Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
File:                     3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa (raw, json)
Hash identifier:          n9q4N6pMvYRnxSjW4eCGO2LwUE9cPN1Botc/O7j8gKc=
Subject key identifier:   AE:F4:B1:BB:3E:93:82:20:9E:34:20:CC:71:B8:50:D9:54:3C:D7:78
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       660381B96C152DD22F9CDDDCA1D244ED4DBF7748
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     60022
IP address blocks:        190.121.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:03:81:b9:6c:15:2d:d2:2f:9c:dd:dc:a1:d2:44:ed:4d:bf:77:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=AEF4B1BB3E9382209E3420CC71B850D9543CD778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:8d:45:c7:45:b6:a9:b5:04:35:e4:64:68:
                    5f:e4:59:d5:f5:b4:ac:e1:1d:e5:cd:5d:eb:8d:02:
                    f7:84:4b:f3:5e:81:69:d7:00:8a:05:81:b5:fa:2a:
                    6e:f9:56:75:d9:da:9c:a9:d6:78:89:0e:85:d7:50:
                    51:c8:ca:72:92:61:32:72:60:76:8d:ed:e8:61:64:
                    0b:42:30:b5:5f:46:5d:2f:13:2a:b4:f9:a6:74:c0:
                    9c:d1:27:47:1a:c7:7e:85:ba:96:32:1b:3a:97:fe:
                    f1:25:fb:96:46:3a:f7:dc:71:96:d5:45:53:50:24:
                    92:a3:01:8e:4f:30:c4:60:3c:35:6e:c3:77:52:54:
                    20:80:00:d9:89:70:23:b6:8f:d5:c0:c9:ac:cc:1e:
                    b3:ce:9b:cb:f1:1b:84:58:c1:6e:e1:4b:93:d9:c0:
                    1c:c3:b4:b8:ff:8c:b8:9d:70:f0:62:68:cc:9d:ac:
                    70:ea:c4:2f:da:a2:23:06:7d:27:f5:3a:94:f8:d7:
                    45:03:f6:25:b4:b4:36:13:55:af:3b:05:ff:8f:28:
                    3d:6b:45:8a:29:07:e1:47:d7:01:02:f5:a1:d2:7c:
                    f8:2f:19:4c:2e:3e:a1:2a:a8:a0:c5:5c:72:61:ce:
                    5b:43:cf:aa:60:e9:fe:e6:f2:92:3f:4d:ad:cc:b9:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:B1:BB:3E:93:82:20:9E:34:20:CC:71:B8:50:D9:54:3C:D7:78
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:11:be:37:2c:34:60:d4:a7:e7:eb:6c:5a:7c:8a:96:94:
         2e:74:b7:8d:fc:4c:c3:8d:29:93:f0:bd:d2:3d:9b:9c:f3:17:
         85:e4:97:4c:d7:00:10:5d:a4:91:3f:47:db:4b:79:f2:df:54:
         3b:8b:db:18:e1:cd:be:50:33:30:d9:31:22:8c:9f:c4:58:7b:
         50:d9:cd:45:1b:39:a2:1d:e5:f1:f9:3a:5b:b2:0e:cf:48:aa:
         99:db:4f:59:67:f5:f8:45:37:f3:19:ea:d8:9c:7f:29:c4:42:
         d1:4d:62:93:15:ff:ba:e8:86:f1:c0:c6:d1:b5:9d:2c:0c:dc:
         43:2a:01:c1:15:eb:14:64:29:73:0b:c9:75:a1:bc:b0:e4:ab:
         1d:81:74:1b:5f:de:30:25:06:8d:9c:f8:3a:08:98:da:a3:97:
         8d:4a:d8:e8:18:b5:93:eb:dd:b3:98:17:36:7b:21:60:b8:c7:
         ed:83:dd:da:da:fc:9f:71:2e:52:48:dd:a5:d7:ad:22:c0:5a:
         e2:19:20:f4:ec:52:28:1d:45:d1:44:ff:21:21:2a:fb:56:35:
         44:63:7b:b1:93:be:4b:da:36:cf:38:f1:48:1a:99:cb:60:e5:
         50:0d:e2:78:f8:87:61:15:02:2a:26:52:4f:81:04:02:bd:98:
         26:00:4f:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZgOBuWwVLdIvnN3codJE7U2/d0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RDA2QzI0QUYxQzI5RDIyMzI5MjY4OUY0MjAxRkRC
Q0MwQzA5MTAeFw0yNDAzMDUxNzU5MjNaFw0yNTAzMDQxODA0MjNaMDMxMTAvBgNV
BAMTKEFFRjRCMUJCM0U5MzgyMjA5RTM0MjBDQzcxQjg1MEQ5NTQzQ0Q3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbe41Fx0W2qbUENeRkaF/kWdX1
tKzhHeXNXeuNAveES/NegWnXAIoFgbX6Km75VnXZ2pyp1niJDoXXUFHIynKSYTJy
YHaN7ehhZAtCMLVfRl0vEyq0+aZ0wJzRJ0cax36FupYyGzqX/vEl+5ZGOvfccZbV
RVNQJJKjAY5PMMRgPDVuw3dSVCCAANmJcCO2j9XAyazMHrPOm8vxG4RYwW7hS5PZ
wBzDtLj/jLidcPBiaMydrHDqxC/aoiMGfSf1OpT410UD9iW0tDYTVa87Bf+PKD1r
RYopB+FH1wEC9aHSfPgvGUwuPqEqqKDFXHJhzltDz6pg6f7m8pI/Ta3MuS2fAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrvSxuz6TgiCeNCDMcbhQ2VQ813gwHwYDVR0j
BBgwFoAUMF0Gwkrxwp0iMpJon0IB/bzAwJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTJDOUFEMDdFRDg2M0ZFMzcxNENEMjQyRjE1MUFGODBG
RUQ5MUIxQzgzRjI3RUZGRjYzNUVFRTNGRDlGMzI3LzAvMzA1RDA2QzI0QUYxQzI5
RDIyMzI5MjY4OUY0MjAxRkRCQ0MwQzA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDVEMDZDMjRBRjFDMjlEMjIz
MjkyNjg5RjQyMDFGREJDQzBDMDkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyQzlBRDA3RUQ4NjNGRTM3MTRDRDI0MkYxNTFBRjgwRkVEOTFCMUM4
M0YyN0VGRkY2MzVFRUUzRkQ5RjMyNy8wLzMxMzkzMDJlMzEzMjMxMmUzMjMxMzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMwMzAzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvnnW
MA0GCSqGSIb3DQEBCwUAA4IBAQBLwhG+Nyw0YNSn5+tsWnyKlpQudLeN/EzDjSmT
8L3SPZuc8xeF5JdM1wAQXaSRP0fbS3ny31Q7i9sY4c2+UDMw2TEijJ/EWHtQ2c1F
GzmiHeXx+Tpbsg7PSKqZ209ZZ/X4RTfzGerYnH8pxELRTWKTFf+66IbxwMbRtZ0s
DNxDKgHBFesUZClzC8l1obyw5KsdgXQbX94wJQaNnPg6CJjao5eNStjoGLWT692z
mBc2eyFguMftg93a2vyfcS5SSN2l160iwFriGSD07FIoHUXRRP8hISr7VjVEY3ux
k75L2jbPOPFIGpnLYOVQDeJ4+IdhFQIqJlJPgQQCvZgmAE+7
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org