:57:df:9d:65:41:26:39:21:e2:eb:5f:c4:
                    2d:d9:21:25:4c:3c:13:c0:44:b9:5e:0c:6d:16:95:
                    60:21:e0:d0:0d:75:87:63:dc:23:b2:56:d7:e4:58:
                    46:22:4d:57:e7:68:c5:69:e6:a5:02:04:4b:9a:2b:
                    96:65:9c:75:b6:a6:c9:ca:4e:c4:ed:96:d8:76:fd:
                    c2:57:87:15:68:c9:59:b0:52:b4:d9:ae:f9:da:1b:
                    6d:82:5a:53:f6:27:cb:15:ce:f8:fd:e3:33:ea:0e:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:E9:C5:DE:78:E2:57:0B:E1:5D:4D:18:50:A9:3F:C9:83:67:40
            X509v3 Authority Key Identifier:
                keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e31312e3234302e302f32302d3234203d3e203237373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:62:98:4c:11:f6:21:50:ed:14:a0:1e:a3:9a:c8:45:13:
         7a:c8:0e:db:1b:8b:de:f9:ab:c2:e6:af:f7:20:00:ce:b3:f7:
         68:90:fc:b6:78:5a:a3:b8:94:95:b0:78:43:c2:ed:63:30:26:
         25:07:10:fc:8f:09:4f:ca:8f:96:c8:2e:bb:d1:ee:13:73:c7:
         95:1e:03:47:99:98:f2:cc:1d:43:ab:f6:01:08:3a:6d:e5:47:
         e9:21:c5:d0:0e:2f:96:28:71:74:5c:ae:a7:8f:90:c9:32:c2:
         4b:c8:f0:4b:be:92:45:25:36:49:6e:7c:b5:a7:a2:af:60:7b:
         35:45:9c:1b:3f:b7:41:44:9a:83:14:6b:40:f9:8d:42:a4:15:
         01:90:25:4b:5d:d0:af:e5:3e:a1:19:17:a3:8c:ac:88:20:ed:
         1c:22:85:71:4e:8a:93:35:37:d3:b5:7f:14:53:19:89:4a:da:
         7f:9f:29:b2:75:0a:4a:73:f4:da:fb:c6:af:0d:8e:68:f2:14:
         ef:ba:01:48:14:2c:72:6f:a3:43:04:cc:95:43:21:11:f4:5b:
         c6:5f:0a:26:f8:06:3c:17:13:e4:46:93:64:c8:0d:73:f6:31:
         6a:da:e5:20:6d:b8:1e:8d:4b:5a:cb:d3:45:74:0f:23:81:49:
         f5:ec:b7:8a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDkWt5pVJ3ELa05RYC02AcSEwXZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIwQjFDRTQ2RDI0RjlCNEI0MUFBNkNEREQ5RUI5NkU4
QjIzQzJCMTAeFw0yNDAzMDUxODA0MjFaFw0yNTAzMDQxODA5MjFaMDMxMTAvBgNV
BAMTKDExREZFOUM1REU3OEUyNTcwQkUxNUQ0RDE4NTBBOTNGQzk4MzY3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjOto1SJ3bZWrG5oTFXyyGR6Y
1Cmx4tXvPYBEqVR/6twccdNlCf06XVCG8uDFcM495ky361UgdQy5/cWJhsp8qHRC
b6BnP2iEcib/CqkudM5x4GZOn2w4YY9kuOdSXu0DtCgY8mTaVlSOOPkTcVaz+qer
k7xikudhd4BDopg9LE/iM910GsCt/fr4AQodDN+ZUNINLqBWcFffnWVBJjkh4utf
xC3ZISVMPBPARLleDG0WlWAh4NANdYdj3COyVtfkWEYiTVfnaMVp5qUCBEuaK5Zl
nHW2psnKTsTtlth2/cJXhxVoyVmwUrTZrvnaG22CWlP2J8sVzvj94zPqDnCNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEd/pxd544lcL4V1NGFCpP8mDZ0AwHwYDVR0j
BBgwFoAUwgsc5G0k+bS0GqbN3Z65bosjwrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkMwQjU4OUY4NTBFNjg0Mzc4QkE2MDE0RDAwQ0UxRjFE
NzM5NjQ3NTNFQ0MwMkFDQzNGQjg5OUNFMzY0NUEzLzAvQzIwQjFDRTQ2RDI0RjlC
NEI0MUFBNkNEREQ5RUI5NkU4QjIzQzJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjBCMUNFNDZEMjRGOUI0QjQx
QUE2Q0RERDlFQjk2RThCMjNDMkIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZDMEI1ODlGODUwRTY4NDM3OEJBNjAxNEQwMENFMUYxRDczOTY0NzUz
RUNDMDJBQ0MzRkI4OTlDRTM2NDVBMy8wLzMxMzkzMDJlMzEzMTJlMzIzNDMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM3MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL4L8DAN
BgkqhkiG9w0BAQsFAAOCAQEAHI9imEwR9iFQ7RSgHqOayEUTesgO2xuL3vmrwuav
9yAAzrP3aJD8tnhao7iUlbB4Q8LtYzAmJQcQ/I8JT8qPlsguu9HuE3PHlR4DR5mY
8swdQ6v2AQg6beVH6SHF0A4vlihxdFyup4+QyTLCS8jwS76SRSU2SW58taeir2B7
NUWcGz+3QUSagxRrQPmNQqQVAZAlS13Qr+U+oRkXo4ysiCDtHCKFcU6KkzU307V/
FFMZiUraf58psnUKSnP02vvGrw2OaPIU77oBSBQscm+jQwTMlUMhEfRbxl8KJvgG
PBcT5EaTZMgNc/YxatrlIG24Ho1LWsvTRXQPI4FJ9ey3ig==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org