Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa
File:                     3139302e3135312e302e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          +zJYOs5DInxwwJSA0kH+L3l4pbJ1awCHzjtD1p32Mv8=
Subject key identifier:   5C:FF:E2:40:CE:62:60:33:05:F5:33:82:B0:F4:E4:75:17:B6:E2:75
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       185D58E50CFD618460A38D27197E1B8C6411A89D
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:57 +0000
ROA not before:           Tue 05 Mar 2024 18:09:57 +0000
ROA not after:            Tue 04 Mar 2025 18:14:57 +0000
asID:                     27651
IP address blocks:        190.151.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:58:e5:0c:fd:61:84:60:a3:8d:27:19:7e:1b:8c:64:11:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:57 2024 GMT
            Not After : Mar  4 18:14:57 2025 GMT
        Subject: CN=5CFFE240CE62603305F53382B0F4E47517B6E275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:f0:70:34:8a:13:36:a3:e3:da:6e:0f:01:
                    e8:37:be:99:c8:e4:2a:91:6b:a2:c0:c2:b7:40:b5:
                    b8:e0:a5:b2:92:ec:b7:46:52:32:3f:55:f5:47:97:
                    2b:3a:64:b1:37:fe:0b:63:62:3b:dd:40:39:94:d6:
                    50:49:22:79:04:5c:62:2a:09:f0:c8:62:00:99:c7:
                    35:73:a5:e5:b8:39:f7:3c:ee:c4:96:b1:99:6e:90:
                    4d:4e:dc:66:db:5d:7e:36:b8:0a:f3:72:71:0c:84:
                    97:1f:78:5c:a7:0a:54:dd:cf:3e:39:f8:12:07:e6:
                    4e:a8:1f:61:dd:42:e0:be:a3:f7:eb:f7:fd:a8:0f:
                    47:d3:37:16:36:0d:79:8e:9e:6a:d0:fb:64:2b:87:
                    c2:1d:83:fc:ba:ab:09:79:e9:c9:6f:2c:19:91:5e:
                    b2:b7:81:45:49:c4:c1:a5:0b:6c:11:75:c5:93:8b:
                    b4:d3:aa:4d:e8:94:0e:d8:4c:86:3f:a8:18:64:a3:
                    7e:f9:5e:5c:37:e1:ef:55:bc:c1:c0:22:73:9f:4a:
                    59:a3:07:d2:6c:39:66:b4:98:f7:48:59:1f:f4:f9:
                    ac:ec:07:3b:b9:96:63:e9:89:c7:4f:1c:71:2f:f9:
                    b7:cc:78:c6:db:90:0c:e3:0b:77:3e:62:f3:0b:79:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:E2:40:CE:62:60:33:05:F5:33:82:B0:F4:E4:75:17:B6:E2:75
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:40:b9:d2:d0:fd:53:d3:56:4a:21:91:be:e8:bd:cb:7f:b3:
         4b:4d:a2:21:21:8c:20:6b:91:e8:f9:64:38:ca:97:3c:46:7c:
         c8:ba:a0:d5:b2:20:c6:a8:75:c9:51:88:0d:ef:fd:6f:dc:cf:
         d1:02:b7:7b:85:02:ad:b0:55:3a:c7:c0:97:12:08:60:d7:04:
         c3:1a:0a:0a:21:fc:f4:04:c6:24:2e:66:d3:da:ef:0a:bf:4b:
         de:8e:10:53:55:82:83:56:92:7d:55:85:0d:25:d6:5b:90:f6:
         fb:fc:8d:2b:4f:de:2b:f4:ee:3c:55:e5:44:f2:95:57:bb:19:
         d1:88:e1:5e:53:6e:3f:da:7a:73:bc:7c:37:9b:c1:72:ac:42:
         f6:00:a0:84:b1:3e:78:5b:3b:0a:21:bb:d2:d1:88:60:4e:25:
         e7:d8:d9:2f:f0:ea:7b:c2:a2:33:06:11:23:fd:36:80:41:be:
         70:b6:ce:b7:de:cd:6c:02:96:57:d1:7e:9a:51:d4:e0:66:eb:
         cc:23:6f:67:a2:ee:d1:8a:38:05:83:70:bc:98:5a:26:c0:82:
         a6:be:f0:33:3e:6b:ca:83:8c:40:71:01:6f:47:2c:71:0b:66:
         fe:da:36:6f:89:6a:0c:6c:7e:38:9a:3c:c8:52:64:a9:26:c2:
         19:ac:5b:c4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGF1Y5Qz9YYRgo40nGX4bjGQRqJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEQjQ0RDE4QkMxNkFCMDM5QzJCMUI2QkQzODY2QUIy
OUUxMjJBNzAeFw0yNDAzMDUxODA5NTdaFw0yNTAzMDQxODE0NTdaMDMxMTAvBgNV
BAMTKDVDRkZFMjQwQ0U2MjYwMzMwNUY1MzM4MkIwRjRFNDc1MTdCNkUyNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjvBwNIoTNqPj2m4PAeg3vpnI
5CqRa6LAwrdAtbjgpbKS7LdGUjI/VfVHlys6ZLE3/gtjYjvdQDmU1lBJInkEXGIq
CfDIYgCZxzVzpeW4Ofc87sSWsZlukE1O3GbbXX42uArzcnEMhJcfeFynClTdzz45
+BIH5k6oH2HdQuC+o/fr9/2oD0fTNxY2DXmOnmrQ+2Qrh8Idg/y6qwl56clvLBmR
XrK3gUVJxMGlC2wRdcWTi7TTqk3olA7YTIY/qBhko375Xlw34e9VvMHAInOfSlmj
B9JsOWa0mPdIWR/0+azsBzu5lmPpicdPHHEv+bfMeMbbkAzjC3c+YvMLeZ2VAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXP/iQM5iYDMF9TOCsPTkdRe24nUwHwYDVR0j
BBgwFoAUP9tE0YvBarA5wrG2vThmqynhIqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODYyQzkyRkU3OTU3MUNEQ0U4MzRBNjA5MDUzMDAyQTEy
MTJDOUI3MDc5NkFGQUQwMUM2MTkzRDdGMERBQUFCLzAvM0ZEQjQ0RDE4QkMxNkFC
MDM5QzJCMUI2QkQzODY2QUIyOUUxMjJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkRCNDREMThCQzE2QUIwMzlD
MkIxQjZCRDM4NjZBQjI5RTEyMkE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg2MkM5MkZFNzk1NzFDRENFODM0QTYwOTA1MzAwMkExMjEyQzlCNzA3
OTZBRkFEMDFDNjE5M0Q3RjBEQUFBQi8wLzMxMzkzMDJlMzEzNTMxMmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMyMzczNjM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe+lwAwDQYJ
KoZIhvcNAQELBQADggEBAFVAudLQ/VPTVkohkb7ovct/s0tNoiEhjCBrkej5ZDjK
lzxGfMi6oNWyIMaodclRiA3v/W/cz9ECt3uFAq2wVTrHwJcSCGDXBMMaCgoh/PQE
xiQuZtPa7wq/S96OEFNVgoNWkn1VhQ0l1luQ9vv8jStP3iv07jxV5UTylVe7GdGI
4V5Tbj/aenO8fDebwXKsQvYAoISxPnhbOwohu9LRiGBOJefY2S/w6nvCojMGESP9
NoBBvnC2zrfezWwCllfRfppR1OBm68wjb2ei7tGKOAWDcLyYWibAgqa+8DM+a8qD
jEBxAW9HLHELZv7aNm+JagxsfjiaPMhSZKkmwhmsW8Q=
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org