Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230332e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230332e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          EMd1H08pxA04gHCLq4cg2MkPxdSKaDHbkdc9K3CYqXo=
Subject key identifier:   E4:F0:6C:B8:99:1D:83:7D:BD:E5:B9:99:3D:E7:10:DD:EB:87:32:12
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       2FCDCC09EB56A907C41F471853F8962B822DBCAD
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230332e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:12 +0000
ROA not before:           Tue 05 Mar 2024 18:02:12 +0000
ROA not after:            Tue 04 Mar 2025 18:07:12 +0000
asID:                     52330
IP address blocks:        190.184.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:cc:09:eb:56:a9:07:c4:1f:47:18:53:f8:96:2b:82:2d:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:12 2024 GMT
            Not After : Mar  4 18:07:12 2025 GMT
        Subject: CN=E4F06CB8991D837DBDE5B9993DE710DDEB873212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:81:d3:a4:84:18:33:9b:d2:79:89:cb:c7:
                    bf:0c:9b:86:3f:f3:0d:17:b1:13:52:88:c8:f8:a9:
                    9b:bd:d3:27:e6:5a:ac:f7:e8:f3:ba:49:22:a6:a9:
                    9a:96:3f:63:1b:aa:70:8e:67:b9:b9:75:f8:ba:b6:
                    8b:02:ec:3e:c4:73:34:a3:b1:95:0e:e7:23:73:23:
                    fd:c1:a3:5b:e6:6d:f3:7a:42:0b:c9:d8:5b:61:9d:
                    e6:16:80:fd:6d:4a:73:65:23:7b:66:f0:39:6c:f0:
                    fd:06:14:06:20:90:d2:c4:f3:01:c4:13:46:67:96:
                    d4:fa:80:38:c3:d6:d1:e6:24:6d:f7:2e:17:d7:94:
                    fa:88:67:4e:78:43:e4:dd:3f:8d:f2:87:a6:a6:48:
                    24:38:7e:93:8a:99:7f:1b:d2:02:21:ac:8f:a7:8d:
                    9f:be:de:17:58:34:b1:41:57:c7:29:9c:65:5b:87:
                    f7:aa:2c:68:15:12:2d:e5:28:fa:65:5f:87:ad:1d:
                    03:ad:56:ad:ff:e8:7b:56:d4:7f:4d:ff:ca:38:01:
                    ce:e9:d7:78:84:4f:21:d3:4f:5b:92:71:1c:63:e1:
                    8e:0f:78:bc:f1:f9:9b:ff:0d:bc:cb:6e:f8:75:22:
                    66:57:ec:59:a8:fd:f9:ca:a2:82:02:02:0a:81:93:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:6C:B8:99:1D:83:7D:BD:E5:B9:99:3D:E7:10:DD:EB:87:32:12
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230332e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:42:a7:d5:31:82:e1:a6:4b:85:ee:7c:5c:47:f9:64:96:
         cb:74:80:7d:7c:a7:51:fe:29:0e:87:10:a1:08:4a:31:0a:35:
         ac:bf:1a:4b:3a:3f:0b:8a:aa:96:68:29:b8:1b:6a:03:01:87:
         6e:71:dc:dd:b6:26:d9:18:e9:34:8a:8e:36:3b:bc:fa:51:bc:
         00:9a:86:5b:75:d0:1e:1e:a1:2d:40:6f:9f:11:d5:de:a3:62:
         91:12:2d:c7:e6:37:d2:1f:33:74:9c:a8:e7:f5:2b:91:c9:54:
         c7:7a:5e:47:45:55:07:5d:59:b3:ce:15:f4:30:9c:0d:9a:d5:
         c5:16:ab:e1:e0:33:75:cc:a6:76:e4:8b:ac:2f:6f:9f:f4:42:
         48:25:9d:37:34:06:a3:48:73:9d:2a:39:5c:b7:aa:91:6a:69:
         6b:31:ad:c9:63:1b:db:b8:52:1a:25:8f:3d:7a:bf:fe:eb:a6:
         62:8e:c9:a0:40:ff:42:52:25:9f:db:db:92:87:03:c6:3b:c7:
         78:3d:02:54:2e:0c:f2:ed:1c:12:b5:79:83:5f:03:2b:6b:4c:
         71:8a:38:ec:18:04:ff:33:6d:56:c8:af:6e:cb:01:55:1b:dd:
         2f:05:0f:13:ce:77:45:f9:35:2d:31:7d:d9:7f:a1:be:8a:5e:
         13:a9:9e:95
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL83MCetWqQfEH0cYU/iWK4ItvK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGQjc5MUExNDU1ODIzNDQ5NTRERjk1MDY3RUJFNEY3
QzU2N0VDQjAeFw0yNDAzMDUxODAyMTJaFw0yNTAzMDQxODA3MTJaMDMxMTAvBgNV
BAMTKEU0RjA2Q0I4OTkxRDgzN0RCREU1Qjk5OTNERTcxMERERUI4NzMyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKIHTpIQYM5vSeYnLx78Mm4Y/
8w0XsRNSiMj4qZu90yfmWqz36PO6SSKmqZqWP2MbqnCOZ7m5dfi6tosC7D7EczSj
sZUO5yNzI/3Bo1vmbfN6QgvJ2FthneYWgP1tSnNlI3tm8Dls8P0GFAYgkNLE8wHE
E0ZnltT6gDjD1tHmJG33LhfXlPqIZ054Q+TdP43yh6amSCQ4fpOKmX8b0gIhrI+n
jZ++3hdYNLFBV8cpnGVbh/eqLGgVEi3lKPplX4etHQOtVq3/6HtW1H9N/8o4Ac7p
13iETyHTT1uScRxj4Y4PeLzx+Zv/DbzLbvh1ImZX7Fmo/fnKooICAgqBk4zBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5PBsuJkdg3295bmZPecQ3euHMhIwHwYDVR0j
BBgwFoAUnvt5GhRVgjRJVN+VBn6+T3xWfsswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTIyRDE1ODc4NUFBQjE3MDRGNzA3NTNCRDRENUFGRjk5
MEVBOUI5NDgyOUIxRkRERTFEODZCRUI2NjgwQzVGLzAvOUVGQjc5MUExNDU1ODIz
NDQ5NTRERjk1MDY3RUJFNEY3QzU2N0VDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RUZCNzkxQTE0NTU4MjM0NDk1
NERGOTUwNjdFQkU0RjdDNTY3RUNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyMkQxNTg3ODVBQUIxNzA0RjcwNzUzQkQ0RDVBRkY5OTBFQTlCOTQ4
MjlCMUZEREUxRDg2QkVCNjY4MEM1Ri8wLzMxMzkzMDJlMzEzODM0MmUzMjMwMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvrjL
MA0GCSqGSIb3DQEBCwUAA4IBAQA7gUKn1TGC4aZLhe58XEf5ZJbLdIB9fKdR/ikO
hxChCEoxCjWsvxpLOj8LiqqWaCm4G2oDAYducdzdtibZGOk0io42O7z6UbwAmoZb
ddAeHqEtQG+fEdXeo2KREi3H5jfSHzN0nKjn9SuRyVTHel5HRVUHXVmzzhX0MJwN
mtXFFqvh4DN1zKZ25IusL2+f9EJIJZ03NAajSHOdKjlct6qRamlrMa3JYxvbuFIa
JY89er/+66ZijsmgQP9CUiWf29uShwPGO8d4PQJULgzy7RwStXmDXwMra0xxijjs
GAT/M21WyK9uywFVG90vBQ8TzndF+TUtMX3Zf6G+il4TqZ6V
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org