Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3138302e302f32322d3234203d3e20323732383433.roa
File:                     3139302e3138352e3138302e302f32322d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          TVuaZVFidtRoKpI3ocbsgpxEC//WwIWmSkyzi23MYVk=
Subject key identifier:   4A:8D:D5:F2:57:6D:EA:A7:79:E4:A7:54:20:E1:DD:6E:C5:D3:FB:7F
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       20E07B96493120E6D12FDF1C6A18EC4850F47BA8
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3138302e302f32322d3234203d3e20323732383433.roa
Signing time:             Tue 05 Mar 2024 17:47:46 +0000
ROA not before:           Tue 05 Mar 2024 17:42:46 +0000
ROA not after:            Tue 04 Mar 2025 17:47:46 +0000
asID:                     272843
IP address blocks:        190.185.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:7b:96:49:31:20:e6:d1:2f:df:1c:6a:18:ec:48:50:f4:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:46 2024 GMT
            Not After : Mar  4 17:47:46 2025 GMT
        Subject: CN=4A8DD5F2576DEAA779E4A75420E1DD6EC5D3FB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:1b:cc:8e:c2:15:33:bf:a2:ec:f3:53:90:
                    c1:9a:ed:50:c3:dc:97:8c:01:51:4b:38:61:ef:99:
                    b0:5c:08:1a:d3:a0:79:80:05:23:42:5d:79:1a:47:
                    a6:88:52:2b:80:52:d0:11:bd:3f:97:38:e3:98:10:
                    01:42:be:f8:1d:5b:77:16:6e:ab:62:07:c6:26:2a:
                    64:6a:38:93:88:ad:ae:66:8c:e1:8d:e1:77:c5:3e:
                    61:03:ff:d0:2b:4c:01:0e:8b:04:7a:dd:b2:35:d1:
                    15:1b:ec:b5:cc:ad:0e:8d:a7:5b:6e:52:7f:55:d6:
                    94:a7:7b:3f:f0:cd:78:de:01:52:d2:62:e9:d2:1f:
                    51:eb:eb:fc:94:77:7c:be:89:47:34:e3:a8:f6:12:
                    cd:20:98:e0:6b:93:04:30:26:6f:6c:51:22:e4:07:
                    7b:55:79:56:b6:80:94:ac:0d:f3:1a:42:28:aa:27:
                    5d:aa:42:e8:e1:c5:0b:f1:48:e0:af:d8:13:1e:08:
                    0b:80:28:cc:b6:21:6f:68:52:3d:fa:31:83:1f:0d:
                    7d:2e:46:3e:67:8a:d9:b3:89:5d:86:90:ac:e5:c1:
                    b1:36:f4:0e:ef:cd:56:1e:b1:99:f9:ed:3c:5f:5d:
                    c9:86:d8:0a:a5:be:4f:87:23:f0:cb:7a:b4:ee:0b:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:D5:F2:57:6D:EA:A7:79:E4:A7:54:20:E1:DD:6E:C5:D3:FB:7F
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3138302e302f32322d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:66:69:4e:89:6e:ee:92:f2:f4:99:89:4a:40:c9:52:92:
         05:10:d4:71:ee:59:2c:ac:33:34:5d:a5:00:eb:f8:81:b9:59:
         a9:ae:7d:d5:fd:35:52:31:ab:83:1f:14:2f:60:70:db:45:53:
         04:5f:fc:cc:d6:bf:40:71:f8:a4:12:51:09:df:f6:19:c8:d4:
         d2:e2:d2:68:b6:6d:80:f1:54:62:ac:0f:4d:00:f2:7a:e2:a9:
         88:67:c9:31:2b:d6:c4:9b:43:04:c9:7b:b5:0b:ca:5d:f3:d3:
         bf:b8:01:72:f4:7b:eb:38:59:9d:b0:94:78:a5:50:4e:d2:21:
         08:a8:40:df:33:0f:32:47:30:00:88:35:58:f5:37:a6:a9:03:
         c3:6e:ca:2d:d6:5f:80:bc:85:bd:c5:1b:11:26:bc:78:17:5e:
         ea:1d:ad:06:3a:a8:33:40:7c:c0:53:94:08:eb:83:61:47:9a:
         f8:55:dd:28:b9:15:ef:ac:ad:26:d7:27:9a:ba:64:25:4f:1d:
         38:14:92:91:b6:3d:d3:d6:91:53:61:7b:49:fa:dc:12:16:f6:
         db:1e:c0:08:6b:c5:6f:24:d6:6b:59:eb:cf:d9:a2:7c:83:42:
         1e:0b:df:a9:7c:17:40:d9:cf:76:41:fd:46:f0:f8:eb:50:c5:
         45:25:78:b4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIOB7lkkxIObRL98cahjsSFD0e6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNDAzMDUxNzQyNDZaFw0yNTAzMDQxNzQ3NDZaMDMxMTAvBgNV
BAMTKDRBOERENUYyNTc2REVBQTc3OUU0QTc1NDIwRTFERDZFQzVEM0ZCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvhvMjsIVM7+i7PNTkMGa7VDD
3JeMAVFLOGHvmbBcCBrToHmABSNCXXkaR6aIUiuAUtARvT+XOOOYEAFCvvgdW3cW
bqtiB8YmKmRqOJOIra5mjOGN4XfFPmED/9ArTAEOiwR63bI10RUb7LXMrQ6Np1tu
Un9V1pSnez/wzXjeAVLSYunSH1Hr6/yUd3y+iUc046j2Es0gmOBrkwQwJm9sUSLk
B3tVeVa2gJSsDfMaQiiqJ12qQujhxQvxSOCv2BMeCAuAKMy2IW9oUj36MYMfDX0u
Rj5nitmziV2GkKzlwbE29A7vzVYesZn57TxfXcmG2Aqlvk+HI/DLerTuCzCFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUSo3V8ldt6qd55KdUIOHdbsXT+38wHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMTM4MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzIzODM0MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
ubQwDQYJKoZIhvcNAQELBQADggEBAKj/ZmlOiW7ukvL0mYlKQMlSkgUQ1HHuWSys
MzRdpQDr+IG5WamufdX9NVIxq4MfFC9gcNtFUwRf/MzWv0Bx+KQSUQnf9hnI1NLi
0mi2bYDxVGKsD00A8nriqYhnyTEr1sSbQwTJe7ULyl3z07+4AXL0e+s4WZ2wlHil
UE7SIQioQN8zDzJHMACINVj1N6apA8Nuyi3WX4C8hb3FGxEmvHgXXuodrQY6qDNA
fMBTlAjrg2FHmvhV3Si5Fe+srSbXJ5q6ZCVPHTgUkpG2PdPWkVNhe0n63BIW9tse
wAhrxW8k1mtZ68/ZonyDQh4L36l8F0DZz3ZB/Ubw+OtQxUUleLQ=
-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:45 2024 by rpki-client on console-fra.rpki-client.org