Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233302e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3233302e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          chrQvdjxrsH0ILdnKJLOiKpn5OPZmUI67IbA7dQZo7o=
Subject key identifier:   2F:57:96:BC:B6:FB:17:FE:69:99:AB:6C:48:24:9F:25:B9:6A:A5:B5
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       0D8C57F235435E6398F8B7521F6EBBB0A583B723
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233302e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:03 +0000
ROA not before:           Fri 08 Nov 2024 14:05:03 +0000
ROA not after:            Fri 07 Nov 2025 14:10:03 +0000
asID:                     262216
IP address blocks:        190.113.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:57:f2:35:43:5e:63:98:f8:b7:52:1f:6e:bb:b0:a5:83:b7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:03 2024 GMT
            Not After : Nov  7 14:10:03 2025 GMT
        Subject: CN=2F5796BCB6FB17FE6999AB6C48249F25B96AA5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:12:24:d0:10:6b:d0:b0:c5:32:fd:de:3c:
                    d4:ab:a4:52:a2:7b:85:af:35:a0:fb:e5:ee:47:f6:
                    c6:86:de:96:16:86:28:51:25:9e:48:3d:e2:19:a6:
                    3a:d3:b7:17:6a:0a:7c:c0:ec:a1:9b:ff:d0:ba:82:
                    91:70:16:48:a8:56:cc:c2:b2:6b:78:3d:93:f3:3c:
                    db:e3:7d:91:58:43:1e:d9:b7:1f:23:8f:4b:9f:97:
                    f3:fe:fa:34:65:90:1a:9f:6a:ef:87:01:5e:8f:a0:
                    24:48:83:3e:5c:24:86:68:cf:81:8a:9c:1e:b8:31:
                    31:16:19:90:76:f2:19:c3:36:8f:80:6a:eb:b7:85:
                    76:f5:58:b1:25:0e:78:5f:94:bb:4a:3e:34:b6:5c:
                    72:c4:e2:b5:bc:2d:80:bc:7a:5f:36:08:7c:de:f2:
                    ad:8a:92:74:3a:87:a2:3a:eb:5f:7a:42:ed:6b:5a:
                    17:8d:33:d4:91:68:88:44:d3:bc:15:e0:2f:47:5d:
                    fc:07:6c:4d:db:e5:e2:f4:5f:09:6d:8b:ad:1a:de:
                    d6:43:db:b0:cf:ae:9a:ec:f7:88:e3:03:4b:78:9b:
                    b7:ea:c3:f2:be:36:cf:16:bc:2c:15:bd:1b:44:cb:
                    77:b6:50:76:55:a6:80:8a:05:2c:c4:cb:4c:8d:b9:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:57:96:BC:B6:FB:17:FE:69:99:AB:6C:48:24:9F:25:B9:6A:A5:B5
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233302e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:30:1a:62:91:79:40:c5:f7:58:60:8b:de:63:b5:53:e5:6a:
         cd:a7:ab:22:97:9c:17:eb:78:29:65:bc:e6:b2:00:0f:c7:7c:
         bb:21:dd:48:15:a5:30:73:83:b6:49:19:82:b9:77:35:80:3b:
         40:2f:70:40:03:58:e8:e6:9e:79:ef:db:2b:a6:53:b5:a5:23:
         1d:5a:92:a1:fa:40:d3:f2:8f:d2:6d:51:38:c7:eb:ef:c1:de:
         4f:d3:02:2b:7b:27:a8:20:6a:8e:09:14:e8:ba:b6:de:86:46:
         16:c3:b0:45:34:7b:f7:33:03:c7:72:c0:45:96:6e:62:63:22:
         aa:65:09:27:10:99:04:d6:d0:54:8e:70:6c:bc:21:af:5a:a6:
         ca:37:b4:c8:95:6d:1c:62:41:d2:25:a6:48:10:a8:06:1f:b3:
         c2:df:35:9d:22:2a:d1:83:70:5f:54:5f:f9:c7:7c:71:fc:5f:
         49:85:70:02:a2:7d:9c:6c:b4:30:e6:0e:e1:47:6d:ac:20:35:
         cc:50:85:3d:f7:e3:98:b0:37:29:f6:a3:a9:9e:9c:51:95:d7:
         40:70:fa:e5:bd:89:d4:af:fe:20:3c:1c:eb:fb:ec:b0:be:8f:
         eb:44:a4:32:86:cd:8c:f3:b3:86:93:7d:fd:ac:63:4f:16:59:
         ae:2d:65:ea
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDYxX8jVDXmOY+LdSH267sKWDtyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNBQTE0RTg2RDM4
NTQ4MzA4OTAeFw0yNDExMDgxNDA1MDNaFw0yNTExMDcxNDEwMDNaMDMxMTAvBgNV
BAMTKDJGNTc5NkJDQjZGQjE3RkU2OTk5QUI2QzQ4MjQ5RjI1Qjk2QUE1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqRIk0BBr0LDFMv3ePNSrpFKi
e4WvNaD75e5H9saG3pYWhihRJZ5IPeIZpjrTtxdqCnzA7KGb/9C6gpFwFkioVszC
smt4PZPzPNvjfZFYQx7Ztx8jj0ufl/P++jRlkBqfau+HAV6PoCRIgz5cJIZoz4GK
nB64MTEWGZB28hnDNo+Aauu3hXb1WLElDnhflLtKPjS2XHLE4rW8LYC8el82CHze
8q2KknQ6h6I66196Qu1rWheNM9SRaIhE07wV4C9HXfwHbE3b5eL0Xwlti60a3tZD
27DPrprs94jjA0t4m7fqw/K+Ns8WvCwVvRtEy3e2UHZVpoCKBSzEy0yNuV5ZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUL1eWvLb7F/5pmatsSCSfJblqpbUwHwYDVR0j
BBgwFoAUfR8XS/uxe3gi6C06oU6G04VIMIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4
QjE2MzdGREYwMjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3
ODIyRTgyRDNBQTE0RTg2RDM4NTQ4MzA4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDFGMTc0QkZCQjE3Qjc4MjJF
ODJEM0FBMTRFODZEMzg1NDgzMDg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQzOTg3OTkwODcxOEIxNjM3RkRG
MDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzMxMzkzMDJlMzEzMTMzMmUzMjMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
ceYwDQYJKoZIhvcNAQELBQADggEBACIwGmKReUDF91hgi95jtVPlas2nqyKXnBfr
eCllvOayAA/HfLsh3UgVpTBzg7ZJGYK5dzWAO0AvcEADWOjmnnnv2yumU7WlIx1a
kqH6QNPyj9JtUTjH6+/B3k/TAit7J6ggao4JFOi6tt6GRhbDsEU0e/czA8dywEWW
bmJjIqplCScQmQTW0FSOcGy8Ia9apso3tMiVbRxiQdIlpkgQqAYfs8LfNZ0iKtGD
cF9UX/nHfHH8X0mFcAKifZxstDDmDuFHbawgNcxQhT3345iwNyn2o6menFGV10Bw
+uW9idSv/iA8HOv77LC+j+tEpDKGzYzzs4aTff2sY08WWa4tZeo=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org