Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/3139302e3130332e3139302e302f32342d3234203d3e20323731383533.roa
File:                     3139302e3130332e3139302e302f32342d3234203d3e20323731383533.roa (raw, json)
Hash identifier:          Tp4JI49nmVgrflOutyHWREmX2D0SU24UywZZA13ipyQ=
Subject key identifier:   D2:F2:1F:11:CA:9B:03:4C:4F:01:23:29:D9:99:63:74:1C:FF:A6:A0
Certificate issuer:       /CN=A4D9D7A66A85EB5BC486BAFEFF00448320545941
Certificate serial:       69D4E0F08DE070535B2AF7F3769B95D5B81D801B
Authority key identifier: A4:D9:D7:A6:6A:85:EB:5B:C4:86:BA:FE:FF:00:44:83:20:54:59:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/3139302e3130332e3139302e302f32342d3234203d3e20323731383533.roa
Signing time:             Tue 05 Mar 2024 17:51:47 +0000
ROA not before:           Tue 05 Mar 2024 17:46:47 +0000
ROA not after:            Tue 04 Mar 2025 17:51:47 +0000
asID:                     271853
IP address blocks:        190.103.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d4:e0:f0:8d:e0:70:53:5b:2a:f7:f3:76:9b:95:d5:b8:1d:80:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D9D7A66A85EB5BC486BAFEFF00448320545941
        Validity
            Not Before: Mar  5 17:46:47 2024 GMT
            Not After : Mar  4 17:51:47 2025 GMT
        Subject: CN=D2F21F11CA9B034C4F012329D99963741CFFA6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:5b:ef:19:62:7d:c7:95:28:af:e2:12:f4:
                    b0:52:b9:ff:00:9f:2e:59:94:dd:4c:98:bb:b2:68:
                    a6:23:2c:89:58:25:d3:c6:6c:c4:6e:52:b6:48:05:
                    e6:9b:e4:5c:0c:39:c5:01:c8:37:59:80:db:d2:e6:
                    e1:32:e9:9f:56:26:1b:9d:b3:22:bc:ff:0e:b2:35:
                    82:9d:1e:30:22:55:fb:16:28:9d:75:fb:4d:52:7e:
                    e3:88:21:67:41:3c:2d:f4:df:fe:0a:57:d4:17:90:
                    68:cd:be:e5:1d:5d:9c:a4:fa:3c:b0:a6:33:5b:19:
                    07:17:92:45:fa:fa:b1:ae:a0:96:8a:c0:4b:5a:22:
                    af:7d:83:8f:e6:50:2f:1c:72:97:2b:86:fa:83:dc:
                    b4:b6:bf:03:3e:7d:6a:58:1f:b3:ad:5e:24:fc:a6:
                    6d:a2:ea:1e:3a:f0:25:1b:72:ef:f3:c6:3b:b0:0e:
                    03:9d:18:e7:26:0e:22:0b:ab:c3:57:65:20:46:af:
                    2c:27:f8:c5:16:93:f0:38:4a:5d:0b:9e:77:11:de:
                    73:c5:f6:c5:71:7c:16:d6:5c:be:80:69:31:88:2c:
                    ef:fc:1b:46:2e:a2:a0:a4:55:bc:53:be:0c:cc:0e:
                    ef:de:b4:38:69:02:fd:ba:8b:9d:eb:3f:ae:ba:c3:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F2:1F:11:CA:9B:03:4C:4F:01:23:29:D9:99:63:74:1C:FF:A6:A0
            X509v3 Authority Key Identifier:
                keyid:A4:D9:D7:A6:6A:85:EB:5B:C4:86:BA:FE:FF:00:44:83:20:54:59:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4D9D7A66A85EB5BC486BAFEFF00448320545941.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B87CED5AAD2D1EB9CBBD82599B4CA6867AF0A77B3A264EAC543C60BB1A53887C/0/3139302e3130332e3139302e302f32342d3234203d3e20323731383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4c:17:0f:47:30:62:87:d8:bb:9f:c6:da:76:e5:53:f4:2b:
         88:51:d2:86:6c:cb:05:64:53:06:69:b3:59:80:41:da:29:46:
         86:66:ca:af:2a:5c:f8:72:6b:5d:b0:1f:e3:d5:df:9c:a3:c4:
         92:66:58:55:6d:a1:ec:71:8f:75:ae:d4:09:d7:2f:e0:b9:d1:
         3c:02:c5:c9:cf:bd:27:c8:f7:10:fb:3e:75:f8:b8:95:77:a5:
         12:30:72:b9:d2:b6:f4:cf:ef:de:7f:53:63:03:ba:ea:0c:c1:
         57:43:0f:60:49:94:cb:5c:d8:f8:d0:9a:ae:28:4b:ff:e5:75:
         cf:2b:55:53:28:fe:83:fb:33:10:f1:d6:33:e4:40:96:b1:96:
         59:ac:ca:70:36:85:5e:51:e6:12:58:76:2d:ac:d0:99:c2:80:
         0a:13:83:32:e4:19:ab:89:85:77:c7:1e:74:ca:a3:39:0a:41:
         d5:29:a9:c6:b7:e8:b5:a8:c3:94:49:dd:a7:11:bd:b2:50:ae:
         cb:c9:71:9b:4c:e9:a0:0b:e1:90:37:b6:e8:6e:f2:e1:c0:fd:
         a9:64:89:27:41:8b:81:78:f6:4f:3f:11:a1:3f:76:a6:d9:32:
         58:fd:d5:dd:6d:a3:98:b9:d9:6c:85:d0:44:c2:a6:64:24:80:
         ac:99:d2:d3
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUadTg8I3gcFNbKvfzdpuV1bgdgBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOUQ3QTY2QTg1RUI1QkM0ODZCQUZFRkYwMDQ0ODMy
MDU0NTk0MTAeFw0yNDAzMDUxNzQ2NDdaFw0yNTAzMDQxNzUxNDdaMDMxMTAvBgNV
BAMTKEQyRjIxRjExQ0E5QjAzNEM0RjAxMjMyOUQ5OTk2Mzc0MUNGRkE2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmlvvGWJ9x5Uor+IS9LBSuf8A
ny5ZlN1MmLuyaKYjLIlYJdPGbMRuUrZIBeab5FwMOcUByDdZgNvS5uEy6Z9WJhud
syK8/w6yNYKdHjAiVfsWKJ11+01SfuOIIWdBPC303/4KV9QXkGjNvuUdXZyk+jyw
pjNbGQcXkkX6+rGuoJaKwEtaIq99g4/mUC8ccpcrhvqD3LS2vwM+fWpYH7OtXiT8
pm2i6h468CUbcu/zxjuwDgOdGOcmDiILq8NXZSBGrywn+MUWk/A4Sl0LnncR3nPF
9sVxfBbWXL6AaTGILO/8G0YuoqCkVbxTvgzMDu/etDhpAv26i53rP666w1jxAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU0vIfEcqbA0xPASMp2ZljdBz/pqAwHwYDVR0j
BBgwFoAUpNnXpmqF61vEhrr+/wBEgyBUWUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODdDRUQ1QUFEMkQxRUI5Q0JCRDgyNTk5QjRDQTY4NjdB
RjBBNzdCM0EyNjRFQUM1NDNDNjBCQjFBNTM4ODdDLzAvQTREOUQ3QTY2QTg1RUI1
QkM0ODZCQUZFRkYwMDQ0ODMyMDU0NTk0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEQ5RDdBNjZBODVFQjVCQzQ4
NkJBRkVGRjAwNDQ4MzIwNTQ1OTQxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjg3Q0VENUFBRDJEMUVCOUNCQkQ4MjU5OUI0Q0E2ODY3QUYwQTc3QjNB
MjY0RUFDNTQzQzYwQkIxQTUzODg3Qy8wLzMxMzkzMDJlMzEzMDMzMmUzMTM5MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzODM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
Z74wDQYJKoZIhvcNAQELBQADggEBAJ5MFw9HMGKH2Lufxtp25VP0K4hR0oZsywVk
UwZps1mAQdopRoZmyq8qXPhya12wH+PV35yjxJJmWFVtoexxj3Wu1AnXL+C50TwC
xcnPvSfI9xD7PnX4uJV3pRIwcrnStvTP795/U2MDuuoMwVdDD2BJlMtc2PjQmq4o
S//ldc8rVVMo/oP7MxDx1jPkQJaxllmsynA2hV5R5hJYdi2s0JnCgAoTgzLkGauJ
hXfHHnTKozkKQdUpqca36LWow5RJ3acRvbJQrsvJcZtM6aAL4ZA3tuhu8uHA/alk
iSdBi4F49k8/EaE/dqbZMlj91d1to5i52WyF0ETCpmQkgKyZ0tM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org