Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e33322e302f31392d3234203d3e203237383834.roa
File:                     3139302e39322e33322e302f31392d3234203d3e203237383834.roa (raw, json)
Hash identifier:          IvuNRYtzgckNJYiMkg7/G941wSinjdlPffLIW/geD40=
Subject key identifier:   94:B7:7E:53:81:2E:08:70:39:A7:05:71:21:1D:92:3F:05:35:C7:16
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       50208C078053FEA0D612B189B8B15580F3542D4F
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e33322e302f31392d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:34 +0000
ROA not before:           Tue 05 Mar 2024 18:07:34 +0000
ROA not after:            Tue 04 Mar 2025 18:12:34 +0000
asID:                     27884
IP address blocks:        190.92.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:8c:07:80:53:fe:a0:d6:12:b1:89:b8:b1:55:80:f3:54:2d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:34 2024 GMT
            Not After : Mar  4 18:12:34 2025 GMT
        Subject: CN=94B77E53812E087039A70571211D923F0535C716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:8c:db:29:5f:4a:77:59:02:4b:8b:f8:f5:
                    a3:ee:bd:d3:da:fe:e0:22:01:69:77:88:5b:84:9e:
                    bd:a5:7f:c6:5d:46:0e:97:b9:43:90:24:05:a0:5f:
                    d9:b7:81:fe:6b:09:7c:35:ca:e3:97:a0:cc:c3:1e:
                    04:83:9a:16:cb:16:9d:5b:90:1f:86:33:ee:02:30:
                    77:be:4b:51:46:2f:c5:40:5a:f6:9e:70:67:4b:4d:
                    18:d2:92:25:3c:b3:ef:c3:25:8c:56:a9:58:ad:4d:
                    e3:51:cf:e6:f0:9a:d0:39:c7:3c:d3:8a:1d:b3:67:
                    16:da:d3:ce:3b:15:7d:91:07:52:9d:cd:08:2d:54:
                    93:7d:6d:09:65:cb:be:01:ea:70:a0:a7:c0:a1:a2:
                    ab:88:e5:28:e1:ad:00:1f:69:f4:7b:41:65:1b:dd:
                    25:ea:ed:f8:40:40:86:be:92:37:b1:bb:5d:69:7c:
                    21:18:98:47:c2:48:48:4f:28:47:00:69:d4:11:de:
                    ff:59:19:e3:8e:7c:3f:df:c0:39:eb:c2:3d:d0:bc:
                    65:e7:2b:92:70:5f:54:2d:d4:11:59:1e:bf:97:a3:
                    e2:ff:d3:0d:d8:4e:8d:77:ec:73:98:5e:5e:99:ef:
                    6f:01:22:6f:dc:7c:aa:31:4a:5f:99:1e:65:21:00:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:7E:53:81:2E:08:70:39:A7:05:71:21:1D:92:3F:05:35:C7:16
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e33322e302f31392d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:a0:23:39:8f:d4:2e:65:e4:f8:09:4c:52:6e:29:58:2b:
         5b:7d:47:45:c8:24:55:d6:56:27:c4:6e:6f:0a:92:4f:83:4b:
         39:22:95:e1:aa:98:e2:b4:5a:3e:2d:1d:71:2b:59:77:b0:d7:
         1c:13:31:95:e8:e6:76:6c:5c:ff:71:db:42:d6:bb:7f:58:f8:
         87:86:fc:49:85:f6:93:35:2b:a0:54:1e:e6:6a:96:a7:ec:d5:
         f8:82:7f:b3:34:18:aa:36:b7:bf:eb:e0:c2:e9:7b:ad:c4:97:
         af:99:c0:aa:27:d1:3f:95:0c:dd:6f:27:78:b1:1d:49:df:76:
         4b:bf:e0:5b:0a:2a:98:78:fd:62:25:2c:09:05:b5:48:a1:0b:
         9e:2a:9d:c9:d5:09:8d:24:cb:12:a6:a9:9e:f3:fb:62:95:74:
         bd:ee:13:e6:a6:e2:05:07:7e:b3:45:3a:23:ed:ea:98:67:d9:
         4b:c1:5a:c5:d6:26:38:fc:d9:f9:27:61:c4:3f:ab:b8:e7:8e:
         c3:52:b2:e4:a2:98:30:99:b8:0c:fd:39:6e:cc:8f:98:47:8f:
         db:80:11:50:e8:2b:db:73:48:0a:db:78:ce:f3:7d:f9:b4:c9:
         97:30:e9:42:38:11:8e:39:87:03:1c:62:3a:4f:4f:97:ce:b3:
         48:56:ce:25
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUCCMB4BT/qDWErGJuLFVgPNULU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNDAzMDUxODA3MzRaFw0yNTAzMDQxODEyMzRaMDMxMTAvBgNV
BAMTKDk0Qjc3RTUzODEyRTA4NzAzOUE3MDU3MTIxMUQ5MjNGMDUzNUM3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4YzbKV9Kd1kCS4v49aPuvdPa
/uAiAWl3iFuEnr2lf8ZdRg6XuUOQJAWgX9m3gf5rCXw1yuOXoMzDHgSDmhbLFp1b
kB+GM+4CMHe+S1FGL8VAWvaecGdLTRjSkiU8s+/DJYxWqVitTeNRz+bwmtA5xzzT
ih2zZxba0847FX2RB1KdzQgtVJN9bQlly74B6nCgp8ChoquI5SjhrQAfafR7QWUb
3SXq7fhAQIa+kjexu11pfCEYmEfCSEhPKEcAadQR3v9ZGeOOfD/fwDnrwj3QvGXn
K5JwX1Qt1BFZHr+Xo+L/0w3YTo137HOYXl6Z728BIm/cfKoxSl+ZHmUhADMZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUlLd+U4EuCHA5pwVxIR2SPwU1xxYwHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMxMzkzMDJlMzkzMjJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzczODM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+XCAwDQYJ
KoZIhvcNAQELBQADggEBAJ5+oCM5j9QuZeT4CUxSbilYK1t9R0XIJFXWVifEbm8K
kk+DSzkileGqmOK0Wj4tHXErWXew1xwTMZXo5nZsXP9x20LWu39Y+IeG/EmF9pM1
K6BUHuZqlqfs1fiCf7M0GKo2t7/r4MLpe63El6+ZwKon0T+VDN1vJ3ixHUnfdku/
4FsKKph4/WIlLAkFtUihC54qncnVCY0kyxKmqZ7z+2KVdL3uE+am4gUHfrNFOiPt
6phn2UvBWsXWJjj82fknYcQ/q7jnjsNSsuSimDCZuAz9OW7Mj5hHj9uAEVDoK9tz
SArbeM7zffm0yZcw6UI4EY45hwMcYjpPT5fOs0hWziU=
-----END CERTIFICATE-----
Generated at Sun May 5 08:37:16 2024 by rpki-client on console-fra.rpki-client.org