Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa
File:                     3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa (raw, json)
Hash identifier:          nvX/5iKiM6AM3wl/yR3hYeh7obvRjUHLBMrxAVh4ddI=
Subject key identifier:   51:CF:AB:AB:BC:70:F1:E2:15:7B:97:1B:48:32:D4:4F:BE:07:62:10
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       70079AC2A752016E1C2279F21FD097F6F50FE966
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa
Signing time:             Tue 05 Mar 2024 18:10:00 +0000
ROA not before:           Tue 05 Mar 2024 18:05:00 +0000
ROA not after:            Tue 04 Mar 2025 18:10:00 +0000
asID:                     52354
IP address blocks:        190.122.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:07:9a:c2:a7:52:01:6e:1c:22:79:f2:1f:d0:97:f6:f5:0f:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  5 18:05:00 2024 GMT
            Not After : Mar  4 18:10:00 2025 GMT
        Subject: CN=51CFABABBC70F1E2157B971B4832D44FBE076210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:82:42:8a:a2:eb:7f:33:20:0e:50:8b:cd:
                    9a:46:20:2f:e7:aa:fa:d9:ef:8d:a5:4b:90:4b:9a:
                    b6:b5:33:9a:62:92:60:4c:fe:64:ae:62:b5:3c:f8:
                    24:04:bf:ec:d4:46:da:f6:d5:cf:33:b9:66:a3:fb:
                    59:74:3e:cd:87:a0:ae:76:c6:65:1f:6c:4f:31:c1:
                    b3:86:66:2e:90:e3:07:c7:0e:46:66:91:13:d1:18:
                    76:e7:37:5b:34:6f:65:e8:7e:04:7a:b5:03:7b:f2:
                    b6:b6:e6:60:35:ec:8d:e5:a7:30:a2:98:4e:72:14:
                    35:cc:8e:1a:24:f4:85:47:c5:b2:e9:12:d5:d6:dc:
                    66:31:20:f5:8e:a6:97:9e:58:22:5b:37:7b:48:04:
                    40:4c:76:a2:ae:16:fd:0c:d6:75:bc:f1:c5:b9:45:
                    d2:e1:82:03:61:35:d8:2c:d4:10:a5:cd:09:fc:0a:
                    dc:f5:75:2a:ec:b6:00:e4:1a:60:9b:39:eb:12:e8:
                    99:c5:6b:4d:fd:0f:aa:f7:e4:e5:9d:c6:2e:07:2c:
                    04:bf:9a:fa:7a:cc:34:15:16:e8:64:82:27:34:13:
                    ad:27:9a:cd:c3:52:37:4f:01:fe:98:26:99:1e:8b:
                    2d:e1:ea:55:f4:c3:dc:aa:3d:ae:80:5e:75:c5:55:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CF:AB:AB:BC:70:F1:E2:15:7B:97:1B:48:32:D4:4F:BE:07:62:10
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:82:94:d0:91:0f:ab:87:7c:17:38:9f:a1:5b:2d:fb:dc:
         12:34:ca:4b:02:0f:8a:5c:98:b1:5e:83:51:1b:ea:fb:eb:2b:
         b1:e3:6b:6c:e1:b7:0c:7d:57:3c:d2:43:98:63:a5:cd:99:01:
         0c:1b:55:49:b7:d1:8c:48:f8:6e:4e:69:fd:25:6e:1a:f8:23:
         a7:8f:84:15:0c:8e:e1:42:eb:be:e1:e8:2b:84:74:74:73:70:
         ac:b2:d2:f3:37:7e:ac:38:9d:1e:ba:80:4d:85:e9:7a:f6:97:
         56:df:75:27:bc:29:0f:5f:d2:88:32:64:6f:d4:1c:6b:df:15:
         92:77:5f:e7:2c:63:6a:4a:c0:77:62:55:ab:e9:d8:f4:e0:9d:
         7e:71:40:dc:41:d7:8c:00:77:13:27:81:02:ad:91:9e:fd:aa:
         6d:03:73:05:0f:fa:91:f7:99:e3:ea:98:c3:77:4d:17:c9:19:
         66:52:7c:44:ea:03:b0:a1:a9:08:16:cb:e2:8c:52:9b:85:3c:
         01:32:83:44:93:84:b4:98:9a:d9:be:58:3f:8b:d7:62:ff:de:
         27:8e:c4:71:85:0f:fa:d8:9c:72:0e:d8:5a:66:98:40:7c:a5:
         68:fb:c9:fb:3a:c2:d8:62:62:08:49:b9:c3:31:b5:0a:8e:83:
         73:b8:8b:08
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcAeawqdSAW4cInnyH9CX9vUP6WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1ODNBMDUyNTYzREY4MTgwQkU0NTI5NUQ2N0ZBQTVB
M0ExODk5NjAeFw0yNDAzMDUxODA1MDBaFw0yNTAzMDQxODEwMDBaMDMxMTAvBgNV
BAMTKDUxQ0ZBQkFCQkM3MEYxRTIxNTdCOTcxQjQ4MzJENDRGQkUwNzYyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLYJCiqLrfzMgDlCLzZpGIC/n
qvrZ742lS5BLmra1M5pikmBM/mSuYrU8+CQEv+zURtr21c8zuWaj+1l0Ps2HoK52
xmUfbE8xwbOGZi6Q4wfHDkZmkRPRGHbnN1s0b2XofgR6tQN78ra25mA17I3lpzCi
mE5yFDXMjhok9IVHxbLpEtXW3GYxIPWOppeeWCJbN3tIBEBMdqKuFv0M1nW88cW5
RdLhggNhNdgs1BClzQn8Ctz1dSrstgDkGmCbOesS6JnFa039D6r35OWdxi4HLAS/
mvp6zDQVFuhkgic0E60nms3DUjdPAf6YJpkeiy3h6lX0w9yqPa6AXnXFVWD3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUc+rq7xw8eIVe5cbSDLUT74HYhAwHwYDVR0j
BBgwFoAUNVg6BSVj34GAvkUpXWf6paOhiZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA1NTY5RDIzMEZBMzgyM0FBNkJEM0Q0NTBEQUMyQTI1
M0VGRTBCRDY5NkQ3NEJDQzFFRjcyRUYwN0MwRjdCLzAvMzU1ODNBMDUyNTYzREY4
MTgwQkU0NTI5NUQ2N0ZBQTVBM0ExODk5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTU4M0EwNTI1NjNERjgxODBC
RTQ1Mjk1RDY3RkFBNUEzQTE4OTk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwNTU2OUQyMzBGQTM4MjNBQTZCRDNENDUwREFDMkEyNTNFRkUwQkQ2
OTZENzRCQ0MxRUY3MkVGMDdDMEY3Qi8wLzMxMzkzMDJlMzEzMjMyMmUzMTM1MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMyMzMzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvnqW
MA0GCSqGSIb3DQEBCwUAA4IBAQAs+4KU0JEPq4d8FzifoVst+9wSNMpLAg+KXJix
XoNRG+r76yux42ts4bcMfVc80kOYY6XNmQEMG1VJt9GMSPhuTmn9JW4a+COnj4QV
DI7hQuu+4egrhHR0c3CsstLzN36sOJ0euoBNhel69pdW33UnvCkPX9KIMmRv1Bxr
3xWSd1/nLGNqSsB3YlWr6dj04J1+cUDcQdeMAHcTJ4ECrZGe/aptA3MFD/qR95nj
6pjDd00XyRlmUnxE6gOwoakIFsvijFKbhTwBMoNEk4S0mJrZvlg/i9di/94njsRx
hQ/62JxyDthaZphAfKVo+8n7OsLYYmIISbnDMbUKjoNzuIsI
-----END CERTIFICATE-----
Generated at Sat May 4 02:34:30 2024 by rpki-client on console-fra.rpki-client.org