Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa
File:                     3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          SBex+OWH8HelscvllKhyxxBTDUXbAzp45QK+fu+X+uk=
Subject key identifier:   86:18:AD:ED:76:B2:FD:12:C1:8F:A4:76:70:00:21:EC:CB:53:81:A0
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       3D6E41351A13E37C94292A71AA75A3D662E9E04C
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:51:48 +0000
ROA not before:           Tue 05 Mar 2024 17:46:48 +0000
ROA not after:            Tue 04 Mar 2025 17:51:48 +0000
asID:                     16629
IP address blocks:        190.171.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6e:41:35:1a:13:e3:7c:94:29:2a:71:aa:75:a3:d6:62:e9:e0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:48 2024 GMT
            Not After : Mar  4 17:51:48 2025 GMT
        Subject: CN=8618ADED76B2FD12C18FA476700021ECCB5381A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:7f:ae:25:b6:ce:bf:02:2e:c4:34:0b:7d:
                    27:61:0d:86:42:b4:a1:6c:04:3a:2f:4d:f1:05:8d:
                    36:1e:0b:06:98:79:1d:dd:5a:50:40:45:27:59:10:
                    62:2a:87:50:6e:4e:25:b5:1d:67:df:7d:74:95:9b:
                    2e:db:f0:86:aa:46:36:90:5d:05:80:a9:f1:d5:23:
                    98:db:01:dd:3f:e5:23:a7:e3:df:81:b8:6a:2f:71:
                    56:a1:a3:40:f5:51:f8:5c:76:bf:22:16:ab:f9:2a:
                    da:ab:c2:49:81:17:5b:ea:62:70:0a:27:98:7e:00:
                    db:5b:7e:3d:c6:a4:1c:39:f2:46:d6:12:cb:d8:f3:
                    12:c5:6d:fd:d7:b0:9b:ae:b8:74:a2:7d:d9:bf:26:
                    21:b1:d9:04:9c:05:2b:c5:ec:a9:64:31:ac:a1:b2:
                    19:3d:e4:e0:1d:94:cc:d9:f7:af:e8:79:1a:bf:f2:
                    cb:ef:e8:f0:65:55:c8:22:f6:59:9d:b2:4f:f1:87:
                    ce:96:1f:ec:2d:1d:a6:33:e2:44:35:0b:45:be:7c:
                    ce:98:ff:0c:83:39:12:c4:7a:62:f0:a1:04:c7:5a:
                    9d:35:15:79:34:66:a5:0d:b6:e4:4f:f4:9b:8f:94:
                    32:46:0a:2a:c6:9b:1e:ff:35:36:18:ba:eb:e0:88:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:18:AD:ED:76:B2:FD:12:C1:8F:A4:76:70:00:21:EC:CB:53:81:A0
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3139302e3137312e3132382e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:02:7a:c8:71:23:68:04:e2:1e:42:69:14:9a:d3:9e:dc:18:
         cd:09:65:b2:0a:50:a0:93:31:7c:eb:1d:8e:9c:4d:38:14:85:
         d7:84:aa:c5:86:a6:79:e7:74:4b:7e:1b:27:fa:80:af:1a:c4:
         5f:1d:ca:48:4a:32:ef:4b:f9:23:2e:96:c4:14:95:eb:cc:81:
         05:8b:31:3a:a2:30:5a:b7:7e:0c:89:59:09:61:7c:8a:3c:bb:
         9b:27:4d:ec:6c:f9:c2:1b:42:bd:bb:67:da:74:e6:82:50:08:
         ce:36:78:3d:5d:f2:55:ff:ab:b2:e1:67:f4:85:9f:b9:7a:f7:
         a3:5e:2a:4f:8d:db:21:51:51:09:23:db:50:90:67:b1:49:04:
         80:e4:be:e2:ad:0b:11:c9:d8:5f:62:69:dc:cc:15:c5:d7:88:
         bd:b0:7e:b9:e4:5d:2f:31:bf:f4:0b:f7:86:ce:8d:81:36:15:
         1e:2e:47:61:fe:31:b8:ed:b8:a4:b3:d9:0f:0e:87:38:76:6c:
         18:01:19:09:81:d5:34:d5:53:e9:31:c4:b2:fd:1f:ff:a6:29:
         b7:fb:0e:9a:3c:a3:0c:fa:54:83:63:7e:34:91:8a:71:1c:3c:
         0a:bb:67:0c:56:aa:30:9f:7e:ee:61:1f:f8:be:bd:79:49:43:
         b6:1d:55:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPW5BNRoT43yUKSpxqnWj1mLp4EwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNDAzMDUxNzQ2NDhaFw0yNTAzMDQxNzUxNDhaMDMxMTAvBgNV
BAMTKDg2MThBREVENzZCMkZEMTJDMThGQTQ3NjcwMDAyMUVDQ0I1MzgxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCh3+uJbbOvwIuxDQLfSdhDYZC
tKFsBDovTfEFjTYeCwaYeR3dWlBARSdZEGIqh1BuTiW1HWfffXSVmy7b8IaqRjaQ
XQWAqfHVI5jbAd0/5SOn49+BuGovcVaho0D1Ufhcdr8iFqv5KtqrwkmBF1vqYnAK
J5h+ANtbfj3GpBw58kbWEsvY8xLFbf3XsJuuuHSifdm/JiGx2QScBSvF7KlkMayh
shk95OAdlMzZ96/oeRq/8svv6PBlVcgi9lmdsk/xh86WH+wtHaYz4kQ1C0W+fM6Y
/wyDORLEemLwoQTHWp01FXk0ZqUNtuRP9JuPlDJGCirGmx7/NTYYuuvgiKH5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhhit7Xay/RLBj6R2cAAh7MtTgaAwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMxMzkzMDJlMzEzNzMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvquA
MA0GCSqGSIb3DQEBCwUAA4IBAQA3AnrIcSNoBOIeQmkUmtOe3BjNCWWyClCgkzF8
6x2OnE04FIXXhKrFhqZ553RLfhsn+oCvGsRfHcpISjLvS/kjLpbEFJXrzIEFizE6
ojBat34MiVkJYXyKPLubJ03sbPnCG0K9u2fadOaCUAjONng9XfJV/6uy4Wf0hZ+5
evejXipPjdshUVEJI9tQkGexSQSA5L7irQsRydhfYmnczBXF14i9sH655F0vMb/0
C/eGzo2BNhUeLkdh/jG47biks9kPDoc4dmwYARkJgdU01VPpMcSy/R//pim3+w6a
PKMM+lSDY340kYpxHDwKu2cMVqown37uYR/4vr15SUO2HVV6
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org