Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa
File:                     3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa (raw, json)
Hash identifier:          G/uxJTOWpGdH6Hl89ZtcH18Cr57fNxvbMWe82fQ6m6Y=
Subject key identifier:   E5:57:B1:FB:9C:91:D6:46:E4:5D:BE:97:47:B9:47:9F:A2:01:50:20
Certificate issuer:       /CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
Certificate serial:       48AF10CC8308D7AE9B98B4114B4843D34B52E00B
Authority key identifier: B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa
Signing time:             Tue 05 Mar 2024 17:50:59 +0000
ROA not before:           Tue 05 Mar 2024 17:45:59 +0000
ROA not after:            Tue 04 Mar 2025 17:50:59 +0000
asID:                     52285
IP address blocks:        190.111.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:af:10:cc:83:08:d7:ae:9b:98:b4:11:4b:48:43:d3:4b:52:e0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
        Validity
            Not Before: Mar  5 17:45:59 2024 GMT
            Not After : Mar  4 17:50:59 2025 GMT
        Subject: CN=E557B1FB9C91D646E45DBE9747B9479FA2015020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:f8:e2:f6:9a:da:2c:2e:89:3d:d2:f3:b3:
                    39:7a:6a:5f:28:1f:e6:1b:74:77:6b:36:e1:d4:d7:
                    b1:70:19:61:44:b9:35:13:73:13:2b:88:00:6b:ed:
                    04:81:91:20:e6:69:75:af:7e:c4:31:95:28:d3:e5:
                    33:9a:d3:8e:d0:e8:b3:64:8f:cb:16:32:77:e8:8d:
                    f6:e3:c3:f6:38:bc:d4:46:b9:fd:d0:44:3c:e3:02:
                    23:7c:88:7e:96:68:b0:9a:be:2f:7f:34:5a:d3:ea:
                    67:9b:cf:e5:e4:31:ab:b6:6f:32:31:be:18:30:62:
                    db:49:a4:c8:b0:32:75:0d:9b:e9:3a:7b:3d:33:ce:
                    71:71:97:a0:f0:d4:12:4c:a8:72:da:68:ab:51:a0:
                    a8:69:85:92:c8:95:f2:08:f2:02:83:f2:4d:83:93:
                    fa:77:a9:55:0d:20:69:d9:9c:82:b1:b2:1b:2c:e4:
                    e9:69:42:5d:25:1b:06:3d:cd:37:64:18:91:c0:b3:
                    10:eb:03:0c:e9:49:03:a0:d5:dc:69:91:d8:45:18:
                    33:68:e9:98:15:97:b4:09:98:b6:5f:b2:b0:e5:de:
                    12:ab:ca:76:ce:87:d3:93:38:fe:5d:20:91:b2:e8:
                    76:d1:69:cd:7c:fc:ab:e4:01:d7:6e:cc:63:90:6a:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:B1:FB:9C:91:D6:46:E4:5D:BE:97:47:B9:47:9F:A2:01:50:20
            X509v3 Authority Key Identifier:
                keyid:B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:34:f5:75:66:0b:ce:1d:cd:02:a8:54:90:13:53:e2:b8:
         1d:68:4b:b5:ef:18:d8:93:30:1c:51:1a:8f:a1:a5:5c:d7:e9:
         47:50:28:05:0f:62:61:3d:79:5d:b6:35:7d:28:9f:e8:e7:ab:
         15:36:c2:df:d4:00:e6:9b:2b:10:df:8d:06:e7:b3:3c:10:cf:
         69:01:11:e6:c1:9c:c7:40:12:8c:1d:3d:d9:12:96:f0:38:ca:
         f4:a4:16:7a:67:5d:f7:5d:65:ce:30:23:2d:82:04:bd:23:74:
         f7:62:3e:42:1e:56:c9:ff:59:e7:ae:9a:90:a7:41:c3:95:b6:
         6b:b9:eb:db:f8:ed:1b:b0:59:f2:06:8e:41:6a:5c:df:56:74:
         5c:26:ec:cf:93:b5:46:bf:ac:36:f4:9a:3e:f7:1b:76:2d:35:
         0b:d0:79:3f:e7:48:24:5e:da:cf:6b:3e:60:8a:ee:0d:75:cd:
         d2:be:91:e1:f9:64:de:e3:60:72:52:7c:c6:7a:14:17:29:dc:
         01:35:98:1d:ec:b8:3e:e6:0f:81:ff:3c:17:3c:e1:c2:06:be:
         f1:dd:69:7c:d3:7e:ab:99:73:4d:6f:38:99:0d:bd:93:4c:e6:
         16:d4:be:95:8b:0c:72:d2:97:dc:a2:51:cb:06:b6:b2:a2:b3:
         81:12:12:5e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSK8QzIMI166bmLQRS0hD00tS4AswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0RkFDRTM2QjMxMEMwQzAwOEExRDI2QjAzMDc2NEZG
RkU4NzNEMzAeFw0yNDAzMDUxNzQ1NTlaFw0yNTAzMDQxNzUwNTlaMDMxMTAvBgNV
BAMTKEU1NTdCMUZCOUM5MUQ2NDZFNDVEQkU5NzQ3Qjk0NzlGQTIwMTUwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskvji9praLC6JPdLzszl6al8o
H+YbdHdrNuHU17FwGWFEuTUTcxMriABr7QSBkSDmaXWvfsQxlSjT5TOa047Q6LNk
j8sWMnfojfbjw/Y4vNRGuf3QRDzjAiN8iH6WaLCavi9/NFrT6mebz+XkMau2bzIx
vhgwYttJpMiwMnUNm+k6ez0zznFxl6Dw1BJMqHLaaKtRoKhphZLIlfII8gKD8k2D
k/p3qVUNIGnZnIKxshss5OlpQl0lGwY9zTdkGJHAsxDrAwzpSQOg1dxpkdhFGDNo
6ZgVl7QJmLZfsrDl3hKrynbOh9OTOP5dIJGy6HbRac18/KvkAdduzGOQaqRnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5Vex+5yR1kbkXb6XR7lHn6IBUCAwHwYDVR0j
BBgwFoAUtk+s42sxDAwAih0msDB2T//oc9MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80ODEyNTE1MDYzNkI0QkQyRDA4MDhBODQ2MzdBMEJBOUY0
MDBFNTBFNzA2NUM4M0QyNUQ1NzUwQTI4RUFGNkJFLzAvQjY0RkFDRTM2QjMxMEMw
QzAwOEExRDI2QjAzMDc2NEZGRkU4NzNEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjRGQUNFMzZCMzEwQzBDMDA4
QTFEMjZCMDMwNzY0RkZGRTg3M0QzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDgxMjUxNTA2MzZCNEJEMkQwODA4QTg0NjM3QTBCQTlGNDAwRTUwRTcw
NjVDODNEMjVENTc1MEEyOEVBRjZCRS8wLzMxMzkzMDJlMzEzMTMxMmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzIzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvm94
MA0GCSqGSIb3DQEBCwUAA4IBAQA7EjT1dWYLzh3NAqhUkBNT4rgdaEu17xjYkzAc
URqPoaVc1+lHUCgFD2JhPXldtjV9KJ/o56sVNsLf1ADmmysQ340G57M8EM9pARHm
wZzHQBKMHT3ZEpbwOMr0pBZ6Z133XWXOMCMtggS9I3T3Yj5CHlbJ/1nnrpqQp0HD
lbZruevb+O0bsFnyBo5BalzfVnRcJuzPk7VGv6w29Jo+9xt2LTUL0Hk/50gkXtrP
az5giu4Ndc3SvpHh+WTe42ByUnzGehQXKdwBNZgd7Lg+5g+B/zwXPOHCBr7x3Wl8
036rmXNNbziZDb2TTOYW1L6Viwxy0pfcolHLBrayorOBEhJe
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org