Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e35302e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          q46kS/Y08RxxEb0ecxrzMJdgVGKbbkPgEchcaSpjA0Y=
Subject key identifier:   CD:D0:BC:0C:09:57:65:A7:AC:3D:54:43:5A:46:19:C3:DA:86:42:A0
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       323E79D0CF44A74D15EFB3ECABE7CAC0D2FAD78A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:33 +0000
ROA not before:           Tue 05 Mar 2024 18:05:33 +0000
ROA not after:            Tue 04 Mar 2025 18:10:33 +0000
asID:                     27773
IP address blocks:        190.150.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3e:79:d0:cf:44:a7:4d:15:ef:b3:ec:ab:e7:ca:c0:d2:fa:d7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:33 2024 GMT
            Not After : Mar  4 18:10:33 2025 GMT
        Subject: CN=CDD0BC0C095765A7AC3D54435A4619C3DA8642A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:96:77:43:a0:92:11:db:13:ec:27:c5:af:
                    6f:08:8e:61:a2:19:12:4f:4b:ce:83:5f:f5:f1:5d:
                    6a:4f:05:00:4f:47:72:f2:6f:4a:34:7b:3f:09:76:
                    8b:48:aa:2b:8d:e5:f3:2c:07:3a:2d:2a:7a:e1:18:
                    d3:69:d1:6e:34:6b:a8:df:72:18:ad:60:23:9c:a6:
                    bb:1f:b8:6f:e1:6b:b8:7d:a1:7e:39:44:d8:c7:9b:
                    3e:c5:b1:09:2a:d5:ad:4f:88:18:bc:29:e0:46:b2:
                    3e:27:a7:76:26:b9:47:be:24:04:81:c9:45:3c:a7:
                    70:ef:f1:8d:86:87:87:48:31:f6:ed:66:e9:da:24:
                    46:75:37:c3:39:e5:c3:04:d1:eb:fb:ee:ac:95:5b:
                    15:a3:fe:57:35:6d:a8:1b:3d:54:e7:63:77:f1:29:
                    c7:c8:8d:cb:0b:c0:5d:d4:81:e6:01:9e:85:75:7e:
                    76:e4:2c:93:14:8d:f2:bd:45:dc:72:04:b1:69:2b:
                    0b:8c:8e:b0:08:a7:9b:ed:73:e2:30:4a:1c:0d:eb:
                    10:95:db:13:40:78:ac:b1:02:f4:5f:33:e8:2d:e4:
                    15:1d:25:bd:f0:6f:fa:67:92:39:f1:f3:17:51:56:
                    80:60:e5:27:8e:76:3a:68:3f:4d:32:fb:2a:bc:68:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:BC:0C:09:57:65:A7:AC:3D:54:43:5A:46:19:C3:DA:86:42:A0
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35302e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:32:39:bf:2e:e7:ad:78:10:3d:13:7b:5a:8d:62:37:62:
         45:da:78:51:e2:2f:79:0e:0b:40:94:fe:74:b0:54:c7:32:69:
         87:f2:c7:c1:96:72:94:47:9c:5e:bb:56:1f:fa:e4:3a:b6:ec:
         57:53:c6:99:ed:3e:93:c9:c7:ce:c0:d8:72:71:51:38:88:78:
         ca:69:a0:07:89:48:e5:16:f1:9c:e0:d8:69:a7:dd:22:e1:83:
         8e:aa:5b:07:6f:7b:18:6c:3c:b8:9f:59:71:60:1c:38:29:ce:
         21:8e:e4:fe:a9:6e:e2:b8:01:92:49:25:d6:c7:66:c1:97:bf:
         88:5c:8f:78:ba:de:98:14:61:1b:26:bd:8f:8d:e7:e6:36:47:
         06:75:4a:9c:c3:7a:ca:66:72:81:77:be:37:93:22:0a:82:3f:
         4b:69:af:8d:92:78:80:a8:9a:34:af:df:9a:ff:47:f7:16:a1:
         d0:7e:f7:ed:51:8e:3f:19:a0:52:1d:49:6d:36:e6:5c:06:04:
         8d:7a:49:62:85:a9:3e:53:9a:b3:70:b2:32:f9:cb:cf:ff:27:
         24:49:04:7d:fb:83:d4:dc:fc:e5:b9:5b:4d:4c:b7:39:f2:51:
         c9:c6:c9:c7:f8:10:c3:ff:f0:8e:87:64:14:49:8e:81:0f:f4:
         19:3b:2a:03
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMj550M9Ep00V77Psq+fKwNL614owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzNaFw0yNTAzMDQxODEwMzNaMDMxMTAvBgNV
BAMTKENERDBCQzBDMDk1NzY1QTdBQzNENTQ0MzVBNDYxOUMzREE4NjQyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCor5Z3Q6CSEdsT7CfFr28IjmGi
GRJPS86DX/XxXWpPBQBPR3Lyb0o0ez8JdotIqiuN5fMsBzotKnrhGNNp0W40a6jf
chitYCOcprsfuG/ha7h9oX45RNjHmz7FsQkq1a1PiBi8KeBGsj4np3YmuUe+JASB
yUU8p3Dv8Y2Gh4dIMfbtZunaJEZ1N8M55cME0ev77qyVWxWj/lc1bagbPVTnY3fx
KcfIjcsLwF3UgeYBnoV1fnbkLJMUjfK9RdxyBLFpKwuMjrAIp5vtc+IwShwN6xCV
2xNAeKyxAvRfM+gt5BUdJb3wb/pnkjnx8xdRVoBg5SeOdjpoP00y+yq8aJXNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzdC8DAlXZaesPVRDWkYZw9qGQqAwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzEzNTMwMmUzNTMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM3MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb6WMjAN
BgkqhkiG9w0BAQsFAAOCAQEAYKEyOb8u5614ED0Te1qNYjdiRdp4UeIveQ4LQJT+
dLBUxzJph/LHwZZylEecXrtWH/rkOrbsV1PGme0+k8nHzsDYcnFROIh4ymmgB4lI
5RbxnODYaafdIuGDjqpbB297GGw8uJ9ZcWAcOCnOIY7k/qlu4rgBkkkl1sdmwZe/
iFyPeLremBRhGya9j43n5jZHBnVKnMN6ymZygXe+N5MiCoI/S2mvjZJ4gKiaNK/f
mv9H9xah0H737VGOPxmgUh1JbTbmXAYEjXpJYoWpPlOas3CyMvnLz/8nJEkEffuD
1Nz85blbTUy3OfJRycbJx/gQw//wjodkFEmOgQ/0GTsqAw==
-----END CERTIFICATE-----
Generated at Tue May 21 01:45:30 2024 by rpki-client on console-fra.rpki-client.org