Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138322e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3138322e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          Odq6VhjHGelqGDodooVmFfgu2blp8TvD1YqIVMhpQjs=
Subject key identifier:   BE:EE:6F:16:A5:E4:2B:65:8D:C6:71:C9:16:0A:8F:3F:BA:B4:A2:7E
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       1856D5E5D4C937B364C2E3D01A49F22F718F180A
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138322e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:10 +0000
ROA not before:           Tue 05 Mar 2024 17:41:10 +0000
ROA not after:            Tue 04 Mar 2025 17:46:10 +0000
asID:                     262589
IP address blocks:        190.94.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:56:d5:e5:d4:c9:37:b3:64:c2:e3:d0:1a:49:f2:2f:71:8f:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:10 2024 GMT
            Not After : Mar  4 17:46:10 2025 GMT
        Subject: CN=BEEE6F16A5E42B658DC671C9160A8F3FBAB4A27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:32:80:47:f8:62:01:96:d5:66:9c:52:e5:
                    b3:cd:85:a5:8e:59:ef:49:76:c7:eb:14:14:f0:0b:
                    3c:cf:22:d9:5d:1e:ca:dd:e5:aa:3b:f7:c6:f4:88:
                    d5:fa:c7:9d:ce:ef:17:21:e4:96:f3:57:9c:e1:eb:
                    07:17:b0:a9:e8:fd:f1:b9:b9:ee:fc:0f:03:09:26:
                    20:50:9c:76:67:8a:6b:46:25:56:ab:2e:d3:bf:9a:
                    d3:06:48:52:ce:0b:27:00:2b:25:9f:f5:cc:cb:e5:
                    e6:7a:01:7d:98:99:c9:d7:40:2b:12:b4:f1:a3:02:
                    47:f4:fe:25:33:49:85:4b:3c:67:a1:03:19:77:48:
                    7e:0b:a6:ac:e4:57:4d:54:0c:d4:60:3b:87:48:bf:
                    de:6b:ab:51:b1:8c:12:58:ee:db:c2:ce:d3:67:50:
                    c5:11:51:0e:f6:a5:f3:05:de:a0:8d:e8:3e:8a:a0:
                    a4:5b:99:73:73:53:ed:75:ad:2c:9f:66:49:8c:81:
                    2a:5b:61:cb:9e:94:c3:8a:f1:8b:b4:ba:56:39:fd:
                    ff:9c:5c:29:41:06:e3:54:f6:b3:35:53:9d:62:d0:
                    91:57:98:ab:2a:44:de:a5:a3:bd:73:e2:54:18:39:
                    4f:11:21:7e:a2:0c:03:73:5e:7b:b2:e0:ed:79:1f:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:6F:16:A5:E4:2B:65:8D:C6:71:C9:16:0A:8F:3F:BA:B4:A2:7E
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138322e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c5:42:4d:8d:75:03:8e:9e:58:32:5e:92:10:ec:fb:9a:6d:
         0e:2e:d4:29:39:71:f9:04:ce:40:a4:52:87:39:fe:83:ed:53:
         ba:a9:e0:7f:0c:48:4c:08:3f:36:de:3f:33:cc:3e:58:24:fd:
         9f:a3:bb:df:63:e4:41:23:9f:94:c4:35:43:2c:4c:34:a7:47:
         b4:00:18:cb:f5:a0:90:fd:7f:e0:b4:5d:1c:6a:98:35:86:74:
         45:0f:04:40:ab:4f:f0:11:20:c2:f0:21:56:d0:a8:cd:4f:7e:
         ad:bc:4e:af:14:d7:28:9d:b8:5b:80:9a:86:dd:5b:0f:fe:9b:
         01:87:58:4e:8f:49:b2:5e:d4:8d:7d:09:bd:d1:fb:9c:88:bc:
         6c:ba:47:2f:1c:66:99:ce:35:9b:72:40:2d:34:a2:4b:01:ce:
         47:16:d0:76:94:3d:4a:4d:7c:13:de:ee:aa:4f:42:c1:1b:ad:
         cb:38:85:d2:79:f2:e1:93:67:17:3c:00:84:2e:6b:6f:95:ed:
         1c:f9:4a:0c:1a:76:5c:75:b8:b2:43:a4:d4:07:ab:89:cd:11:
         1a:6c:da:b1:e0:ee:7b:9b:48:69:ae:a4:4c:9f:9d:a6:cf:be:
         d5:c5:93:83:f8:ee:23:fa:42:f7:17:f8:ab:95:d5:c6:19:de:
         1c:50:74:e4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGFbV5dTJN7NkwuPQGknyL3GPGAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1MEIzQTgwRUZCNEJGNDhDMjE1MzU0QjE4QkNGMDI5
Nzc4NkREQjAeFw0yNDAzMDUxNzQxMTBaFw0yNTAzMDQxNzQ2MTBaMDMxMTAvBgNV
BAMTKEJFRUU2RjE2QTVFNDJCNjU4REM2NzFDOTE2MEE4RjNGQkFCNEEyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNzKAR/hiAZbVZpxS5bPNhaWO
We9JdsfrFBTwCzzPItldHsrd5ao798b0iNX6x53O7xch5JbzV5zh6wcXsKno/fG5
ue78DwMJJiBQnHZnimtGJVarLtO/mtMGSFLOCycAKyWf9czL5eZ6AX2YmcnXQCsS
tPGjAkf0/iUzSYVLPGehAxl3SH4LpqzkV01UDNRgO4dIv95rq1GxjBJY7tvCztNn
UMURUQ72pfMF3qCN6D6KoKRbmXNzU+11rSyfZkmMgSpbYcuelMOK8Yu0ulY5/f+c
XClBBuNU9rM1U51i0JFXmKsqRN6lo71z4lQYOU8RIX6iDANzXnuy4O15H0KbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvu5vFqXkK2WNxnHJFgqPP7q0on4wHwYDVR0j
BBgwFoAUS1CzqA77S/SMIVNUsYvPApd4bdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MDUzRTBFNTg0NDMzMzE2MzRGRUU3QjQ3NjZFQkNCMEU2
OEVBNEMxRDg3MTFCQkUwOTczMTFDOTZCODAxMjE2LzAvNEI1MEIzQTgwRUZCNEJG
NDhDMjE1MzU0QjE4QkNGMDI5Nzc4NkREQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjUwQjNBODBFRkI0QkY0OEMy
MTUzNTRCMThCQ0YwMjk3Nzg2RERCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjA1M0UwRTU4NDQzMzMxNjM0RkVFN0I0NzY2RUJDQjBFNjhFQTRDMUQ4
NzExQkJFMDk3MzExQzk2QjgwMTIxNi8wLzMxMzkzMDJlMzkzNDJlMzEzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl62
MA0GCSqGSIb3DQEBCwUAA4IBAQAFxUJNjXUDjp5YMl6SEOz7mm0OLtQpOXH5BM5A
pFKHOf6D7VO6qeB/DEhMCD823j8zzD5YJP2fo7vfY+RBI5+UxDVDLEw0p0e0ABjL
9aCQ/X/gtF0capg1hnRFDwRAq0/wESDC8CFW0KjNT36tvE6vFNconbhbgJqG3VsP
/psBh1hOj0myXtSNfQm90fuciLxsukcvHGaZzjWbckAtNKJLAc5HFtB2lD1KTXwT
3u6qT0LBG63LOIXSefLhk2cXPACELmtvle0c+UoMGnZcdbiyQ6TUB6uJzREabNqx
4O57m0hprqRMn52mz77VxZOD+O4j+kL3F/irldXGGd4cUHTk
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org