Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          sOw3isjREfxAtvKr/+3EEr9odgqo3+dcE2qS+KeHfF4=
Subject key identifier:   62:93:39:04:8D:9B:BE:3B:4B:46:2C:12:08:FA:47:36:AC:1A:74:40
Certificate issuer:       /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Certificate serial:       497F5F89F6D487B90A69D51CC688AB45786538F4
Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:23:08 +0000
ROA not before:           Tue 05 Mar 2024 18:18:08 +0000
ROA not after:            Tue 04 Mar 2025 18:23:08 +0000
asID:                     61468
IP address blocks:        192.188.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7f:5f:89:f6:d4:87:b9:0a:69:d5:1c:c6:88:ab:45:78:65:38:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
        Validity
            Not Before: Mar  5 18:18:08 2024 GMT
            Not After : Mar  4 18:23:08 2025 GMT
        Subject: CN=629339048D9BBE3B4B462C1208FA4736AC1A7440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:6b:bd:c6:ba:69:ed:e6:c0:8a:19:00:72:
                    9e:04:15:e2:2b:9a:f9:77:f1:81:7d:20:c5:4c:c1:
                    e7:b5:8e:9f:cb:57:05:f7:bc:09:39:80:0b:f2:12:
                    ab:82:60:34:db:cc:b5:05:31:03:cc:7a:e2:91:ac:
                    5e:c8:9f:be:b2:52:ff:2f:c3:cd:0f:d9:2b:95:41:
                    c3:e9:49:75:2a:9e:a6:ee:77:4b:cd:0d:3a:15:92:
                    0f:e8:29:b6:5a:ac:ce:91:70:ef:d7:99:69:55:a4:
                    85:59:29:68:63:fb:ea:a9:0c:3b:4f:20:19:67:5c:
                    98:d4:fc:45:33:05:15:31:66:8a:1c:3e:84:8e:8d:
                    0b:85:63:24:43:4c:c9:d2:ed:32:fe:38:a1:0f:2e:
                    7a:cb:6b:99:61:e3:9e:b1:0b:a5:8a:1e:56:d3:0c:
                    6b:9e:53:2c:56:fa:f7:21:e0:ed:5f:f4:81:e6:9a:
                    53:11:40:3b:19:13:13:80:52:59:05:0d:d2:e1:41:
                    39:2f:1a:e5:27:c4:11:2b:5a:aa:fe:4c:cd:98:66:
                    71:8d:5c:6e:86:3d:41:0f:ac:9f:61:1f:aa:3f:dd:
                    ed:17:f0:f1:7d:d9:5d:b8:cb:c2:11:a0:80:63:da:
                    3b:fd:16:d4:a3:19:24:b0:1b:e1:3a:79:30:a0:3a:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:39:04:8D:9B:BE:3B:4B:46:2C:12:08:FA:47:36:AC:1A:74:40
            X509v3 Authority Key Identifier:
                keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:96:ea:95:f6:0c:1a:31:6d:ab:51:0a:57:2e:a4:58:9f:89:
         74:a3:c1:9f:10:d5:83:1f:36:8b:e1:06:99:c2:71:af:01:b8:
         b5:ed:f8:27:f1:b2:d9:d5:bc:ef:e1:2d:9a:a7:25:08:9c:52:
         03:75:0f:0e:e9:d2:a5:26:ad:d9:d2:b2:93:f9:36:4c:4c:88:
         67:dd:63:86:97:05:2d:9e:c2:fd:48:df:33:f5:cd:a1:ea:24:
         36:1b:b6:1b:56:d3:02:c7:49:26:65:3b:95:b7:31:f5:19:47:
         7e:a6:4a:ba:99:77:b3:cd:98:99:a5:62:41:02:01:28:7e:a6:
         f3:64:f7:6a:58:38:ac:29:d9:eb:dc:23:c4:8f:cb:0f:f7:82:
         b5:c5:7e:85:73:ee:2f:66:b2:11:40:19:76:b7:35:53:7f:3a:
         a5:a5:1e:2a:77:06:15:67:cf:53:c2:9e:75:b3:87:a1:3b:f8:
         82:99:33:0a:fb:7d:98:01:eb:5f:fb:d1:05:2a:98:6e:25:7c:
         22:de:59:2d:bd:30:f9:1c:68:4c:b1:2c:17:fd:03:bc:bc:13:
         5e:62:ea:7a:7d:d3:66:da:97:61:51:fe:9d:78:25:38:79:ef:
         fa:83:f6:2d:e9:dc:83:1b:19:c8:5a:33:8c:70:c3:24:f8:0c:
         98:c9:e5:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSX9fifbUh7kKadUcxoirRXhlOPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyQjJFODk4OTEwODVFRTkyNTE0QjVEOTFFRkU5RjU5
MDA1QzkzMzAeFw0yNDAzMDUxODE4MDhaFw0yNTAzMDQxODIzMDhaMDMxMTAvBgNV
BAMTKDYyOTMzOTA0OEQ5QkJFM0I0QjQ2MkMxMjA4RkE0NzM2QUMxQTc0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrGu9xrpp7ebAihkAcp4EFeIr
mvl38YF9IMVMwee1jp/LVwX3vAk5gAvyEquCYDTbzLUFMQPMeuKRrF7In76yUv8v
w80P2SuVQcPpSXUqnqbud0vNDToVkg/oKbZarM6RcO/XmWlVpIVZKWhj++qpDDtP
IBlnXJjU/EUzBRUxZoocPoSOjQuFYyRDTMnS7TL+OKEPLnrLa5lh456xC6WKHlbT
DGueUyxW+vch4O1f9IHmmlMRQDsZExOAUlkFDdLhQTkvGuUnxBErWqr+TM2YZnGN
XG6GPUEPrJ9hH6o/3e0X8PF92V24y8IRoIBj2jv9FtSjGSSwG+E6eTCgOjDZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYpM5BI2bvjtLRiwSCPpHNqwadEAwHwYDVR0j
BBgwFoAUuysuiYkQhe6SUUtdke/p9ZAFyTMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjgyMjNFNDFGREZDQzhCM0YzMjU1N0IwOUY3RDFENDU4
RTU5QTA2NkZDNzM2ODkxNzQ3OUQ1REEwMTIyOTc0LzAvQkIyQjJFODk4OTEwODVF
RTkyNTE0QjVEOTFFRkU5RjU5MDA1QzkzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjJCMkU4OTg5MTA4NUVFOTI1
MTRCNUQ5MUVGRTlGNTkwMDVDOTMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY4MjIzRTQxRkRGQ0M4QjNGMzI1NTdCMDlGN0QxRDQ1OEU1OUEwNjZG
QzczNjg5MTc0NzlENURBMDEyMjk3NC8wLzMxMzkzMjJlMzEzODM4MmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8OjAN
BgkqhkiG9w0BAQsFAAOCAQEAaZbqlfYMGjFtq1EKVy6kWJ+JdKPBnxDVgx82i+EG
mcJxrwG4te34J/Gy2dW87+EtmqclCJxSA3UPDunSpSat2dKyk/k2TEyIZ91jhpcF
LZ7C/UjfM/XNoeokNhu2G1bTAsdJJmU7lbcx9RlHfqZKupl3s82YmaViQQIBKH6m
82T3alg4rCnZ69wjxI/LD/eCtcV+hXPuL2ayEUAZdrc1U386paUeKncGFWfPU8Ke
dbOHoTv4gpkzCvt9mAHrX/vRBSqYbiV8It5ZLb0w+RxoTLEsF/0DvLwTXmLqen3T
ZtqXYVH+nXglOHnv+oP2LencgxsZyFozjHDDJPgMmMnlMw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org