Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134362e302f32332d3234203d3e20323632323339.roa
File:                     3139302e3231312e3134362e302f32332d3234203d3e20323632323339.roa (raw, json)
Hash identifier:          EY/i9mfpozSo8TzpR+yyA/xR/Ri4o1MXbbRDnymLBrc=
Subject key identifier:   6F:DF:B4:4D:FD:4A:7D:D9:20:14:04:DB:80:50:49:CC:26:CC:9A:A0
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       1F00CDF44FBDB17A0AF1F80554CFE583CA302067
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134362e302f32332d3234203d3e20323632323339.roa
Signing time:             Tue 04 Feb 2025 18:01:38 +0000
ROA not before:           Tue 04 Feb 2025 17:56:38 +0000
ROA not after:            Tue 03 Feb 2026 18:01:38 +0000
asID:                     262239
IP address blocks:        190.211.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 16:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:00:cd:f4:4f:bd:b1:7a:0a:f1:f8:05:54:cf:e5:83:ca:30:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Feb  4 17:56:38 2025 GMT
            Not After : Feb  3 18:01:38 2026 GMT
        Subject: CN=6FDFB44DFD4A7DD9201404DB805049CC26CC9AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:f1:d5:49:31:bf:e8:23:0c:0f:71:b4:26:
                    10:b2:39:b8:60:96:ad:e6:0e:3a:58:b8:2d:5b:cb:
                    dd:7b:e7:d1:e9:a3:55:74:12:73:5b:b5:23:78:49:
                    c8:c3:42:61:7d:44:5c:cb:35:5a:aa:71:fd:9f:fa:
                    a0:62:da:1d:de:38:ff:cf:74:63:47:ef:02:3a:3f:
                    cd:67:51:7d:0a:cf:5f:f5:f3:77:92:77:74:46:40:
                    ed:9d:d7:b0:ef:6a:64:69:3f:89:e8:39:b0:46:33:
                    78:19:8e:ab:e4:3c:2c:4f:b8:03:6e:e5:5f:d7:05:
                    9b:86:04:37:41:de:78:06:c8:0f:69:92:f8:2c:75:
                    64:d2:d5:b0:83:c8:2c:5c:f7:ab:07:88:d5:44:e9:
                    9e:d0:3e:dc:03:64:94:02:bd:c7:89:db:fc:73:e5:
                    73:93:fb:6b:28:76:78:b7:4c:ce:46:3e:61:22:6f:
                    73:31:e2:cc:6d:7d:88:ec:20:2c:e8:46:9d:62:3a:
                    b5:b5:56:e4:b0:0f:bf:62:c0:82:b9:99:8a:6e:fa:
                    0c:a3:3a:ba:01:f4:64:72:cf:48:7a:b0:98:9e:8b:
                    ac:4c:20:41:74:b6:ab:0d:e0:97:6b:f5:1e:36:09:
                    64:87:cc:48:80:3c:32:31:20:d6:7d:a6:e6:c9:b7:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:B4:4D:FD:4A:7D:D9:20:14:04:DB:80:50:49:CC:26:CC:9A:A0
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134362e302f32332d3234203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:3f:f3:b0:f5:4c:18:2c:40:38:72:2d:c5:9b:10:b0:e9:
         17:51:32:43:62:9e:07:3d:48:f0:70:8c:ee:17:dd:52:b3:8f:
         ba:2e:88:84:73:8b:06:5f:18:80:fc:fd:10:c0:b1:bb:84:fa:
         b4:f3:25:55:de:a0:b1:31:92:ca:eb:1c:76:5b:c8:59:08:ca:
         b2:03:7a:69:c9:3e:81:0d:ef:f6:f8:55:04:07:8d:d5:f9:b1:
         1b:08:06:91:17:81:8d:30:e7:06:2d:3c:ec:e0:98:fc:d7:53:
         68:47:eb:04:47:43:80:39:74:8e:a8:fd:f4:6f:94:9b:5c:17:
         bd:d6:cc:47:bf:e7:c6:7d:37:da:fa:50:f1:69:ba:d7:be:45:
         9a:c0:aa:e1:26:f4:2f:d2:fb:69:6e:b3:98:58:e3:ac:46:e1:
         21:b4:a7:6c:5a:f4:ad:1a:79:10:6e:4d:55:a7:2f:c3:bb:e4:
         63:ff:14:08:36:00:57:84:97:6b:07:32:50:43:3f:10:8f:e9:
         9c:50:52:1c:94:21:39:66:9f:91:d2:31:94:61:f8:65:e4:95:
         b1:de:a9:4b:29:73:b4:33:da:0f:99:b8:49:81:23:ed:35:1f:
         5b:e3:35:80:d4:8f:96:56:e5:6d:b8:79:c6:25:88:ed:26:63:
         15:e9:a9:27
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHwDN9E+9sXoK8fgFVM/lg8owIGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk0NDZGNUU4QTRBNjBBNUE0RjQyNkZCRTdFNzI5NjhD
MTZDMUVGRjAeFw0yNTAyMDQxNzU2MzhaFw0yNjAyMDMxODAxMzhaMDMxMTAvBgNV
BAMTKDZGREZCNDRERkQ0QTdERDkyMDE0MDREQjgwNTA0OUNDMjZDQzlBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVPHVSTG/6CMMD3G0JhCyObhg
lq3mDjpYuC1by91759Hpo1V0EnNbtSN4ScjDQmF9RFzLNVqqcf2f+qBi2h3eOP/P
dGNH7wI6P81nUX0Kz1/183eSd3RGQO2d17DvamRpP4noObBGM3gZjqvkPCxPuANu
5V/XBZuGBDdB3ngGyA9pkvgsdWTS1bCDyCxc96sHiNVE6Z7QPtwDZJQCvceJ2/xz
5XOT+2sodni3TM5GPmEib3Mx4sxtfYjsICzoRp1iOrW1VuSwD79iwIK5mYpu+gyj
OroB9GRyz0h6sJiei6xMIEF0tqsN4Jdr9R42CWSHzEiAPDIxINZ9pubJt47bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUb9+0Tf1KfdkgFATbgFBJzCbMmqAwHwYDVR0j
BBgwFoAUOURvXopKYKWk9Cb75+cpaMFsHv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjQ3QkVDNTg0NUZFRjg5QjRGNDlGOUFFRDQzQ0E2MkUz
MUFBNTZDNTNCQTM4QUVDMDkwNTk5NTY5RTQ4OTQ1LzAvMzk0NDZGNUU4QTRBNjBB
NUE0RjQyNkZCRTdFNzI5NjhDMTZDMUVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTQ0NkY1RThBNEE2MEE1QTRG
NDI2RkJFN0U3Mjk2OEMxNkMxRUZGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0I0N0JFQzU4NDVGRUY4OUI0RjQ5RjlBRUQ0M0NBNjJFMzFBQTU2QzUz
QkEzOEFFQzA5MDU5OTU2OUU0ODk0NS8wLzMxMzkzMDJlMzIzMTMxMmUzMTM0MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMzMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
05IwDQYJKoZIhvcNAQELBQADggEBAIlcP/Ow9UwYLEA4ci3FmxCw6RdRMkNingc9
SPBwjO4X3VKzj7ouiIRziwZfGID8/RDAsbuE+rTzJVXeoLExksrrHHZbyFkIyrID
emnJPoEN7/b4VQQHjdX5sRsIBpEXgY0w5wYtPOzgmPzXU2hH6wRHQ4A5dI6o/fRv
lJtcF73WzEe/58Z9N9r6UPFpute+RZrAquEm9C/S+2lus5hY46xG4SG0p2xa9K0a
eRBuTVWnL8O75GP/FAg2AFeEl2sHMlBDPxCP6ZxQUhyUITlmn5HSMZRh+GXklbHe
qUspc7Qz2g+ZuEmBI+01H1vjNYDUj5ZW5W24ecYliO0mYxXpqSc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 00:22:50 2025 by rpki-client