Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37372e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          YZKcMBLoTtXkx2KP6/R2E54YkhC9FF7BYlaILr2Q7VQ=
Subject key identifier:   74:F1:33:2C:C3:75:C8:6A:E1:61:03:E7:A3:56:61:C5:F2:31:20:17
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       4C93638FE47B86FE0941911698BC0BFD81AFBBF9
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     52328
IP address blocks:        190.211.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:63:8f:e4:7b:86:fe:09:41:91:16:98:bc:0b:fd:81:af:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=74F1332CC375C86AE16103E7A35661C5F2312017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:21:a6:59:7b:c3:f2:7c:db:ca:51:83:07:
                    0f:41:8f:13:4b:c8:1e:31:ca:5f:f3:75:36:ae:48:
                    55:6c:89:94:91:c1:05:b6:24:b6:d1:82:22:37:a6:
                    21:3e:c9:46:9e:9f:87:eb:58:2f:f2:c9:f2:9e:3a:
                    40:c9:4d:8d:4d:70:61:6a:42:9e:91:41:b8:cc:0b:
                    17:cf:bc:06:cd:4f:e2:a9:f1:f5:b3:53:89:6c:7d:
                    4c:dd:2a:81:29:a8:3e:64:fb:a5:98:95:b9:08:a5:
                    cc:f7:cd:e0:6c:bd:23:74:39:8f:b5:b7:b9:c2:ee:
                    d4:3d:64:8b:92:f6:b1:b7:23:b9:84:08:55:1a:82:
                    10:69:9c:16:eb:61:7e:f2:3a:2b:5f:e8:9f:55:81:
                    b0:1b:04:5b:6a:9d:18:97:e7:90:96:5c:33:d7:fa:
                    4e:97:6f:6d:f7:cb:93:33:69:9e:cb:30:03:6a:fe:
                    9f:97:ea:9f:83:ec:d7:33:2b:4c:72:c8:ca:14:61:
                    d9:0e:96:cd:03:a4:f8:79:fa:13:77:47:25:a0:2a:
                    d2:19:2d:c0:0c:eb:88:13:3f:3b:0e:64:4e:45:c1:
                    6b:5b:69:08:a7:b7:df:be:d6:97:19:d5:95:ef:df:
                    c9:49:8b:da:1a:2d:31:69:97:49:5c:1b:f0:e2:f6:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:33:2C:C3:75:C8:6A:E1:61:03:E7:A3:56:61:C5:F2:31:20:17
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:eb:ce:cc:97:f9:3a:c1:47:45:ea:59:69:bd:bb:95:d2:
         09:ac:a9:0d:cd:5a:1b:55:7c:2c:b8:8f:3a:8f:dc:32:f7:33:
         b4:18:7b:85:df:95:77:11:2f:b4:fb:f1:05:47:18:d5:3a:29:
         41:39:8a:ba:ef:8f:05:e1:86:5d:a6:a6:2b:14:e1:5e:76:2c:
         43:ef:06:c8:33:5c:87:d8:de:25:ac:a4:35:c1:97:54:9a:29:
         86:32:e4:ef:33:a5:1b:44:1c:5a:25:a5:54:5c:d0:14:e4:97:
         5f:0f:e6:75:c9:03:9c:a9:33:b2:59:f0:8a:69:8c:af:38:ee:
         80:e3:54:01:46:0d:6c:60:0d:6f:05:5b:51:3c:25:e9:2a:21:
         7e:a9:49:42:6f:a6:5e:7c:2f:43:9f:da:a0:d1:93:31:a0:dc:
         4e:b2:7c:21:6c:8c:8d:b3:dc:a2:59:27:3d:83:c9:5b:0d:af:
         c6:89:01:e7:eb:f4:8b:b4:ba:e3:02:35:55:f9:cc:66:6a:7f:
         68:5b:70:74:c7:1b:1a:ce:16:6a:2b:e9:f4:86:19:24:1c:01:
         45:a5:1d:3a:e9:81:17:39:27:e4:3d:6a:d9:0c:61:f6:f5:96:
         ab:e3:a9:0b:13:d4:59:8e:0b:7d:cf:b9:56:37:42:1f:44:5d:
         98:7e:60:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTJNjj+R7hv4JQZEWmLwL/YGvu/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNDAzMDUxNzM5MjRaFw0yNTAzMDQxNzQ0MjRaMDMxMTAvBgNV
BAMTKDc0RjEzMzJDQzM3NUM4NkFFMTYxMDNFN0EzNTY2MUM1RjIzMTIwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNiGmWXvD8nzbylGDBw9BjxNL
yB4xyl/zdTauSFVsiZSRwQW2JLbRgiI3piE+yUaen4frWC/yyfKeOkDJTY1NcGFq
Qp6RQbjMCxfPvAbNT+Kp8fWzU4lsfUzdKoEpqD5k+6WYlbkIpcz3zeBsvSN0OY+1
t7nC7tQ9ZIuS9rG3I7mECFUaghBpnBbrYX7yOitf6J9VgbAbBFtqnRiX55CWXDPX
+k6Xb233y5MzaZ7LMANq/p+X6p+D7NczK0xyyMoUYdkOls0DpPh5+hN3RyWgKtIZ
LcAM64gTPzsOZE5FwWtbaQint9++1pcZ1ZXv38lJi9oaLTFpl0lcG/Di9gsjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdPEzLMN1yGrhYQPno1ZhxfIxIBcwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7TTTAN
BgkqhkiG9w0BAQsFAAOCAQEAJg7rzsyX+TrBR0XqWWm9u5XSCaypDc1aG1V8LLiP
Oo/cMvcztBh7hd+VdxEvtPvxBUcY1TopQTmKuu+PBeGGXaamKxThXnYsQ+8GyDNc
h9jeJaykNcGXVJophjLk7zOlG0QcWiWlVFzQFOSXXw/mdckDnKkzslnwimmMrzju
gONUAUYNbGANbwVbUTwl6SohfqlJQm+mXnwvQ5/aoNGTMaDcTrJ8IWyMjbPcolkn
PYPJWw2vxokB5+v0i7S64wI1VfnMZmp/aFtwdMcbGs4Waivp9IYZJBwBRaUdOumB
Fzkn5D1q2Qxh9vWWq+OpCxPUWY4Lfc+5VjdCH0RdmH5gGA==
-----END CERTIFICATE-----
Generated at Mon May 6 11:49:31 2024 by rpki-client on console-fra.rpki-client.org