Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/39d111ae5e7206aa797ba298b360b3ac8f3d61a9.roa
File:                     39d111ae5e7206aa797ba298b360b3ac8f3d61a9.roa (raw, json)
Hash identifier:          8LBvZx/nwvoQPg/nKLi9NBZxe6hROJ7KHMwxWAhHVuI=
Subject key identifier:   AC:91:1A:41:6B:72:3C:C5:EE:C3:47:CA:CC:E6:28:E3:9E:D5:9D:6A
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       17FECC
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/39d111ae5e7206aa797ba298b360b3ac8f3d61a9.roa
Signing time:             Fri 27 May 2022 00:28:41 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52233
IP address blocks:        190.88.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Apr 2024 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572556 (0x17fecc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=39d111ae5e7206aa797ba298b360b3ac8f3d61a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:48:49:ad:c5:51:b8:6e:a6:15:41:59:cf:
                    8f:a7:3a:10:a5:2f:f0:6f:9a:f9:6c:46:3a:ad:ec:
                    ea:c3:1a:54:87:ed:be:64:9f:a8:c9:41:a9:8e:5e:
                    0c:c1:8c:30:19:34:82:94:a1:f1:3f:93:f3:d7:a7:
                    ed:be:3c:f0:65:4e:89:b9:1c:13:57:5f:04:3a:af:
                    40:0f:e2:8c:31:c9:cb:e3:77:fc:1c:6b:63:f1:59:
                    f0:ae:e4:85:07:d7:93:7b:7f:3d:35:0e:53:18:79:
                    1b:84:d2:f9:8f:98:e4:da:1e:26:f8:2b:f3:30:53:
                    db:35:f1:a7:4b:1d:57:69:37:b9:70:9e:52:c4:2d:
                    28:d8:53:a0:05:64:b6:33:82:bf:1b:7f:01:7d:73:
                    bb:8c:90:f4:f9:d7:4d:cb:01:ea:e3:a8:0c:f6:be:
                    a1:f2:41:1b:66:54:36:9d:a9:1e:f3:45:54:2f:24:
                    d2:37:da:e2:db:a3:77:14:b4:84:cc:ee:fc:03:e6:
                    e6:9e:74:45:80:9d:fe:a1:88:d1:b5:17:e9:ab:eb:
                    de:e5:7a:0f:6c:82:f9:91:a4:95:fa:f0:c9:f5:c4:
                    3e:95:18:38:20:5a:2a:ed:01:7f:42:d1:2c:81:ea:
                    d7:cb:85:dc:73:70:7f:75:d4:d7:c9:f8:6e:34:c1:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:1A:41:6B:72:3C:C5:EE:C3:47:CA:CC:E6:28:E3:9E:D5:9D:6A
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/39d111ae5e7206aa797ba298b360b3ac8f3d61a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:31:ab:5d:80:15:12:35:26:ac:03:8d:6c:88:be:bb:a3:
         3f:ad:0f:f6:a9:05:23:bf:04:74:79:d1:75:94:10:90:f6:8c:
         55:0f:1f:44:f4:e9:d3:a9:01:02:1f:2b:09:0b:d3:57:6b:77:
         6c:07:fe:05:f7:d7:81:c3:43:83:ed:61:ef:94:33:5d:76:6a:
         0e:da:41:25:fd:ac:98:ad:41:67:59:d9:e2:ea:48:65:d3:7e:
         99:00:18:3a:e5:6e:5f:5b:96:07:00:b1:b8:d9:da:5d:5e:fc:
         b1:40:f8:e2:5b:b1:58:ed:99:de:3f:b6:21:8a:39:ac:95:93:
         17:46:ed:34:36:f2:f3:cc:8d:f0:87:9c:49:0a:39:70:a4:6a:
         02:d0:09:a4:b0:34:98:b3:8c:e9:47:cc:d9:d1:4c:95:2d:b1:
         aa:86:6a:d6:a5:1d:8f:54:40:ec:9b:7e:01:51:23:8c:ea:57:
         a6:a7:3d:89:8f:ca:74:8c:d2:2e:2e:b3:68:e9:86:7f:c6:e5:
         0e:fc:6f:5b:2e:b3:9f:dd:f7:43:44:a2:7c:21:1c:5f:5e:60:
         63:2b:e3:a0:eb:8e:75:8f:e9:a4:68:19:11:d2:25:92:c8:41:
         1b:69:79:85:9e:d5:0d:cc:fa:2a:08:e4:be:44:ec:9f:65:14:
         95:2e:bf:6e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF/7MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE4
ODNjOTEwZjg3OTYwM2I5NjdjMDYzNmM2ZjNlOTEyNWIzNjUxYjUwHhcNMjIwNTI2
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzOWQxMTFhZTVlNzIw
NmFhNzk3YmEyOThiMzYwYjNhYzhmM2Q2MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj75ISa3FUbhuphVBWc+PpzoQpS/wb5r5bEY6rezqwxpUh+2+
ZJ+oyUGpjl4MwYwwGTSClKHxP5Pz16ftvjzwZU6JuRwTV18EOq9AD+KMMcnL43f8
HGtj8VnwruSFB9eTe389NQ5TGHkbhNL5j5jk2h4m+CvzMFPbNfGnSx1XaTe5cJ5S
xC0o2FOgBWS2M4K/G38BfXO7jJD0+ddNywHq46gM9r6h8kEbZlQ2nake80VULyTS
N9ri26N3FLSEzO78A+bmnnRFgJ3+oYjRtRfpq+ve5XoPbIL5kaSV+vDJ9cQ+lRg4
IFoq7QF/QtEsgerXy4Xcc3B/ddTXyfhuNMGMiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKyRGkFrcjzF7sNHyszmKOOe1Z1qMB8GA1UdIwQYMBaAFEemfzhOUF0mYgc9
qzVW5u5G9i5xMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTg4M2M5
MTBmODc5NjAzYjk2N2MwNjM2YzZmM2U5MTI1YjM2NTFiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmFiZDZiMzQtODk1My00YzcyLWEwYTItN2VjYjlk
ZThhYWJhLzM5ZDExMWFlNWU3MjA2YWE3OTdiYTI5OGIzNjBiM2FjOGYzZDYxYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYWJkNmIzNC04OTUzLTRjNzItYTBhMi03ZWNi
OWRlOGFhYmEvYTg4M2M5MTBmODc5NjAzYjk2N2MwNjM2YzZmM2U5MTI1YjM2NTFi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb5YMjANBgkqhkiG9w0BAQsFAAOCAQEAD1sxq12AFRI1JqwD
jWyIvrujP60P9qkFI78EdHnRdZQQkPaMVQ8fRPTp06kBAh8rCQvTV2t3bAf+BffX
gcNDg+1h75QzXXZqDtpBJf2smK1BZ1nZ4upIZdN+mQAYOuVuX1uWBwCxuNnaXV78
sUD44luxWO2Z3j+2IYo5rJWTF0btNDby88yN8IecSQo5cKRqAtAJpLA0mLOM6UfM
2dFMlS2xqoZq1qUdj1RA7Jt+AVEjjOpXpqc9iY/KdIzSLi6zaOmGf8blDvxvWy6z
n933Q0SifCEcX15gYyvjoOuOdY/ppGgZEdIlkshBG2l5hZ7VDcz6KgjkvkTsn2UU
lS6/bg==
-----END CERTIFICATE-----
Generated at Fri Apr 12 03:03:44 2024 by rpki-client on console-ams.rpki-client.org