Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137372e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3137372e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          fvgWBdarLPJXZYPbNHFeZbhddNWyPm2lqzTuCY2+gDQ=
Subject key identifier:   F2:98:C6:C7:C2:D5:23:D3:D2:60:D1:ED:E4:EA:EB:F5:C3:A9:74:BA
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       551CE9B8410FA76D29704CD3143E32FAE8E2B47A
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137372e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:10 +0000
ROA not before:           Tue 05 Mar 2024 17:41:10 +0000
ROA not after:            Tue 04 Mar 2025 17:46:10 +0000
asID:                     262589
IP address blocks:        190.94.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1c:e9:b8:41:0f:a7:6d:29:70:4c:d3:14:3e:32:fa:e8:e2:b4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:10 2024 GMT
            Not After : Mar  4 17:46:10 2025 GMT
        Subject: CN=F298C6C7C2D523D3D260D1EDE4EAEBF5C3A974BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:3f:06:b4:8c:7c:7b:9a:16:77:02:70:d6:
                    55:f7:80:3f:14:aa:09:97:c8:d8:f2:59:44:cb:cf:
                    b4:08:04:21:e8:c3:ac:91:77:a3:d4:f6:92:83:6c:
                    e7:e4:52:bf:47:11:94:c4:7f:60:ed:aa:7e:09:ed:
                    ff:8f:a9:25:d4:59:1b:32:44:82:7c:d7:6b:24:30:
                    a3:66:04:6b:dc:68:05:cd:86:af:5a:a3:9f:a5:06:
                    ca:ca:52:b9:a2:15:96:54:f5:5e:ba:79:8a:6f:c8:
                    01:a1:4b:f3:74:a6:7f:00:0a:1d:37:56:51:98:00:
                    d3:fc:e0:ec:56:b2:43:d0:51:fe:1f:66:48:1b:92:
                    d0:f9:a6:7d:41:d3:89:8f:c0:4b:24:c3:59:c6:ab:
                    93:26:ca:36:42:1e:a1:eb:1c:6e:4b:6a:f9:dd:90:
                    42:95:cd:bb:46:80:70:4e:76:32:a5:54:ec:55:f9:
                    28:6c:55:15:24:95:71:b9:86:ff:42:19:e2:a1:39:
                    2c:07:9e:53:37:27:17:b5:e7:f9:f9:82:fb:49:1c:
                    9d:23:0a:20:3f:6d:23:20:40:82:81:34:ca:99:f9:
                    45:41:d2:d5:39:75:40:13:07:99:b4:2c:ea:e4:c3:
                    68:3e:36:e8:8b:ea:6d:1a:f8:4c:30:28:46:ae:b7:
                    22:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:C6:C7:C2:D5:23:D3:D2:60:D1:ED:E4:EA:EB:F5:C3:A9:74:BA
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137372e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:60:cd:3e:8f:5f:7b:1f:e3:1a:99:90:f0:c0:8e:b3:59:
         a7:ea:30:2b:9a:8c:12:d6:6a:d2:0a:1b:25:32:ba:0d:7c:0c:
         fe:28:37:c1:5f:26:59:c2:2f:ce:e1:a3:76:2d:84:08:6f:c4:
         63:e8:36:cb:23:4a:c0:e0:2d:2d:c0:4e:c7:51:d8:f6:b5:20:
         50:4b:81:24:09:68:f4:e0:47:2f:94:d7:41:21:96:64:f3:4d:
         47:71:f4:60:53:42:54:23:85:fd:7c:45:63:e7:fc:32:5f:f4:
         55:cc:91:67:2a:7a:fe:f8:73:a0:fe:a7:b7:11:db:1d:54:b3:
         25:71:f8:b0:ec:1d:51:11:eb:1d:45:48:8c:0f:01:82:a2:af:
         89:a8:88:96:fb:ee:71:9a:f4:3a:66:8d:1a:11:21:3d:80:9b:
         a2:bb:50:ae:60:a2:61:24:5d:ad:31:fe:6a:36:62:63:82:e2:
         e8:f3:8e:a0:d4:17:7b:d1:2f:59:8f:8e:27:d1:03:2a:7a:82:
         b9:e3:7e:26:2b:2e:6b:1d:26:a0:ef:cc:a1:ae:a2:a2:87:86:
         53:8a:7f:5f:d4:30:42:1b:c1:b8:2d:6b:93:52:93:18:a4:64:
         a0:12:95:13:bf:e3:67:c6:4e:cc:10:56:ff:56:1e:af:4b:a8:
         1c:61:90:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVRzpuEEPp20pcEzTFD4y+ujitHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1MEIzQTgwRUZCNEJGNDhDMjE1MzU0QjE4QkNGMDI5
Nzc4NkREQjAeFw0yNDAzMDUxNzQxMTBaFw0yNTAzMDQxNzQ2MTBaMDMxMTAvBgNV
BAMTKEYyOThDNkM3QzJENTIzRDNEMjYwRDFFREU0RUFFQkY1QzNBOTc0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimD8GtIx8e5oWdwJw1lX3gD8U
qgmXyNjyWUTLz7QIBCHow6yRd6PU9pKDbOfkUr9HEZTEf2Dtqn4J7f+PqSXUWRsy
RIJ812skMKNmBGvcaAXNhq9ao5+lBsrKUrmiFZZU9V66eYpvyAGhS/N0pn8ACh03
VlGYANP84OxWskPQUf4fZkgbktD5pn1B04mPwEskw1nGq5MmyjZCHqHrHG5Lavnd
kEKVzbtGgHBOdjKlVOxV+ShsVRUklXG5hv9CGeKhOSwHnlM3Jxe15/n5gvtJHJ0j
CiA/bSMgQIKBNMqZ+UVB0tU5dUATB5m0LOrkw2g+NuiL6m0a+EwwKEautyINAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8pjGx8LVI9PSYNHt5Orr9cOpdLowHwYDVR0j
BBgwFoAUS1CzqA77S/SMIVNUsYvPApd4bdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MDUzRTBFNTg0NDMzMzE2MzRGRUU3QjQ3NjZFQkNCMEU2
OEVBNEMxRDg3MTFCQkUwOTczMTFDOTZCODAxMjE2LzAvNEI1MEIzQTgwRUZCNEJG
NDhDMjE1MzU0QjE4QkNGMDI5Nzc4NkREQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjUwQjNBODBFRkI0QkY0OEMy
MTUzNTRCMThCQ0YwMjk3Nzg2RERCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjA1M0UwRTU4NDQzMzMxNjM0RkVFN0I0NzY2RUJDQjBFNjhFQTRDMUQ4
NzExQkJFMDk3MzExQzk2QjgwMTIxNi8wLzMxMzkzMDJlMzkzNDJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl6x
MA0GCSqGSIb3DQEBCwUAA4IBAQBU4mDNPo9fex/jGpmQ8MCOs1mn6jArmowS1mrS
ChslMroNfAz+KDfBXyZZwi/O4aN2LYQIb8Rj6DbLI0rA4C0twE7HUdj2tSBQS4Ek
CWj04EcvlNdBIZZk801HcfRgU0JUI4X9fEVj5/wyX/RVzJFnKnr++HOg/qe3Edsd
VLMlcfiw7B1REesdRUiMDwGCoq+JqIiW++5xmvQ6Zo0aESE9gJuiu1CuYKJhJF2t
Mf5qNmJjguLo846g1Bd70S9Zj44n0QMqeoK5434mKy5rHSag78yhrqKih4ZTin9f
1DBCG8G4LWuTUpMYpGSgEpUTv+Nnxk7MEFb/Vh6vS6gcYZBG
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org