Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731383036.roa
File:                     3139302e3131332e34302e302f32322d3234203d3e20323731383036.roa (raw, json)
Hash identifier:          AwBN6hlGsJAcfaPCPDx7mhy3jdEsiU+gjUPe14Q8noA=
Subject key identifier:   66:2B:52:25:34:DA:A4:D6:E7:8E:11:C2:64:10:C2:E2:F1:1B:9E:D7
Certificate issuer:       /CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
Certificate serial:       2D6BDC8D114EE279620607897CFBD8EC0D7636C0
Authority key identifier: EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731383036.roa
Signing time:             Tue 05 Mar 2024 17:49:08 +0000
ROA not before:           Tue 05 Mar 2024 17:44:08 +0000
ROA not after:            Tue 04 Mar 2025 17:49:08 +0000
asID:                     271806
IP address blocks:        190.113.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:dc:8d:11:4e:e2:79:62:06:07:89:7c:fb:d8:ec:0d:76:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB14407E522E62A682CCD43856B1CDFBECA4FBF3
        Validity
            Not Before: Mar  5 17:44:08 2024 GMT
            Not After : Mar  4 17:49:08 2025 GMT
        Subject: CN=662B522534DAA4D6E78E11C26410C2E2F11B9ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:12:50:57:2a:4f:20:40:e9:cf:fd:d5:73:
                    34:0f:d7:2e:10:0a:67:1e:30:74:ca:22:9e:3f:ff:
                    e5:a5:53:94:1b:4e:ab:cd:17:43:29:19:0d:bc:87:
                    2b:2b:ee:7a:43:d5:24:77:af:8b:24:42:35:b5:d5:
                    81:ee:98:a9:d7:a6:15:a9:bb:33:d6:63:f0:43:7f:
                    40:46:c6:93:f6:d6:1a:d6:92:90:f2:d0:10:0e:bc:
                    7e:81:99:95:7f:fd:14:7a:b8:f3:a9:0b:55:8e:00:
                    4d:26:4a:a5:a2:02:e9:d1:d5:27:0e:ca:50:30:21:
                    e1:aa:e7:2a:3a:8f:70:09:d8:38:3d:ac:3e:d3:5d:
                    37:09:e4:65:91:46:dd:f0:d0:78:1b:e2:b9:58:fb:
                    33:d2:ac:16:67:3f:21:cf:43:64:03:f9:e1:36:d5:
                    16:c4:23:c7:11:56:40:c3:10:6a:d1:3b:d6:40:ce:
                    44:cd:89:5c:a4:f0:0b:fb:4c:0e:3c:3b:ff:62:72:
                    6a:d9:cb:b4:a9:cc:68:38:0c:2c:c5:a4:9e:25:1c:
                    6c:c1:f6:0c:51:8f:7b:5d:a2:49:65:b6:76:a1:21:
                    5d:7f:14:e5:25:bf:14:18:7c:70:1d:4c:a4:a0:1d:
                    18:fb:31:66:52:66:5c:64:1b:41:c0:3b:df:68:81:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:52:25:34:DA:A4:D6:E7:8E:11:C2:64:10:C2:E2:F1:1B:9E:D7
            X509v3 Authority Key Identifier:
                keyid:EB:14:40:7E:52:2E:62:A6:82:CC:D4:38:56:B1:CD:FB:EC:A4:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB14407E522E62A682CCD43856B1CDFBECA4FBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEDF14542FBB94BA10AD96EEB284E853C10538AD3600FF867208B1070F79BB8B/0/3139302e3131332e34302e302f32322d3234203d3e20323731383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:26:2e:02:99:6f:98:f2:ca:e2:f8:3d:ff:ae:1c:e7:b2:
         8e:7b:fe:be:20:da:37:df:ca:85:39:21:32:6f:3c:3f:52:c9:
         e6:b2:58:ab:6f:40:c6:92:55:2f:80:2b:bb:4d:6e:95:5b:97:
         59:a5:3b:ec:a4:e3:31:56:8f:68:f3:b4:36:cc:85:ed:3d:70:
         f3:39:2a:f0:b8:41:21:2a:d4:25:ad:87:ce:e8:92:82:e4:b9:
         e6:93:bd:47:90:c7:b0:98:46:ff:69:03:5f:df:a1:7c:4b:33:
         30:e3:d4:8c:15:ed:2f:74:bb:0d:a2:8b:92:b4:61:2b:41:a7:
         c5:7e:9f:69:3b:17:55:91:f5:5f:15:a5:c1:fc:9b:91:63:88:
         06:91:5b:3c:a4:90:52:92:12:1d:e0:f5:b4:f1:7b:98:71:58:
         ae:ff:bb:29:8c:ab:5f:da:17:49:32:d8:3b:f6:3b:fc:23:23:
         36:19:35:2f:1e:ab:05:83:ab:ea:34:d0:6b:d6:64:12:58:61:
         ea:1f:e7:ae:6b:3e:93:43:69:03:0d:2e:9f:cc:7e:2a:2d:97:
         6f:18:3f:e7:d9:5e:90:59:8c:92:03:a7:d5:07:b2:34:d5:12:
         89:74:b9:06:73:71:bd:45:04:59:59:6e:2b:3f:a1:d3:7c:8a:
         b5:34:62:1a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULWvcjRFO4nliBgeJfPvY7A12NsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIxNDQwN0U1MjJFNjJBNjgyQ0NENDM4NTZCMUNERkJF
Q0E0RkJGMzAeFw0yNDAzMDUxNzQ0MDhaFw0yNTAzMDQxNzQ5MDhaMDMxMTAvBgNV
BAMTKDY2MkI1MjI1MzREQUE0RDZFNzhFMTFDMjY0MTBDMkUyRjExQjlFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhhJQVypPIEDpz/3VczQP1y4Q
CmceMHTKIp4//+WlU5QbTqvNF0MpGQ28hysr7npD1SR3r4skQjW11YHumKnXphWp
uzPWY/BDf0BGxpP21hrWkpDy0BAOvH6BmZV//RR6uPOpC1WOAE0mSqWiAunR1ScO
ylAwIeGq5yo6j3AJ2Dg9rD7TXTcJ5GWRRt3w0Hgb4rlY+zPSrBZnPyHPQ2QD+eE2
1RbEI8cRVkDDEGrRO9ZAzkTNiVyk8Av7TA48O/9icmrZy7SpzGg4DCzFpJ4lHGzB
9gxRj3tdoklltnahIV1/FOUlvxQYfHAdTKSgHRj7MWZSZlxkG0HAO99ogUtjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZitSJTTapNbnjhHCZBDC4vEbntcwHwYDVR0j
BBgwFoAU6xRAflIuYqaCzNQ4VrHN++yk+/MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRURGMTQ1NDJGQkI5NEJBMTBBRDk2RUVCMjg0RTg1M0Mx
MDUzOEFEMzYwMEZGODY3MjA4QjEwNzBGNzlCQjhCLzAvRUIxNDQwN0U1MjJFNjJB
NjgyQ0NENDM4NTZCMUNERkJFQ0E0RkJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjE0NDA3RTUyMkU2MkE2ODJD
Q0Q0Mzg1NkIxQ0RGQkVDQTRGQkYzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkVERjE0NTQyRkJCOTRCQTEwQUQ5NkVFQjI4NEU4NTNDMTA1MzhBRDM2
MDBGRjg2NzIwOEIxMDcwRjc5QkI4Qi8wLzMxMzkzMDJlMzEzMTMzMmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnEo
MA0GCSqGSIb3DQEBCwUAA4IBAQAACiYuAplvmPLK4vg9/64c57KOe/6+INo338qF
OSEybzw/Usnmslirb0DGklUvgCu7TW6VW5dZpTvspOMxVo9o87Q2zIXtPXDzOSrw
uEEhKtQlrYfO6JKC5Lnmk71HkMewmEb/aQNf36F8SzMw49SMFe0vdLsNoouStGEr
QafFfp9pOxdVkfVfFaXB/JuRY4gGkVs8pJBSkhId4PW08XuYcViu/7spjKtf2hdJ
Mtg79jv8IyM2GTUvHqsFg6vqNNBr1mQSWGHqH+euaz6TQ2kDDS6fzH4qLZdvGD/n
2V6QWYySA6fVB7I01RKJdLkGc3G9RQRZWW4rP6HTfIq1NGIa
-----END CERTIFICATE-----
Generated at Thu May 9 10:08:08 2024 by rpki-client on console-ams.rpki-client.org