Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa
File:                     3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa (raw, json)
Hash identifier:          Tx572LM42NlmTboMx7iQ5hj4ueGd9RjYgPVGjXmmwCY=
Subject key identifier:   2D:12:8D:6E:17:7E:EC:60:D4:CF:7A:CD:8F:9D:A1:0B:F1:9C:B2:B3
Certificate issuer:       /CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
Certificate serial:       2FE4E34D3E78A1644C2088C328AADD21FC39A270
Authority key identifier: 77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa
Signing time:             Wed 14 Aug 2024 15:05:00 +0000
ROA not before:           Wed 14 Aug 2024 15:00:00 +0000
ROA not after:            Wed 13 Aug 2025 15:05:00 +0000
asID:                     52409
IP address blocks:        190.120.176.0/20 maxlen: 28

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e4:e3:4d:3e:78:a1:64:4c:20:88:c3:28:aa:dd:21:fc:39:a2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
        Validity
            Not Before: Aug 14 15:00:00 2024 GMT
            Not After : Aug 13 15:05:00 2025 GMT
        Subject: CN=2D128D6E177EEC60D4CF7ACD8F9DA10BF19CB2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:b9:c6:53:74:9a:b2:e9:12:39:4c:95:9f:
                    80:14:cc:75:1d:ec:ab:01:b3:be:67:7f:11:83:0e:
                    07:ca:13:35:49:64:c0:1a:6d:f6:bb:32:37:ac:77:
                    f5:f7:96:8a:07:9e:24:b6:53:c7:ed:90:13:b4:04:
                    50:f4:05:18:0b:21:d6:69:00:7c:cd:cd:f1:9b:30:
                    a5:12:88:d9:6d:02:c2:a0:64:40:24:65:89:b2:da:
                    48:33:99:51:f9:fe:13:6d:bf:ab:e2:2c:24:16:f8:
                    6a:07:9e:ea:2a:68:08:37:c8:26:5d:89:0f:59:70:
                    4c:41:bc:d3:a1:54:60:cf:75:9d:ea:73:c3:c1:3a:
                    bf:c1:fa:53:9b:cd:62:7d:a9:57:35:17:ba:f1:68:
                    79:9e:99:57:c4:20:78:a6:e6:fb:7e:6e:af:44:7b:
                    a9:28:00:4f:2f:23:a5:ff:25:d1:6e:e7:d6:57:1c:
                    0c:ef:c3:3b:80:f6:6b:8c:99:e8:83:d4:02:9a:2d:
                    19:84:38:3f:11:5d:59:5a:66:c3:9e:b7:ad:6b:c3:
                    47:25:a9:5b:85:a6:87:b4:99:cd:1e:e5:6e:96:fd:
                    5e:9e:c3:67:03:fc:6f:56:d5:f4:89:20:67:60:5f:
                    66:c7:f2:ea:4c:7c:b0:d1:04:c3:b9:60:30:de:68:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:8D:6E:17:7E:EC:60:D4:CF:7A:CD:8F:9D:A1:0B:F1:9C:B2:B3
            X509v3 Authority Key Identifier:
                keyid:77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3238203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:68:82:6d:f1:45:7e:7d:9e:a3:54:0b:61:af:08:4f:87:
         9f:09:40:57:1d:88:91:9d:1d:b8:82:67:60:a4:64:23:61:b2:
         44:c9:2b:f8:4c:ad:01:c7:7f:c7:fb:9a:bf:fd:7f:24:66:ee:
         c6:9e:33:c7:e2:44:1f:a1:82:48:22:95:c8:39:ae:a0:1b:bf:
         2c:50:95:6c:78:69:dc:2f:5e:c4:47:2d:eb:c6:14:1c:82:1c:
         15:cb:a1:1e:71:75:dc:b3:5f:c8:b3:4c:8c:a0:7a:fe:46:75:
         99:03:ea:b2:4a:ab:a8:93:20:b1:cd:74:3d:3b:ba:e3:97:ff:
         65:c8:62:61:29:b7:34:84:f1:01:9e:03:3f:72:97:2a:15:83:
         c5:e2:09:e4:74:0b:51:f6:77:7d:b9:06:58:5d:9e:ee:c1:91:
         32:54:44:a5:0e:ae:d3:fb:d5:f9:fe:20:6c:ea:25:2b:f9:3e:
         a1:06:e4:fe:da:c0:0e:57:7a:91:29:96:65:6d:0b:da:50:38:
         75:68:a8:9f:74:21:11:4c:8d:8b:44:de:80:da:8f:ec:76:c3:
         92:07:08:d3:e7:c3:5b:ac:ea:1b:66:34:1a:97:0a:fa:51:17:
         fc:3f:85:12:9d:58:43:f8:07:e2:ee:01:20:fa:63:06:57:cd:
         5e:14:66:dc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL+TjTT54oWRMIIjDKKrdIfw5onAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxQUYxNTQ2Njc0QTVBRjBFODQwQUI0NzUxM0Q0RTVB
QjU5ODIyRjAeFw0yNDA4MTQxNTAwMDBaFw0yNTA4MTMxNTA1MDBaMDMxMTAvBgNV
BAMTKDJEMTI4RDZFMTc3RUVDNjBENENGN0FDRDhGOURBMTBCRjE5Q0IyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBLnGU3SasukSOUyVn4AUzHUd
7KsBs75nfxGDDgfKEzVJZMAabfa7Mjesd/X3looHniS2U8ftkBO0BFD0BRgLIdZp
AHzNzfGbMKUSiNltAsKgZEAkZYmy2kgzmVH5/hNtv6viLCQW+GoHnuoqaAg3yCZd
iQ9ZcExBvNOhVGDPdZ3qc8PBOr/B+lObzWJ9qVc1F7rxaHmemVfEIHim5vt+bq9E
e6koAE8vI6X/JdFu59ZXHAzvwzuA9muMmeiD1AKaLRmEOD8RXVlaZsOet61rw0cl
qVuFpoe0mc0e5W6W/V6ew2cD/G9W1fSJIGdgX2bH8upMfLDRBMO5YDDeaE+dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULRKNbhd+7GDUz3rNj52hC/GcsrMwHwYDVR0j
BBgwFoAUdxrxVGZ0pa8OhAq0dRPU5atZgi8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNkI4MjVFODg3QUI0RTUxMDU5OTZEMEY2QzNFQkIyOURE
RkU1NkQ4NkYwRUNGQUUyMjdGOUFERjY1N0JCMUFBLzAvNzcxQUYxNTQ2Njc0QTVB
RjBFODQwQUI0NzUxM0Q0RTVBQjU5ODIyRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzFBRjE1NDY2NzRBNUFGMEU4
NDBBQjQ3NTEzRDRFNUFCNTk4MjJGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjZCODI1RTg4N0FCNEU1MTA1OTk2RDBGNkMzRUJCMjlEREZFNTZEODZG
MEVDRkFFMjI3RjlBREY2NTdCQjFBQS8wLzMxMzkzMDJlMzEzMjMwMmUzMTM3MzYy
ZTMwMmYzMjMwMmQzMjM4MjAzZDNlMjAzNTMyMzQzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvniw
MA0GCSqGSIb3DQEBCwUAA4IBAQAxjmiCbfFFfn2eo1QLYa8IT4efCUBXHYiRnR24
gmdgpGQjYbJEySv4TK0Bx3/H+5q//X8kZu7GnjPH4kQfoYJIIpXIOa6gG78sUJVs
eGncL17ERy3rxhQcghwVy6EecXXcs1/Is0yMoHr+RnWZA+qySquokyCxzXQ9O7rj
l/9lyGJhKbc0hPEBngM/cpcqFYPF4gnkdAtR9nd9uQZYXZ7uwZEyVESlDq7T+9X5
/iBs6iUr+T6hBuT+2sAOV3qRKZZlbQvaUDh1aKifdCERTI2LRN6A2o/sdsOSBwjT
58NbrOobZjQalwr6URf8P4USnVhD+Afi7gEg+mMGV81eFGbc
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:03 2024 by rpki-client on console-ams.rpki-client.org