Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134362e302f32342d3234203d3e203532333534.roa
File:                     3139302e3132322e3134362e302f32342d3234203d3e203532333534.roa (raw, json)
Hash identifier:          4G9Z0LYEY1wxLllgDessLG02HkDbKka2adqns1h2jYA=
Subject key identifier:   A0:A1:CD:D5:96:37:06:82:F3:28:40:6D:BB:1A:B1:A8:B7:18:CD:00
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       126F28CA8C14C09A2C5C8A5793007A3C7228CC3D
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134362e302f32342d3234203d3e203532333534.roa
Signing time:             Tue 05 Mar 2024 18:09:59 +0000
ROA not before:           Tue 05 Mar 2024 18:04:59 +0000
ROA not after:            Tue 04 Mar 2025 18:09:59 +0000
asID:                     52354
IP address blocks:        190.122.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6f:28:ca:8c:14:c0:9a:2c:5c:8a:57:93:00:7a:3c:72:28:cc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  5 18:04:59 2024 GMT
            Not After : Mar  4 18:09:59 2025 GMT
        Subject: CN=A0A1CDD596370682F328406DBB1AB1A8B718CD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:ae:69:77:3c:10:72:cb:3e:8a:c5:e4:7c:
                    76:57:1c:f0:aa:f3:25:d1:20:a3:9a:68:60:7b:29:
                    e4:d7:d8:6b:a0:14:96:ba:e9:c6:f8:8e:28:09:35:
                    2b:3e:76:17:31:1c:b8:0f:81:ec:e4:43:80:28:b7:
                    1d:d0:6c:00:d5:f1:6f:a7:01:c4:4c:b6:66:8f:67:
                    58:b8:7f:d0:ac:2f:5b:df:93:44:c2:92:91:49:5d:
                    49:82:f7:51:17:21:bc:90:ea:82:b2:75:f6:ca:96:
                    5d:5e:14:9c:bd:39:0f:5e:00:80:96:52:f5:fa:4b:
                    b4:22:e2:58:08:ca:6e:c5:1f:3f:26:ab:ec:b4:db:
                    0b:82:b9:d1:95:07:55:52:7d:a8:4f:50:03:4d:b7:
                    c2:c6:68:5a:50:12:66:36:40:ab:44:c7:7e:4f:43:
                    c8:bd:f2:06:85:c2:5b:f3:2b:9d:3b:42:db:43:bc:
                    c4:29:bc:98:b4:fb:dc:f5:e1:bf:c7:37:0b:b7:56:
                    fd:14:ae:91:85:73:95:cb:52:e8:d2:45:61:a0:91:
                    f3:63:34:63:e4:cd:c2:c4:94:99:79:1f:b6:dc:bb:
                    07:f4:df:32:51:81:99:a6:c2:7e:bd:58:8e:26:a3:
                    a2:44:db:28:13:0a:a1:b7:73:de:2c:a1:38:e2:3e:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A1:CD:D5:96:37:06:82:F3:28:40:6D:BB:1A:B1:A8:B7:18:CD:00
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3134362e302f32342d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:34:ae:f6:a3:18:b7:8f:94:1d:5f:b4:7e:d5:25:4a:94:63:
         29:65:7d:5f:20:46:04:f8:e6:77:78:87:86:1a:1d:84:31:31:
         dc:9a:e7:b3:b0:87:7f:32:6a:63:5e:dd:e6:cf:23:67:14:70:
         7d:07:b4:26:f5:62:fd:46:a7:ce:08:7d:6b:76:15:99:ed:14:
         a0:ed:3f:ab:c2:20:c9:10:ea:0d:2b:c3:3d:df:87:af:22:11:
         5f:52:8d:81:0f:ff:72:1b:d9:c3:f9:a7:38:3e:fb:71:9f:4d:
         88:c4:05:78:04:9a:4d:54:51:99:42:41:bc:2b:34:74:d5:4c:
         50:26:7e:52:05:f8:d8:09:e3:f5:cb:be:01:6a:02:3b:37:20:
         16:2b:90:21:64:2c:66:2b:9a:03:08:05:22:9e:ec:27:3e:e7:
         12:3d:bf:13:52:01:40:f8:32:7d:05:12:02:09:a4:0d:92:af:
         6e:18:38:ed:0a:f2:1b:5a:80:ea:22:c7:ef:42:40:a4:8d:f7:
         1e:79:00:4c:63:fb:ea:52:14:e1:ee:ef:33:72:b4:2c:a9:2a:
         ad:42:62:6b:ec:e1:2f:ea:29:cb:21:59:a7:64:c7:f5:b0:4e:
         da:cd:2d:65:be:fc:29:d7:c8:9a:85:41:99:a4:d9:ed:81:40:
         73:6b:22:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEm8oyowUwJosXIpXkwB6PHIozD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1ODNBMDUyNTYzREY4MTgwQkU0NTI5NUQ2N0ZBQTVB
M0ExODk5NjAeFw0yNDAzMDUxODA0NTlaFw0yNTAzMDQxODA5NTlaMDMxMTAvBgNV
BAMTKEEwQTFDREQ1OTYzNzA2ODJGMzI4NDA2REJCMUFCMUE4QjcxOENEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGa5pdzwQcss+isXkfHZXHPCq
8yXRIKOaaGB7KeTX2GugFJa66cb4jigJNSs+dhcxHLgPgezkQ4Aotx3QbADV8W+n
AcRMtmaPZ1i4f9CsL1vfk0TCkpFJXUmC91EXIbyQ6oKydfbKll1eFJy9OQ9eAICW
UvX6S7Qi4lgIym7FHz8mq+y02wuCudGVB1VSfahPUANNt8LGaFpQEmY2QKtEx35P
Q8i98gaFwlvzK507QttDvMQpvJi0+9z14b/HNwu3Vv0UrpGFc5XLUujSRWGgkfNj
NGPkzcLElJl5H7bcuwf03zJRgZmmwn69WI4mo6JE2ygTCqG3c94soTjiPvIdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoKHN1ZY3BoLzKEBtuxqxqLcYzQAwHwYDVR0j
BBgwFoAUNVg6BSVj34GAvkUpXWf6paOhiZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA1NTY5RDIzMEZBMzgyM0FBNkJEM0Q0NTBEQUMyQTI1
M0VGRTBCRDY5NkQ3NEJDQzFFRjcyRUYwN0MwRjdCLzAvMzU1ODNBMDUyNTYzREY4
MTgwQkU0NTI5NUQ2N0ZBQTVBM0ExODk5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTU4M0EwNTI1NjNERjgxODBC
RTQ1Mjk1RDY3RkFBNUEzQTE4OTk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwNTU2OUQyMzBGQTM4MjNBQTZCRDNENDUwREFDMkEyNTNFRkUwQkQ2
OTZENzRCQ0MxRUY3MkVGMDdDMEY3Qi8wLzMxMzkzMDJlMzEzMjMyMmUzMTM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnqS
MA0GCSqGSIb3DQEBCwUAA4IBAQCSNK72oxi3j5QdX7R+1SVKlGMpZX1fIEYE+OZ3
eIeGGh2EMTHcmuezsId/MmpjXt3mzyNnFHB9B7Qm9WL9RqfOCH1rdhWZ7RSg7T+r
wiDJEOoNK8M934evIhFfUo2BD/9yG9nD+ac4Pvtxn02IxAV4BJpNVFGZQkG8KzR0
1UxQJn5SBfjYCeP1y74BagI7NyAWK5AhZCxmK5oDCAUinuwnPucSPb8TUgFA+DJ9
BRICCaQNkq9uGDjtCvIbWoDqIsfvQkCkjfceeQBMY/vqUhTh7u8zcrQsqSqtQmJr
7OEv6inLIVmnZMf1sE7azS1lvvwp18iahUGZpNntgUBzayJY
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:30 2024 by rpki-client on console-fra.rpki-client.org