Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e38302e302f32312d3234203d3e203532343638.roa
File:                     3139302e36312e38302e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Hu47S/vAYOFH2DT+y2WR+OfUwThfZyQ1qG+MhDlrG+A=
Subject key identifier:   16:EE:87:42:20:3E:66:AB:A5:CF:4F:06:9F:AC:D9:4D:FE:01:78:C1
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3BEA8EAC53A1BBB0A459C62E473386207CD92AEF
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e38302e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:58:58 +0000
ROA not before:           Tue 05 Mar 2024 17:53:58 +0000
ROA not after:            Tue 04 Mar 2025 17:58:58 +0000
asID:                     52468
IP address blocks:        190.61.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ea:8e:ac:53:a1:bb:b0:a4:59:c6:2e:47:33:86:20:7c:d9:2a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:58 2024 GMT
            Not After : Mar  4 17:58:58 2025 GMT
        Subject: CN=16EE8742203E66ABA5CF4F069FACD94DFE0178C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:83:eb:fb:37:ff:45:26:84:69:d5:14:f7:23:
                    7e:1d:7a:50:6d:47:4d:02:c0:7d:3c:2a:df:e1:c7:
                    73:78:63:66:af:62:4e:b9:34:28:20:d5:21:00:3d:
                    90:8b:0f:77:23:11:48:99:33:3a:c5:5d:9b:a3:b6:
                    20:98:69:2e:a5:0a:6b:08:ce:ca:4e:53:50:21:28:
                    e6:8a:53:57:c5:36:75:ea:53:c4:5a:a2:b4:2c:19:
                    06:65:51:48:f1:eb:18:d5:b6:bd:58:67:bc:2c:85:
                    6b:1f:ea:73:c0:77:b9:76:22:77:87:fa:89:fd:ca:
                    ac:fe:04:fb:6c:37:91:2e:22:a7:c0:68:7b:d1:4d:
                    7b:36:e3:4a:90:8c:da:45:5b:a7:7a:48:90:91:1b:
                    9c:f9:67:7b:08:7a:13:50:ec:09:1a:b2:a1:bb:1c:
                    e1:5a:ee:18:8d:aa:20:7f:5c:ee:3c:c8:e8:5c:f3:
                    6d:58:bb:64:e1:e4:20:7a:65:af:40:ba:5a:3b:25:
                    d4:b4:36:78:11:63:6f:05:18:4b:f8:ae:2a:1a:19:
                    92:f7:16:f9:fc:ae:38:c1:ae:2e:49:2f:28:58:47:
                    d5:8d:4e:ca:27:08:9d:6c:70:11:e7:b1:a4:d8:60:
                    db:26:1d:1c:8f:d6:86:d2:8f:c3:54:8e:ba:16:c9:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:87:42:20:3E:66:AB:A5:CF:4F:06:9F:AC:D9:4D:FE:01:78:C1
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e38302e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:6d:eb:a7:f2:f1:94:36:ae:56:6e:a8:09:9e:dc:c8:be:
         dd:30:49:0a:47:db:e0:46:f5:19:38:bc:bd:a8:d1:61:ec:69:
         4f:17:84:6d:20:5b:58:a8:94:4c:d5:59:7a:ca:95:0e:a2:6b:
         63:c6:c3:d0:73:cf:02:aa:27:13:9c:d8:89:3a:25:3f:18:71:
         f1:a2:23:54:75:d8:66:e2:b3:54:9e:58:b9:a0:97:4c:d6:83:
         42:9e:c4:a1:ed:63:2a:6b:75:0e:82:55:9e:dd:1f:06:f8:be:
         95:07:54:58:3a:ae:73:9a:66:62:d0:80:43:57:ef:40:96:bb:
         f6:ff:49:95:b3:33:8a:93:21:81:58:f4:07:c1:80:47:3e:03:
         ac:e9:2b:8c:07:90:e8:84:cd:d6:e5:21:2f:67:5a:c2:49:68:
         89:43:d4:0a:ca:3c:83:2b:a8:91:1c:3a:fe:1a:21:38:3a:05:
         6b:9e:34:60:3e:1e:d9:1a:51:d9:a7:8d:0d:86:77:24:2f:ad:
         3b:16:d3:5e:fc:1f:93:f0:5c:62:5b:06:7a:ae:4e:f0:0d:2b:
         88:ed:27:af:ad:48:ff:94:8c:47:40:b2:d4:68:73:aa:b1:c7:
         e9:9e:bf:93:6d:0a:e6:a1:04:77:0c:75:7e:1c:e0:7e:25:0e:
         34:9e:87:a0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUO+qOrFOhu7CkWcYuRzOGIHzZKu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzUzNThaFw0yNTAzMDQxNzU4NThaMDMxMTAvBgNV
BAMTKDE2RUU4NzQyMjAzRTY2QUJBNUNGNEYwNjlGQUNEOTRERkUwMTc4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxg+v7N/9FJoRp1RT3I34delBt
R00CwH08Kt/hx3N4Y2avYk65NCgg1SEAPZCLD3cjEUiZMzrFXZujtiCYaS6lCmsI
zspOU1AhKOaKU1fFNnXqU8RaorQsGQZlUUjx6xjVtr1YZ7wshWsf6nPAd7l2IneH
+on9yqz+BPtsN5EuIqfAaHvRTXs240qQjNpFW6d6SJCRG5z5Z3sIehNQ7AkasqG7
HOFa7hiNqiB/XO48yOhc821Yu2Th5CB6Za9Aulo7JdS0NngRY28FGEv4rioaGZL3
Fvn8rjjBri5JLyhYR9WNTsonCJ1scBHnsaTYYNsmHRyP1obSj8NUjroWyU7xAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUFu6HQiA+Zqulz08Gn6zZTf4BeMEwHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMxMzkzMDJlMzYzMTJlMzgzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+PVAwDQYJ
KoZIhvcNAQELBQADggEBAIkfbeun8vGUNq5WbqgJntzIvt0wSQpH2+BG9Rk4vL2o
0WHsaU8XhG0gW1iolEzVWXrKlQ6ia2PGw9BzzwKqJxOc2Ik6JT8YcfGiI1R12Gbi
s1SeWLmgl0zWg0KexKHtYyprdQ6CVZ7dHwb4vpUHVFg6rnOaZmLQgENX70CWu/b/
SZWzM4qTIYFY9AfBgEc+A6zpK4wHkOiEzdblIS9nWsJJaIlD1ArKPIMrqJEcOv4a
ITg6BWueNGA+HtkaUdmnjQ2GdyQvrTsW0178H5PwXGJbBnquTvANK4jtJ6+tSP+U
jEdAstRoc6qxx+mev5NtCuahBHcMdX4c4H4lDjSeh6A=
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org