Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37302e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          4T7uZRuX9wnmy1pKsjT46iBEvjLrUFIZSW/hfintHWI=
Subject key identifier:   74:44:4C:C4:5D:54:CB:ED:48:37:66:3B:D4:F8:8E:21:14:EC:73:1E
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       7D2BB645873F6B150D4775CD0CBFAF3CF53BBCC9
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:30 +0000
ROA not before:           Tue 05 Mar 2024 17:39:30 +0000
ROA not after:            Tue 04 Mar 2025 17:44:30 +0000
asID:                     52328
IP address blocks:        190.211.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2b:b6:45:87:3f:6b:15:0d:47:75:cd:0c:bf:af:3c:f5:3b:bc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:30 2024 GMT
            Not After : Mar  4 17:44:30 2025 GMT
        Subject: CN=74444CC45D54CBED4837663BD4F88E2114EC731E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:78:42:b0:4a:c3:02:4e:22:19:08:40:85:
                    fb:13:76:25:6b:25:3f:c0:b9:5e:19:be:7e:22:b7:
                    f9:c9:8c:2f:26:1d:5c:13:63:99:ae:f1:06:bc:d1:
                    b8:0c:0d:40:a2:0c:a9:83:64:20:97:74:f2:2a:6d:
                    b8:58:57:6b:27:b9:02:dd:75:22:39:5e:6c:41:06:
                    13:53:c4:5f:08:8a:4a:9a:77:79:3b:42:94:d9:41:
                    18:dd:71:8a:cc:e7:e5:5f:33:71:eb:e6:16:67:41:
                    33:c2:73:27:de:1a:8b:c6:9b:dd:30:08:08:bb:e3:
                    bf:ca:47:3e:13:d5:8e:04:26:80:b9:1e:b4:fa:05:
                    22:2a:6c:e3:c7:10:f4:15:fa:6e:dc:92:ee:7b:a2:
                    3a:a7:1c:f6:a8:dc:65:a6:f8:5e:83:04:49:64:64:
                    73:3c:73:c6:35:ce:41:ae:b1:df:43:57:ad:ee:3c:
                    cc:dd:2d:dc:0a:59:fc:30:3f:81:51:ae:81:74:a3:
                    64:7b:d8:a0:8a:5e:48:92:fe:09:3d:d5:6c:88:89:
                    bc:77:db:91:89:a6:b6:d0:a6:4e:23:96:0c:fa:82:
                    12:f2:82:c5:bc:23:c4:37:84:1b:56:cc:22:c8:0d:
                    e3:dd:1d:4a:76:8f:75:f4:9b:39:9c:93:f9:41:c2:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:4C:C4:5D:54:CB:ED:48:37:66:3B:D4:F8:8E:21:14:EC:73:1E
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:8f:4f:c0:f5:b6:11:1e:8c:83:84:54:50:d9:18:cc:ed:
         6a:65:83:de:b8:6d:9b:68:c0:41:38:c5:18:65:5a:7e:4b:b0:
         1c:94:df:22:39:65:15:f7:82:b5:1d:05:59:18:2e:ce:0e:e3:
         b9:44:65:d8:00:a6:24:0e:01:58:8c:f0:ff:d9:f1:75:af:50:
         42:b1:fa:df:c2:56:40:49:a8:e6:ed:e2:f0:5a:62:3d:2e:72:
         f7:c5:c0:5b:13:71:06:d9:e3:37:87:94:bc:32:62:97:44:39:
         35:e1:a8:73:b6:0b:61:eb:b1:b5:99:5a:1c:81:78:ac:cb:e0:
         9c:74:04:28:b2:47:66:69:8d:63:b7:33:5c:47:e7:a3:24:75:
         30:fe:fb:fc:b7:82:17:1d:78:f1:f1:6e:2e:0e:4b:69:2d:68:
         a0:19:73:e2:98:aa:03:68:ef:d7:b9:b3:5f:38:9f:ff:4f:ba:
         c5:c7:e6:d6:41:87:76:3e:c7:e0:b3:45:14:8c:72:ce:c8:7e:
         88:25:fb:37:cd:38:10:9c:03:32:95:91:25:cc:69:e2:4c:9b:
         a4:17:7d:bf:16:1a:f9:42:ab:d5:98:02:65:c6:d7:9c:2e:17:
         53:4d:45:77:88:22:31:b0:16:66:be:3a:46:8d:8b:30:20:b5:
         94:39:37:03
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfSu2RYc/axUNR3XNDL+vPPU7vMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNDAzMDUxNzM5MzBaFw0yNTAzMDQxNzQ0MzBaMDMxMTAvBgNV
BAMTKDc0NDQ0Q0M0NUQ1NENCRUQ0ODM3NjYzQkQ0Rjg4RTIxMTRFQzczMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooXhCsErDAk4iGQhAhfsTdiVr
JT/AuV4Zvn4it/nJjC8mHVwTY5mu8Qa80bgMDUCiDKmDZCCXdPIqbbhYV2snuQLd
dSI5XmxBBhNTxF8Iikqad3k7QpTZQRjdcYrM5+VfM3Hr5hZnQTPCcyfeGovGm90w
CAi747/KRz4T1Y4EJoC5HrT6BSIqbOPHEPQV+m7cku57ojqnHPao3GWm+F6DBElk
ZHM8c8Y1zkGusd9DV63uPMzdLdwKWfwwP4FRroF0o2R72KCKXkiS/gk91WyIibx3
25GJprbQpk4jlgz6ghLygsW8I8Q3hBtWzCLIDePdHUp2j3X0mzmck/lBwoyjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdERMxF1Uy+1IN2Y71PiOIRTscx4wHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7TRjAN
BgkqhkiG9w0BAQsFAAOCAQEASxKPT8D1thEejIOEVFDZGMztamWD3rhtm2jAQTjF
GGVafkuwHJTfIjllFfeCtR0FWRguzg7juURl2ACmJA4BWIzw/9nxda9QQrH638JW
QEmo5u3i8FpiPS5y98XAWxNxBtnjN4eUvDJil0Q5NeGoc7YLYeuxtZlaHIF4rMvg
nHQEKLJHZmmNY7czXEfnoyR1MP77/LeCFx148fFuLg5LaS1ooBlz4piqA2jv17mz
Xzif/0+6xcfm1kGHdj7H4LNFFIxyzsh+iCX7N804EJwDMpWRJcxp4kybpBd9vxYa
+UKr1ZgCZcbXnC4XU01Fd4giMbAWZr46Ro2LMCC1lDk3Aw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org