Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa
File:                     3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa (raw, json)
Hash identifier:          p8uXN+6R2ETybAoWQCarnukRaslXJm4mDCP6QWPhpEk=
Subject key identifier:   7E:F6:A2:74:A7:09:C5:C2:D0:59:B2:FC:66:89:86:E7:EE:7A:CF:5D
Certificate issuer:       /CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
Certificate serial:       162021493DED63CA76FF68DFD4D42872336A41A1
Authority key identifier: 63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa
Signing time:             Tue 05 Mar 2024 17:59:32 +0000
ROA not before:           Tue 05 Mar 2024 17:54:32 +0000
ROA not after:            Tue 04 Mar 2025 17:59:32 +0000
asID:                     262252
IP address blocks:        190.120.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:21:49:3d:ed:63:ca:76:ff:68:df:d4:d4:28:72:33:6a:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
        Validity
            Not Before: Mar  5 17:54:32 2024 GMT
            Not After : Mar  4 17:59:32 2025 GMT
        Subject: CN=7EF6A274A709C5C2D059B2FC668986E7EE7ACF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:e4:97:3f:08:c0:14:46:5b:f5:86:2d:04:
                    11:f1:2b:60:c3:ff:75:33:6b:a9:9e:cc:50:e8:34:
                    e9:fd:99:b1:35:98:bd:39:4c:82:34:b9:52:70:bb:
                    34:bc:6b:c4:1e:e3:7f:ff:e1:85:7d:c2:6b:50:57:
                    ed:2c:cf:b7:1b:86:e0:01:38:ac:f9:d2:94:74:0d:
                    e6:95:a2:1d:51:dd:bf:54:31:7e:72:17:43:6c:70:
                    33:82:15:64:35:96:40:65:e7:eb:26:12:bf:c2:81:
                    92:6f:55:54:02:eb:21:48:92:49:b3:e7:4d:f0:2e:
                    a2:95:1b:8f:f6:90:8a:fe:8e:05:9e:d7:04:88:29:
                    98:91:b0:7b:c5:59:30:47:6f:e6:c7:66:9e:fc:2e:
                    96:a9:68:4f:8b:c7:db:b9:9c:56:e7:30:3b:42:86:
                    5e:93:85:30:a0:66:4f:9b:db:7b:a5:36:df:5e:28:
                    b1:4c:f1:85:63:f6:a7:55:40:5c:1c:4e:8e:30:93:
                    fd:fc:52:bb:2a:30:af:85:6d:50:89:75:3a:9c:6b:
                    37:91:63:85:0c:fa:55:03:a5:4f:96:84:b9:15:87:
                    a4:e0:b3:95:77:37:56:7b:d1:c7:79:c2:1a:db:c1:
                    a4:9b:1d:a8:8f:dc:dc:f5:46:c5:6a:46:58:b5:e2:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F6:A2:74:A7:09:C5:C2:D0:59:B2:FC:66:89:86:E7:EE:7A:CF:5D
            X509v3 Authority Key Identifier:
                keyid:63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:21:28:59:57:85:9f:a9:18:56:dd:31:a4:1a:1b:06:2b:
         69:21:3f:99:be:f7:0a:c0:1d:9e:cf:96:cc:18:7e:3d:b5:c6:
         b9:2b:d0:c5:05:7b:65:cd:ad:87:7e:1f:87:13:f8:bd:9f:d0:
         ab:e6:fc:52:a9:8c:98:44:ee:e0:98:f3:55:d3:07:7b:4b:88:
         35:70:f1:00:ce:67:86:c6:07:39:3c:4b:7e:ae:50:4b:68:bf:
         55:63:fe:30:a1:4e:16:90:21:6c:12:21:38:b1:5c:cf:b2:89:
         a1:b9:4b:36:0e:e5:b0:b7:d7:4e:56:f3:8d:23:24:ca:01:01:
         ec:ec:d5:04:b5:6c:00:2c:05:58:c3:fc:e1:ce:48:fb:a4:c9:
         2f:b8:81:c2:fc:92:e1:26:88:05:46:a0:ab:a9:25:dc:cc:b3:
         c8:8f:fd:d0:bf:8b:cb:d6:b1:14:d1:6a:fd:27:98:af:ab:ce:
         3b:30:63:4d:b9:e9:16:bf:65:46:12:ad:5b:92:60:4d:65:6a:
         49:6f:0f:f6:7d:39:e6:55:6b:a1:50:14:e9:d6:54:b8:d2:f7:
         a4:ff:d7:80:8d:84:6a:b1:77:6f:6c:ac:66:2a:cd:82:9b:84:
         e3:3b:63:cc:c9:49:b2:85:99:96:3b:95:2f:7b:ec:cc:d0:04:
         c6:e7:85:6e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFiAhST3tY8p2/2jf1NQocjNqQaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNCQTlFNzRBMDA2MDNDQzNBMURBMjJCQzY4RjU2QTQz
MzM2OENDRjAeFw0yNDAzMDUxNzU0MzJaFw0yNTAzMDQxNzU5MzJaMDMxMTAvBgNV
BAMTKDdFRjZBMjc0QTcwOUM1QzJEMDU5QjJGQzY2ODk4NkU3RUU3QUNGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2eSXPwjAFEZb9YYtBBHxK2DD
/3Uza6mezFDoNOn9mbE1mL05TII0uVJwuzS8a8Qe43//4YV9wmtQV+0sz7cbhuAB
OKz50pR0DeaVoh1R3b9UMX5yF0NscDOCFWQ1lkBl5+smEr/CgZJvVVQC6yFIkkmz
503wLqKVG4/2kIr+jgWe1wSIKZiRsHvFWTBHb+bHZp78LpapaE+Lx9u5nFbnMDtC
hl6ThTCgZk+b23ulNt9eKLFM8YVj9qdVQFwcTo4wk/38UrsqMK+FbVCJdTqcazeR
Y4UM+lUDpU+WhLkVh6Tgs5V3N1Z70cd5whrbwaSbHaiP3Nz1RsVqRli14sNNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfvaidKcJxcLQWbL8ZomG5+56z10wHwYDVR0j
BBgwFoAUY7qedKAGA8w6HaIrxo9WpDM2jM8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNjVGMTI5N0E0ODUxNjRFMTc0Mjc2QzNFNTJCNTMxQzFB
M0M1MkI3RDkyQzVDQTA1QzdGOTYyRUFENDZCMzU5LzAvNjNCQTlFNzRBMDA2MDND
QzNBMURBMjJCQzY4RjU2QTQzMzM2OENDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0JBOUU3NEEwMDYwM0NDM0Ex
REEyMkJDNjhGNTZBNDMzMzY4Q0NGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjY1RjEyOTdBNDg1MTY0RTE3NDI3NkMzRTUyQjUzMUMxQTNDNTJCN0Q5
MkM1Q0EwNUM3Rjk2MkVBRDQ2QjM1OS8wLzMxMzkzMDJlMzEzMjMwMmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
ePAwDQYJKoZIhvcNAQELBQADggEBAASjIShZV4WfqRhW3TGkGhsGK2khP5m+9wrA
HZ7PlswYfj21xrkr0MUFe2XNrYd+H4cT+L2f0Kvm/FKpjJhE7uCY81XTB3tLiDVw
8QDOZ4bGBzk8S36uUEtov1Vj/jChThaQIWwSITixXM+yiaG5SzYO5bC3105W840j
JMoBAezs1QS1bAAsBVjD/OHOSPukyS+4gcL8kuEmiAVGoKupJdzMs8iP/dC/i8vW
sRTRav0nmK+rzjswY0256Ra/ZUYSrVuSYE1laklvD/Z9OeZVa6FQFOnWVLjS96T/
14CNhGqxd29srGYqzYKbhOM7Y8zJSbKFmZY7lS977MzQBMbnhW4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org