Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
File:                     3139302e3132302e39362e302f31392d3234203d3e203238313030.roa (raw, json)
Hash identifier:          eLQMHtjqU/VCFlWioRr/AgVhMxGx6UWbCd5kzVcdGHQ=
Subject key identifier:   36:F2:0D:64:CA:A9:DE:4A:16:DC:59:4F:9C:E7:5D:CF:97:9D:7D:2F
Certificate issuer:       /CN=7522038107C274858A7861E432C932176D64E119
Certificate serial:       0267C9000BD5198497C5AD210DBED7978B8E2A50
Authority key identifier: 75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 17:57:11 +0000
ROA not before:           Tue 05 Mar 2024 17:52:11 +0000
ROA not after:            Tue 04 Mar 2025 17:57:11 +0000
asID:                     28100
IP address blocks:        190.120.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:67:c9:00:0b:d5:19:84:97:c5:ad:21:0d:be:d7:97:8b:8e:2a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7522038107C274858A7861E432C932176D64E119
        Validity
            Not Before: Mar  5 17:52:11 2024 GMT
            Not After : Mar  4 17:57:11 2025 GMT
        Subject: CN=36F20D64CAA9DE4A16DC594F9CE75DCF979D7D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:12:29:87:e0:a4:c1:33:3d:8d:8d:0f:14:
                    4d:41:e1:01:5d:b0:1f:72:2f:72:3a:64:46:99:f4:
                    e7:88:ff:cc:59:10:a8:9d:1c:cb:3d:60:5c:5f:bc:
                    e2:75:13:af:44:c7:e0:0e:cd:bd:f2:a5:1d:7a:f8:
                    e1:28:ef:e7:30:6b:63:21:37:48:e5:a9:bd:89:ef:
                    6b:16:50:c7:09:6e:9c:8d:29:66:a7:f3:ae:eb:47:
                    78:cd:1e:bb:a0:15:b4:17:e1:88:73:65:3e:cb:ed:
                    54:aa:9a:40:86:75:4f:be:fe:23:63:43:4a:48:1c:
                    cb:b3:70:02:1a:3b:27:f0:4d:32:15:63:53:2e:64:
                    8f:65:cd:70:d7:ac:bd:b7:24:86:ab:c7:39:60:eb:
                    95:e9:71:6a:a9:2d:32:22:97:e8:ad:b8:4b:89:c2:
                    44:ee:ce:c8:6f:b5:1b:98:8a:cc:43:1e:4c:ad:71:
                    f3:b6:cc:ea:bc:c2:e9:47:05:50:02:fa:74:d7:e7:
                    2a:6b:2d:2f:61:5c:c9:b0:3c:b5:6e:48:00:47:47:
                    3f:08:c7:b5:ed:10:f6:6a:f0:6c:6f:0a:94:5c:35:
                    b8:b3:34:50:04:23:2a:55:36:ec:96:24:a0:92:cb:
                    c5:51:89:04:8c:ab:f8:3b:ba:97:1a:b9:20:dc:f4:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:0D:64:CA:A9:DE:4A:16:DC:59:4F:9C:E7:5D:CF:97:9D:7D:2F
            X509v3 Authority Key Identifier:
                keyid:75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:33:37:d8:cc:9e:18:38:56:3d:a1:2e:5b:23:ba:5d:1f:b9:
         55:cc:19:08:26:ff:e3:a7:63:74:62:63:2f:b2:49:81:37:91:
         fb:f7:4a:18:4f:5b:4e:6d:d1:83:a6:f3:e8:a0:38:b9:d6:d4:
         7c:ae:48:0d:d7:db:85:5b:90:8f:79:ff:0b:d2:68:f9:ba:7c:
         4c:b0:38:4a:d1:3c:cf:bc:a9:0e:ae:dc:1c:49:a9:92:f3:d3:
         eb:fb:0b:2c:94:ef:5b:52:46:71:2b:66:37:6f:57:8f:f9:51:
         f7:6a:94:ea:9c:9e:31:c8:2a:a4:75:5a:8d:e3:f1:9b:8c:86:
         8b:ef:f8:8c:34:29:cf:6e:bb:29:b3:70:8d:7b:7e:3c:2e:32:
         69:13:5b:59:8e:56:77:56:22:e6:67:7c:72:cc:1f:a4:6a:3b:
         20:96:38:17:aa:19:dc:7b:88:e6:c3:4f:0c:1d:76:6c:b8:dc:
         e1:00:d0:ac:0a:f3:8e:cc:b5:91:e4:06:5f:af:de:73:b1:09:
         35:99:56:5a:7d:21:97:2c:65:e1:b0:85:13:f2:41:f0:9e:dc:
         da:c5:b5:3a:64:db:0e:ef:10:fc:ad:0a:ec:02:ef:8e:50:82:
         6e:d9:12:28:5d:b9:3f:8c:2c:6c:3a:c3:26:29:f7:90:4a:98:
         fe:32:e6:65
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAmfJAAvVGYSXxa0hDb7Xl4uOKlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUyMjAzODEwN0MyNzQ4NThBNzg2MUU0MzJDOTMyMTc2
RDY0RTExOTAeFw0yNDAzMDUxNzUyMTFaFw0yNTAzMDQxNzU3MTFaMDMxMTAvBgNV
BAMTKDM2RjIwRDY0Q0FBOURFNEExNkRDNTk0RjlDRTc1RENGOTc5RDdEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OhIph+CkwTM9jY0PFE1B4QFd
sB9yL3I6ZEaZ9OeI/8xZEKidHMs9YFxfvOJ1E69Ex+AOzb3ypR16+OEo7+cwa2Mh
N0jlqb2J72sWUMcJbpyNKWan867rR3jNHrugFbQX4YhzZT7L7VSqmkCGdU++/iNj
Q0pIHMuzcAIaOyfwTTIVY1MuZI9lzXDXrL23JIarxzlg65XpcWqpLTIil+ituEuJ
wkTuzshvtRuYisxDHkytcfO2zOq8wulHBVAC+nTX5yprLS9hXMmwPLVuSABHRz8I
x7XtEPZq8GxvCpRcNbizNFAEIypVNuyWJKCSy8VRiQSMq/g7upcauSDc9J+HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNvINZMqp3koW3FlPnOddz5edfS8wHwYDVR0j
BBgwFoAUdSIDgQfCdIWKeGHkMskyF21k4RkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkUxNTI2QUMyMEVDRkY4OTNFQkU3QUUyQzE2QUJFNDZE
OEEyNjU3Rjc2RTFERjM3NzU2N0QyNUUwNjQ4OEVBLzAvNzUyMjAzODEwN0MyNzQ4
NThBNzg2MUU0MzJDOTMyMTc2RDY0RTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTIyMDM4MTA3QzI3NDg1OEE3
ODYxRTQzMkM5MzIxNzZENjRFMTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZFMTUyNkFDMjBFQ0ZGODkzRUJFN0FFMkMxNkFCRTQ2RDhBMjY1N0Y3
NkUxREYzNzc1NjdEMjVFMDY0ODhFQS8wLzMxMzkzMDJlMzEzMjMwMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb54YDAN
BgkqhkiG9w0BAQsFAAOCAQEAmzM32MyeGDhWPaEuWyO6XR+5VcwZCCb/46djdGJj
L7JJgTeR+/dKGE9bTm3Rg6bz6KA4udbUfK5IDdfbhVuQj3n/C9Jo+bp8TLA4StE8
z7ypDq7cHEmpkvPT6/sLLJTvW1JGcStmN29Xj/lR92qU6pyeMcgqpHVajePxm4yG
i+/4jDQpz267KbNwjXt+PC4yaRNbWY5Wd1Yi5md8cswfpGo7IJY4F6oZ3HuI5sNP
DB12bLjc4QDQrArzjsy1keQGX6/ec7EJNZlWWn0hlyxl4bCFE/JB8J7c2sW1OmTb
Du8Q/K0K7ALvjlCCbtkSKF25P4wsbDrDJin3kEqY/jLmZQ==
-----END CERTIFICATE-----
Generated at Mon May 6 09:06:33 2024 by rpki-client on console-fra.rpki-client.org