Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          gGL5oLDWshglglB80PBPLSxFIbZW5NWJJbnuonOWRpI=
Subject key identifier:   56:F6:69:78:E7:18:54:C0:D2:72:B6:BD:E2:DD:86:C0:D0:DE:A6:D1
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       764E8C7EEF33670DBEF34A8313BABA405A9B14B0
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:12 +0000
ROA not before:           Tue 05 Mar 2024 18:07:12 +0000
ROA not after:            Tue 04 Mar 2025 18:12:12 +0000
asID:                     264688
IP address blocks:        190.107.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4e:8c:7e:ef:33:67:0d:be:f3:4a:83:13:ba:ba:40:5a:9b:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:12 2024 GMT
            Not After : Mar  4 18:12:12 2025 GMT
        Subject: CN=56F66978E71854C0D272B6BDE2DD86C0D0DEA6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:35:cf:71:32:e2:29:09:fc:36:81:97:da:
                    fe:a3:6f:a4:7f:e6:f6:bd:d1:8d:37:3b:71:2b:b7:
                    76:b5:db:99:40:3a:e4:ba:46:44:b6:8a:2d:9d:2a:
                    be:1a:9f:2f:4d:f9:00:58:6a:ca:a3:3b:9d:fe:6b:
                    b2:21:74:ff:5f:d9:6c:6f:53:d0:eb:c9:66:27:66:
                    09:c4:dd:14:ce:06:f2:66:17:3c:b2:72:ee:3d:eb:
                    fc:f6:39:20:72:ee:d7:2a:76:93:16:9f:33:20:ac:
                    c1:4f:16:fb:e4:cd:84:85:a4:87:3c:66:1f:99:f9:
                    67:f8:f9:b5:77:23:a0:7d:b7:14:39:f5:8c:9e:7d:
                    49:f0:4b:34:3e:4b:29:87:39:51:e0:cf:db:7d:26:
                    0a:f7:ff:4d:a2:69:17:6c:04:ef:8f:d9:a1:43:dd:
                    7d:8d:13:0e:31:0e:cb:4f:3a:85:7e:b7:d1:a4:46:
                    84:a0:ee:53:f3:04:99:fc:25:dc:c8:66:72:d3:24:
                    ba:03:2a:09:f1:e2:8b:b5:a4:e1:1b:7c:f8:73:1f:
                    71:a0:91:5c:ac:52:76:87:86:d5:cc:24:07:a7:d4:
                    00:32:2a:d3:75:44:35:ab:6d:1d:b1:f1:76:2b:b4:
                    a3:a7:f4:7a:f9:c8:ce:27:f5:e4:21:d1:c3:87:43:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:69:78:E7:18:54:C0:D2:72:B6:BD:E2:DD:86:C0:D0:DE:A6:D1
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:c3:a5:ff:71:33:df:b5:d4:cb:14:d7:e6:f9:39:cd:2a:
         d9:e0:45:48:c7:52:e3:14:af:2a:fb:db:8f:ee:d2:32:07:e1:
         47:39:f7:2e:90:88:92:17:49:6c:46:1e:e6:21:3e:63:e9:26:
         99:ef:94:f1:e3:7a:fb:ae:dc:69:40:12:dd:8a:a4:76:2e:42:
         74:9d:36:51:57:e0:90:e2:89:6b:3f:5e:83:2f:95:b4:2d:b7:
         67:2c:9a:42:b6:fd:dd:2f:cc:57:17:50:9b:3a:ed:04:5d:47:
         61:8b:2e:91:98:7b:7e:6c:fa:a5:89:06:4d:fc:e2:56:f1:6e:
         b5:8a:7b:0a:43:fe:47:32:b8:d6:6e:a9:07:65:ca:2a:d8:ee:
         c4:1a:73:1e:c4:cc:b6:de:bf:b5:6e:e5:1b:04:67:63:e8:ce:
         fc:63:15:fb:4b:74:7f:db:7a:30:4a:ef:1b:04:89:4c:bd:86:
         c3:90:5b:1c:77:12:65:4e:ab:7c:0d:85:a1:d6:f7:a4:9d:53:
         c8:62:bd:e9:e3:3e:29:33:4b:92:d6:7c:c6:e5:b5:a9:6c:45:
         0d:41:9e:43:a0:ad:7a:ba:35:7c:73:7f:0b:2c:f0:11:74:25:
         3d:6c:84:64:3a:61:92:4f:7c:d7:8b:d2:1d:92:fc:ba:0c:5d:
         17:b3:98:50
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdk6Mfu8zZw2+80qDE7q6QFqbFLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNDAzMDUxODA3MTJaFw0yNTAzMDQxODEyMTJaMDMxMTAvBgNV
BAMTKDU2RjY2OTc4RTcxODU0QzBEMjcyQjZCREUyREQ4NkMwRDBERUE2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42DXPcTLiKQn8NoGX2v6jb6R/
5va90Y03O3Ert3a125lAOuS6RkS2ii2dKr4any9N+QBYasqjO53+a7IhdP9f2Wxv
U9DryWYnZgnE3RTOBvJmFzyycu496/z2OSBy7tcqdpMWnzMgrMFPFvvkzYSFpIc8
Zh+Z+Wf4+bV3I6B9txQ59YyefUnwSzQ+SymHOVHgz9t9Jgr3/02iaRdsBO+P2aFD
3X2NEw4xDstPOoV+t9GkRoSg7lPzBJn8JdzIZnLTJLoDKgnx4ou1pOEbfPhzH3Gg
kVysUnaHhtXMJAen1AAyKtN1RDWrbR2x8XYrtKOn9Hr5yM4n9eQh0cOHQwjXAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUVvZpeOcYVMDScra94t2GwNDeptEwHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzMDM3MmUzMjM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a/QwDQYJKoZIhvcNAQELBQADggEBAK0Jw6X/cTPftdTLFNfm+TnNKtngRUjHUuMU
ryr724/u0jIH4Uc59y6QiJIXSWxGHuYhPmPpJpnvlPHjevuu3GlAEt2KpHYuQnSd
NlFX4JDiiWs/XoMvlbQtt2csmkK2/d0vzFcXUJs67QRdR2GLLpGYe35s+qWJBk38
4lbxbrWKewpD/kcyuNZuqQdlyirY7sQacx7EzLbev7Vu5RsEZ2PozvxjFftLdH/b
ejBK7xsEiUy9hsOQWxx3EmVOq3wNhaHW96SdU8hivenjPikzS5LWfMbltalsRQ1B
nkOgrXq6NXxzfwss8BF0JT1shGQ6YZJPfNeL0h2S/LoMXRezmFA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org