Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3230382e302f32312d3234203d3e203237373936.roa
File:                     3139302e31342e3230382e302f32312d3234203d3e203237373936.roa (raw, json)
Hash identifier:          oGK6tVa5pxrst/0iUB7ui2/owPcddCCstg+fWmHghdQ=
Subject key identifier:   63:B0:92:96:2D:BB:43:63:E8:68:CA:F6:C8:D4:06:82:80:03:0A:68
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       62845C6CC6901282065A455E27E8DD561736F054
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3230382e302f32312d3234203d3e203237373936.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     27796
IP address blocks:        190.14.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:84:5c:6c:c6:90:12:82:06:5a:45:5e:27:e8:dd:56:17:36:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=63B092962DBB4363E868CAF6C8D4068280030A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:16:fb:0a:9f:75:ac:2d:76:a8:44:01:93:
                    33:be:c2:be:7d:18:5a:d3:a5:5b:11:eb:27:10:cf:
                    db:76:e6:96:84:7f:06:92:e1:cf:8c:5d:87:f4:da:
                    10:e2:b0:d5:32:35:83:18:a6:0e:79:c6:f6:f5:92:
                    f9:34:99:e2:11:09:b5:43:5f:91:6a:c3:fa:78:85:
                    6e:0c:83:7f:9b:02:9e:56:fb:b7:08:f8:53:38:a9:
                    63:14:63:b8:d6:81:48:8c:e1:94:2a:ba:3d:fb:42:
                    93:d1:dc:06:01:62:21:d5:87:45:41:bc:4c:48:7e:
                    6a:d9:47:43:cb:4d:74:83:e9:45:2b:be:c4:0b:37:
                    b6:fd:4a:a8:d7:c6:82:10:1a:ec:31:c9:ec:d8:3d:
                    b7:f7:28:02:30:e3:e6:20:f6:55:7d:31:51:74:c5:
                    ed:dd:f5:c1:75:91:2f:cf:a9:a3:4a:27:5d:03:df:
                    59:21:2f:3b:5c:45:54:72:d5:fc:f5:5f:bf:08:ed:
                    e2:33:1d:fc:05:f3:70:a4:de:19:83:b8:a8:d9:99:
                    8b:b9:96:88:7e:b8:8b:8e:ef:ac:93:13:ce:5e:d8:
                    f9:62:66:4d:04:aa:c8:b9:b0:5c:4d:ed:3c:d3:38:
                    90:b4:c5:13:e6:26:af:fa:02:5a:0d:77:9a:da:b9:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:92:96:2D:BB:43:63:E8:68:CA:F6:C8:D4:06:82:80:03:0A:68
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e31342e3230382e302f32312d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:48:35:c5:71:d4:c9:bf:bd:f1:28:3d:b8:88:da:c3:4e:
         b9:ea:c8:e6:90:87:d6:ea:1f:78:56:07:25:d8:79:b4:de:31:
         d1:3d:f3:8b:de:cc:40:85:9a:a9:61:96:e5:0d:ac:6e:3e:12:
         fa:a3:da:6c:f1:b6:6e:29:1d:b7:27:16:68:5a:8f:03:89:0e:
         a8:be:eb:84:31:f3:02:cf:c6:3c:5f:c6:32:c5:72:13:81:03:
         12:32:2f:5b:40:42:e9:57:b4:ac:c3:06:32:a7:fe:49:e3:69:
         3f:a2:81:ca:9b:bc:94:01:79:5a:f0:ca:75:4e:8e:b2:f9:1c:
         42:a5:a4:a5:7d:61:cc:cd:8c:43:6d:b2:04:cd:a6:7a:60:74:
         07:e1:2f:eb:35:b5:8b:3f:35:81:75:34:33:d5:e7:b4:f2:9d:
         e0:4d:8d:32:b5:d8:ff:0f:5c:2c:d8:50:b0:de:87:4f:c2:9f:
         60:23:bb:b4:73:13:33:cd:58:3e:92:df:87:7f:e0:f8:c4:a9:
         8b:29:28:08:10:ca:89:cc:66:b2:cb:c9:73:9c:95:39:ce:01:
         84:7f:53:bc:8c:7d:13:b7:be:d6:30:1f:bb:94:70:c0:fc:ce:
         03:2c:c9:4c:e7:23:4d:6a:93:b7:1e:61:13:3c:41:d4:c1:11:
         72:95:88:07
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYoRcbMaQEoIGWkVeJ+jdVhc28FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYwRUQ1NTA4NTdBNDMzMTMwMzk1QkFBRjkxRUI3NTg0
NjdDOEExRTAeFw0yNDAzMDUxNzUxMDRaFw0yNTAzMDQxNzU2MDRaMDMxMTAvBgNV
BAMTKDYzQjA5Mjk2MkRCQjQzNjNFODY4Q0FGNkM4RDQwNjgyODAwMzBBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpxb7Cp91rC12qEQBkzO+wr59
GFrTpVsR6ycQz9t25paEfwaS4c+MXYf02hDisNUyNYMYpg55xvb1kvk0meIRCbVD
X5Fqw/p4hW4Mg3+bAp5W+7cI+FM4qWMUY7jWgUiM4ZQquj37QpPR3AYBYiHVh0VB
vExIfmrZR0PLTXSD6UUrvsQLN7b9SqjXxoIQGuwxyezYPbf3KAIw4+Yg9lV9MVF0
xe3d9cF1kS/PqaNKJ10D31khLztcRVRy1fz1X78I7eIzHfwF83Ck3hmDuKjZmYu5
loh+uIuO76yTE85e2PliZk0Eqsi5sFxN7TzTOJC0xRPmJq/6AloNd5raucTVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUY7CSli27Q2PoaMr2yNQGgoADCmgwHwYDVR0j
BBgwFoAUjw7VUIV6QzEwOVuq+R63WEZ8ih4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzgwMDQwOUE2QzYyMkFCRDIyQjg0OThGMUFDQUMzQTkz
NDU4MzNBMkYzNUIwNTUyQTJGRURDNkZFODVDRTIxLzAvOEYwRUQ1NTA4NTdBNDMz
MTMwMzk1QkFBRjkxRUI3NTg0NjdDOEExRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjBFRDU1MDg1N0E0MzMxMzAz
OTVCQUFGOTFFQjc1ODQ2N0M4QTFFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc4MDA0MDlBNkM2MjJBQkQyMkI4NDk4RjFBQ0FDM0E5MzQ1ODMzQTJG
MzVCMDU1MkEyRkVEQzZGRTg1Q0UyMS8wLzMxMzkzMDJlMzEzNDJlMzIzMDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM3MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA74O0DAN
BgkqhkiG9w0BAQsFAAOCAQEARUxINcVx1Mm/vfEoPbiI2sNOuerI5pCH1uofeFYH
Jdh5tN4x0T3zi97MQIWaqWGW5Q2sbj4S+qPabPG2bikdtycWaFqPA4kOqL7rhDHz
As/GPF/GMsVyE4EDEjIvW0BC6Ve0rMMGMqf+SeNpP6KBypu8lAF5WvDKdU6Osvkc
QqWkpX1hzM2MQ22yBM2memB0B+Ev6zW1iz81gXU0M9XntPKd4E2NMrXY/w9cLNhQ
sN6HT8KfYCO7tHMTM81YPpLfh3/g+MSpiykoCBDKicxmssvJc5yVOc4BhH9TvIx9
E7e+1jAfu5RwwPzOAyzJTOcjTWqTtx5hEzxB1MERcpWIBw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:23 2024 by rpki-client on console-ams.rpki-client.org