Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa
File:                     3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa (raw, json)
Hash identifier:          fEylEsI3aVg5uyU2lCjWWn62VAiHphUOAxRdcIlDbCk=
Subject key identifier:   B3:4A:21:6D:97:B7:26:C8:71:FB:B3:F6:5F:36:EF:E8:DC:0D:A8:90
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       58478D2BC4ACAC81D9A5E26AC7432AF9BA94BE5A
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa
Signing time:             Tue 05 Mar 2024 18:21:35 +0000
ROA not before:           Tue 05 Mar 2024 18:16:35 +0000
ROA not after:            Tue 04 Mar 2025 18:21:35 +0000
asID:                     272039
IP address blocks:        190.89.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl
                          rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:47:8d:2b:c4:ac:ac:81:d9:a5:e2:6a:c7:43:2a:f9:ba:94:be:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Mar  5 18:16:35 2024 GMT
            Not After : Mar  4 18:21:35 2025 GMT
        Subject: CN=B34A216D97B726C871FBB3F65F36EFE8DC0DA890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:cc:fa:9a:b3:12:b8:03:c7:41:cb:be:51:
                    30:82:1c:c6:e3:56:be:dd:52:00:3b:cd:36:20:78:
                    fc:fd:f3:83:66:2a:00:21:b0:38:00:b1:7e:1a:4e:
                    df:1b:91:9f:a9:15:f5:f9:f3:95:a5:a0:47:ed:b3:
                    69:fa:0d:d2:8b:9c:39:88:59:1d:da:af:cd:24:5e:
                    83:b9:f8:63:78:61:dd:ab:ad:17:64:dc:d7:07:1b:
                    57:5f:e6:16:8c:11:4f:43:37:a9:52:d9:43:c8:9a:
                    20:15:56:59:2c:16:c7:a4:88:96:59:91:7a:60:bc:
                    21:c0:64:ae:bf:d2:10:4b:d2:78:72:6c:f8:65:c5:
                    4f:dc:7c:83:05:63:0d:03:e7:d8:86:e1:1e:b7:76:
                    df:76:d9:19:c2:13:af:0d:37:63:cc:fb:18:15:9a:
                    ae:42:5d:eb:24:87:1b:3c:f3:b2:b9:6a:c5:c5:00:
                    15:22:55:4c:d6:3f:4c:0a:4e:47:96:a9:6f:17:e3:
                    a6:9b:71:d9:3f:4f:da:4c:f4:42:11:4b:5e:d6:56:
                    90:3c:68:a5:48:15:2c:f3:aa:c6:36:b5:e0:ad:c7:
                    87:cf:e8:aa:96:8e:6a:17:5b:a3:24:cf:99:84:9e:
                    0f:2f:8c:51:db:3f:95:89:95:22:09:0c:9b:7b:02:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:21:6D:97:B7:26:C8:71:FB:B3:F6:5F:36:EF:E8:DC:0D:A8:90
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137342e302f32332d3233203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:e4:20:b7:41:7a:1d:eb:0d:7e:99:f3:a9:71:6f:ea:46:
         77:e3:46:05:ee:e0:25:2d:cf:fd:36:47:7a:e2:2b:a9:02:46:
         82:91:33:f2:53:59:39:a7:bd:ed:a4:9e:a7:29:aa:08:9b:d5:
         6f:35:14:ea:32:e0:88:1b:e1:fd:1b:b0:83:0a:56:09:37:ce:
         ce:2c:1e:ed:a8:1f:67:09:06:38:ed:3c:b4:ab:64:d4:4c:3c:
         36:32:64:93:8a:f9:2c:77:20:2d:58:06:b6:69:3c:e9:04:04:
         75:90:55:63:e2:a8:11:71:f3:7c:d7:c2:d5:1b:33:25:61:27:
         72:e4:8b:07:1d:3f:a0:2c:15:55:22:2c:56:a5:93:01:de:dc:
         dc:7b:e1:a8:63:30:3b:33:ad:5d:80:78:cb:67:e9:4d:07:71:
         9a:52:85:b6:91:ac:27:d5:6c:30:84:a6:a7:69:32:9b:c1:e1:
         4d:15:ce:d3:94:da:2e:ba:29:1e:5e:0f:8a:fb:cd:9a:35:0d:
         7c:52:31:78:4b:41:68:b5:dd:4c:fa:3e:74:93:6c:ef:91:a1:
         18:0f:1c:6f:df:79:5f:b3:62:23:04:8f:a9:b0:1d:1a:41:0f:
         04:91:59:97:b7:83:50:f9:a4:0b:44:b6:a0:46:6d:62:22:d6:
         78:d8:c8:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWEeNK8SsrIHZpeJqx0Mq+bqUvlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzNzVEMTc1RjUxQjIyMkFBODI2QzQyNEMyNzE3ODAz
QTY4Qzk5MTAeFw0yNDAzMDUxODE2MzVaFw0yNTAzMDQxODIxMzVaMDMxMTAvBgNV
BAMTKEIzNEEyMTZEOTdCNzI2Qzg3MUZCQjNGNjVGMzZFRkU4REMwREE4OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAMz6mrMSuAPHQcu+UTCCHMbj
Vr7dUgA7zTYgePz984NmKgAhsDgAsX4aTt8bkZ+pFfX585WloEfts2n6DdKLnDmI
WR3ar80kXoO5+GN4Yd2rrRdk3NcHG1df5haMEU9DN6lS2UPImiAVVlksFsekiJZZ
kXpgvCHAZK6/0hBL0nhybPhlxU/cfIMFYw0D59iG4R63dt922RnCE68NN2PM+xgV
mq5CXeskhxs887K5asXFABUiVUzWP0wKTkeWqW8X46abcdk/T9pM9EIRS17WVpA8
aKVIFSzzqsY2teCtx4fP6KqWjmoXW6Mkz5mEng8vjFHbP5WJlSIJDJt7AjCxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUs0ohbZe3Jshx+7P2Xzbv6NwNqJAwHwYDVR0j
BBgwFoAUEDddF19RsiKqgmxCTCcXgDpoyZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzRFMDU5MkI2RkUxM0QzNDAwOUM5N0U2QUI0RjZFMTI5
QjUyQjIzRkMwRDQ1OTBFMjE1NjNEOEQyRkQ1QUU0LzAvMTAzNzVEMTc1RjUxQjIy
MkFBODI2QzQyNEMyNzE3ODAzQTY4Qzk5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMDM3NUQxNzVGNTFCMjIyQUE4
MjZDNDI0QzI3MTc4MDNBNjhDOTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTc0RTA1OTJCNkZFMTNEMzQwMDlDOTdFNkFCNEY2RTEyOUI1MkIyM0ZD
MEQ0NTkwRTIxNTYzRDhEMkZENUFFNC8wLzMxMzkzMDJlMzgzOTJlMzEzNzM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMyMzAzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvlmu
MA0GCSqGSIb3DQEBCwUAA4IBAQBo5OQgt0F6HesNfpnzqXFv6kZ340YF7uAlLc/9
Nkd64iupAkaCkTPyU1k5p73tpJ6nKaoIm9VvNRTqMuCIG+H9G7CDClYJN87OLB7t
qB9nCQY47Ty0q2TUTDw2MmSTivksdyAtWAa2aTzpBAR1kFVj4qgRcfN818LVGzMl
YSdy5IsHHT+gLBVVIixWpZMB3tzce+GoYzA7M61dgHjLZ+lNB3GaUoW2kawn1Www
hKanaTKbweFNFc7TlNouuikeXg+K+82aNQ18UjF4S0Fotd1M+j50k2zvkaEYDxxv
33lfs2IjBI+psB0aQQ8EkVmXt4NQ+aQLRLagRm1iItZ42MjO
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org