Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa
File:                     3139302e39342e3138382e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          0yxa6Y4/GAhXHaLog7LSjvhke1wx+G7zoi+d09U2zxY=
Subject key identifier:   5D:D0:6E:FD:C6:58:9B:A8:25:A8:80:9B:22:B7:6D:EE:C9:3D:A0:E9
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       3C3BD78D5A736FD78772FEA9FA7DDD516FDE641B
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa
Signing time:             Tue 05 Mar 2024 17:46:09 +0000
ROA not before:           Tue 05 Mar 2024 17:41:09 +0000
ROA not after:            Tue 04 Mar 2025 17:46:09 +0000
asID:                     20940
IP address blocks:        190.94.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:d7:8d:5a:73:6f:d7:87:72:fe:a9:fa:7d:dd:51:6f:de:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:09 2024 GMT
            Not After : Mar  4 17:46:09 2025 GMT
        Subject: CN=5DD06EFDC6589BA825A8809B22B76DEEC93DA0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:4e:36:48:20:2d:68:b2:c9:5b:c9:21:99:
                    7c:25:90:f0:86:3a:27:99:7f:37:fe:54:e3:69:46:
                    05:f9:71:c2:4f:c1:94:c8:95:bb:93:bf:40:60:ac:
                    48:c2:1d:aa:3b:15:b5:b6:bc:7b:c3:64:ce:af:2b:
                    70:a8:62:2a:79:c6:e6:6e:c3:a8:b1:7b:be:b4:ee:
                    c7:63:c6:06:c0:f1:cc:60:33:18:ae:3d:8b:bf:2e:
                    30:94:bd:7b:63:f0:7a:55:79:1f:85:84:36:08:f1:
                    59:8d:b6:fc:73:16:53:5e:1e:4b:b5:e5:a5:7c:d4:
                    6f:4e:14:a3:5a:1c:a2:11:94:db:4b:0b:67:82:83:
                    2d:31:8e:f1:8f:f7:c5:ed:5b:a1:b0:c3:c9:03:45:
                    dd:15:8b:e2:c7:29:3d:12:5f:7b:9b:86:0b:90:d9:
                    f4:14:45:c4:f3:c4:48:5a:7f:9e:8a:5d:26:2d:23:
                    44:df:09:4f:28:76:9a:c7:68:0d:e0:ea:e9:3a:94:
                    7e:1f:76:60:f3:dd:22:48:b3:fa:21:2f:65:75:c9:
                    ee:5a:fb:ce:b1:ed:28:84:8b:34:4a:96:da:07:fd:
                    bb:ca:d3:ff:fe:ea:9c:fe:55:50:a2:88:89:03:9e:
                    9e:4d:b6:d5:50:2d:f3:df:f3:fa:b0:5a:c3:0d:95:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:6E:FD:C6:58:9B:A8:25:A8:80:9B:22:B7:6D:EE:C9:3D:A0:E9
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:6d:94:a7:87:5d:0d:c6:a3:2b:ea:b9:ce:bc:67:cb:97:
         7d:8a:f2:58:f8:bc:b9:b1:ed:b0:9b:c0:73:95:84:d2:a7:f3:
         13:25:a1:9d:81:41:96:64:b6:23:26:44:3f:39:3b:7f:55:fe:
         43:86:95:b7:b0:31:20:fe:63:a2:a9:7e:9b:8a:62:cb:ac:7f:
         79:2f:e2:ba:44:16:8d:bd:de:a8:1a:e0:a1:53:11:3d:26:04:
         53:ca:91:b8:54:ff:6a:62:fe:c2:7a:c1:cf:26:63:20:09:d0:
         33:53:66:89:77:84:04:9e:6b:3c:10:94:de:a9:bb:db:10:fd:
         eb:49:36:40:d8:dc:6b:40:4f:21:03:3b:24:11:74:aa:86:0e:
         96:32:38:21:2f:83:fe:4d:af:8d:7b:9c:67:03:47:61:41:48:
         38:d5:03:b4:b5:82:8e:c0:54:23:4e:0c:58:3c:06:b1:27:1b:
         75:54:f0:9e:f8:08:e3:70:ce:41:67:2b:bc:9f:b1:3c:cc:5c:
         9e:08:98:50:d5:25:ec:c7:90:c2:24:b5:a9:09:7f:e4:ad:ac:
         60:50:8b:a2:ae:fc:c6:eb:08:22:f7:29:bb:bd:df:8f:4d:13:
         72:a3:eb:55:65:01:a1:94:62:d1:fa:3e:74:69:98:09:9f:86:
         ae:d0:cf:2a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPDvXjVpzb9eHcv6p+n3dUW/eZBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1MEIzQTgwRUZCNEJGNDhDMjE1MzU0QjE4QkNGMDI5
Nzc4NkREQjAeFw0yNDAzMDUxNzQxMDlaFw0yNTAzMDQxNzQ2MDlaMDMxMTAvBgNV
BAMTKDVERDA2RUZEQzY1ODlCQTgyNUE4ODA5QjIyQjc2REVFQzkzREEwRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftk42SCAtaLLJW8khmXwlkPCG
OieZfzf+VONpRgX5ccJPwZTIlbuTv0BgrEjCHao7FbW2vHvDZM6vK3CoYip5xuZu
w6ixe7607sdjxgbA8cxgMxiuPYu/LjCUvXtj8HpVeR+FhDYI8VmNtvxzFlNeHku1
5aV81G9OFKNaHKIRlNtLC2eCgy0xjvGP98XtW6Gww8kDRd0Vi+LHKT0SX3ubhguQ
2fQURcTzxEhaf56KXSYtI0TfCU8odprHaA3g6uk6lH4fdmDz3SJIs/ohL2V1ye5a
+86x7SiEizRKltoH/bvK0//+6pz+VVCiiIkDnp5NttVQLfPf8/qwWsMNlVoJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXdBu/cZYm6glqICbIrdt7sk9oOkwHwYDVR0j
BBgwFoAUS1CzqA77S/SMIVNUsYvPApd4bdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MDUzRTBFNTg0NDMzMzE2MzRGRUU3QjQ3NjZFQkNCMEU2
OEVBNEMxRDg3MTFCQkUwOTczMTFDOTZCODAxMjE2LzAvNEI1MEIzQTgwRUZCNEJG
NDhDMjE1MzU0QjE4QkNGMDI5Nzc4NkREQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjUwQjNBODBFRkI0QkY0OEMy
MTUzNTRCMThCQ0YwMjk3Nzg2RERCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjA1M0UwRTU4NDQzMzMxNjM0RkVFN0I0NzY2RUJDQjBFNjhFQTRDMUQ4
NzExQkJFMDk3MzExQzk2QjgwMTIxNi8wLzMxMzkzMDJlMzkzNDJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5evDAN
BgkqhkiG9w0BAQsFAAOCAQEAAM9tlKeHXQ3Goyvquc68Z8uXfYryWPi8ubHtsJvA
c5WE0qfzEyWhnYFBlmS2IyZEPzk7f1X+Q4aVt7AxIP5joql+m4piy6x/eS/iukQW
jb3eqBrgoVMRPSYEU8qRuFT/amL+wnrBzyZjIAnQM1NmiXeEBJ5rPBCU3qm72xD9
60k2QNjca0BPIQM7JBF0qoYOljI4IS+D/k2vjXucZwNHYUFIONUDtLWCjsBUI04M
WDwGsScbdVTwnvgI43DOQWcrvJ+xPMxcngiYUNUl7MeQwiS1qQl/5K2sYFCLoq78
xusIIvcpu73fj00TcqPrVWUBoZRi0fo+dGmYCZ+GrtDPKg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org