Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa
File:                     3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa (raw, json)
Hash identifier:          PYKo35FVE2g4zrxUKfx90KTgZeNFK58Azvw1MnM1ga8=
Subject key identifier:   23:EE:CD:7B:40:29:F3:E9:9B:9D:6A:2B:6B:44:1F:13:B5:43:CD:04
Certificate issuer:       /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial:       358F286501ACF1F8163A36BE0700687CCC593D1B
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa
Signing time:             Tue 05 Mar 2024 17:51:21 +0000
ROA not before:           Tue 05 Mar 2024 17:46:21 +0000
ROA not after:            Tue 04 Mar 2025 17:51:21 +0000
asID:                     271813
IP address blocks:        190.123.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:28:65:01:ac:f1:f8:16:3a:36:be:07:00:68:7c:cc:59:3d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Validity
            Not Before: Mar  5 17:46:21 2024 GMT
            Not After : Mar  4 17:51:21 2025 GMT
        Subject: CN=23EECD7B4029F3E99B9D6A2B6B441F13B543CD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:88:6e:56:49:d0:46:dd:2e:05:02:cb:b0:
                    9a:bc:9e:34:26:2a:f5:0f:86:01:3b:d1:d6:ea:b7:
                    5b:64:f6:9b:e7:ec:89:c3:7e:ea:d8:07:26:1a:4e:
                    66:6a:01:5c:8a:9b:78:2d:76:be:a2:ee:5f:25:5e:
                    4e:9d:f7:06:e5:8d:dd:6f:46:06:0c:a3:53:6f:11:
                    31:a9:e5:1f:20:7d:ec:e6:f2:a6:31:f0:60:e8:0c:
                    23:5d:e4:27:c8:1b:2b:6f:43:bc:74:0f:b5:e5:d6:
                    b7:2e:32:19:4b:d1:16:50:90:12:d9:32:99:8a:60:
                    ee:87:02:bc:fc:9c:b0:b1:c6:98:db:2f:f4:ee:5c:
                    82:56:67:45:14:02:d0:2f:61:54:4b:aa:24:88:5e:
                    0d:03:b6:24:96:93:11:d4:c0:dd:fd:e9:fc:f4:8b:
                    25:43:0f:98:92:33:bf:79:68:d7:82:83:b5:55:63:
                    db:a1:4c:8a:bf:19:5f:3b:7d:99:81:43:ee:ee:04:
                    38:dc:64:19:d5:af:e9:a8:c9:7a:d2:08:4a:56:f0:
                    52:dd:95:c6:8f:c7:06:03:96:3d:d9:57:b5:97:be:
                    77:e8:2b:92:21:b4:7f:b8:4b:bb:f5:5a:a0:65:b3:
                    62:92:83:68:53:b7:ef:74:7a:5e:a7:55:f4:3b:4e:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:CD:7B:40:29:F3:E9:9B:9D:6A:2B:6B:44:1F:13:B5:43:CD:04
            X509v3 Authority Key Identifier:
                keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:be:fe:1b:eb:50:07:63:17:fe:f5:55:1b:56:9d:60:e5:7d:
         fe:c0:8f:9d:7e:22:c8:e7:88:c7:4e:67:8d:7f:10:44:b9:8f:
         68:cb:66:2f:31:70:cc:2f:57:a8:7f:b9:96:2f:5d:a9:6b:ed:
         70:e8:e3:38:ad:dc:88:ab:c6:df:24:79:80:01:c0:7c:0f:db:
         48:42:03:ba:72:29:22:83:71:2a:63:21:c0:a6:8b:cc:4e:57:
         94:d2:39:96:3b:d7:8e:55:80:38:e4:40:8c:6f:74:1b:23:32:
         52:e8:6d:44:cf:0d:70:3c:3f:ca:06:85:10:3d:8d:eb:89:0e:
         9b:56:47:24:60:78:1c:24:48:4c:82:3b:57:3d:c8:1b:79:4d:
         99:93:56:f3:f1:4c:48:f6:f7:bf:b4:52:58:48:ab:bd:90:8b:
         8d:5a:d9:87:c8:88:2e:7a:b2:b7:02:2b:57:58:d9:e1:bd:b9:
         38:c1:78:55:1d:95:56:17:4f:c3:45:eb:de:2b:9d:64:01:46:
         7b:e3:b5:51:ff:d7:d6:ec:75:a1:f6:aa:e5:ce:8e:1f:12:0f:
         cd:fc:51:cf:bb:c1:8e:28:24:99:b6:c8:35:61:11:a0:d8:cc:
         1c:7d:ab:08:d9:fc:95:fa:44:8b:49:b8:11:ec:07:e3:a3:f9:
         20:95:c1:3d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNY8oZQGs8fgWOja+BwBofMxZPRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIxOTM1RURENjdFOUMxODE2RTcwM0YxREFCRkZCRjg2
Q0ZBMUI3ODAeFw0yNDAzMDUxNzQ2MjFaFw0yNTAzMDQxNzUxMjFaMDMxMTAvBgNV
BAMTKDIzRUVDRDdCNDAyOUYzRTk5QjlENkEyQjZCNDQxRjEzQjU0M0NEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKYhuVknQRt0uBQLLsJq8njQm
KvUPhgE70dbqt1tk9pvn7InDfurYByYaTmZqAVyKm3gtdr6i7l8lXk6d9wbljd1v
RgYMo1NvETGp5R8gfezm8qYx8GDoDCNd5CfIGytvQ7x0D7Xl1rcuMhlL0RZQkBLZ
MpmKYO6HArz8nLCxxpjbL/TuXIJWZ0UUAtAvYVRLqiSIXg0DtiSWkxHUwN396fz0
iyVDD5iSM795aNeCg7VVY9uhTIq/GV87fZmBQ+7uBDjcZBnVr+moyXrSCEpW8FLd
lcaPxwYDlj3ZV7WXvnfoK5IhtH+4S7v1WqBls2KSg2hTt+90el6nVfQ7TnlvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUI+7Ne0Ap8+mbnWora0QfE7VDzQQwHwYDVR0j
BBgwFoAUkhk17dZ+nBgW5wPx2r/7+Gz6G3gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzgzNThBNDQ2N0VFQzNDMERBN0NGMkU1RDNGM0E0MkIy
QTIyQjNENEFCNjMxQThENjlFOUVFMDg4NEYxQzAzLzAvOTIxOTM1RURENjdFOUMx
ODE2RTcwM0YxREFCRkZCRjg2Q0ZBMUI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjE5MzVFREQ2N0U5QzE4MTZF
NzAzRjFEQUJGRkJGODZDRkExQjc4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM4MzU4QTQ0NjdFRUMzQzBEQTdDRjJFNUQzRjNBNDJCMkEyMkIzRDRB
QjYzMUE4RDY5RTlFRTA4ODRGMUMwMy8wLzMxMzkzMDJlMzEzMjMzMmUzNjM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzgzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvntC
MA0GCSqGSIb3DQEBCwUAA4IBAQAxvv4b61AHYxf+9VUbVp1g5X3+wI+dfiLI54jH
TmeNfxBEuY9oy2YvMXDML1eof7mWL12pa+1w6OM4rdyIq8bfJHmAAcB8D9tIQgO6
cikig3EqYyHApovMTleU0jmWO9eOVYA45ECMb3QbIzJS6G1Ezw1wPD/KBoUQPY3r
iQ6bVkckYHgcJEhMgjtXPcgbeU2Zk1bz8UxI9ve/tFJYSKu9kIuNWtmHyIguerK3
AitXWNnhvbk4wXhVHZVWF0/DReveK51kAUZ747VR/9fW7HWh9qrlzo4fEg/N/FHP
u8GOKCSZtsg1YRGg2MwcfasI2fyV+kSLSbgR7Afjo/kglcE9
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:36 2024 by rpki-client on console-fra.rpki-client.org