Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          H/BcEd/GePFbHwfm/UunNdugRgny50JlGVEhGykcRYo=
Subject key identifier:   FB:3A:C2:D0:3C:A6:F6:B7:81:79:97:A9:81:B9:1E:2D:8E:10:6E:CB
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       1B5451D9C384247F767B1935576F11AC2297AA86
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:03 +0000
ROA not before:           Fri 08 Nov 2024 14:05:03 +0000
ROA not after:            Fri 07 Nov 2025 14:10:03 +0000
asID:                     262216
IP address blocks:        190.113.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:54:51:d9:c3:84:24:7f:76:7b:19:35:57:6f:11:ac:22:97:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:03 2024 GMT
            Not After : Nov  7 14:10:03 2025 GMT
        Subject: CN=FB3AC2D03CA6F6B7817997A981B91E2D8E106ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:11:22:3e:13:02:7e:72:5e:0f:04:87:90:
                    f3:0c:04:10:a3:4b:8a:39:6b:43:0a:53:e8:23:b6:
                    5c:7c:3a:dc:05:ae:e3:93:cb:eb:15:da:89:f4:ab:
                    fd:16:51:10:fc:5f:a6:64:fa:e8:e7:ec:87:1f:b6:
                    69:77:a7:db:09:89:9c:62:e6:70:30:1d:0e:d0:c5:
                    e7:9f:c4:6b:db:79:4e:82:6a:5e:da:17:8a:a9:59:
                    79:a5:10:c4:69:9c:d7:03:7e:1e:9a:8a:1b:ce:3c:
                    ab:69:4d:2d:52:a4:3b:81:dd:93:e1:ba:4e:64:e1:
                    86:6f:61:5e:e4:74:de:38:c8:97:5a:7d:ca:e1:2e:
                    52:74:bd:bc:12:4b:2d:85:92:46:2a:ac:ab:19:4e:
                    89:4e:63:9c:a1:d5:8c:ad:a2:c7:81:59:82:3c:2d:
                    f8:6e:53:71:0b:63:18:d2:77:fe:e4:4b:63:4a:c7:
                    90:e9:8d:d8:77:e3:90:82:17:31:1d:54:7e:ba:44:
                    7f:8a:63:97:1c:c6:64:e0:be:90:b9:ad:ec:2b:8a:
                    4a:08:4a:a1:1a:e3:dc:9a:2e:a1:37:56:ea:5a:3e:
                    74:32:65:6e:10:c8:68:6a:9e:b9:b4:54:4f:60:6a:
                    aa:b0:38:44:47:46:7f:6e:92:93:63:19:e4:62:f9:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3A:C2:D0:3C:A6:F6:B7:81:79:97:A9:81:B9:1E:2D:8E:10:6E:CB
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3a:cd:c9:57:7d:75:7c:20:c2:14:10:6c:1c:82:95:d9:4c:
         c0:95:24:ce:e9:3c:e7:56:4f:02:8b:33:7d:ae:e7:01:b4:b0:
         3b:49:96:1c:79:38:f9:ab:b9:86:17:a4:48:15:ca:71:57:ca:
         fc:49:0c:94:a2:37:3e:e2:54:6b:67:e1:84:02:42:3d:f0:b3:
         c0:8d:06:ef:89:c1:8d:e4:d9:85:49:1f:5d:39:f8:82:bd:15:
         a3:5f:eb:1a:8e:e9:9e:cc:34:e9:4e:0f:3c:71:7d:8e:b3:98:
         61:fd:30:28:33:14:92:9c:61:51:f3:57:ea:54:09:03:02:37:
         cf:03:72:81:c2:78:eb:3e:43:a0:7e:15:20:21:03:82:bc:c8:
         e5:10:1f:7a:c5:fe:57:06:b8:2c:65:d7:a9:9a:91:1c:26:74:
         51:ec:77:06:29:71:28:f2:a7:93:97:b5:15:76:43:cc:37:1e:
         71:d3:51:bb:46:1e:f2:38:30:9c:17:3e:54:2b:32:48:df:0c:
         6e:20:9d:08:ba:b6:6b:7a:ee:c9:1f:3c:6a:a7:6d:8c:da:67:
         bd:3b:9c:2b:d7:6f:b8:0b:da:2a:b7:53:86:6d:a3:94:11:75:
         ad:3f:07:eb:e7:7f:48:80:f7:85:fa:2c:ad:9f:bc:cb:08:d2:
         83:89:17:12
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUG1RR2cOEJH92exk1V28RrCKXqoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNBQTE0RTg2RDM4
NTQ4MzA4OTAeFw0yNDExMDgxNDA1MDNaFw0yNTExMDcxNDEwMDNaMDMxMTAvBgNV
BAMTKEZCM0FDMkQwM0NBNkY2Qjc4MTc5OTdBOTgxQjkxRTJEOEUxMDZFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdhEiPhMCfnJeDwSHkPMMBBCj
S4o5a0MKU+gjtlx8OtwFruOTy+sV2on0q/0WURD8X6Zk+ujn7Icftml3p9sJiZxi
5nAwHQ7QxeefxGvbeU6Cal7aF4qpWXmlEMRpnNcDfh6aihvOPKtpTS1SpDuB3ZPh
uk5k4YZvYV7kdN44yJdafcrhLlJ0vbwSSy2FkkYqrKsZTolOY5yh1YytoseBWYI8
LfhuU3ELYxjSd/7kS2NKx5Dpjdh345CCFzEdVH66RH+KY5ccxmTgvpC5rewrikoI
SqEa49yaLqE3VupaPnQyZW4QyGhqnrm0VE9gaqqwOERHRn9ukpNjGeRi+cn7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+zrC0Dym9reBeZepgbkeLY4QbsswHwYDVR0j
BBgwFoAUfR8XS/uxe3gi6C06oU6G04VIMIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4
QjE2MzdGREYwMjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3
ODIyRTgyRDNBQTE0RTg2RDM4NTQ4MzA4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDFGMTc0QkZCQjE3Qjc4MjJF
ODJEM0FBMTRFODZEMzg1NDgzMDg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQzOTg3OTkwODcxOEIxNjM3RkRG
MDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzMxMzkzMDJlMzEzMTMzMmUzMjMyMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
ceMwDQYJKoZIhvcNAQELBQADggEBALk6zclXfXV8IMIUEGwcgpXZTMCVJM7pPOdW
TwKLM32u5wG0sDtJlhx5OPmruYYXpEgVynFXyvxJDJSiNz7iVGtn4YQCQj3ws8CN
Bu+JwY3k2YVJH105+IK9FaNf6xqO6Z7MNOlODzxxfY6zmGH9MCgzFJKcYVHzV+pU
CQMCN88DcoHCeOs+Q6B+FSAhA4K8yOUQH3rF/lcGuCxl16makRwmdFHsdwYpcSjy
p5OXtRV2Q8w3HnHTUbtGHvI4MJwXPlQrMkjfDG4gnQi6tmt67skfPGqnbYzaZ707
nCvXb7gL2iq3U4Zto5QRda0/B+vnf0iA94X6LK2fvMsI0oOJFxI=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org