Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38302e302f32342d3234203d3e20333934363834.roa
File:                     3139302e3131332e38302e302f32342d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          7N1P1/G48yD8jRcI5zQIwy+g5bEb7l5Utm3SwTsDS24=
Subject key identifier:   AF:63:88:57:DB:67:92:DE:5A:60:43:92:B0:45:10:F3:99:5E:FC:A7
Certificate issuer:       /CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
Certificate serial:       776C911B185CE7AE7354DC9477700530B42AD4E7
Authority key identifier: E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38302e302f32342d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 18:17:27 +0000
ROA not before:           Tue 05 Mar 2024 18:12:27 +0000
ROA not after:            Tue 04 Mar 2025 18:17:27 +0000
asID:                     394684
IP address blocks:        190.113.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6c:91:1b:18:5c:e7:ae:73:54:dc:94:77:70:05:30:b4:2a:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
        Validity
            Not Before: Mar  5 18:12:27 2024 GMT
            Not After : Mar  4 18:17:27 2025 GMT
        Subject: CN=AF638857DB6792DE5A604392B04510F3995EFCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:8a:2a:3c:f9:23:e4:8b:e3:38:bc:6c:12:
                    56:9b:6b:48:38:54:e0:01:26:27:a8:b0:65:c7:1c:
                    46:c0:2e:83:b6:62:c7:71:ac:57:8e:9b:2d:9a:40:
                    c6:9a:de:a3:35:a6:5b:56:ab:58:32:ff:79:c8:56:
                    16:fa:df:4b:fd:5d:0d:e6:a0:5a:b6:02:18:a7:f7:
                    4d:80:4c:20:8c:7f:a1:ac:b0:d3:53:83:76:2b:a5:
                    af:43:95:82:81:bd:8a:4f:d3:2f:90:5c:3e:ec:91:
                    49:a7:59:7d:43:20:f1:cc:fe:22:37:68:23:85:f8:
                    80:00:b8:cd:ce:42:90:2f:39:7e:a8:2b:c6:b5:e7:
                    19:4d:65:77:78:c3:93:a8:83:82:99:b5:60:4c:e7:
                    74:57:4c:e2:79:b2:2a:0c:fe:10:1e:b0:9b:84:43:
                    7e:f5:a1:4d:b1:dc:49:f9:80:fe:49:08:b7:65:a8:
                    ad:35:76:88:8b:cb:4d:4d:44:43:1b:39:1e:51:d1:
                    95:c0:cc:c3:1e:92:03:d1:9d:53:b2:64:69:09:eb:
                    59:63:5c:2c:4e:4d:8d:ce:10:bd:79:bb:8e:a0:db:
                    37:59:c4:19:45:62:f7:1e:89:88:bd:4d:b4:ae:91:
                    78:10:39:37:a0:6e:4d:76:df:b7:0f:77:52:54:db:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:63:88:57:DB:67:92:DE:5A:60:43:92:B0:45:10:F3:99:5E:FC:A7
            X509v3 Authority Key Identifier:
                keyid:E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38302e302f32342d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:da:95:e7:af:e2:dc:26:39:62:38:5d:a9:6b:40:c4:d6:
         b6:55:7e:a8:bf:c1:9c:a8:ea:da:66:7b:f1:89:e6:46:1e:88:
         a5:3d:2e:40:81:5c:f5:54:23:a8:bb:ad:38:08:b9:0c:5b:b9:
         ce:58:bf:75:ab:9e:51:99:6a:b4:5d:16:8e:09:60:ff:0c:50:
         ce:66:18:d5:ef:42:0a:87:40:2e:f8:db:e2:8c:53:3f:fd:dd:
         06:06:80:ea:5c:2c:e3:41:51:58:39:2b:a5:68:81:b0:bd:66:
         2b:ef:7b:14:79:75:18:45:e9:6e:53:a9:5d:81:cd:35:b2:d7:
         f2:df:fb:97:2c:c1:93:b4:4d:f3:08:d8:ab:1d:bc:c4:67:82:
         4b:97:7c:cf:2b:51:3c:41:83:29:c7:ba:00:b2:a9:77:46:cf:
         b2:52:09:a4:f6:ec:33:e0:b1:44:5d:e1:5d:ee:51:c2:dc:56:
         e6:4f:04:1a:d1:4f:dc:9f:85:42:d5:21:69:0d:6d:ca:54:7b:
         9f:45:35:66:c6:9c:71:f4:f5:68:29:1c:2d:f7:82:7a:1b:98:
         0e:b0:c9:96:d0:52:c4:5d:0f:d4:d7:65:52:cc:1f:c1:c3:95:
         01:cd:b1:22:af:a9:53:bf:62:35:04:7f:32:cf:6f:bf:12:b7:
         8c:35:8c:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd2yRGxhc565zVNyUd3AFMLQq1OcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwQTdENEEwQjc1OTgxRTBGQjVFQTg2NjA1REMyMjMz
MkIxMzdDMDAeFw0yNDAzMDUxODEyMjdaFw0yNTAzMDQxODE3MjdaMDMxMTAvBgNV
BAMTKEFGNjM4ODU3REI2NzkyREU1QTYwNDM5MkIwNDUxMEYzOTk1RUZDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWIoqPPkj5IvjOLxsElaba0g4
VOABJieosGXHHEbALoO2YsdxrFeOmy2aQMaa3qM1pltWq1gy/3nIVhb630v9XQ3m
oFq2Ahin902ATCCMf6GssNNTg3Yrpa9DlYKBvYpP0y+QXD7skUmnWX1DIPHM/iI3
aCOF+IAAuM3OQpAvOX6oK8a15xlNZXd4w5Oog4KZtWBM53RXTOJ5sioM/hAesJuE
Q371oU2x3En5gP5JCLdlqK01doiLy01NREMbOR5R0ZXAzMMekgPRnVOyZGkJ61lj
XCxOTY3OEL15u46g2zdZxBlFYvceiYi9TbSukXgQOTegbk1237cPd1JU2yw9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUr2OIV9tnkt5aYEOSsEUQ85le/KcwHwYDVR0j
BBgwFoAU4Qp9Sgt1mB4PteqGYF3CIzKxN8AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzBENTFCQjA3OUU5MUZEQUI3MTJFQTJCRTYxOTQzRjU2
QkZFNDVFMEI4MzM1OTg3M0E2RjYxRUQ4MjVDRjc3LzAvRTEwQTdENEEwQjc1OTgx
RTBGQjVFQTg2NjA1REMyMjMzMkIxMzdDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTBBN0Q0QTBCNzU5ODFFMEZC
NUVBODY2MDVEQzIyMzMyQjEzN0MwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMwRDUxQkIwNzlFOTFGREFCNzEyRUEyQkU2MTk0M0Y1NkJGRTQ1RTBC
ODMzNTk4NzNBNkY2MUVEODI1Q0Y3Ny8wLzMxMzkzMDJlMzEzMTMzMmUzODMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM0MzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBw8NqV56/i3CY5YjhdqWtAxNa2VX6ov8GcqOra
ZnvxieZGHoilPS5AgVz1VCOou604CLkMW7nOWL91q55RmWq0XRaOCWD/DFDOZhjV
70IKh0Au+NvijFM//d0GBoDqXCzjQVFYOSulaIGwvWYr73sUeXUYReluU6ldgc01
stfy3/uXLMGTtE3zCNirHbzEZ4JLl3zPK1E8QYMpx7oAsql3Rs+yUgmk9uwz4LFE
XeFd7lHC3FbmTwQa0U/cn4VC1SFpDW3KVHufRTVmxpxx9PVoKRwt94J6G5gOsMmW
0FLEXQ/U12VSzB/Bw5UBzbEir6lTv2I1BH8yz2+/EreMNYzb
-----END CERTIFICATE-----
Generated at Sat May 18 17:19:18 2024 by rpki-client on console-ams.rpki-client.org