Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
File:                     3139302e352e3132382e302f31392d3234203d3e203136353932.roa (raw, json)
Hash identifier:          YR8UrM6hY+sSHNGEdUAVY+wM8GPr5qXzHQxYhETTs3Q=
Subject key identifier:   2B:73:4E:8C:C9:E5:1B:7C:81:BD:B8:7A:22:C5:49:1A:B0:A9:2B:DA
Certificate issuer:       /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial:       24F2ED7C1DA54F035C2A051B3AF6F73D52CA27E4
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
Signing time:             Tue 04 Feb 2025 18:02:02 +0000
ROA not before:           Tue 04 Feb 2025 17:57:02 +0000
ROA not after:            Tue 03 Feb 2026 18:02:02 +0000
asID:                     16592
IP address blocks:        190.5.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 15:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:ed:7c:1d:a5:4f:03:5c:2a:05:1b:3a:f6:f7:3d:52:ca:27:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
        Validity
            Not Before: Feb  4 17:57:02 2025 GMT
            Not After : Feb  3 18:02:02 2026 GMT
        Subject: CN=2B734E8CC9E51B7C81BDB87A22C5491AB0A92BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:0f:11:96:df:08:a0:e6:61:c3:00:cf:cc:
                    97:80:d2:86:5f:2c:4d:cd:a8:23:19:a3:65:d1:02:
                    91:14:e3:a2:1f:47:ed:3c:46:ac:ac:aa:22:d9:03:
                    e3:cb:a4:d1:95:de:1c:e1:a6:54:31:e0:a8:dc:42:
                    46:e7:ae:d3:af:19:54:49:10:d4:87:a1:28:11:1c:
                    70:8d:e9:9a:38:89:07:a8:4e:98:6a:1a:78:95:e1:
                    52:8d:b8:55:7d:bf:50:da:07:bf:64:6c:a7:5c:3b:
                    7f:c8:70:52:08:25:60:10:df:a4:73:77:e0:4e:4d:
                    04:5f:65:33:f3:8e:dc:1c:38:8d:72:61:59:f6:2e:
                    66:56:5b:1e:6b:b8:51:b1:56:0d:1c:6f:5a:0b:ca:
                    a9:53:ec:17:a6:e6:c6:3b:8e:c1:f9:ac:45:0d:af:
                    6a:12:62:31:e9:d7:70:d9:88:05:29:ab:ac:29:9d:
                    4c:dd:5b:78:39:4a:f6:5c:f0:ee:e9:3d:ad:82:c9:
                    42:3c:07:8b:67:73:f3:14:68:e1:9e:9f:9e:02:b7:
                    e6:04:4e:d2:69:37:b4:a8:39:18:77:ab:f0:f7:f6:
                    0c:be:c7:0f:94:2c:61:e6:b0:6b:af:f0:71:26:21:
                    c3:d1:08:8a:e7:85:04:0b:75:d9:67:c0:f7:84:e5:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:4E:8C:C9:E5:1B:7C:81:BD:B8:7A:22:C5:49:1A:B0:A9:2B:DA
            X509v3 Authority Key Identifier:
                keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:64:74:79:9b:cd:a5:9d:d9:e5:bf:e3:c6:25:04:02:74:
         75:fb:31:e1:58:30:bc:0d:73:95:59:f8:a7:19:e7:48:b5:c2:
         7d:e1:95:8e:a3:85:f8:16:9b:79:30:14:e7:0b:77:a2:e2:df:
         f4:a4:2f:32:fc:2a:b3:75:f0:48:24:0b:9c:4d:e8:e7:bc:f3:
         18:f6:06:c9:fe:91:ad:48:bc:c2:0a:fe:07:23:11:77:e5:19:
         87:2d:60:7b:d1:bb:1b:74:de:e8:01:02:a3:41:c1:2e:23:a3:
         f8:92:f3:c8:52:81:13:30:e8:7e:d9:19:72:78:4f:a0:49:ac:
         36:21:6b:81:dc:8f:39:0c:26:b2:1c:82:bb:bc:96:d8:b1:34:
         58:23:94:0b:08:96:8c:67:cf:f0:59:75:30:f7:26:5c:79:67:
         ba:ea:8b:bb:26:f0:a7:2f:9d:e6:ae:4d:f0:ec:f8:bf:0a:13:
         2e:ed:7d:4c:a1:8e:8b:84:ae:fd:83:dd:ad:f6:1b:2e:cf:c0:
         68:0f:67:b8:27:01:aa:cd:68:05:de:30:66:62:1c:f5:3a:ec:
         e0:19:89:bf:78:0f:32:f1:4d:ca:c6:e2:eb:39:32:54:0f:53:
         44:b9:58:b6:6f:7d:ff:62:90:4e:1e:f4:59:3f:1f:4b:16:ac:
         55:94:13:3b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJPLtfB2lTwNcKgUbOvb3PVLKJ+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEyMkQzMkVCMTdGN0E0NEFGMTU3QUNEM0ZFNjIzNENC
MkRGRDAxQzAeFw0yNTAyMDQxNzU3MDJaFw0yNjAyMDMxODAyMDJaMDMxMTAvBgNV
BAMTKDJCNzM0RThDQzlFNTFCN0M4MUJEQjg3QTIyQzU0OTFBQjBBOTJCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mg8Rlt8IoOZhwwDPzJeA0oZf
LE3NqCMZo2XRApEU46IfR+08RqysqiLZA+PLpNGV3hzhplQx4KjcQkbnrtOvGVRJ
ENSHoSgRHHCN6Zo4iQeoTphqGniV4VKNuFV9v1DaB79kbKdcO3/IcFIIJWAQ36Rz
d+BOTQRfZTPzjtwcOI1yYVn2LmZWWx5ruFGxVg0cb1oLyqlT7Bem5sY7jsH5rEUN
r2oSYjHp13DZiAUpq6wpnUzdW3g5SvZc8O7pPa2CyUI8B4tnc/MUaOGen54Ct+YE
TtJpN7SoORh3q/D39gy+xw+ULGHmsGuv8HEmIcPRCIrnhQQLddlnwPeE5UM5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUK3NOjMnlG3yBvbh6IsVJGrCpK9owHwYDVR0j
BBgwFoAUMSLTLrF/ekSvFXrNP+YjTLLf0BwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkEzQjJEM0Q2MURCNEQ5NEE0OUJGMUNDRUUxRjgzNzg5
RUJERUJGQ0UyQ0VFRjhGNjY5QTBBMEFCNDRCODM5LzAvMzEyMkQzMkVCMTdGN0E0
NEFGMTU3QUNEM0ZFNjIzNENCMkRGRDAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTIyRDMyRUIxN0Y3QTQ0QUYx
NTdBQ0QzRkU2MjM0Q0IyREZEMDFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJBM0IyRDNENjFEQjREOTRBNDlCRjFDQ0VFMUY4Mzc4OUVCREVCRkNF
MkNFRUY4RjY2OUEwQTBBQjQ0QjgzOS8wLzMxMzkzMDJlMzUyZTMxMzIzODJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+BYAwDQYJ
KoZIhvcNAQELBQADggEBADawZHR5m82lndnlv+PGJQQCdHX7MeFYMLwNc5VZ+KcZ
50i1wn3hlY6jhfgWm3kwFOcLd6Li3/SkLzL8KrN18EgkC5xN6Oe88xj2Bsn+ka1I
vMIK/gcjEXflGYctYHvRuxt03ugBAqNBwS4jo/iS88hSgRMw6H7ZGXJ4T6BJrDYh
a4HcjzkMJrIcgru8ltixNFgjlAsIloxnz/BZdTD3Jlx5Z7rqi7sm8KcvneauTfDs
+L8KEy7tfUyhjouErv2D3a32Gy7PwGgPZ7gnAarNaAXeMGZiHPU67OAZib94DzLx
TcrG4us5MlQPU0S5WLZvff9ikE4e9Fk/H0sWrFWUEzs=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:20 2025 by rpki-client