Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa
File:                     3139302e36302e33322e302f31392d3234203d3e203532343638.roa (raw, json)
Hash identifier:          quxUC56wjdCIFxSqCiPQdKn9MQyZfKjI+eanLZplSwk=
Subject key identifier:   04:97:25:35:D7:D3:7E:8F:A0:F2:FF:00:F0:6B:F9:98:E2:3B:A6:F2
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       21CDCD4BB75E77049072E0D88276DD02CD8D8575
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     52468
IP address blocks:        190.60.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:cd:4b:b7:5e:77:04:90:72:e0:d8:82:76:dd:02:cd:8d:85:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=04972535D7D37E8FA0F2FF00F06BF998E23BA6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:77:56:79:30:ec:bc:9c:de:13:02:74:8f:
                    1a:ff:81:29:18:43:b3:fe:ee:35:cf:95:fb:0d:c8:
                    7f:2c:3d:c3:ae:fa:d5:11:59:56:e3:19:f5:71:bd:
                    69:b8:86:01:90:2e:c2:c8:ab:a1:11:9e:be:1c:12:
                    65:88:ba:a5:3c:c8:46:b8:20:da:fa:30:f9:80:8b:
                    a0:8a:a4:70:48:90:31:a0:55:16:a8:0f:69:a4:d2:
                    55:3b:9a:1a:7e:c0:8d:9a:fb:3f:f7:d9:d5:78:e9:
                    09:91:1e:17:39:32:ba:4b:c3:c5:73:3b:bc:eb:99:
                    76:c3:44:08:27:37:68:28:e9:a3:09:06:37:e9:fd:
                    6e:9e:32:49:9a:07:f2:c1:87:53:68:65:6c:de:0f:
                    4b:39:93:f6:41:2f:86:c1:0b:ae:9e:63:82:9e:09:
                    8d:03:da:44:51:bc:d3:35:a8:d4:27:b6:fe:39:87:
                    ba:7c:50:d6:16:86:ec:94:fe:b7:73:06:49:68:54:
                    bf:33:a2:4b:09:dc:b3:00:2c:49:7a:b5:82:23:7e:
                    1c:c2:4f:67:f5:d8:60:e8:57:e1:11:78:22:83:4d:
                    30:69:97:a2:86:6c:b1:b3:ea:a0:a4:23:7a:98:c1:
                    44:5a:df:48:96:31:de:f1:05:5a:2e:19:41:6a:87:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:25:35:D7:D3:7E:8F:A0:F2:FF:00:F0:6B:F9:98:E2:3B:A6:F2
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:17:de:f9:1b:90:86:d7:ce:de:5b:e1:aa:e3:c9:30:b9:
         f1:a7:00:93:2e:b6:3d:77:9d:18:ee:ce:c6:e8:cf:25:e5:2f:
         ca:93:31:c9:50:f2:22:fc:d1:55:ec:a7:8a:c1:f5:c8:15:6a:
         23:cf:c5:2c:92:b7:3b:71:44:29:27:97:3d:b4:44:c0:54:a3:
         f7:6a:b7:00:c7:be:e6:31:6d:55:e1:b3:12:9a:9e:99:fa:db:
         66:52:3a:39:ad:93:1a:93:56:2d:f2:11:c8:87:1e:78:10:e8:
         d2:a6:1c:f9:7b:8c:6c:ee:92:8e:1d:2b:45:76:f9:34:53:97:
         8d:ee:f6:c5:5b:d4:43:83:a2:3a:57:36:b0:5c:5a:c4:a5:5b:
         0b:d6:cf:b5:e4:e1:50:3f:41:f5:23:67:f7:fc:c6:56:88:5f:
         43:f9:b4:e3:9c:df:da:24:b7:b8:3f:2d:b6:b8:b8:05:d8:96:
         64:4b:55:9b:4c:83:01:cf:60:f6:20:10:4e:af:a6:9b:ac:76:
         6b:0c:73:93:a3:ff:fb:2b:eb:48:ca:8c:21:38:35:04:ad:a3:
         ff:41:b9:3c:3a:1f:45:ab:a3:52:33:33:e5:04:d4:e9:e1:74:
         73:42:82:88:7b:cc:c4:05:0e:0f:2c:b9:b2:d5:c2:e0:6f:d6:
         84:eb:60:3f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIc3NS7dedwSQcuDYgnbdAs2NhXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MDRaFw0yNTAzMDQxNzU5MDRaMDMxMTAvBgNV
BAMTKDA0OTcyNTM1RDdEMzdFOEZBMEYyRkYwMEYwNkJGOTk4RTIzQkE2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T3dWeTDsvJzeEwJ0jxr/gSkY
Q7P+7jXPlfsNyH8sPcOu+tURWVbjGfVxvWm4hgGQLsLIq6ERnr4cEmWIuqU8yEa4
INr6MPmAi6CKpHBIkDGgVRaoD2mk0lU7mhp+wI2a+z/32dV46QmRHhc5MrpLw8Vz
O7zrmXbDRAgnN2go6aMJBjfp/W6eMkmaB/LBh1NoZWzeD0s5k/ZBL4bBC66eY4Ke
CY0D2kRRvNM1qNQntv45h7p8UNYWhuyU/rdzBkloVL8zoksJ3LMALEl6tYIjfhzC
T2f12GDoV+EReCKDTTBpl6KGbLGz6qCkI3qYwURa30iWMd7xBVouGUFqhxEnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBJclNdfTfo+g8v8A8Gv5mOI7pvIwHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMxMzkzMDJlMzYzMDJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+PCAwDQYJ
KoZIhvcNAQELBQADggEBAHmMF975G5CG187eW+Gq48kwufGnAJMutj13nRjuzsbo
zyXlL8qTMclQ8iL80VXsp4rB9cgVaiPPxSyStztxRCknlz20RMBUo/dqtwDHvuYx
bVXhsxKanpn622ZSOjmtkxqTVi3yEciHHngQ6NKmHPl7jGzuko4dK0V2+TRTl43u
9sVb1EODojpXNrBcWsSlWwvWz7Xk4VA/QfUjZ/f8xlaIX0P5tOOc39okt7g/Lba4
uAXYlmRLVZtMgwHPYPYgEE6vppusdmsMc5Oj//sr60jKjCE4NQSto/9BuTw6H0Wr
o1IzM+UE1OnhdHNCgoh7zMQFDg8subLVwuBv1oTrYD8=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org