Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38392e302f32342d3234203d3e20323730303938.roa
File:                     3139302e3137312e38392e302f32342d3234203d3e20323730303938.roa (raw, json)
Hash identifier:          61V2gqY8sMfw1GUXF5lo2QGWZfSvn4QWAHrsIf3if8M=
Subject key identifier:   B5:43:AA:36:1F:88:2E:85:FF:8F:3B:CD:86:BE:56:32:A7:AF:9A:28
Certificate issuer:       /CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
Certificate serial:       3CA6652D72E30F4352DDBF57135B094AB141B1B5
Authority key identifier: 55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38392e302f32342d3234203d3e20323730303938.roa
Signing time:             Tue 05 Mar 2024 17:41:43 +0000
ROA not before:           Tue 05 Mar 2024 17:36:43 +0000
ROA not after:            Tue 04 Mar 2025 17:41:43 +0000
asID:                     270098
IP address blocks:        190.171.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a6:65:2d:72:e3:0f:43:52:dd:bf:57:13:5b:09:4a:b1:41:b1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
        Validity
            Not Before: Mar  5 17:36:43 2024 GMT
            Not After : Mar  4 17:41:43 2025 GMT
        Subject: CN=B543AA361F882E85FF8F3BCD86BE5632A7AF9A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:1c:61:e2:61:4f:65:d3:24:90:15:05:a5:
                    59:5b:4b:59:de:f4:b0:1c:2f:1b:13:cd:3a:75:7b:
                    29:a4:d5:6c:76:f5:ad:1a:50:28:73:85:af:56:4c:
                    f4:0c:f1:74:cf:db:4f:2c:c1:2a:bc:8e:0e:bb:28:
                    c7:ba:64:8f:a4:b0:dc:3f:7d:b0:ab:0c:80:cb:e2:
                    38:f8:2d:81:6e:94:94:74:c3:6c:d1:fd:aa:c4:1c:
                    7c:e5:47:4d:e8:95:27:da:3e:82:2e:59:53:c4:22:
                    52:b7:d9:30:a8:44:25:3a:9d:ea:c2:ec:0f:6d:af:
                    db:8b:d6:f5:bf:ea:65:b0:bf:69:b0:81:5d:1b:b0:
                    69:8d:cc:16:5d:82:59:f2:19:c9:ff:c0:c4:76:cc:
                    c8:6e:50:5f:d0:eb:e2:0d:62:cc:f3:dd:ae:82:91:
                    bc:a1:73:6f:22:30:5d:14:1d:8c:62:85:08:e9:36:
                    59:fb:5f:51:7a:79:6e:02:ad:5a:56:c8:84:84:61:
                    a7:e5:e1:5f:15:22:f0:00:60:e7:4a:10:c6:33:b1:
                    06:80:94:f3:0b:75:5c:72:18:1d:ed:29:3a:41:0b:
                    aa:80:22:f8:96:dc:1c:e0:75:08:e3:f7:b8:19:86:
                    9b:4a:8b:e9:b4:9b:9a:9f:98:f6:ab:7b:42:e2:31:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:AA:36:1F:88:2E:85:FF:8F:3B:CD:86:BE:56:32:A7:AF:9A:28
            X509v3 Authority Key Identifier:
                keyid:55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38392e302f32342d3234203d3e20323730303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:52:6b:3c:f2:9f:ce:8e:3f:d9:4d:39:b0:93:73:fb:b2:
         ed:f4:f7:d5:85:80:18:cd:52:9b:25:8b:a0:14:f7:2b:77:4e:
         cf:fc:c3:7a:f9:30:6b:fe:66:5b:4b:14:47:25:06:8d:13:46:
         7e:76:66:cf:36:36:3f:ee:bb:52:f4:11:69:ab:1c:de:51:f0:
         89:ba:fc:99:75:40:94:3b:3d:6b:54:f0:77:8a:6b:72:b5:12:
         df:e1:97:b0:40:bd:31:dc:31:7d:fe:09:45:4a:aa:ba:00:bb:
         e0:b7:10:e2:a7:9a:9e:2f:79:46:a8:31:f7:f6:a6:2c:eb:2d:
         de:c9:cd:92:a7:e8:ef:d0:0f:ca:89:cf:a1:28:a7:31:d2:a9:
         7b:5c:c7:dd:76:e3:9b:62:e7:f9:0f:65:ed:27:28:1b:32:93:
         78:ac:2c:13:1b:3b:ef:75:2d:c3:d4:6f:e5:40:04:c1:15:52:
         f5:3e:4f:5a:79:51:f3:eb:81:e0:4f:06:6b:13:8e:8e:c9:f5:
         1d:aa:a7:66:89:23:cd:49:6c:39:57:97:2b:09:e9:a1:71:ed:
         29:5a:d6:da:b2:d6:d6:f2:61:91:f7:35:3f:04:e7:d8:e3:c1:
         1e:ab:6d:f9:18:98:64:bd:8d:48:0a:90:2d:a5:bd:3c:a7:e3:
         77:17:2f:e4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPKZlLXLjD0NS3b9XE1sJSrFBsbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGMjE5RjI4RkUyRjNGMDlEQTAwMUUxMjIwNURDODk2
RTdCMzk3NzAeFw0yNDAzMDUxNzM2NDNaFw0yNTAzMDQxNzQxNDNaMDMxMTAvBgNV
BAMTKEI1NDNBQTM2MUY4ODJFODVGRjhGM0JDRDg2QkU1NjMyQTdBRjlBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7xxh4mFPZdMkkBUFpVlbS1ne
9LAcLxsTzTp1eymk1Wx29a0aUChzha9WTPQM8XTP208swSq8jg67KMe6ZI+ksNw/
fbCrDIDL4jj4LYFulJR0w2zR/arEHHzlR03olSfaPoIuWVPEIlK32TCoRCU6nerC
7A9tr9uL1vW/6mWwv2mwgV0bsGmNzBZdglnyGcn/wMR2zMhuUF/Q6+INYszz3a6C
kbyhc28iMF0UHYxihQjpNln7X1F6eW4CrVpWyISEYafl4V8VIvAAYOdKEMYzsQaA
lPMLdVxyGB3tKTpBC6qAIviW3BzgdQjj97gZhptKi+m0m5qfmPare0LiMdmPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtUOqNh+ILoX/jzvNhr5WMqevmigwHwYDVR0j
BBgwFoAUVfIZ8o/i8/CdoAHhIgXciW57OXcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0MwQzREQTBBNUQzN0NGRkNGNUNENDQ0MjJBRDQyMEQy
ODgwMzMwMDNFQ0UwMENDNUM5ODVCRjdCM0VDNDUyLzAvNTVGMjE5RjI4RkUyRjNG
MDlEQTAwMUUxMjIwNURDODk2RTdCMzk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUYyMTlGMjhGRTJGM0YwOURB
MDAxRTEyMjA1REM4OTZFN0IzOTc3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENDMEM0REEwQTVEMzdDRkZDRjVDRDQ0NDIyQUQ0MjBEMjg4MDMzMDAz
RUNFMDBDQzVDOTg1QkY3QjNFQzQ1Mi8wLzMxMzkzMDJlMzEzNzMxMmUzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvqtZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAx7FJrPPKfzo4/2U05sJNz+7Lt9PfVhYAYzVKb
JYugFPcrd07P/MN6+TBr/mZbSxRHJQaNE0Z+dmbPNjY/7rtS9BFpqxzeUfCJuvyZ
dUCUOz1rVPB3imtytRLf4ZewQL0x3DF9/glFSqq6ALvgtxDip5qeL3lGqDH39qYs
6y3eyc2Sp+jv0A/Kic+hKKcx0ql7XMfdduObYuf5D2XtJygbMpN4rCwTGzvvdS3D
1G/lQATBFVL1Pk9aeVHz64HgTwZrE46OyfUdqqdmiSPNSWw5V5crCemhce0pWtba
stbW8mGR9zU/BOfY48Eeq235GJhkvY1ICpAtpb08p+N3Fy/k
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org