Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
File:                     3139302e3131322e34302e302f32322d3234203d3e203532333137.roa (raw, json)
Hash identifier:          05UAisLX3YAKVAKjsuVt3jnArQLF+o99u+9A48uX404=
Subject key identifier:   A6:C0:79:2D:80:62:83:1A:D8:B9:8C:6C:1D:A2:68:D6:CD:A4:62:BD
Certificate issuer:       /CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
Certificate serial:       60E707D9BB6666957F92A04EA9EE96DC032652C0
Authority key identifier: 0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
Signing time:             Tue 05 Mar 2024 17:47:11 +0000
ROA not before:           Tue 05 Mar 2024 17:42:11 +0000
ROA not after:            Tue 04 Mar 2025 17:47:11 +0000
asID:                     52317
IP address blocks:        190.112.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:07:d9:bb:66:66:95:7f:92:a0:4e:a9:ee:96:dc:03:26:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
        Validity
            Not Before: Mar  5 17:42:11 2024 GMT
            Not After : Mar  4 17:47:11 2025 GMT
        Subject: CN=A6C0792D8062831AD8B98C6C1DA268D6CDA462BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:81:e2:a4:60:5b:fd:b3:a5:ee:e5:e8:2c:
                    59:c5:4c:46:e4:ff:49:78:7d:c0:79:13:46:29:3e:
                    f3:9c:36:d8:d3:10:51:4e:3a:e2:46:e6:2b:87:79:
                    2e:99:a7:5c:00:f1:63:25:45:df:92:19:65:e8:f3:
                    de:52:11:52:09:90:df:c1:f0:b4:c6:cc:bb:5c:70:
                    a4:7e:3f:01:ba:4e:d5:26:c4:05:6b:a6:e4:8a:67:
                    35:ba:7c:91:80:5a:c2:dd:37:de:05:c9:65:b3:de:
                    3b:7b:32:c4:63:61:7d:f8:c2:3b:8f:de:b5:bd:8b:
                    70:3a:26:4a:03:cd:1d:aa:47:9d:0c:ac:52:a0:89:
                    3d:d7:a9:d2:c7:f8:0d:85:27:c9:62:31:6b:45:a6:
                    25:9a:f4:76:7c:71:30:89:c9:8f:1a:90:64:8d:96:
                    5b:88:7a:14:9c:bb:51:73:14:48:20:a2:84:49:8b:
                    5c:63:8c:64:ce:59:21:e2:9e:91:a8:71:cc:aa:99:
                    9f:f3:8c:cf:1e:d2:32:48:75:ce:ba:3f:a3:5f:1a:
                    1d:71:33:44:8c:c8:0c:e5:f9:1c:aa:91:d6:ab:5f:
                    d3:34:39:a4:a8:fa:30:e6:04:dc:87:52:4c:91:f8:
                    90:e5:19:54:de:2a:cc:c4:d8:b9:2a:69:f6:29:9f:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C0:79:2D:80:62:83:1A:D8:B9:8C:6C:1D:A2:68:D6:CD:A4:62:BD
            X509v3 Authority Key Identifier:
                keyid:0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:c9:82:4c:be:bf:c8:73:a1:13:26:a9:80:e8:e2:7e:f9:
         6d:7e:3b:ad:40:92:50:48:2f:4d:c0:46:ee:a3:c9:87:d8:76:
         b3:c7:41:71:70:95:4b:8c:9b:e5:7b:89:65:a3:30:0b:75:ac:
         85:ce:9c:e0:68:e5:94:f7:51:6a:e9:88:dc:ee:e4:c3:48:b6:
         f0:31:0e:1a:20:34:d0:d8:28:a1:d7:c4:e8:f0:f0:6b:20:6c:
         f5:36:a9:3f:6f:ae:6e:fb:cc:b9:4c:1b:62:7f:b4:2c:38:29:
         28:16:a5:ab:21:72:0a:01:8c:b3:3b:16:07:ff:92:bd:42:df:
         8c:f6:41:48:b6:80:56:3d:ef:9f:79:bd:93:f3:ce:d4:d0:38:
         bc:53:1c:51:8f:63:a9:a3:0d:09:56:27:b7:80:68:e2:e1:f4:
         c3:49:63:e7:3f:35:17:c0:ea:1b:61:90:a1:b5:40:a1:a8:8e:
         95:95:db:c8:ad:8e:93:9d:34:c7:30:fa:ba:3f:3f:8c:7d:e6:
         71:c3:f1:25:77:f8:04:39:5f:07:ff:c8:48:a6:df:57:7e:44:
         e9:54:bc:3c:18:62:c7:31:dd:73:5c:55:1c:81:cf:be:bb:f1:
         b2:cf:3a:cf:18:22:8f:ad:b6:35:4b:8e:e4:b4:6f:b4:78:e7:
         00:49:d8:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYOcH2btmZpV/kqBOqe6W3AMmUsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZCQzkyNzYyNUYwMjc3NkExNjE2OUFCMDM4QUQ5RUIw
QTQ2ODlFMzAeFw0yNDAzMDUxNzQyMTFaFw0yNTAzMDQxNzQ3MTFaMDMxMTAvBgNV
BAMTKEE2QzA3OTJEODA2MjgzMUFEOEI5OEM2QzFEQTI2OEQ2Q0RBNDYyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWYHipGBb/bOl7uXoLFnFTEbk
/0l4fcB5E0YpPvOcNtjTEFFOOuJG5iuHeS6Zp1wA8WMlRd+SGWXo895SEVIJkN/B
8LTGzLtccKR+PwG6TtUmxAVrpuSKZzW6fJGAWsLdN94FyWWz3jt7MsRjYX34wjuP
3rW9i3A6JkoDzR2qR50MrFKgiT3XqdLH+A2FJ8liMWtFpiWa9HZ8cTCJyY8akGSN
lluIehScu1FzFEggooRJi1xjjGTOWSHinpGoccyqmZ/zjM8e0jJIdc66P6NfGh1x
M0SMyAzl+RyqkdarX9M0OaSo+jDmBNyHUkyR+JDlGVTeKszE2LkqafYpnx+VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpsB5LYBigxrYuYxsHaJo1s2kYr0wHwYDVR0j
BBgwFoAUD7ySdiXwJ3ahYWmrA4rZ6wpGieMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjUzNTIyODdGMzFDMEM2RDc4NDJCMzA3RDM5MUUyRjU5
MTU5ODRDQ0NFRDIzMzQxODE2MzczNDI1RDBGM0Q3LzAvMEZCQzkyNzYyNUYwMjc3
NkExNjE2OUFCMDM4QUQ5RUIwQTQ2ODlFMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkJDOTI3NjI1RjAyNzc2QTE2
MTY5QUIwMzhBRDlFQjBBNDY4OUUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY1MzUyMjg3RjMxQzBDNkQ3ODQyQjMwN0QzOTFFMkY1OTE1OTg0Q0ND
RUQyMzM0MTgxNjM3MzQyNUQwRjNENy8wLzMxMzkzMDJlMzEzMTMyMmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wKDAN
BgkqhkiG9w0BAQsFAAOCAQEAArPJgky+v8hzoRMmqYDo4n75bX47rUCSUEgvTcBG
7qPJh9h2s8dBcXCVS4yb5XuJZaMwC3Wshc6c4GjllPdRaumI3O7kw0i28DEOGiA0
0NgoodfE6PDwayBs9TapP2+ubvvMuUwbYn+0LDgpKBalqyFyCgGMszsWB/+SvULf
jPZBSLaAVj3vn3m9k/PO1NA4vFMcUY9jqaMNCVYnt4Bo4uH0w0lj5z81F8DqG2GQ
obVAoaiOlZXbyK2Ok500xzD6uj8/jH3mccPxJXf4BDlfB//ISKbfV35E6VS8PBhi
xzHdc1xVHIHPvrvxss86zxgij622NUuO5LRvtHjnAEnYNg==
-----END CERTIFICATE-----
Generated at Fri Oct 25 04:12:55 2024 by rpki-client on console-fra.rpki-client.org