Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e35382e302f32342d3234203d3e2033323537.roa
File:                     3139302e3135312e35382e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier:          TabZzndkXQNpUNMFjifJUheDtd1wO8PofKnPjSoUxDk=
Subject key identifier:   01:BE:D9:CB:17:35:60:90:76:A6:12:9E:11:F4:DB:67:36:B1:F8:51
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       2F0B664F6EA13876E91D39F39B629A2855FDE6B1
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e35382e302f32342d3234203d3e2033323537.roa
Signing time:             Tue 05 Mar 2024 18:14:55 +0000
ROA not before:           Tue 05 Mar 2024 18:09:55 +0000
ROA not after:            Tue 04 Mar 2025 18:14:55 +0000
asID:                     3257
IP address blocks:        190.151.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0b:66:4f:6e:a1:38:76:e9:1d:39:f3:9b:62:9a:28:55:fd:e6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:55 2024 GMT
            Not After : Mar  4 18:14:55 2025 GMT
        Subject: CN=01BED9CB1735609076A6129E11F4DB6736B1F851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:d9:99:4a:c3:9c:40:02:2a:f7:13:22:a3:
                    42:04:55:19:ae:60:9b:e5:6e:87:a9:6a:7f:49:8b:
                    af:8b:36:b4:5d:d1:f4:60:d7:6b:14:04:16:53:f8:
                    08:dd:40:2d:8f:48:31:d1:64:40:61:ba:50:95:ab:
                    e7:0c:3d:fa:18:7d:f4:83:b8:63:39:bd:08:da:94:
                    ce:e5:03:4d:90:f8:35:fe:6a:1f:6b:f9:e9:91:86:
                    14:e5:78:d0:72:98:01:7b:b5:09:57:38:8a:de:48:
                    aa:0b:d8:e5:39:df:f8:66:82:bc:c1:6a:a6:4e:f6:
                    4c:b7:00:bb:27:59:a0:0a:8a:13:26:96:bb:a9:c3:
                    94:ac:61:4b:8e:48:8e:6c:05:b3:81:78:f4:56:8b:
                    af:1d:e0:71:12:a7:6a:e4:9f:98:1f:b9:a0:07:5a:
                    ee:f6:36:a4:c9:c4:ee:cb:fa:1e:db:14:6d:fa:29:
                    6a:32:0f:32:ce:c7:7d:3d:be:89:9a:26:48:4a:0e:
                    1b:4a:ff:fb:55:fb:07:5c:06:8b:67:06:7a:47:84:
                    96:1d:4b:e4:4c:1c:cf:cf:bc:db:ea:df:12:84:c6:
                    81:a1:96:0d:8c:ad:76:66:70:02:f0:5c:0b:3a:05:
                    64:2b:94:f0:b6:19:29:a3:93:aa:00:c3:1d:f6:fd:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:D9:CB:17:35:60:90:76:A6:12:9E:11:F4:DB:67:36:B1:F8:51
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e35382e302f32342d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:51:50:ca:95:1e:1b:c2:e8:33:28:1d:04:3a:24:39:79:
         5b:b3:7d:c5:75:eb:fb:ac:d4:03:d9:67:ff:0a:68:40:83:ea:
         87:77:dd:c1:84:d9:48:6d:82:6e:9d:e5:1f:02:3b:7b:92:b6:
         7f:65:b2:27:c0:f9:c6:f0:81:8d:3d:3e:8a:48:12:e8:6f:ab:
         ab:27:f4:21:e6:31:cb:64:2b:e6:68:8c:9a:a1:fe:16:43:d3:
         68:3d:4a:b8:ce:71:5a:1f:d5:b8:4b:90:96:79:b6:0a:31:5c:
         a7:ba:6e:f1:82:d4:46:3b:43:de:b5:e1:a3:f0:66:17:db:5e:
         88:c7:6f:93:f6:b5:29:78:a3:1f:45:96:17:21:7e:e1:71:1c:
         51:b9:1a:fe:e1:bf:cd:68:e3:a1:2b:c4:83:8e:76:b6:0c:45:
         c6:9f:55:6d:de:38:e7:89:5f:6f:bd:f3:c1:89:03:26:bc:3a:
         14:10:42:50:03:80:4e:d5:c8:08:cb:0d:91:76:0d:36:f8:23:
         1a:22:19:a5:ac:cd:3a:ba:c2:a3:4e:77:82:a5:e8:fe:3c:57:
         40:50:a0:00:52:93:75:dd:91:ad:56:e7:25:07:a2:76:ae:d4:
         98:b4:f8:e8:f9:c4:6c:08:6f:78:bc:f0:fb:87:00:e8:3c:e3:
         7a:82:c8:24
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULwtmT26hOHbpHTnzm2KaKFX95rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEQjQ0RDE4QkMxNkFCMDM5QzJCMUI2QkQzODY2QUIy
OUUxMjJBNzAeFw0yNDAzMDUxODA5NTVaFw0yNTAzMDQxODE0NTVaMDMxMTAvBgNV
BAMTKDAxQkVEOUNCMTczNTYwOTA3NkE2MTI5RTExRjREQjY3MzZCMUY4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gdmZSsOcQAIq9xMio0IEVRmu
YJvlboepan9Ji6+LNrRd0fRg12sUBBZT+AjdQC2PSDHRZEBhulCVq+cMPfoYffSD
uGM5vQjalM7lA02Q+DX+ah9r+emRhhTleNBymAF7tQlXOIreSKoL2OU53/hmgrzB
aqZO9ky3ALsnWaAKihMmlrupw5SsYUuOSI5sBbOBePRWi68d4HESp2rkn5gfuaAH
Wu72NqTJxO7L+h7bFG36KWoyDzLOx309vomaJkhKDhtK//tV+wdcBotnBnpHhJYd
S+RMHM/PvNvq3xKExoGhlg2MrXZmcALwXAs6BWQrlPC2GSmjk6oAwx32/ZnRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUAb7Zyxc1YJB2phKeEfTbZzax+FEwHwYDVR0j
BBgwFoAUP9tE0YvBarA5wrG2vThmqynhIqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODYyQzkyRkU3OTU3MUNEQ0U4MzRBNjA5MDUzMDAyQTEy
MTJDOUI3MDc5NkFGQUQwMUM2MTkzRDdGMERBQUFCLzAvM0ZEQjQ0RDE4QkMxNkFC
MDM5QzJCMUI2QkQzODY2QUIyOUUxMjJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkRCNDREMThCQzE2QUIwMzlD
MkIxQjZCRDM4NjZBQjI5RTEyMkE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg2MkM5MkZFNzk1NzFDRENFODM0QTYwOTA1MzAwMkExMjEyQzlCNzA3
OTZBRkFEMDFDNjE5M0Q3RjBEQUFBQi8wLzMxMzkzMDJlMzEzNTMxMmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMjM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+lzowDQYJ
KoZIhvcNAQELBQADggEBAIG8UVDKlR4bwugzKB0EOiQ5eVuzfcV16/us1APZZ/8K
aECD6od33cGE2Uhtgm6d5R8CO3uStn9lsifA+cbwgY09PopIEuhvq6sn9CHmMctk
K+ZojJqh/hZD02g9SrjOcVof1bhLkJZ5tgoxXKe6bvGC1EY7Q9614aPwZhfbXojH
b5P2tSl4ox9FlhchfuFxHFG5Gv7hv81o46ErxIOOdrYMRcafVW3eOOeJX2+988GJ
Aya8OhQQQlADgE7VyAjLDZF2DTb4IxoiGaWszTq6wqNOd4Kl6P48V0BQoABSk3Xd
ka1W5yUHonau1Ji0+Oj5xGwIb3i88PuHAOg843qCyCQ=
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org