Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          9toHF1pfOoUAt7oVJ1WsIy/oA/c5sqD2oG9MAniXiU8=
Subject key identifier:   BC:97:7A:52:68:22:76:B7:27:E7:73:E8:AE:60:56:C1:5C:CC:3D:64
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       1D1741CAC5EF428ED38BC829B826B76812C4604F
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:12 +0000
ROA not before:           Tue 05 Mar 2024 18:07:12 +0000
ROA not after:            Tue 04 Mar 2025 18:12:12 +0000
asID:                     264688
IP address blocks:        190.196.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:17:41:ca:c5:ef:42:8e:d3:8b:c8:29:b8:26:b7:68:12:c4:60:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:12 2024 GMT
            Not After : Mar  4 18:12:12 2025 GMT
        Subject: CN=BC977A52682276B727E773E8AE6056C15CCC3D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:cf:9b:ec:1f:4f:42:d2:8b:88:3e:36:61:
                    72:71:3c:c2:fd:c6:f1:7f:4e:85:85:c6:95:94:34:
                    da:cc:3c:6f:91:2e:94:26:10:65:d0:3e:4f:db:23:
                    cc:bc:69:fc:45:cd:44:bd:93:75:08:0a:46:29:ab:
                    8a:24:1d:e6:3e:db:e6:42:67:f0:89:1c:9e:e8:78:
                    5d:c8:48:9a:e9:c3:b5:c9:8b:c6:87:a5:9b:c9:74:
                    9b:81:5a:6f:28:45:99:1a:ef:fe:57:30:93:bc:39:
                    1e:d0:e0:78:64:0d:f9:4a:7e:92:b0:9b:27:ba:87:
                    4c:f9:a7:7e:10:3b:89:a3:a7:81:4b:75:73:9f:1f:
                    2a:36:b2:a6:b2:6b:b6:6a:0e:db:fc:36:01:17:0b:
                    01:b1:07:82:31:04:96:a4:87:74:87:48:36:a0:87:
                    d0:69:00:ac:f1:e4:3e:d4:ec:ae:86:76:bc:f7:28:
                    12:0f:11:53:3e:bb:a1:72:54:a5:45:d7:87:fc:e9:
                    8a:b2:b6:e2:65:ba:e1:7e:e5:a6:2e:ef:f7:be:79:
                    a3:43:2d:a0:e0:47:51:5e:01:06:e4:ca:79:0b:33:
                    f7:3c:46:e9:0c:57:d4:15:59:d7:8a:84:c1:72:94:
                    48:9c:01:62:7d:de:2a:3d:a8:a1:bd:da:c0:07:2c:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:7A:52:68:22:76:B7:27:E7:73:E8:AE:60:56:C1:5C:CC:3D:64
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:97:da:49:b1:f1:a7:a8:bd:be:12:c0:dd:fa:03:e0:69:3b:
         66:66:ae:71:1d:fb:83:54:59:98:00:ec:40:27:37:c3:5b:99:
         7f:30:f0:1d:96:7d:48:c4:2f:55:c3:c5:7d:45:52:d3:b0:ed:
         70:99:cd:11:1e:a5:1c:71:11:19:5c:e4:43:b1:1f:c1:12:25:
         23:80:3e:47:bf:82:03:f3:8c:3e:22:65:0a:5b:f7:28:0b:ab:
         ac:5d:6e:ce:52:96:f9:f0:ba:e9:2f:8f:51:88:a5:33:aa:f7:
         42:39:f5:ee:9f:43:1b:c9:83:35:3d:7b:33:fe:e4:25:56:f4:
         85:94:14:7c:30:2d:a6:f7:2f:77:68:81:44:85:7a:a6:ca:aa:
         bd:10:b2:1f:b9:08:93:cf:6b:dc:c0:df:f5:4b:ed:ef:d8:12:
         bc:5a:24:fd:53:56:3d:04:aa:0d:bf:df:4d:8e:ee:0b:16:09:
         e4:d6:6c:77:b2:ac:a3:73:1d:3f:63:b3:b5:e9:91:75:11:76:
         94:94:d1:fd:7a:5d:9b:f6:0c:49:aa:fa:2f:fe:40:18:4b:aa:
         f2:09:48:d0:95:7f:00:bc:7e:44:c9:75:fb:56:44:99:d6:50:
         8e:83:9d:45:19:13:ee:76:0d:d2:52:9b:f0:3e:b6:d6:18:ef:
         92:97:33:75
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHRdBysXvQo7Ti8gpuCa3aBLEYE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNDAzMDUxODA3MTJaFw0yNTAzMDQxODEyMTJaMDMxMTAvBgNV
BAMTKEJDOTc3QTUyNjgyMjc2QjcyN0U3NzNFOEFFNjA1NkMxNUNDQzNENjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnc+b7B9PQtKLiD42YXJxPML9
xvF/ToWFxpWUNNrMPG+RLpQmEGXQPk/bI8y8afxFzUS9k3UICkYpq4okHeY+2+ZC
Z/CJHJ7oeF3ISJrpw7XJi8aHpZvJdJuBWm8oRZka7/5XMJO8OR7Q4HhkDflKfpKw
mye6h0z5p34QO4mjp4FLdXOfHyo2sqaya7ZqDtv8NgEXCwGxB4IxBJakh3SHSDag
h9BpAKzx5D7U7K6Gdrz3KBIPEVM+u6FyVKVF14f86YqytuJluuF+5aYu7/e+eaND
LaDgR1FeAQbkynkLM/c8RukMV9QVWdeKhMFylEicAWJ93io9qKG92sAHLJG1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUvJd6Umgidrcn53PormBWwVzMPWQwHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzOTM2MmUzMjMzMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xOcwDQYJKoZIhvcNAQELBQADggEBAIKX2kmx8aeovb4SwN36A+BpO2ZmrnEd+4NU
WZgA7EAnN8NbmX8w8B2WfUjEL1XDxX1FUtOw7XCZzREepRxxERlc5EOxH8ESJSOA
Pke/ggPzjD4iZQpb9ygLq6xdbs5Slvnwuukvj1GIpTOq90I59e6fQxvJgzU9ezP+
5CVW9IWUFHwwLab3L3dogUSFeqbKqr0Qsh+5CJPPa9zA3/VL7e/YErxaJP1TVj0E
qg2/302O7gsWCeTWbHeyrKNzHT9js7XpkXURdpSU0f16XZv2DEmq+i/+QBhLqvIJ
SNCVfwC8fkTJdftWRJnWUI6DnUUZE+52DdJSm/A+ttYY75KXM3U=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org