Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa
File:                     3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa (raw, json)
Hash identifier:          n9gtzGWBB54x7AxnN0ZdiWrd0jazvWj8kmIDCW72G6E=
Subject key identifier:   0C:A0:40:14:59:74:AE:16:D6:28:34:30:BB:DB:90:DD:54:43:63:DF
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       64A796EC2811ACE5A08BC23AF26510FCD3EBF8E5
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     28109
IP address blocks:        190.124.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:96:ec:28:11:ac:e5:a0:8b:c2:3a:f2:65:10:fc:d3:eb:f8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=0CA040145974AE16D6283430BBDB90DD544363DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:69:ed:0c:de:85:c8:a7:c1:b9:72:5e:1e:
                    14:5b:36:a0:98:59:ab:ad:f9:d0:0b:22:15:35:21:
                    1a:22:f5:7a:e8:9e:69:94:27:c9:34:a3:b8:2b:76:
                    e5:83:87:b4:9e:e6:2e:77:c1:e3:cc:8c:51:36:b7:
                    0a:2b:cd:ba:a3:d7:e0:66:50:b6:aa:dc:7d:be:c6:
                    14:2a:32:81:b3:aa:bc:b0:90:4e:b0:20:b8:f0:45:
                    ee:d6:fd:64:47:64:d1:5c:d3:a1:a5:fc:b4:b8:32:
                    a0:1b:a8:19:77:7a:59:20:ff:71:8e:47:15:93:de:
                    4c:b7:30:15:01:cd:86:64:9c:29:c5:5b:e0:a3:98:
                    cc:3a:d9:4d:6e:c1:f3:01:67:6b:66:01:cd:59:b7:
                    21:62:f1:00:f3:55:29:69:54:d6:11:35:ba:44:54:
                    12:22:04:96:14:07:00:b8:98:16:cb:c1:c7:78:45:
                    9e:2f:11:af:2d:a4:55:fb:23:61:4f:b1:24:a1:28:
                    3c:84:89:ab:29:cf:84:d0:ee:9c:9f:74:11:80:9b:
                    11:63:60:3c:56:26:18:66:2b:68:f0:c0:9e:99:59:
                    6f:ce:bf:3d:ff:0f:44:c6:55:1e:f9:d9:3f:ac:9f:
                    af:4c:05:aa:87:71:77:f0:44:42:e2:32:8f:b8:a2:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:40:14:59:74:AE:16:D6:28:34:30:BB:DB:90:DD:54:43:63:DF
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3230382e302f32312d3231203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:83:9b:17:ea:cb:54:31:cb:66:7e:56:11:a0:fa:0c:79:
         1d:c4:9d:dd:c0:cf:f3:a3:fb:dd:f0:e6:ee:56:14:0e:1f:ff:
         00:31:d1:05:d2:e2:b4:83:fb:76:c8:7e:ce:9d:0d:d8:88:c9:
         9b:29:dd:1f:af:88:3f:3b:ee:fd:81:b0:8e:27:61:0b:28:5c:
         04:6e:5d:9f:41:ab:f8:94:7c:7e:3c:34:06:ab:fb:f1:4b:03:
         45:e3:85:c0:be:6a:d3:ec:2a:da:78:f0:6b:c3:93:7f:3f:3f:
         40:a1:f1:98:5a:7d:0f:2f:ab:41:3a:ce:30:34:e7:1e:db:78:
         ee:37:c3:38:4d:69:15:ca:a9:36:16:9f:65:c3:ea:94:be:32:
         86:9f:88:fa:94:5f:6b:16:4e:78:46:38:fc:d3:4f:51:e8:16:
         da:a6:25:c4:8e:1d:45:7f:d5:d6:3c:3b:42:a0:0d:6a:8f:01:
         29:7f:10:3c:7a:4b:ca:a4:b2:6a:c1:e9:e2:fd:0e:80:13:00:
         5e:6a:68:8a:7c:1d:41:23:1c:24:ed:ab:a5:af:08:ec:5e:9e:
         70:06:a9:99:9b:e9:a6:86:74:24:37:9b:4d:ad:d8:2f:79:a6:
         8b:72:40:5c:40:d6:e5:8c:8b:f0:06:87:c9:9b:67:30:93:25:
         07:b8:9c:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZKeW7CgRrOWgi8I68mUQ/NPr+OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVGQTIyOEEyMzAxQ0EzQzMzQkQ4ODMwRDU4QTQwNDcz
MzQ4NTk1RjAeFw0yNDAzMDUxODAxNTJaFw0yNTAzMDQxODA2NTJaMDMxMTAvBgNV
BAMTKDBDQTA0MDE0NTk3NEFFMTZENjI4MzQzMEJCREI5MERENTQ0MzYzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr8WntDN6FyKfBuXJeHhRbNqCY
Waut+dALIhU1IRoi9XronmmUJ8k0o7grduWDh7Se5i53wePMjFE2tworzbqj1+Bm
ULaq3H2+xhQqMoGzqrywkE6wILjwRe7W/WRHZNFc06Gl/LS4MqAbqBl3elkg/3GO
RxWT3ky3MBUBzYZknCnFW+CjmMw62U1uwfMBZ2tmAc1ZtyFi8QDzVSlpVNYRNbpE
VBIiBJYUBwC4mBbLwcd4RZ4vEa8tpFX7I2FPsSShKDyEiaspz4TQ7pyfdBGAmxFj
YDxWJhhmK2jwwJ6ZWW/Ovz3/D0TGVR752T+sn69MBaqHcXfwRELiMo+4olYvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDKBAFFl0rhbWKDQwu9uQ3VRDY98wHwYDVR0j
BBgwFoAU9foiiiMByjwzvYgw1YpARzNIWV8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COEU0RTlCQkQ3ODY2NTU2MzUyNTFCRTFBQjJCMzAxMTVG
ODY1QzQwRUVERkYxMjQ1OUUwNjM2RUQ4MDkzNkNELzAvRjVGQTIyOEEyMzAxQ0Ez
QzMzQkQ4ODMwRDU4QTQwNDczMzQ4NTk1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUZBMjI4QTIzMDFDQTNDMzNC
RDg4MzBENThBNDA0NzMzNDg1OTVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjhFNEU5QkJENzg2NjU1NjM1MjUxQkUxQUIyQjMwMTE1Rjg2NUM0MEVF
REZGMTI0NTlFMDYzNkVEODA5MzZDRC8wLzMxMzkzMDJlMzEzMjM0MmUzMjMwMzgy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4MzEzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvnzQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB11IObF+rLVDHLZn5WEaD6DHkdxJ3dwM/zo/vd
8ObuVhQOH/8AMdEF0uK0g/t2yH7OnQ3YiMmbKd0fr4g/O+79gbCOJ2ELKFwEbl2f
Qav4lHx+PDQGq/vxSwNF44XAvmrT7CraePBrw5N/Pz9AofGYWn0PL6tBOs4wNOce
23juN8M4TWkVyqk2Fp9lw+qUvjKGn4j6lF9rFk54Rjj8009R6BbapiXEjh1Ff9XW
PDtCoA1qjwEpfxA8ekvKpLJqweni/Q6AEwBeamiKfB1BIxwk7aulrwjsXp5wBqmZ
m+mmhnQkN5tNrdgveaaLckBcQNbljIvwBofJm2cwkyUHuJx3
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org