Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e342e3139322e302f31392d3234203d3e203136363239.roa
File:                     3139302e342e3139322e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          5Ej2zHRPNDx87TPuY0v3OFzAMz2gXmMrJOGrQm5o+Hg=
Subject key identifier:   54:3B:96:EC:E1:58:8E:0B:8B:33:43:D0:E3:33:40:9C:C3:49:BD:DA
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       070793FDB521970BA6EC46C17A5DF11D884B971D
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e342e3139322e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:52 +0000
ROA not before:           Tue 05 Mar 2024 17:39:52 +0000
ROA not after:            Tue 04 Mar 2025 17:44:52 +0000
asID:                     16629
IP address blocks:        190.4.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:07:93:fd:b5:21:97:0b:a6:ec:46:c1:7a:5d:f1:1d:88:4b:97:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:52 2024 GMT
            Not After : Mar  4 17:44:52 2025 GMT
        Subject: CN=543B96ECE1588E0B8B3343D0E333409CC349BDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:ac:09:e1:3b:ca:ac:69:4d:99:34:d3:df:
                    e9:e5:ac:f8:2f:ca:d2:ef:0d:e6:6e:b3:02:77:ea:
                    fe:13:92:d7:b4:43:69:85:b9:c9:8c:c3:cd:ac:18:
                    cd:ef:96:ba:a7:5d:1e:20:ac:cc:e9:45:62:62:8c:
                    ad:52:ba:0c:81:86:99:f3:63:ed:84:2f:82:da:68:
                    85:07:3b:f4:2f:b0:15:02:16:f7:e1:37:49:dd:94:
                    32:4f:76:09:a0:66:92:83:2d:df:65:c4:cd:12:fc:
                    11:67:82:4e:c5:ab:ee:45:e9:87:ba:bd:7d:ba:37:
                    0f:c2:de:c1:89:26:f0:85:c1:6b:91:29:c0:b4:ce:
                    00:dc:f2:81:01:ad:26:bc:ea:5d:91:10:fb:84:50:
                    33:47:94:a0:14:62:d8:ba:b5:55:e9:e4:ae:ba:4c:
                    d1:b9:56:25:0d:3a:ab:ec:54:6c:3a:23:6b:42:28:
                    c9:bf:d4:0a:ff:44:85:5c:02:4b:33:16:2f:5d:92:
                    d4:12:e3:f0:ea:ed:7d:49:11:c0:15:25:78:b2:81:
                    7a:bc:e4:76:10:f4:0f:d5:43:98:21:5c:eb:12:8f:
                    96:aa:a7:eb:20:5e:d0:b0:74:bf:95:8b:ee:f8:62:
                    8f:66:2a:84:7c:46:16:ef:fb:ee:f1:44:ff:be:d0:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:96:EC:E1:58:8E:0B:8B:33:43:D0:E3:33:40:9C:C3:49:BD:DA
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e342e3139322e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:74:dc:24:85:9a:ab:c3:9f:78:b4:3a:71:2a:34:97:44:01:
         0f:f7:a7:0f:41:d0:e3:b3:c4:6f:9d:81:90:cf:db:0e:76:09:
         c9:cb:cd:12:c0:66:cb:68:02:ac:64:2f:35:61:9e:28:cb:86:
         70:16:a5:6a:0c:ae:05:63:52:ad:96:da:22:80:1f:95:e2:d6:
         76:6f:05:a9:c2:b0:5c:28:3f:fc:ed:af:c6:c0:e9:06:4b:c2:
         86:8b:6e:68:ff:f1:e8:bb:d0:ad:94:ef:7e:4d:f4:1c:c3:47:
         b4:50:a8:cf:91:85:71:83:26:59:00:49:36:06:32:26:18:fa:
         45:86:9d:86:c1:69:2b:f4:0b:55:e7:a2:1e:12:d1:9a:23:0d:
         8f:fe:65:a5:17:d6:05:f4:4e:ba:17:4b:2c:a9:6b:53:62:45:
         07:fc:0c:b6:4e:b8:e7:48:7d:1a:43:2c:3c:8e:2f:51:6f:e8:
         fe:f3:bb:22:d8:83:36:1d:3a:17:ec:f9:0d:fa:ab:a1:b5:73:
         c1:09:bb:a8:b4:d5:6b:22:96:df:a0:f3:a1:40:0d:ac:4a:37:
         0d:bf:8a:d3:91:67:18:df:f0:25:09:01:5d:f0:c7:14:f4:4c:
         89:9d:a5:3a:48:6c:99:9b:c8:a2:9b:5c:57:b1:67:16:8f:cd:
         62:92:83:ad
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBweT/bUhlwum7EbBel3xHYhLlx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNDAzMDUxNzM5NTJaFw0yNTAzMDQxNzQ0NTJaMDMxMTAvBgNV
BAMTKDU0M0I5NkVDRTE1ODhFMEI4QjMzNDNEMEUzMzM0MDlDQzM0OUJEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCte6wJ4TvKrGlNmTTT3+nlrPgv
ytLvDeZuswJ36v4Tkte0Q2mFucmMw82sGM3vlrqnXR4grMzpRWJijK1SugyBhpnz
Y+2EL4LaaIUHO/QvsBUCFvfhN0ndlDJPdgmgZpKDLd9lxM0S/BFngk7Fq+5F6Ye6
vX26Nw/C3sGJJvCFwWuRKcC0zgDc8oEBrSa86l2REPuEUDNHlKAUYti6tVXp5K66
TNG5ViUNOqvsVGw6I2tCKMm/1Ar/RIVcAkszFi9dktQS4/Dq7X1JEcAVJXiygXq8
5HYQ9A/VQ5ghXOsSj5aqp+sgXtCwdL+Vi+74Yo9mKoR8Rhbv++7xRP++0F1NAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUVDuW7OFYjguLM0PQ4zNAnMNJvdowHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzkzMDJlMzQyZTMxMzkzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+BMAwDQYJ
KoZIhvcNAQELBQADggEBADJ03CSFmqvDn3i0OnEqNJdEAQ/3pw9B0OOzxG+dgZDP
2w52CcnLzRLAZstoAqxkLzVhnijLhnAWpWoMrgVjUq2W2iKAH5Xi1nZvBanCsFwo
P/ztr8bA6QZLwoaLbmj/8ei70K2U735N9BzDR7RQqM+RhXGDJlkASTYGMiYY+kWG
nYbBaSv0C1Xnoh4S0ZojDY/+ZaUX1gX0TroXSyypa1NiRQf8DLZOuOdIfRpDLDyO
L1Fv6P7zuyLYgzYdOhfs+Q36q6G1c8EJu6i01Wsilt+g86FADaxKNw2/itORZxjf
8CUJAV3wxxT0TImdpTpIbJmbyKKbXFexZxaPzWKSg60=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:28 2024 by rpki-client on console-ams.rpki-client.org