Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e31312e36342e302f31392d3234203d3e203237383339.roa
File:                     3139302e31312e36342e302f31392d3234203d3e203237383339.roa (raw, json)
Hash identifier:          18ZqUk//m0Ew79VX8GhRVPl54h2+qqbIQd7/UwojXT8=
Subject key identifier:   84:0C:F7:66:B3:57:66:AB:0B:81:CE:C2:28:1C:85:4E:DC:0E:93:16
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       6D1C87829F9117B82032BE37C4FF7E2396E32BE9
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e31312e36342e302f31392d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 17:43:54 +0000
ROA not before:           Tue 05 Mar 2024 17:38:54 +0000
ROA not after:            Tue 04 Mar 2025 17:43:54 +0000
asID:                     27839
IP address blocks:        190.11.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:87:82:9f:91:17:b8:20:32:be:37:c4:ff:7e:23:96:e3:2b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Mar  5 17:38:54 2024 GMT
            Not After : Mar  4 17:43:54 2025 GMT
        Subject: CN=840CF766B35766AB0B81CEC2281C854EDC0E9316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:c3:0a:5d:36:96:2b:35:81:63:f6:04:2b:
                    5c:2f:12:b1:de:27:84:66:bd:77:0f:b7:14:e1:90:
                    6e:09:53:e7:d4:9d:86:c7:de:8c:e5:65:14:0e:1c:
                    60:43:cb:ef:1a:ab:cc:af:dd:13:02:86:5f:e0:a0:
                    de:13:bd:e4:22:26:04:e5:30:92:4d:70:a4:08:24:
                    18:9f:b8:01:61:89:a5:13:18:fe:15:0d:b7:a8:a8:
                    f8:c3:ff:eb:1d:0a:ce:13:64:71:1d:46:56:27:fe:
                    1a:a2:90:03:06:0e:69:cd:82:d3:e9:6f:a4:ad:7a:
                    3e:a5:da:f5:60:f8:4e:f7:a5:7b:94:24:c9:84:b2:
                    dc:04:a5:5a:4c:6d:e5:60:ff:e5:29:f9:f8:45:ee:
                    71:72:cf:b0:7e:89:2c:b6:25:69:0d:ae:bf:a4:78:
                    32:50:df:2f:4f:17:3a:37:69:8a:1a:da:b5:ba:2d:
                    6f:40:73:a7:23:c0:58:52:f1:27:14:50:50:58:a6:
                    c8:ed:1c:7a:dd:c1:27:d3:a0:5b:49:e2:c3:d4:6e:
                    65:a1:88:8f:7d:1b:fa:e7:40:d3:fd:94:44:94:e1:
                    5d:f9:a6:89:dd:5a:d7:19:d4:f5:a8:df:48:62:8d:
                    b3:2d:97:dd:be:41:3e:5c:24:6b:de:7b:a6:e8:f8:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:F7:66:B3:57:66:AB:0B:81:CE:C2:28:1C:85:4E:DC:0E:93:16
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e31312e36342e302f31392d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:ac:ac:b6:93:11:c3:97:6c:d6:aa:e0:05:48:e3:97:08:6d:
         ba:74:4a:e5:fb:82:35:6c:64:d2:14:c8:f9:e4:b8:f4:54:ca:
         10:5a:1a:a1:7b:12:22:78:0f:14:af:b4:a0:82:0e:1a:50:50:
         9c:98:86:29:ab:0a:86:62:f4:73:14:17:61:6d:ee:0c:ef:2c:
         17:8b:c5:51:41:1c:2e:c7:08:fb:04:7f:33:81:da:c0:39:b1:
         5f:c0:ac:dc:e4:6a:4e:ff:83:93:b5:78:b8:f9:ee:e0:fe:6c:
         ee:55:7c:e0:69:da:96:05:3a:d9:5f:ea:84:26:0a:b6:79:45:
         ac:ef:bb:79:43:6d:e1:1a:62:d0:41:41:64:3c:04:f3:c5:33:
         6d:0d:49:7c:41:b5:a5:6f:38:ba:74:ac:29:d7:e9:fa:ff:62:
         3d:38:b9:8f:ee:3d:08:0b:16:20:4a:ec:5d:13:81:24:ee:3f:
         34:7e:83:db:a8:e6:63:a9:bf:a6:12:8b:73:8b:a6:46:13:41:
         77:9f:a8:96:1d:14:5b:0a:c7:2a:6c:83:37:d3:a2:10:0e:2f:
         2e:f2:d2:f9:8f:64:2f:da:56:c6:87:a6:78:d7:c3:ec:30:b8:
         7d:e5:51:c0:fb:a0:ec:d2:91:e4:63:cd:5c:9c:ab:9c:b8:87:
         7d:e2:ea:1f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbRyHgp+RF7ggMr43xP9+I5bjK+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNEE2NTk0RDI5MzMwN0E1NEZDNjdFQTk3MkNGOUU4
MDc5MzBERjAeFw0yNDAzMDUxNzM4NTRaFw0yNTAzMDQxNzQzNTRaMDMxMTAvBgNV
BAMTKDg0MENGNzY2QjM1NzY2QUIwQjgxQ0VDMjI4MUM4NTRFREMwRTkzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzcMKXTaWKzWBY/YEK1wvErHe
J4RmvXcPtxThkG4JU+fUnYbH3ozlZRQOHGBDy+8aq8yv3RMChl/goN4TveQiJgTl
MJJNcKQIJBifuAFhiaUTGP4VDbeoqPjD/+sdCs4TZHEdRlYn/hqikAMGDmnNgtPp
b6Stej6l2vVg+E73pXuUJMmEstwEpVpMbeVg/+Up+fhF7nFyz7B+iSy2JWkNrr+k
eDJQ3y9PFzo3aYoa2rW6LW9Ac6cjwFhS8ScUUFBYpsjtHHrdwSfToFtJ4sPUbmWh
iI99G/rnQNP9lESU4V35pondWtcZ1PWo30hijbMtl92+QT5cJGvee6bo+DglAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhAz3ZrNXZqsLgc7CKByFTtwOkxYwHwYDVR0j
BBgwFoAUIbSmWU0pMwelT8Z+qXLPnoB5MN8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzFFOUI2RUVFNzhGMTJCMTVFM0JFQkY5NTQ5NDJEQkMw
Q0RDQTk0REEzMTdCODNGMENENjJCMkZEQjI2RUNFLzAvMjFCNEE2NTk0RDI5MzMw
N0E1NEZDNjdFQTk3MkNGOUU4MDc5MzBERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI0QTY1OTREMjkzMzA3QTU0
RkM2N0VBOTcyQ0Y5RTgwNzkzMERGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzcxRTlCNkVFRTc4RjEyQjE1RTNCRUJGOTU0OTQyREJDMENEQ0E5NERB
MzE3QjgzRjBDRDYyQjJGREIyNkVDRS8wLzMxMzkzMDJlMzEzMTJlMzYzNDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzczODMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+C0AwDQYJ
KoZIhvcNAQELBQADggEBAD6srLaTEcOXbNaq4AVI45cIbbp0SuX7gjVsZNIUyPnk
uPRUyhBaGqF7EiJ4DxSvtKCCDhpQUJyYhimrCoZi9HMUF2Ft7gzvLBeLxVFBHC7H
CPsEfzOB2sA5sV/ArNzkak7/g5O1eLj57uD+bO5VfOBp2pYFOtlf6oQmCrZ5Razv
u3lDbeEaYtBBQWQ8BPPFM20NSXxBtaVvOLp0rCnX6fr/Yj04uY/uPQgLFiBK7F0T
gSTuPzR+g9uo5mOpv6YSi3OLpkYTQXefqJYdFFsKxypsgzfTohAOLy7y0vmPZC/a
VsaHpnjXw+wwuH3lUcD7oOzSkeRjzVycq5y4h33i6h8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org