Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e31332e3234302e302f32302d3234203d3e203237393535.roa
File:                     3139302e31332e3234302e302f32302d3234203d3e203237393535.roa (raw, json)
Hash identifier:          0QIEDN2m2sMkhPOYP0YdLi6OYkIlROVZ8/w9TB5z2qQ=
Subject key identifier:   8D:1C:FC:AD:74:07:0C:A9:8C:E8:97:2C:D0:8D:C6:43:D5:98:57:50
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       5DEEBD31C579DBD93C868E7AF76DA889C22A8DE8
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e31332e3234302e302f32302d3234203d3e203237393535.roa
Signing time:             Tue 05 Mar 2024 17:45:10 +0000
ROA not before:           Tue 05 Mar 2024 17:40:10 +0000
ROA not after:            Tue 04 Mar 2025 17:45:10 +0000
asID:                     27955
IP address blocks:        190.13.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ee:bd:31:c5:79:db:d9:3c:86:8e:7a:f7:6d:a8:89:c2:2a:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Mar  5 17:40:10 2024 GMT
            Not After : Mar  4 17:45:10 2025 GMT
        Subject: CN=8D1CFCAD74070CA98CE8972CD08DC643D5985750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:63:48:3c:46:af:28:08:2a:67:aa:55:7d:
                    39:fd:f3:56:33:d9:df:d3:3c:5a:e5:9b:f0:c7:c5:
                    61:cd:1c:eb:8b:0a:43:9d:43:6e:fa:d7:ac:81:6a:
                    7e:fa:d8:34:bf:6b:a3:fd:76:e6:4b:7f:fc:85:39:
                    c9:6f:00:98:7c:28:6c:11:34:18:d7:43:cb:9f:9b:
                    a9:eb:98:ef:00:c1:57:63:65:30:01:64:b8:b5:86:
                    49:59:8e:53:b4:d6:12:f3:08:80:09:77:b7:52:5a:
                    7e:a7:84:01:7f:f5:80:ca:c3:4b:4f:3c:ab:d7:1d:
                    ca:dd:c6:e4:1c:c0:2c:75:aa:8e:3c:b7:09:5f:0d:
                    59:16:34:5e:12:8a:5a:42:7d:91:58:61:0b:7b:17:
                    1d:fd:bf:7a:42:6e:f4:01:75:53:be:da:39:e4:b1:
                    47:c3:57:1a:30:c7:bf:e5:ab:ae:56:23:1a:57:c3:
                    3f:cf:1b:73:29:ca:94:ee:8b:98:9b:34:f2:fa:ae:
                    3c:a7:b5:10:c7:27:df:08:49:57:a6:85:4d:2f:76:
                    70:e9:8f:10:61:1b:fc:42:5c:6e:a4:90:3e:82:f0:
                    99:45:c9:3e:0d:9e:5d:fb:3f:fc:02:4e:f1:77:83:
                    67:6f:23:d7:b8:e2:01:2d:ad:cc:94:a6:f8:b8:a8:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:FC:AD:74:07:0C:A9:8C:E8:97:2C:D0:8D:C6:43:D5:98:57:50
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e31332e3234302e302f32302d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:97:a9:34:dc:7b:4c:45:7f:fe:6c:dd:cc:8e:87:8d:ea:23:
         39:6b:be:23:fb:6d:0b:43:bb:80:30:bb:c9:1d:3f:ec:39:db:
         7c:56:1d:46:88:eb:6e:45:7f:a5:c4:51:e7:9b:ea:a5:b0:ec:
         58:78:7d:e3:79:14:57:5e:a0:71:ea:2c:1b:02:1a:e9:b2:26:
         0a:1b:07:ab:cf:f7:93:05:06:48:69:0f:c2:77:61:a1:50:f1:
         66:b4:24:6e:3c:bd:8d:12:45:68:de:32:ee:0a:b9:51:16:aa:
         cf:76:67:6f:9d:d6:6d:03:55:6d:58:93:6b:db:c7:f4:3e:9f:
         08:52:1c:28:5d:7e:4a:6b:e4:aa:2f:fd:15:91:7b:e3:b2:2a:
         3f:87:8a:b1:86:79:35:f4:74:0b:c6:df:6f:9e:09:28:43:4e:
         b0:d5:34:e7:ae:44:d4:5f:c8:fa:49:8a:fe:c6:f1:ea:98:60:
         7c:48:be:87:93:c7:4d:8c:0d:00:cf:eb:0c:e9:c6:dd:6c:da:
         08:35:bb:47:f1:c2:57:f6:ef:af:74:19:3a:36:48:e1:5b:6c:
         ae:84:de:3e:ac:a8:dd:b2:9a:0b:62:4f:5f:95:cf:6d:e8:c8:
         10:4f:63:bb:49:bb:4c:e3:b5:e1:e9:b7:e1:b4:af:7f:9a:ad:
         52:9d:34:2f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXe69McV529k8ho56922oicIqjegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCNzRBMDZBMUM0MkY1NEE5MzNCNzBFMUE5OEE3RkZG
RDdEOERDRjAeFw0yNDAzMDUxNzQwMTBaFw0yNTAzMDQxNzQ1MTBaMDMxMTAvBgNV
BAMTKDhEMUNGQ0FENzQwNzBDQTk4Q0U4OTcyQ0QwOERDNjQzRDU5ODU3NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSUGNIPEavKAgqZ6pVfTn981Yz
2d/TPFrlm/DHxWHNHOuLCkOdQ27616yBan762DS/a6P9duZLf/yFOclvAJh8KGwR
NBjXQ8ufm6nrmO8AwVdjZTABZLi1hklZjlO01hLzCIAJd7dSWn6nhAF/9YDKw0tP
PKvXHcrdxuQcwCx1qo48twlfDVkWNF4SilpCfZFYYQt7Fx39v3pCbvQBdVO+2jnk
sUfDVxowx7/lq65WIxpXwz/PG3MpypTui5ibNPL6rjyntRDHJ98ISVemhU0vdnDp
jxBhG/xCXG6kkD6C8JlFyT4Nnl37P/wCTvF3g2dvI9e44gEtrcyUpvi4qImlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjRz8rXQHDKmM6Jcs0I3GQ9WYV1AwHwYDVR0j
BBgwFoAUk7dKBqHEL1SpM7cOGpin//19jc8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODJBMDhCOUZDMUFDMTE4NjkyREQwRjNGMUFCMUI0NzQ4
QzI1QkRBODU1MUQ2M0MyRTg5NDZBMzdCMkI5OTZDLzAvOTNCNzRBMDZBMUM0MkY1
NEE5MzNCNzBFMUE5OEE3RkZGRDdEOERDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0I3NEEwNkExQzQyRjU0QTkz
M0I3MEUxQTk4QTdGRkZEN0Q4RENGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzgyQTA4QjlGQzFBQzExODY5MkREMEYzRjFBQjFCNDc0OEMyNUJEQTg1
NTFENjNDMkU4OTQ2QTM3QjJCOTk2Qy8wLzMxMzkzMDJlMzEzMzJlMzIzNDMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL4N8DAN
BgkqhkiG9w0BAQsFAAOCAQEACZepNNx7TEV//mzdzI6HjeojOWu+I/ttC0O7gDC7
yR0/7DnbfFYdRojrbkV/pcRR55vqpbDsWHh943kUV16gceosGwIa6bImChsHq8/3
kwUGSGkPwndhoVDxZrQkbjy9jRJFaN4y7gq5URaqz3Znb53WbQNVbViTa9vH9D6f
CFIcKF1+Smvkqi/9FZF747IqP4eKsYZ5NfR0C8bfb54JKENOsNU0565E1F/I+kmK
/sbx6phgfEi+h5PHTYwNAM/rDOnG3WzaCDW7R/HCV/bvr3QZOjZI4VtsroTePqyo
3bKaC2JPX5XPbejIEE9ju0m7TOO14em34bSvf5qtUp00Lw==
-----END CERTIFICATE-----
Generated at Sun May 5 05:21:03 2024 by rpki-client on console-fra.rpki-client.org