Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
File:                     3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa (raw, json)
Hash identifier:          lY/0FEZJ4GwSkTssn/tWnNtUxQbskYN1l5/hpktxnpE=
Subject key identifier:   7E:DE:AB:47:D1:8D:A9:76:45:83:8A:61:B8:7C:9E:FC:88:5B:EE:02
Certificate issuer:       /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial:       70DB560605B032859456D36A3C6772A85956B8AD
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
Signing time:             Tue 05 Mar 2024 18:21:53 +0000
ROA not before:           Tue 05 Mar 2024 18:16:53 +0000
ROA not after:            Tue 04 Mar 2025 18:21:53 +0000
asID:                     269905
IP address blocks:        190.112.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:56:06:05:b0:32:85:94:56:d3:6a:3c:67:72:a8:59:56:b8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
        Validity
            Not Before: Mar  5 18:16:53 2024 GMT
            Not After : Mar  4 18:21:53 2025 GMT
        Subject: CN=7EDEAB47D18DA97645838A61B87C9EFC885BEE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:95:5a:df:74:ee:e8:c3:c1:ff:84:5b:7e:
                    6b:89:56:13:da:59:88:6b:a7:7d:c9:44:0d:15:2d:
                    1c:43:ec:a8:dc:24:7f:7d:1b:a4:4b:13:64:39:08:
                    9f:ce:d0:2f:e8:83:9e:26:6b:a5:83:2b:0e:34:3e:
                    96:db:5d:e6:17:be:63:85:74:e4:29:a4:04:f2:2a:
                    66:82:c3:71:31:61:52:5f:c2:50:8c:b1:78:87:f3:
                    d2:0d:e5:a8:7b:3d:03:9c:06:25:a4:5e:29:aa:07:
                    e6:ad:5d:cf:0e:60:29:4d:21:16:1c:73:bc:ec:9c:
                    1d:b3:d0:0c:a6:a6:6e:97:cf:b7:f3:75:25:73:ec:
                    a4:34:23:99:8d:d6:26:57:64:6e:42:29:91:3c:55:
                    bf:43:73:54:c3:b6:e6:4a:26:71:93:23:ee:c7:85:
                    ca:83:df:84:18:d9:fa:58:ef:41:e9:b1:04:8e:12:
                    f5:c3:16:49:f7:97:a0:c5:69:00:e6:e1:03:01:b5:
                    ca:ac:d8:df:8e:62:04:90:1e:f5:24:20:b0:df:a8:
                    0c:b6:92:99:db:14:bc:81:c0:9f:75:07:cd:a7:96:
                    91:71:bd:41:65:0c:ca:d2:1a:e8:97:df:99:dd:c0:
                    1e:e1:6d:c4:0f:bd:d1:6f:af:d5:61:60:ef:09:53:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:AB:47:D1:8D:A9:76:45:83:8A:61:B8:7C:9E:FC:88:5B:EE:02
            X509v3 Authority Key Identifier:
                keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:e4:5f:77:92:5f:6f:78:6d:b5:d4:27:8a:77:65:dc:3b:
         2f:50:7e:02:41:ae:f4:09:9d:e3:eb:ce:3b:48:22:75:03:5a:
         18:58:52:00:39:5f:57:af:b2:cf:1d:13:6a:d2:5c:83:57:e8:
         18:99:97:6a:10:32:d0:53:c5:8b:08:da:e4:48:89:41:fc:9b:
         75:b2:16:8f:06:18:a4:70:3c:df:32:b8:79:a1:fe:81:5e:09:
         7d:dd:b6:8a:16:87:01:4c:8a:83:90:50:e8:a2:fc:55:64:de:
         c5:06:61:46:5d:7f:b9:b9:30:5c:53:d9:9c:19:82:de:ec:0b:
         a3:a8:bb:e3:e6:d6:90:8d:7d:c5:94:3b:35:79:54:4d:2b:24:
         74:9b:ea:4a:78:56:77:73:5e:9b:d8:25:a7:52:51:26:7e:14:
         22:5f:2c:92:10:6e:e5:52:db:cc:78:b7:18:c1:41:2f:c6:39:
         f5:6f:b4:ed:5c:8b:bc:ab:87:84:a3:39:42:8d:e0:7a:ee:63:
         24:32:9b:7d:64:ec:91:7c:02:76:c8:db:b0:d2:d1:1c:1b:56:
         75:eb:fb:10:f6:dc:b9:92:50:40:7e:c2:d4:79:f3:00:c0:31:
         d7:83:54:e9:93:ec:ed:47:8d:ee:d6:45:e2:8e:e3:e0:59:c1:
         f3:b0:06:87
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcNtWBgWwMoWUVtNqPGdyqFlWuK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEQjQ3NUE5QkFCMTA3RUQwRkVFQkJDMUQzQkNDMDNG
MEYxMUM0RDAeFw0yNDAzMDUxODE2NTNaFw0yNTAzMDQxODIxNTNaMDMxMTAvBgNV
BAMTKDdFREVBQjQ3RDE4REE5NzY0NTgzOEE2MUI4N0M5RUZDODg1QkVFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+5Va33Tu6MPB/4RbfmuJVhPa
WYhrp33JRA0VLRxD7KjcJH99G6RLE2Q5CJ/O0C/og54ma6WDKw40PpbbXeYXvmOF
dOQppATyKmaCw3ExYVJfwlCMsXiH89IN5ah7PQOcBiWkXimqB+atXc8OYClNIRYc
c7zsnB2z0Aympm6Xz7fzdSVz7KQ0I5mN1iZXZG5CKZE8Vb9Dc1TDtuZKJnGTI+7H
hcqD34QY2fpY70HpsQSOEvXDFkn3l6DFaQDm4QMBtcqs2N+OYgSQHvUkILDfqAy2
kpnbFLyBwJ91B82nlpFxvUFlDMrSGuiX35ndwB7hbcQPvdFvr9VhYO8JU34JAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUft6rR9GNqXZFg4phuHye/Ihb7gIwHwYDVR0j
BBgwFoAUuttHWpurEH7Q/uu8HTvMA/DxHE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjEwQkY0NEY0QTNDQTU0Qjg4RDRDMTU3NEI2MkMyNjM5
MjM1MDNCQkFCNDJBMDAzMEEyMDRBNjlGMjUzNjA1LzAvQkFEQjQ3NUE5QkFCMTA3
RUQwRkVFQkJDMUQzQkNDMDNGMEYxMUM0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQURCNDc1QTlCQUIxMDdFRDBG
RUVCQkMxRDNCQ0MwM0YwRjExQzRELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIxMEJGNDRGNEEzQ0E1NEI4OEQ0QzE1NzRCNjJDMjYzOTIzNTAzQkJB
QjQyQTAwMzBBMjA0QTY5RjI1MzYwNS8wLzMxMzkzMDJlMzEzMTMyMmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMwMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
cKgwDQYJKoZIhvcNAQELBQADggEBAG0o5F93kl9veG211CeKd2XcOy9QfgJBrvQJ
nePrzjtIInUDWhhYUgA5X1evss8dE2rSXINX6BiZl2oQMtBTxYsI2uRIiUH8m3Wy
Fo8GGKRwPN8yuHmh/oFeCX3dtooWhwFMioOQUOii/FVk3sUGYUZdf7m5MFxT2ZwZ
gt7sC6Oou+Pm1pCNfcWUOzV5VE0rJHSb6kp4VndzXpvYJadSUSZ+FCJfLJIQbuVS
28x4txjBQS/GOfVvtO1ci7yrh4SjOUKN4HruYyQym31k7JF8AnbI27DS0RwbVnXr
+xD23LmSUEB+wtR58wDAMdeDVOmT7O1Hje7WReKO4+BZwfOwBoc=
-----END CERTIFICATE-----
Generated at Wed May 1 10:09:33 2024 by rpki-client on console-ams.rpki-client.org