Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa
File:                     3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (raw, json)
Hash identifier:          AHFicsh51xc7duqTOrlmoLWuP5aU+OV95Mt4Zf+cn9c=
Subject key identifier:   09:96:B0:83:5A:7A:0C:A4:DD:9D:DB:79:D9:43:F2:02:2D:F0:D0:85
Certificate issuer:       /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial:       03B3704AC059D58ED9A079333CAC8CFAA8854120
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa
Signing time:             Tue 04 Feb 2025 18:21:46 +0000
ROA not before:           Tue 04 Feb 2025 18:16:46 +0000
ROA not after:            Tue 03 Feb 2026 18:21:46 +0000
asID:                     263698
IP address blocks:        190.113.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b3:70:4a:c0:59:d5:8e:d9:a0:79:33:3c:ac:8c:fa:a8:85:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
        Validity
            Not Before: Feb  4 18:16:46 2025 GMT
            Not After : Feb  3 18:21:46 2026 GMT
        Subject: CN=0996B0835A7A0CA4DD9DDB79D943F2022DF0D085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:2c:c4:5f:4f:cd:26:96:fa:a3:1b:c4:f3:
                    4c:cb:be:ec:cf:63:7a:96:e5:f3:b0:60:37:eb:78:
                    a7:40:9c:48:bd:a3:4d:3a:76:bd:42:4d:aa:32:cb:
                    c6:bd:34:8e:90:dd:be:f7:20:f5:3e:6f:07:68:d4:
                    48:46:fa:d1:04:28:97:d9:77:ac:55:06:29:4b:9c:
                    c3:c7:8b:5f:ef:47:95:df:cc:e0:84:91:79:57:b7:
                    9b:ef:cb:b7:45:ea:ef:8c:c2:31:ec:e0:43:47:39:
                    2f:1e:32:8d:07:78:6b:b5:76:27:48:81:d4:9e:bb:
                    18:de:e0:99:ee:0b:f1:8c:bc:6a:e0:38:eb:c8:68:
                    47:5a:34:93:ef:a7:e8:f4:e2:50:2f:15:d4:e9:91:
                    47:c1:88:b4:b7:b6:62:79:fc:fb:83:59:3f:91:27:
                    54:b2:ce:16:ea:77:5f:49:92:af:0c:de:87:05:9d:
                    e9:34:84:cc:7f:47:7e:2a:56:38:a3:62:f4:dd:8c:
                    0a:e0:30:1a:95:e7:b3:aa:e4:10:d9:43:19:62:17:
                    f4:bf:59:c8:e1:cd:2e:eb:28:7c:c7:2f:69:8a:cc:
                    05:97:a5:94:b2:25:0b:82:65:46:33:44:01:86:c3:
                    b4:6f:08:f0:e7:1c:f4:46:43:1a:94:63:65:c3:00:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:96:B0:83:5A:7A:0C:A4:DD:9D:DB:79:D9:43:F2:02:2D:F0:D0:85
            X509v3 Authority Key Identifier:
                keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:c7:bf:bb:99:5a:40:91:97:f4:c6:c3:33:dc:d4:c4:71:
         7c:ac:3b:a2:36:4a:c7:3e:dc:e4:6d:eb:8d:90:1a:fb:08:a9:
         3f:99:02:7e:85:a3:2c:df:fe:27:51:4c:3c:72:b5:b8:4f:60:
         78:b6:34:38:2b:0b:11:8d:15:a7:ce:b1:e0:ae:66:46:9f:f1:
         27:24:1a:67:7c:a2:17:34:89:d8:cd:6e:06:8c:47:36:79:53:
         52:6e:9e:9f:64:71:2c:a1:be:b5:48:70:d4:71:a9:85:5b:45:
         b1:70:15:bf:69:ca:a7:c2:a6:3d:35:d1:5f:15:14:14:97:ab:
         0a:8c:13:f7:cd:59:94:fb:30:77:f2:b3:91:b1:ae:c9:f5:32:
         5e:60:b9:e0:e7:72:87:36:43:06:2b:9b:bc:5b:dd:e2:99:38:
         e0:53:31:55:82:93:33:ea:28:90:de:d2:01:6f:a4:9e:18:98:
         0b:7e:59:b6:58:e3:71:29:c3:fb:42:9a:c5:a5:d1:3a:6c:2b:
         c4:98:74:83:4d:dd:8c:55:c6:33:5d:b4:24:d4:62:cb:71:54:
         cc:fb:e4:9a:33:cf:49:c3:d1:c4:f2:9a:71:c5:9e:06:0c:39:
         2c:db:13:d5:c0:22:bd:35:93:2b:7a:b4:44:29:3e:b2:eb:07:
         3c:28:46:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA7NwSsBZ1Y7ZoHkzPKyM+qiFQSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRkE2MTU1RUUwQjg2MjdBNTVFRThFRUJDNzg0M0JG
MDg3RDA4RDAeFw0yNTAyMDQxODE2NDZaFw0yNjAyMDMxODIxNDZaMDMxMTAvBgNV
BAMTKDA5OTZCMDgzNUE3QTBDQTRERDlEREI3OUQ5NDNGMjAyMkRGMEQwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlizEX0/NJpb6oxvE80zLvuzP
Y3qW5fOwYDfreKdAnEi9o006dr1CTaoyy8a9NI6Q3b73IPU+bwdo1EhG+tEEKJfZ
d6xVBilLnMPHi1/vR5XfzOCEkXlXt5vvy7dF6u+MwjHs4ENHOS8eMo0HeGu1didI
gdSeuxje4JnuC/GMvGrgOOvIaEdaNJPvp+j04lAvFdTpkUfBiLS3tmJ5/PuDWT+R
J1Syzhbqd19Jkq8M3ocFnek0hMx/R34qVjijYvTdjArgMBqV57Oq5BDZQxliF/S/
WcjhzS7rKHzHL2mKzAWXpZSyJQuCZUYzRAGGw7RvCPDnHPRGQxqUY2XDAKEvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCZawg1p6DKTdndt52UPyAi3w0IUwHwYDVR0j
BBgwFoAUOv+mFV7guGJ6Ve6O68eEO/CH0I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjBGQzRGMUY2MkUyREYwNzA5QTc1NjZEMEJFNUU5QzA4
Mjg0NUM2QTMxMUMwNzgwNzlENDU4MTEzQjgyQzc4LzAvM0FGRkE2MTU1RUUwQjg2
MjdBNTVFRThFRUJDNzg0M0JGMDg3RDA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUZGQTYxNTVFRTBCODYyN0E1
NUVFOEVFQkM3ODQzQkYwODdEMDhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0IwRkM0RjFGNjJFMkRGMDcwOUE3NTY2RDBCRTVFOUMwODI4NDVDNkEz
MTFDMDc4MDc5RDQ1ODExM0I4MkM3OC8wLzMxMzkzMDJlMzEzMTMzMmUzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnFU
MA0GCSqGSIb3DQEBCwUAA4IBAQA6m8e/u5laQJGX9MbDM9zUxHF8rDuiNkrHPtzk
beuNkBr7CKk/mQJ+haMs3/4nUUw8crW4T2B4tjQ4KwsRjRWnzrHgrmZGn/EnJBpn
fKIXNInYzW4GjEc2eVNSbp6fZHEsob61SHDUcamFW0WxcBW/acqnwqY9NdFfFRQU
l6sKjBP3zVmU+zB38rORsa7J9TJeYLng53KHNkMGK5u8W93imTjgUzFVgpMz6iiQ
3tIBb6SeGJgLflm2WONxKcP7QprFpdE6bCvEmHSDTd2MVcYzXbQk1GLLcVTM++Sa
M89Jw9HE8ppxxZ4GDDks2xPVwCK9NZMrerREKT6y6wc8KEbO
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:38 2025 by rpki-client