Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33342e302f32332d3234203d3e203532343638.roa
File:                     3139302e36312e33342e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          iJUOqwEEI8sFBfe/haEdSufgZOz+Vfe7hXgYxB2zyKs=
Subject key identifier:   C3:76:14:56:F9:6E:44:4D:27:6F:BA:48:EB:F1:77:D6:2D:8B:01:22
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       46CA10FC0C336452364AEEBCC6655FCCA22AD502
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33342e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:04:16 +0000
ROA not before:           Tue 04 Feb 2025 19:59:16 +0000
ROA not after:            Tue 03 Feb 2026 20:04:16 +0000
asID:                     52468
IP address blocks:        190.61.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ca:10:fc:0c:33:64:52:36:4a:ee:bc:c6:65:5f:cc:a2:2a:d5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Feb  4 19:59:16 2025 GMT
            Not After : Feb  3 20:04:16 2026 GMT
        Subject: CN=C3761456F96E444D276FBA48EBF177D62D8B0122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:8d:8c:04:0b:8a:7a:76:43:0f:93:f8:a3:
                    40:08:58:4d:e0:41:79:5e:f5:94:b1:26:70:07:bf:
                    11:b4:a1:09:1f:e8:a0:c8:d0:4a:63:a1:0b:29:2a:
                    bf:71:74:fc:41:56:6a:f0:37:e5:ad:1a:bf:ca:2d:
                    dd:2b:0c:59:65:e2:37:eb:be:32:5f:de:17:9f:6d:
                    78:bd:13:c2:6a:8b:e0:fd:c3:eb:13:02:9f:36:6c:
                    93:8c:7c:5a:af:50:96:a3:57:6a:e2:aa:ff:a7:d9:
                    19:3f:be:56:d6:62:f7:da:82:ab:1b:a5:49:ff:de:
                    5a:4e:35:40:38:a4:54:83:75:c5:ed:fc:36:01:d2:
                    73:f5:08:43:f1:15:81:bb:0f:b7:5c:b9:87:cc:76:
                    ac:98:a7:21:ac:bb:92:cb:eb:fc:11:45:cf:74:57:
                    87:ff:8a:9e:7c:00:26:88:b3:39:b6:de:ec:3c:ca:
                    b8:a8:99:dc:b3:a4:26:b2:de:b7:cd:f4:61:19:c4:
                    55:7b:28:7e:69:be:df:7b:5a:5f:ce:01:27:84:96:
                    60:0f:e3:66:8b:f6:37:a7:7f:dc:14:53:fd:1c:24:
                    51:c2:b5:c5:5f:40:51:2e:e8:d0:83:da:2d:99:79:
                    92:65:e0:b8:64:a2:bd:77:f5:d6:33:d9:ac:f2:a9:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:14:56:F9:6E:44:4D:27:6F:BA:48:EB:F1:77:D6:2D:8B:01:22
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33342e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:3c:f1:53:9e:ec:9c:03:ef:ce:68:a6:3f:b1:cb:b9:1a:
         57:f0:6d:a8:cb:ec:be:b4:56:83:93:00:c5:86:a6:bc:c7:de:
         01:8c:90:93:b3:7e:3d:14:49:53:3a:52:22:ee:12:ac:0b:d1:
         47:08:11:35:cb:ff:e2:a7:3a:17:b0:e8:99:a1:35:5d:48:eb:
         9d:5e:4a:cd:f8:42:d7:dd:5d:19:2e:1c:74:17:45:df:66:b0:
         f5:b3:4b:83:f4:b6:5b:77:8f:76:7c:e9:bc:6d:2c:67:07:43:
         93:b7:f3:ab:ed:da:19:9e:c7:d7:e6:b1:6e:0a:13:f1:6a:a2:
         2f:fc:c1:86:c9:5b:c4:76:b5:43:42:dd:9c:6b:dd:60:e2:da:
         45:2e:18:5d:49:9c:79:75:f2:b4:42:f3:7e:44:d8:77:eb:fe:
         42:1b:96:18:6e:35:bd:14:b7:01:05:40:36:eb:cb:8e:97:11:
         84:cd:42:8a:d6:98:91:e2:97:44:6c:e8:f5:3c:54:65:09:35:
         b4:3b:04:0a:9d:32:d7:ba:1a:99:42:94:21:f1:b1:cf:d1:ae:
         bb:39:7a:15:7b:7c:9f:85:04:41:ec:15:16:76:c6:47:c8:91:
         f2:06:13:90:da:48:f1:d7:c4:d4:54:ac:6f:06:7e:60:15:12:
         d5:01:fc:61
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURsoQ/AwzZFI2Su68xmVfzKIq1QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxNkFGRUVFMzdBRTYzNDBBNjUyNEQ5MjBBQTQ3NEVF
RDZCNkE3MDAeFw0yNTAyMDQxOTU5MTZaFw0yNjAyMDMyMDA0MTZaMDMxMTAvBgNV
BAMTKEMzNzYxNDU2Rjk2RTQ0NEQyNzZGQkE0OEVCRjE3N0Q2MkQ4QjAxMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWo2MBAuKenZDD5P4o0AIWE3g
QXle9ZSxJnAHvxG0oQkf6KDI0EpjoQspKr9xdPxBVmrwN+WtGr/KLd0rDFll4jfr
vjJf3hefbXi9E8Jqi+D9w+sTAp82bJOMfFqvUJajV2riqv+n2Rk/vlbWYvfagqsb
pUn/3lpONUA4pFSDdcXt/DYB0nP1CEPxFYG7D7dcuYfMdqyYpyGsu5LL6/wRRc90
V4f/ip58ACaIszm23uw8yriomdyzpCay3rfN9GEZxFV7KH5pvt97Wl/OASeElmAP
42aL9jenf9wUU/0cJFHCtcVfQFEu6NCD2i2ZeZJl4Lhkor139dYz2azyqXVPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUw3YUVvluRE0nb7pI6/F31i2LASIwHwYDVR0j
BBgwFoAUhhav7uN65jQKZSTZIKpHTu1ranAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENjYzM0E4NzMyRkMyRkJCMUZDODIxRDNBNzM5MEI1RTFC
MDIyMEEwNzY3MjUzMkI1M0UzMjUwNjA0MEMwQjQ0LzAvODYxNkFGRUVFMzdBRTYz
NDBBNjUyNEQ5MjBBQTQ3NEVFRDZCNkE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjE2QUZFRUUzN0FFNjM0MEE2
NTI0RDkyMEFBNDc0RUVENkI2QTcwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDY2MzNBODczMkZDMkZCQjFGQzgyMUQzQTczOTBCNUUxQjAyMjBBMDc2
NzI1MzJCNTNFMzI1MDYwNDBDMEI0NC8wLzMxMzkzMDJlMzYzMTJlMzMzNDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+PSIwDQYJ
KoZIhvcNAQELBQADggEBAKpTPPFTnuycA+/OaKY/scu5GlfwbajL7L60VoOTAMWG
przH3gGMkJOzfj0USVM6UiLuEqwL0UcIETXL/+KnOhew6JmhNV1I651eSs34Qtfd
XRkuHHQXRd9msPWzS4P0tlt3j3Z86bxtLGcHQ5O386vt2hmex9fmsW4KE/Fqoi/8
wYbJW8R2tUNC3Zxr3WDi2kUuGF1JnHl18rRC835E2Hfr/kIblhhuNb0UtwEFQDbr
y46XEYTNQorWmJHil0Rs6PU8VGUJNbQ7BAqdMte6GplClCHxsc/Rrrs5ehV7fJ+F
BEHsFRZ2xkfIkfIGE5DaSPHXxNRUrG8GfmAVEtUB/GE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:18 2025 by rpki-client