Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323632323634.roa
File:                     3139302e3231302e3230362e302f32342d3234203d3e20323632323634.roa (raw, json)
Hash identifier:          arlqSJ8EOBfpnK4jfqLNDQi+9BDBnI+wGHDZ20xKBKg=
Subject key identifier:   3E:4F:D9:F4:A5:11:6F:F1:D6:8A:C9:B4:C4:1E:30:7E:91:6A:57:2C
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       0B871B19E4932E7388B2AE7106933AE2ABFD2C3E
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323632323634.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     262264
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:1b:19:e4:93:2e:73:88:b2:ae:71:06:93:3a:e2:ab:fd:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=3E4FD9F4A5116FF1D68AC9B4C41E307E916A572C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:42:5d:5b:e5:e8:82:b1:0c:a0:4d:4b:f8:
                    00:a9:7e:ec:f7:11:2b:4a:b2:bc:68:48:cd:b8:61:
                    a6:b7:42:e9:c2:54:77:e0:83:b6:12:99:a2:a2:51:
                    12:42:6b:e8:37:b0:18:92:30:78:d6:51:eb:2e:ab:
                    90:f2:43:52:0f:29:a8:71:43:b4:ef:17:08:0a:38:
                    a5:cf:9b:fc:7f:dc:e8:05:93:99:8d:1f:2e:6c:0b:
                    b6:2a:cf:33:6e:41:f2:46:d5:33:ba:42:b2:77:19:
                    68:33:67:5e:50:45:01:71:39:a2:28:b7:f2:2b:69:
                    b8:15:4c:c2:11:36:b9:6d:fc:11:97:b6:98:36:85:
                    88:75:16:19:ed:e0:c5:24:95:45:62:0d:e3:8c:a8:
                    c5:c7:20:77:09:4e:64:e9:0c:44:73:8d:57:6f:f3:
                    2a:53:d2:2e:e6:97:25:e4:0d:f9:a2:37:e4:2b:0b:
                    47:de:a1:f9:73:8c:02:85:89:4d:21:9e:1b:42:cb:
                    0f:74:d1:0e:5c:f2:1f:38:5e:5d:7e:be:b0:02:d1:
                    3d:c8:40:15:40:67:86:d4:ef:f3:ac:ad:d9:c8:62:
                    aa:1f:c8:4c:43:be:08:04:f1:64:08:91:43:d9:58:
                    cd:6b:54:cd:6e:65:17:9f:4c:85:27:81:78:f0:e9:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:D9:F4:A5:11:6F:F1:D6:8A:C9:B4:C4:1E:30:7E:91:6A:57:2C
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323632323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:60:5a:36:1b:f9:c0:0b:fe:c5:a3:da:ba:db:53:63:a7:09:
         3a:df:24:b8:6b:4e:5e:d5:a0:e8:f1:48:06:81:0c:80:63:0f:
         79:5c:a0:44:31:04:51:03:60:9c:75:62:80:d6:1b:8d:60:8f:
         e0:b2:b1:db:7b:e4:c8:e6:8f:01:f2:91:e5:7c:ae:7e:81:f1:
         a9:9d:aa:ed:58:21:11:9c:cb:ff:70:32:b9:9d:a0:0f:ff:fc:
         fd:e6:01:89:9b:f2:77:8e:4f:b1:ce:e6:f1:92:61:b8:b5:8e:
         6c:2d:83:d7:67:4a:ce:04:5f:2b:6c:04:8a:2b:06:d6:f5:dc:
         55:a4:bb:30:67:3d:df:c2:39:df:23:8c:51:9d:09:ca:25:9f:
         cb:41:f9:c9:0e:29:20:40:44:40:43:9e:cd:92:41:32:d7:a9:
         8f:10:8e:c7:f3:10:e1:b0:38:b5:d0:45:48:b2:f2:b1:95:6c:
         79:1a:98:fb:26:76:99:ef:65:df:4d:03:b5:e6:2b:37:3e:06:
         f6:03:86:5b:d1:d5:e9:35:5d:a2:c3:ca:48:1c:92:c6:f8:75:
         0f:4a:16:1c:0e:99:6c:a3:96:24:96:90:5c:8b:43:0d:06:ca:
         0e:a5:93:08:c1:ed:eb:f5:81:f1:3c:13:ab:96:12:34:d2:c2:
         6f:b1:0f:7d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUC4cbGeSTLnOIsq5xBpM64qv9LD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNDAzMDUxODA3MDZaFw0yNTAzMDQxODEyMDZaMDMxMTAvBgNV
BAMTKDNFNEZEOUY0QTUxMTZGRjFENjhBQzlCNEM0MUUzMDdFOTE2QTU3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWkJdW+XogrEMoE1L+ACpfuz3
EStKsrxoSM24Yaa3QunCVHfgg7YSmaKiURJCa+g3sBiSMHjWUesuq5DyQ1IPKahx
Q7TvFwgKOKXPm/x/3OgFk5mNHy5sC7YqzzNuQfJG1TO6QrJ3GWgzZ15QRQFxOaIo
t/IrabgVTMIRNrlt/BGXtpg2hYh1Fhnt4MUklUViDeOMqMXHIHcJTmTpDERzjVdv
8ypT0i7mlyXkDfmiN+QrC0feoflzjAKFiU0hnhtCyw900Q5c8h84Xl1+vrAC0T3I
QBVAZ4bU7/OsrdnIYqofyExDvggE8WQIkUPZWM1rVM1uZRefTIUngXjw6QylAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUPk/Z9KURb/HWism0xB4wfpFqVywwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMxMzkzMDJlMzIzMTMwMmUzMjMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM2MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
0s4wDQYJKoZIhvcNAQELBQADggEBABVgWjYb+cAL/sWj2rrbU2OnCTrfJLhrTl7V
oOjxSAaBDIBjD3lcoEQxBFEDYJx1YoDWG41gj+Cysdt75MjmjwHykeV8rn6B8amd
qu1YIRGcy/9wMrmdoA///P3mAYmb8neOT7HO5vGSYbi1jmwtg9dnSs4EXytsBIor
Btb13FWkuzBnPd/COd8jjFGdCcoln8tB+ckOKSBAREBDns2SQTLXqY8QjsfzEOGw
OLXQRUiy8rGVbHkamPsmdpnvZd9NA7XmKzc+BvYDhlvR1ek1XaLDykgcksb4dQ9K
FhwOmWyjliSWkFyLQw0Gyg6lkwjB7ev1gfE8E6uWEjTSwm+xD30=
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org