Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa
File:                     3139302e31332e38302e302f32312d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          Ra1iTTs1Fcg6zvkbxRGyp0YhjWEyxMXc2a7eT8tM1no=
Subject key identifier:   89:EA:F1:2C:8E:A8:E0:6E:4E:CD:F2:13:B7:AE:EB:A3:7F:13:F7:60
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       173216806BD460F825C8521361743AA49D6A50B2
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:05 +0000
ROA not before:           Tue 05 Mar 2024 18:06:05 +0000
ROA not after:            Tue 04 Mar 2025 18:11:05 +0000
asID:                     262186
IP address blocks:        190.13.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 23:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:32:16:80:6b:d4:60:f8:25:c8:52:13:61:74:3a:a4:9d:6a:50:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:05 2024 GMT
            Not After : Mar  4 18:11:05 2025 GMT
        Subject: CN=89EAF12C8EA8E06E4ECDF213B7AEEBA37F13F760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:be:a7:dc:57:64:aa:99:d9:4b:70:80:3e:
                    cd:24:80:b2:18:61:7c:b0:24:4c:76:d4:2e:cf:1e:
                    95:53:04:76:18:ea:91:b4:56:c2:33:17:5b:ac:b1:
                    64:13:ac:e7:ca:be:31:00:b4:22:56:b5:18:27:87:
                    03:47:18:1b:55:c0:e2:3c:ac:eb:40:17:af:54:c9:
                    ea:5c:ec:67:3e:20:50:5f:84:92:7d:da:e3:71:95:
                    44:8b:40:86:2e:8e:51:e9:b7:7a:7c:f1:2b:3e:47:
                    a0:28:97:29:3e:78:5b:db:4f:ec:b2:c3:c8:80:37:
                    62:cb:d4:15:57:00:35:45:9b:57:25:8d:60:df:85:
                    cf:7f:8f:3b:7d:64:2d:f6:64:31:b2:7d:16:e9:b3:
                    70:f1:52:e4:09:ce:19:ea:c7:7b:8d:80:07:f3:64:
                    55:cd:7d:35:c4:b9:cf:44:79:cf:ab:7c:41:d8:e7:
                    b1:eb:87:27:3b:1d:dc:9d:13:f1:19:45:80:86:e1:
                    a2:dd:26:b4:a4:ac:29:7c:be:02:22:b2:bd:a2:75:
                    f6:5e:4a:17:c9:10:f8:77:af:1c:c8:85:e6:50:ac:
                    8d:80:8c:fe:a9:cc:76:e3:49:32:df:ae:df:05:23:
                    f6:cb:32:52:7a:21:c1:fe:e7:62:81:9b:7a:73:40:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EA:F1:2C:8E:A8:E0:6E:4E:CD:F2:13:B7:AE:EB:A3:7F:13:F7:60
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:4e:8d:ae:b3:87:1b:a6:6e:96:20:7f:60:69:de:29:25:
         59:b6:14:1c:12:cd:47:ad:e3:ab:0d:03:13:ed:bb:75:93:15:
         81:44:bf:10:10:ca:dd:f6:4a:a4:53:cf:12:40:96:88:68:c9:
         05:b6:5b:98:96:92:9f:fb:a3:9b:fc:ac:46:fc:43:83:88:8d:
         0f:b0:fa:e7:21:a5:16:f8:13:11:9c:dd:45:da:8a:01:65:5d:
         18:81:64:af:1d:15:65:4c:fe:d1:3b:25:e7:46:8a:ea:86:2a:
         71:dd:7a:bf:91:27:08:47:c0:f2:dd:73:35:a0:c3:0b:e6:d3:
         8b:0a:e5:af:ad:1e:f4:71:e5:d3:d2:4b:a7:85:05:ce:41:e3:
         d0:94:2a:5a:be:99:d7:f0:13:18:61:31:96:7f:ab:43:a3:45:
         cc:68:45:d2:65:11:a3:e2:cc:42:8c:63:90:30:10:5c:00:08:
         91:b5:9e:03:8a:90:4f:87:18:ab:0d:c7:fb:97:27:1e:0b:7f:
         73:c1:4c:cb:17:ef:4c:09:c3:e7:f8:29:30:a0:d6:eb:a7:f2:
         88:52:11:67:d3:7b:8d:ad:84:49:70:03:24:35:8e:af:71:6f:
         89:65:2c:0a:b3:f8:0b:5e:3a:09:7b:80:0e:84:9e:03:b8:b7:
         29:aa:88:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFzIWgGvUYPglyFITYXQ6pJ1qULIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFENkMyM0Y4OEQyRDM0OTkyQTQzRkFCMDFFRjVBNUIw
NDAzN0JBQjAeFw0yNDAzMDUxODA2MDVaFw0yNTAzMDQxODExMDVaMDMxMTAvBgNV
BAMTKDg5RUFGMTJDOEVBOEUwNkU0RUNERjIxM0I3QUVFQkEzN0YxM0Y3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXr6n3FdkqpnZS3CAPs0kgLIY
YXywJEx21C7PHpVTBHYY6pG0VsIzF1ussWQTrOfKvjEAtCJWtRgnhwNHGBtVwOI8
rOtAF69Uyepc7Gc+IFBfhJJ92uNxlUSLQIYujlHpt3p88Ss+R6Aolyk+eFvbT+yy
w8iAN2LL1BVXADVFm1cljWDfhc9/jzt9ZC32ZDGyfRbps3DxUuQJzhnqx3uNgAfz
ZFXNfTXEuc9Eec+rfEHY57Hrhyc7HdydE/EZRYCG4aLdJrSkrCl8vgIisr2idfZe
ShfJEPh3rxzIheZQrI2AjP6pzHbjSTLfrt8FI/bLMlJ6IcH+52KBm3pzQMDHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUierxLI6o4G5OzfITt67ro38T92AwHwYDVR0j
BBgwFoAUgdbCP4jS00mSpD+rAe9aWwQDe6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NkZFNzA1RjZEREJEMTYyQjhERURCQTk5MzUzODZGQ0ZG
NkIyQTgxMERCRjhDN0YzMzNFMjc2Mjg1QjlDRjBGLzAvODFENkMyM0Y4OEQyRDM0
OTkyQTQzRkFCMDFFRjVBNUIwNDAzN0JBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MUQ2QzIzRjg4RDJEMzQ5OTJB
NDNGQUIwMUVGNUE1QjA0MDM3QkFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDZGRTcwNUY2RERCRDE2MkI4REVEQkE5OTM1Mzg2RkNGRjZCMkE4MTBE
QkY4QzdGMzMzRTI3NjI4NUI5Q0YwRi8wLzMxMzkzMDJlMzEzMzJlMzgzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA74NUDAN
BgkqhkiG9w0BAQsFAAOCAQEApPJOja6zhxumbpYgf2Bp3iklWbYUHBLNR63jqw0D
E+27dZMVgUS/EBDK3fZKpFPPEkCWiGjJBbZbmJaSn/ujm/ysRvxDg4iND7D65yGl
FvgTEZzdRdqKAWVdGIFkrx0VZUz+0Tsl50aK6oYqcd16v5EnCEfA8t1zNaDDC+bT
iwrlr60e9HHl09JLp4UFzkHj0JQqWr6Z1/ATGGExln+rQ6NFzGhF0mURo+LMQoxj
kDAQXAAIkbWeA4qQT4cYqw3H+5cnHgt/c8FMyxfvTAnD5/gpMKDW66fyiFIRZ9N7
ja2ESXADJDWOr3FviWUsCrP4C146CXuADoSeA7i3KaqIWw==
-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org