Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37382e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          nRqCqcAYEDlTPP4TjfP0P2MrSM/PjoqBCYDDUf6SFYk=
Subject key identifier:   E4:C9:FE:C2:70:3D:58:E1:4F:CD:87:C0:30:94:FD:69:C3:2B:CD:A8
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       60E2D8366CB073A63301A854750A0C545711872B
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:23 +0000
ROA not before:           Tue 05 Mar 2024 17:39:23 +0000
ROA not after:            Tue 04 Mar 2025 17:44:23 +0000
asID:                     52328
IP address blocks:        190.211.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e2:d8:36:6c:b0:73:a6:33:01:a8:54:75:0a:0c:54:57:11:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:23 2024 GMT
            Not After : Mar  4 17:44:23 2025 GMT
        Subject: CN=E4C9FEC2703D58E14FCD87C03094FD69C32BCDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:b6:22:e7:19:93:f3:62:71:b8:89:9f:9f:
                    1c:a8:73:06:ad:87:6b:cb:2b:51:ff:eb:12:6a:47:
                    99:1a:c6:34:e9:74:22:8c:9f:73:b0:8d:86:52:0a:
                    22:68:43:5d:b0:18:68:eb:da:2e:fe:92:81:5c:f9:
                    6f:80:93:68:0b:11:49:8d:94:50:d0:27:d0:f8:93:
                    db:f4:2b:9c:71:66:ef:fb:84:f1:b3:03:46:f4:57:
                    d5:36:2d:4f:cb:eb:15:47:70:d9:ec:7c:7a:b1:dd:
                    a3:93:ec:07:14:81:54:70:4b:70:49:d6:c8:2b:54:
                    a2:fc:3f:8a:77:4f:c5:37:85:7d:e0:2b:b6:d3:81:
                    32:60:cf:d8:85:fe:46:3d:12:24:d8:5a:12:03:6e:
                    e1:35:d3:92:0f:5d:71:e1:8e:3e:0d:de:aa:eb:d1:
                    45:e8:d5:a3:ca:cc:b1:be:70:1f:b3:a3:8c:f6:a6:
                    d4:a8:16:01:7e:7a:ea:0f:91:43:aa:94:e9:0a:da:
                    52:8f:8f:24:4c:31:5b:66:65:fb:66:90:28:30:4c:
                    9f:c9:85:ee:c4:97:86:13:5d:6c:19:a3:5b:54:06:
                    b9:3a:0a:be:07:bb:05:a2:cf:da:c6:df:3e:0e:80:
                    f0:de:88:47:8b:24:d2:06:fe:b1:0c:0e:87:44:e8:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:FE:C2:70:3D:58:E1:4F:CD:87:C0:30:94:FD:69:C3:2B:CD:A8
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:35:70:81:a4:75:7c:d8:da:eb:94:96:e1:ee:c6:4b:7d:b9:
         ae:dd:67:72:47:6a:00:b0:0f:70:23:71:2f:e7:a2:43:83:0b:
         67:5e:3b:4d:ee:ff:58:a9:bb:e8:5f:47:7a:9a:6a:5e:1b:05:
         07:08:fc:9a:ea:f4:07:a5:5a:89:16:13:79:aa:e2:a3:aa:66:
         e4:19:d9:34:4b:81:6a:73:ad:10:17:88:34:e2:07:2f:04:13:
         b7:35:e5:57:5f:ba:c8:74:c7:b9:f1:4b:7d:01:65:e1:17:c3:
         7e:92:c3:dc:ad:6c:a4:95:85:fc:10:d0:3b:62:21:66:46:f6:
         3e:eb:a2:10:ee:e0:a1:c3:29:00:3e:51:5a:86:ca:27:ef:cb:
         f7:18:f1:be:08:c3:85:21:d6:47:af:63:ce:58:1f:ee:49:55:
         70:a9:a4:11:54:33:2c:73:3e:ab:55:cf:e2:86:e0:d5:2a:ab:
         30:09:6c:0b:81:99:96:76:e4:21:6c:67:a6:be:b1:f7:f3:37:
         9d:b0:0a:91:fa:1a:76:cf:9d:a2:53:5a:3f:b6:b7:f3:cb:fe:
         f9:ba:27:ef:5a:27:78:9b:3f:f8:d9:ef:98:ca:61:43:6b:d7:
         6a:e9:5b:2e:a3:a5:b5:0a:62:cf:cf:e2:1c:93:ac:3b:89:8e:
         59:6a:14:3d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYOLYNmywc6YzAahUdQoMVFcRhyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNDAzMDUxNzM5MjNaFw0yNTAzMDQxNzQ0MjNaMDMxMTAvBgNV
BAMTKEU0QzlGRUMyNzAzRDU4RTE0RkNEODdDMDMwOTRGRDY5QzMyQkNEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHELYi5xmT82JxuImfnxyocwat
h2vLK1H/6xJqR5kaxjTpdCKMn3OwjYZSCiJoQ12wGGjr2i7+koFc+W+Ak2gLEUmN
lFDQJ9D4k9v0K5xxZu/7hPGzA0b0V9U2LU/L6xVHcNnsfHqx3aOT7AcUgVRwS3BJ
1sgrVKL8P4p3T8U3hX3gK7bTgTJgz9iF/kY9EiTYWhIDbuE105IPXXHhjj4N3qrr
0UXo1aPKzLG+cB+zo4z2ptSoFgF+euoPkUOqlOkK2lKPjyRMMVtmZftmkCgwTJ/J
he7El4YTXWwZo1tUBrk6Cr4HuwWiz9rG3z4OgPDeiEeLJNIG/rEMDodE6AnvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5Mn+wnA9WOFPzYfAMJT9acMrzagwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7TTjAN
BgkqhkiG9w0BAQsFAAOCAQEAJjVwgaR1fNja65SW4e7GS325rt1nckdqALAPcCNx
L+eiQ4MLZ147Te7/WKm76F9HeppqXhsFBwj8mur0B6VaiRYTeario6pm5BnZNEuB
anOtEBeINOIHLwQTtzXlV1+6yHTHufFLfQFl4RfDfpLD3K1spJWF/BDQO2IhZkb2
PuuiEO7gocMpAD5RWobKJ+/L9xjxvgjDhSHWR69jzlgf7klVcKmkEVQzLHM+q1XP
4obg1SqrMAlsC4GZlnbkIWxnpr6x9/M3nbAKkfoads+dolNaP7a388v++bon71on
eJs/+NnvmMphQ2vXaulbLqOltQpiz8/iHJOsO4mOWWoUPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org