Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          /3kfAjXWz3aFwD3qkjZKRvhXyfLJR3kIJzBix7z2qzo=
Subject key identifier:   EC:3A:14:D6:19:4B:08:52:4A:46:DB:C2:D2:0F:74:56:6B:67:1C:52
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       18608F45E86DECD16382DDADBA8839C1FAFF454E
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:09:44 +0000
ROA not before:           Tue 05 Mar 2024 18:04:44 +0000
ROA not after:            Tue 04 Mar 2025 18:09:44 +0000
asID:                     14754
IP address blocks:        190.212.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:60:8f:45:e8:6d:ec:d1:63:82:dd:ad:ba:88:39:c1:fa:ff:45:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Mar  5 18:04:44 2024 GMT
            Not After : Mar  4 18:09:44 2025 GMT
        Subject: CN=EC3A14D6194B08524A46DBC2D20F74566B671C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:a7:ae:b0:3c:12:de:f5:e5:e9:d7:8f:7f:
                    41:de:5d:d7:a6:25:f4:d2:e7:6d:0b:94:72:67:ab:
                    48:7b:f0:c2:82:d5:79:32:7b:70:ee:86:9d:4f:ee:
                    db:03:b1:b8:01:40:7f:d9:a0:28:66:ac:9b:31:a8:
                    07:f0:5e:0d:f9:46:8e:e5:ee:f7:59:3e:f3:30:5c:
                    0b:d4:91:f2:7e:41:3e:48:94:41:af:8a:71:f3:50:
                    c0:b4:4f:c0:88:8a:67:4c:bf:33:61:75:9c:e9:77:
                    a1:8f:47:cf:3e:9e:52:58:3a:d8:46:78:2a:a7:79:
                    35:39:52:da:ef:c9:20:a5:a7:76:8c:be:29:11:41:
                    d1:95:ad:de:fc:79:c7:13:5d:c3:ac:85:67:e1:c4:
                    87:6c:46:2c:29:ba:47:80:5e:6d:17:1e:b4:5b:ea:
                    cf:4d:b8:82:58:02:68:99:68:8a:a6:ef:fd:46:ed:
                    ff:b8:bc:5e:d1:05:48:1d:22:f3:da:6a:57:84:dc:
                    fb:ae:07:67:7f:04:f9:df:8c:26:11:a1:de:15:ea:
                    a5:58:04:81:03:76:2a:0a:73:60:05:cc:c6:58:9c:
                    97:fb:c9:0f:2b:b8:0d:d1:3b:15:20:92:87:28:5f:
                    da:8a:ed:e7:62:88:fc:1a:23:44:e4:ad:a1:ac:f6:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:14:D6:19:4B:08:52:4A:46:DB:C2:D2:0F:74:56:6B:67:1C:52
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.212.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:5f:aa:ce:f3:4b:b1:15:fe:40:2e:fb:f4:f4:93:b0:17:
         28:47:39:c8:cc:4b:95:51:00:f5:cd:45:04:46:7d:8a:df:e7:
         38:2d:a0:ec:08:ca:35:c9:df:05:d9:7b:21:4d:ea:e3:d4:9a:
         d5:0a:57:7c:32:64:27:24:7e:79:fb:28:32:35:64:e4:92:3d:
         19:23:8b:0b:94:53:57:ab:9d:1f:ea:d4:d9:7e:93:70:63:bd:
         b9:ea:da:a1:30:1c:27:dd:b8:09:4c:3f:bf:4c:07:d0:cc:ba:
         30:d1:46:6e:52:f8:de:08:8e:60:48:5e:1f:f9:f7:ef:46:fb:
         d4:07:94:8f:e5:6e:25:b4:0f:69:11:0f:41:c3:15:f7:38:10:
         7e:75:ed:f2:52:f4:cb:24:aa:14:c0:7b:ff:b7:4e:24:79:25:
         7b:c8:a5:0c:a0:f7:d5:7d:77:08:9d:fa:e8:51:24:24:35:66:
         cf:6c:3f:21:fb:0a:6c:dd:19:1c:fd:9a:55:62:9e:2e:8d:cb:
         97:73:b6:bb:a8:a3:d1:67:f0:40:85:5c:6b:be:ab:30:40:d5:
         11:a1:b4:5d:ac:82:0e:5c:c2:93:bb:d4:a8:07:cf:f5:54:c6:
         3a:c6:31:f4:09:ba:a9:aa:cb:37:7c:70:d8:03:81:e7:46:9b:
         3c:ff:43:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGGCPReht7NFjgt2tuog5wfr/RU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyRkM5QTMwNjZEMkUwQzI5NEYwRTAwMUE5NEYyRjBB
RUQ3MjcwQzAeFw0yNDAzMDUxODA0NDRaFw0yNTAzMDQxODA5NDRaMDMxMTAvBgNV
BAMTKEVDM0ExNEQ2MTk0QjA4NTI0QTQ2REJDMkQyMEY3NDU2NkI2NzFDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaqeusDwS3vXl6dePf0HeXdem
JfTS520LlHJnq0h78MKC1Xkye3Duhp1P7tsDsbgBQH/ZoChmrJsxqAfwXg35Ro7l
7vdZPvMwXAvUkfJ+QT5IlEGvinHzUMC0T8CIimdMvzNhdZzpd6GPR88+nlJYOthG
eCqneTU5UtrvySClp3aMvikRQdGVrd78eccTXcOshWfhxIdsRiwpukeAXm0XHrRb
6s9NuIJYAmiZaIqm7/1G7f+4vF7RBUgdIvPaaleE3PuuB2d/BPnfjCYRod4V6qVY
BIEDdioKc2AFzMZYnJf7yQ8ruA3ROxUgkocoX9qK7ediiPwaI0TkraGs9ovnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7DoU1hlLCFJKRtvC0g90VmtnHFIwHwYDVR0j
BBgwFoAUUS/JowZtLgwpTw4AGpTy8K7XJwwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkNCNTEzMUU2RTlGNjI4NTVEQzBFQzUwNjU1Q0Q4MTBE
RDk4NUFCQkJGRkJGNEYwQzY1Mzc5NUYyMTRFRDk5LzAvNTEyRkM5QTMwNjZEMkUw
QzI5NEYwRTAwMUE5NEYyRjBBRUQ3MjcwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTJGQzlBMzA2NkQyRTBDMjk0
RjBFMDAxQTk0RjJGMEFFRDcyNzBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZDQjUxMzFFNkU5RjYyODU1REMwRUM1MDY1NUNEODEwREQ5ODVBQkJC
RkZCRjRGMEM2NTM3OTVGMjE0RUQ5OS8wLzMxMzkzMDJlMzIzMTMyMmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHvtSA
MA0GCSqGSIb3DQEBCwUAA4IBAQB7J1+qzvNLsRX+QC779PSTsBcoRznIzEuVUQD1
zUUERn2K3+c4LaDsCMo1yd8F2XshTerj1JrVCld8MmQnJH55+ygyNWTkkj0ZI4sL
lFNXq50f6tTZfpNwY7256tqhMBwn3bgJTD+/TAfQzLow0UZuUvjeCI5gSF4f+ffv
RvvUB5SP5W4ltA9pEQ9BwxX3OBB+de3yUvTLJKoUwHv/t04keSV7yKUMoPfVfXcI
nfroUSQkNWbPbD8h+wps3Rkc/ZpVYp4ujcuXc7a7qKPRZ/BAhVxrvqswQNURobRd
rIIOXMKTu9SoB8/1VMY6xjH0Cbqpqss3fHDYA4HnRps8/0P3
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org