Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
File:                     3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          Z0u/oBBcmdE/7UzCpY3ISwgV3fPyfWYGsbaoicgxT3c=
Subject key identifier:   2F:B8:36:EB:AD:61:CA:71:3D:E1:35:82:CB:F1:B7:82:2C:3D:AC:62
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       3B9894A2650035EDCBBB1349F3042AAA777DB799
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa
Signing time:             Tue 20 Aug 2024 23:10:01 +0000
ROA not before:           Tue 20 Aug 2024 23:05:01 +0000
ROA not after:            Tue 19 Aug 2025 23:10:01 +0000
asID:                     270091
IP address blocks:        190.109.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:98:94:a2:65:00:35:ed:cb:bb:13:49:f3:04:2a:aa:77:7d:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Aug 20 23:05:01 2024 GMT
            Not After : Aug 19 23:10:01 2025 GMT
        Subject: CN=2FB836EBAD61CA713DE13582CBF1B7822C3DAC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:78:65:fa:06:e2:f2:87:e6:36:60:0b:d5:
                    9d:e3:98:ec:9f:71:3f:6a:4d:ea:88:76:18:76:0d:
                    09:0d:ca:53:c6:38:70:11:0c:db:26:43:f7:0a:08:
                    8f:ac:8c:ce:7c:0a:cd:c8:99:a7:f7:69:04:c1:bd:
                    a6:cc:76:1a:51:0c:0e:c9:7f:e0:ec:b6:50:ed:0d:
                    89:06:08:81:92:85:d7:8d:8e:5d:fd:ac:38:20:43:
                    7a:a9:8a:59:91:99:90:88:c3:dd:25:27:bc:c7:04:
                    3a:40:cb:4f:3d:67:91:d6:5b:1e:8f:2d:16:0b:99:
                    6f:f9:91:3e:f1:ca:a5:9a:95:fb:c1:0f:bc:06:31:
                    78:9c:0a:e8:dd:8d:e4:f6:86:b5:ff:c0:b5:a9:1d:
                    6f:f3:66:7d:09:a0:c6:23:6c:bf:bc:63:b4:55:35:
                    25:41:4f:a3:69:7e:bd:65:75:42:98:08:03:aa:91:
                    25:3e:b6:de:49:08:40:ed:5a:06:d9:14:c3:87:67:
                    43:e1:54:49:4b:02:8b:53:ef:27:88:02:f8:d4:8e:
                    91:27:8a:03:92:f8:33:23:9f:73:0d:25:45:14:11:
                    31:dc:82:7f:84:31:ba:14:e8:a1:45:c8:11:f8:b8:
                    61:cd:62:87:99:8b:01:ba:92:cd:66:87:e3:35:d3:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:36:EB:AD:61:CA:71:3D:E1:35:82:CB:F1:B7:82:2C:3D:AC:62
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32342d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:48:32:9a:6e:7e:77:7e:f3:99:1b:dc:c8:b8:5e:90:51:
         bc:8c:03:02:a7:88:8b:47:ad:87:ec:51:f7:bc:d9:48:33:cd:
         c2:d5:6b:e6:49:5c:80:4c:66:43:18:bc:bd:1c:04:00:08:36:
         94:7c:cf:c0:a5:d0:bf:1f:5b:6b:9c:cb:05:a1:3d:53:56:ce:
         fb:1a:a5:55:47:bf:42:f8:be:81:f3:c4:ed:12:13:8f:bb:a2:
         13:f3:bc:5b:58:1c:68:ba:d5:8d:d9:3c:ea:1e:4c:e3:1d:79:
         ad:6d:af:ab:19:7c:3f:00:6b:99:59:24:d3:d6:ab:98:e5:63:
         a7:7e:a3:d0:be:10:6b:21:fb:f8:ed:e9:77:40:42:31:42:2e:
         ee:83:44:b9:c2:2b:14:93:83:08:30:f5:69:2e:77:1b:8b:fa:
         16:37:4a:c3:df:f8:31:19:c2:82:9c:3e:91:d3:77:4c:46:84:
         94:4e:ea:22:4b:c0:6e:cf:44:b5:81:bc:40:29:da:5f:d5:1b:
         b1:6b:c7:6a:b6:63:cc:f2:af:ee:88:95:92:87:e7:f9:0c:66:
         0d:85:05:5c:52:ee:43:fa:d7:84:91:1f:83:48:c3:68:b7:74:
         87:8e:1c:57:ae:e4:cd:1b:e1:a2:d1:ea:7a:82:d6:5f:89:d2:
         24:06:38:7e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUO5iUomUANe3LuxNJ8wQqqnd9t5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJBNjhFNjk1NEY2NzREODA5RDU1NDI0OUQxMTdCNThB
NEY2NEVDMDAeFw0yNDA4MjAyMzA1MDFaFw0yNTA4MTkyMzEwMDFaMDMxMTAvBgNV
BAMTKDJGQjgzNkVCQUQ2MUNBNzEzREUxMzU4MkNCRjFCNzgyMkMzREFDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjenhl+gbi8ofmNmAL1Z3jmOyf
cT9qTeqIdhh2DQkNylPGOHARDNsmQ/cKCI+sjM58Cs3Imaf3aQTBvabMdhpRDA7J
f+DstlDtDYkGCIGShdeNjl39rDggQ3qpilmRmZCIw90lJ7zHBDpAy089Z5HWWx6P
LRYLmW/5kT7xyqWalfvBD7wGMXicCujdjeT2hrX/wLWpHW/zZn0JoMYjbL+8Y7RV
NSVBT6Npfr1ldUKYCAOqkSU+tt5JCEDtWgbZFMOHZ0PhVElLAotT7yeIAvjUjpEn
igOS+DMjn3MNJUUUETHcgn+EMboU6KFFyBH4uGHNYoeZiwG6ks1mh+M10+rrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUL7g2661hynE94TWCy/G3giw9rGIwHwYDVR0j
BBgwFoAUa6aOaVT2dNgJ1VQknRF7WKT2TsAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjBFMzdEMzI3MEM2OTY5MzIzMTFGN0NENTlDOUVGNUQ5
QTEwMUFBOTkyQkJGMjM1OThCNjJBNzNFMzA2MEE2LzAvNkJBNjhFNjk1NEY2NzRE
ODA5RDU1NDI0OUQxMTdCNThBNEY2NEVDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QkE2OEU2OTU0RjY3NEQ4MDlE
NTU0MjQ5RDExN0I1OEE0RjY0RUMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYwRTM3RDMyNzBDNjk2OTMyMzExRjdDRDU5QzlFRjVEOUExMDFBQTk5
MkJCRjIzNTk4QjYyQTczRTMwNjBBNi8wLzMxMzkzMDJlMzEzMDM5MmUzMTMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
bWwwDQYJKoZIhvcNAQELBQADggEBAL/2SDKabn53fvOZG9zIuF6QUbyMAwKniItH
rYfsUfe82UgzzcLVa+ZJXIBMZkMYvL0cBAAINpR8z8Cl0L8fW2ucywWhPVNWzvsa
pVVHv0L4voHzxO0SE4+7ohPzvFtYHGi61Y3ZPOoeTOMdea1tr6sZfD8Aa5lZJNPW
q5jlY6d+o9C+EGsh+/jt6XdAQjFCLu6DRLnCKxSTgwgw9WkudxuL+hY3SsPf+DEZ
woKcPpHTd0xGhJRO6iJLwG7PRLWBvEAp2l/VG7Frx2q2Y8zyr+6IlZKH5/kMZg2F
BVxS7kP614SRH4NIw2i3dIeOHFeu5M0b4aLR6nqC1l+J0iQGOH4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org