Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232332e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3232332e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          js5h6ZCoJdxLh8BZauyfxMtnmK6UwvohB784G6hD9is=
Subject key identifier:   2B:32:FA:51:A3:68:13:AF:63:66:F0:80:E4:27:6D:6C:1C:78:40:5C
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       5887C1F9DEFFECA13014080CF7B2CCCE89565A3D
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232332e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:44 +0000
ROA not before:           Tue 05 Mar 2024 18:06:44 +0000
ROA not after:            Tue 04 Mar 2025 18:11:44 +0000
asID:                     52348
IP address blocks:        190.52.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:c1:f9:de:ff:ec:a1:30:14:08:0c:f7:b2:cc:ce:89:56:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:44 2024 GMT
            Not After : Mar  4 18:11:44 2025 GMT
        Subject: CN=2B32FA51A36813AF6366F080E4276D6C1C78405C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:b2:c1:81:76:25:39:0b:49:3a:2e:fa:e6:
                    e7:c9:71:4e:ad:42:55:6b:80:cc:7b:6f:da:82:94:
                    0c:15:0c:61:f6:9a:e0:1b:dc:7a:40:cc:fa:be:ad:
                    17:9d:bf:c6:c1:3f:17:93:e5:0a:ab:ca:eb:5a:46:
                    e8:84:f5:02:bf:0f:04:a0:38:b8:45:93:c6:61:2c:
                    8b:93:76:2e:e5:cb:09:6c:43:08:90:7a:a9:c8:ac:
                    24:5b:35:13:0a:9b:1c:70:6c:57:75:4d:b0:f6:e7:
                    c6:ca:b4:bf:ab:bf:75:60:b6:e1:0d:ad:65:c5:0c:
                    bb:a5:62:d1:f9:4b:b9:f4:ff:a1:5a:6d:93:20:3b:
                    23:29:06:fd:dc:90:8d:27:6c:80:21:47:37:bf:6f:
                    9d:05:a1:cb:eb:49:6a:b2:54:d6:d8:4b:ae:1f:32:
                    9d:cb:25:c7:39:6a:a1:81:f3:55:f9:f0:8c:f1:73:
                    45:db:d0:90:ee:fd:38:d5:8b:ac:ec:26:78:91:29:
                    f0:bd:43:d1:3e:7f:61:78:cc:c5:ac:58:38:13:2e:
                    8d:af:d7:00:c0:05:fa:f0:84:df:4d:c1:14:6a:a0:
                    e3:42:81:75:f2:e4:20:03:5c:e2:7a:6b:52:82:f2:
                    42:fc:24:88:bc:a3:36:3b:8b:7a:b0:f3:aa:25:e4:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:32:FA:51:A3:68:13:AF:63:66:F0:80:E4:27:6D:6C:1C:78:40:5C
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232332e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:d9:23:b1:af:f4:a3:d7:37:12:24:e7:e7:f0:30:7c:67:
         0d:fa:8b:53:2a:31:01:22:23:75:c5:54:d4:e7:48:ad:c0:36:
         53:c6:8c:54:bf:e5:bc:af:8a:cf:ce:16:b7:8b:a6:bd:e1:0a:
         0c:a4:3d:fe:d2:cb:df:87:48:f1:be:12:e7:a2:8a:b2:26:a1:
         4c:7a:e9:bf:45:2c:0f:22:bb:97:64:d0:fc:aa:73:b6:53:81:
         0f:a7:38:58:e7:53:4f:19:a6:e3:8b:28:bd:15:a8:1c:68:84:
         f2:d6:82:a2:73:c9:5a:c0:df:60:00:57:8a:1a:04:d0:dc:b3:
         ac:fd:e8:49:7e:11:c2:59:72:e7:6e:6b:a8:01:fb:d1:eb:c5:
         20:04:7d:ef:55:dd:ff:8d:61:d2:c7:31:d5:76:53:97:b4:95:
         23:d4:17:4f:5b:bc:77:db:2c:59:fc:99:0d:b2:a1:e7:c3:b4:
         19:19:b7:7a:ac:b1:cb:66:74:0a:92:23:86:61:58:39:7f:ad:
         11:f1:ac:cd:c4:e3:8f:7e:5d:0e:65:b0:8c:ef:9a:5d:ac:f8:
         ce:fd:9b:0b:df:1c:77:86:3f:ca:99:3f:fb:4c:24:3d:d0:14:
         bd:85:91:36:b7:ca:a5:a1:49:f8:b4:3e:da:5c:66:f5:1f:ab:
         1e:59:b3:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWIfB+d7/7KEwFAgM97LMzolWWj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZDM0M4MEU2OUE5QTJGM0U3QkIzRjMzNjQ0MEIzRTg3
QzIxNUYxMzAeFw0yNDAzMDUxODA2NDRaFw0yNTAzMDQxODExNDRaMDMxMTAvBgNV
BAMTKDJCMzJGQTUxQTM2ODEzQUY2MzY2RjA4MEU0Mjc2RDZDMUM3ODQwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafLLBgXYlOQtJOi765ufJcU6t
QlVrgMx7b9qClAwVDGH2muAb3HpAzPq+rRedv8bBPxeT5QqryutaRuiE9QK/DwSg
OLhFk8ZhLIuTdi7lywlsQwiQeqnIrCRbNRMKmxxwbFd1TbD258bKtL+rv3VgtuEN
rWXFDLulYtH5S7n0/6FabZMgOyMpBv3ckI0nbIAhRze/b50FocvrSWqyVNbYS64f
Mp3LJcc5aqGB81X58Izxc0Xb0JDu/TjVi6zsJniRKfC9Q9E+f2F4zMWsWDgTLo2v
1wDABfrwhN9NwRRqoONCgXXy5CADXOJ6a1KC8kL8JIi8ozY7i3qw86ol5Oi1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKzL6UaNoE69jZvCA5CdtbBx4QFwwHwYDVR0j
BBgwFoAUD8PIDmmpovPnuz8zZECz6HwhXxMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDFBQkZGNEFDMjJCMEM1NUIyOEQwNUQ3NjA5QjA0NUQx
QjgxNDM5QzcwOUJDM0ZDODgxRDI5QkNDODc0NEUzLzAvMEZDM0M4MEU2OUE5QTJG
M0U3QkIzRjMzNjQ0MEIzRTg3QzIxNUYxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRkMzQzgwRTY5QTlBMkYzRTdC
QjNGMzM2NDQwQjNFODdDMjE1RjEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQxQUJGRjRBQzIyQjBDNTVCMjhEMDVENzYwOUIwNDVEMUI4MTQzOUM3
MDlCQzNGQzg4MUQyOUJDQzg3NDRFMy8wLzMxMzkzMDJlMzUzMjJlMzIzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzQzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL403zAN
BgkqhkiG9w0BAQsFAAOCAQEAkJvZI7Gv9KPXNxIk5+fwMHxnDfqLUyoxASIjdcVU
1OdIrcA2U8aMVL/lvK+Kz84Wt4umveEKDKQ9/tLL34dI8b4S56KKsiahTHrpv0Us
DyK7l2TQ/KpztlOBD6c4WOdTTxmm44sovRWoHGiE8taConPJWsDfYABXihoE0Nyz
rP3oSX4Rwlly525rqAH70evFIAR971Xd/41h0scx1XZTl7SVI9QXT1u8d9ssWfyZ
DbKh58O0GRm3eqyxy2Z0CpIjhmFYOX+tEfGszcTjj35dDmWwjO+aXaz4zv2bC98c
d4Y/ypk/+0wkPdAUvYWRNrfKpaFJ+LQ+2lxm9R+rHlmznw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org