Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
File:                     3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa (raw, json)
Hash identifier:          GaabeYkHzPbqrPY+R1k+5XYLKOjSfTZjgR+iR+ITE9E=
Subject key identifier:   94:89:A4:38:D8:30:C5:6F:81:D7:ED:C3:CB:94:B0:70:80:74:68:50
Certificate issuer:       /CN=822238317AA58BF50F02E72654D92F5AAF15F921
Certificate serial:       1178DB192A2D08827B66AC2343EEFAF3DEED90F2
Authority key identifier: 82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa
Signing time:             Tue 05 Mar 2024 17:54:16 +0000
ROA not before:           Tue 05 Mar 2024 17:49:16 +0000
ROA not after:            Tue 04 Mar 2025 17:54:16 +0000
asID:                     270058
IP address blocks:        190.115.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:db:19:2a:2d:08:82:7b:66:ac:23:43:ee:fa:f3:de:ed:90:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822238317AA58BF50F02E72654D92F5AAF15F921
        Validity
            Not Before: Mar  5 17:49:16 2024 GMT
            Not After : Mar  4 17:54:16 2025 GMT
        Subject: CN=9489A438D830C56F81D7EDC3CB94B07080746850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:23:58:10:de:93:15:48:0c:60:f3:69:3e:
                    3d:e1:a1:8e:32:27:0a:9b:8f:c0:47:f5:31:10:92:
                    9d:f5:fa:f4:6e:e8:25:79:ae:f2:bf:68:5b:e9:f0:
                    9b:bb:a4:72:e2:3a:a1:b5:16:02:37:f1:42:7c:e3:
                    00:96:ee:53:f4:ae:61:f8:1f:5c:52:79:4d:63:76:
                    06:67:26:2c:8f:d1:47:23:6f:2b:d9:bf:06:a9:29:
                    1c:69:f4:be:84:f2:93:76:42:8f:19:c7:25:10:57:
                    e8:ee:3c:ec:d3:6e:54:f8:c9:ea:93:8c:77:7c:5c:
                    f8:c2:96:32:8b:56:db:aa:f3:28:17:76:0c:17:ef:
                    67:cd:af:53:9e:00:ce:30:3a:f0:57:3b:02:b3:0e:
                    02:fd:f3:af:5e:7d:4c:9c:38:45:82:58:91:53:26:
                    d2:42:89:0f:d2:5f:4f:da:8f:e6:ab:4d:7e:12:ca:
                    4a:c1:6e:93:7f:5a:79:a7:b4:aa:da:ad:bd:04:2c:
                    d5:52:0e:ce:ba:43:8f:ec:d0:e7:8a:5b:e0:37:34:
                    f3:23:18:77:ae:3a:42:1d:10:af:8c:0b:bf:a1:9c:
                    3b:c1:07:8a:0f:a3:18:be:d0:72:84:9a:d0:29:a7:
                    f7:d9:1d:5c:e6:22:57:ea:13:45:21:9d:ef:3d:0f:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:A4:38:D8:30:C5:6F:81:D7:ED:C3:CB:94:B0:70:80:74:68:50
            X509v3 Authority Key Identifier:
                keyid:82:22:38:31:7A:A5:8B:F5:0F:02:E7:26:54:D9:2F:5A:AF:15:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/822238317AA58BF50F02E72654D92F5AAF15F921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822238317AA58BF50F02E72654D92F5AAF15F921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6585A30E6FD6C96D1508DEB064146BC3AA241E0611159508E425A1CA97BC7969/0/3139302e3131352e3230302e302f32322d3232203d3e20323730303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:f2:80:ec:b7:6c:06:de:e0:ea:6c:6a:23:ef:39:68:b1:
         bf:d1:d7:a1:25:f9:59:d1:6a:f1:e3:a0:d9:74:b5:dd:bb:5e:
         be:c0:06:98:4e:a8:44:2f:4e:c5:1f:6a:4c:41:d5:ab:cb:37:
         6d:af:af:2a:8d:50:20:5e:a4:3c:4a:6b:36:c2:0a:02:20:39:
         92:11:13:7a:d2:08:68:57:6a:31:54:d7:50:ea:fb:63:d1:81:
         d8:59:ee:d1:4f:2c:e4:7e:40:24:16:52:1d:44:53:1d:b7:cb:
         74:bf:6b:7c:aa:34:24:a0:9f:68:6c:57:d7:66:57:1c:ed:b7:
         7b:fa:61:8c:ee:bc:7e:55:c0:8c:68:4b:e5:47:98:45:00:60:
         8f:e6:a4:43:45:ee:9f:27:03:2e:cb:53:f4:61:c7:54:bf:eb:
         d6:5e:01:1e:6b:94:13:3a:67:59:df:61:5d:df:ea:38:03:26:
         7f:ae:72:74:73:1a:5f:d7:0b:d1:72:29:00:c9:d3:c0:d8:fe:
         10:89:d2:6d:4c:46:41:bc:22:cb:e8:38:87:c4:17:d8:c7:db:
         59:24:b3:c8:54:f7:ee:80:b2:a5:0e:a2:55:16:6d:81:83:17:
         c4:28:31:c2:55:f0:e8:d4:35:6a:43:b5:70:e8:1d:07:48:40:
         a0:fd:83:cb
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEXjbGSotCIJ7ZqwjQ+76897tkPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyMjM4MzE3QUE1OEJGNTBGMDJFNzI2NTREOTJGNUFB
RjE1RjkyMTAeFw0yNDAzMDUxNzQ5MTZaFw0yNTAzMDQxNzU0MTZaMDMxMTAvBgNV
BAMTKDk0ODlBNDM4RDgzMEM1NkY4MUQ3RURDM0NCOTRCMDcwODA3NDY4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzCNYEN6TFUgMYPNpPj3hoY4y
Jwqbj8BH9TEQkp31+vRu6CV5rvK/aFvp8Ju7pHLiOqG1FgI38UJ84wCW7lP0rmH4
H1xSeU1jdgZnJiyP0UcjbyvZvwapKRxp9L6E8pN2Qo8ZxyUQV+juPOzTblT4yeqT
jHd8XPjCljKLVtuq8ygXdgwX72fNr1OeAM4wOvBXOwKzDgL9869efUycOEWCWJFT
JtJCiQ/SX0/aj+arTX4SykrBbpN/WnmntKrarb0ELNVSDs66Q4/s0OeKW+A3NPMj
GHeuOkIdEK+MC7+hnDvBB4oPoxi+0HKEmtApp/fZHVzmIlfqE0Uhne89D/kNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUlImkONgwxW+B1+3Dy5SwcIB0aFAwHwYDVR0j
BBgwFoAUgiI4MXqli/UPAucmVNkvWq8V+SEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NTg1QTMwRTZGRDZDOTZEMTUwOERFQjA2NDE0NkJDM0FB
MjQxRTA2MTExNTk1MDhFNDI1QTFDQTk3QkM3OTY5LzAvODIyMjM4MzE3QUE1OEJG
NTBGMDJFNzI2NTREOTJGNUFBRjE1RjkyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjIyMzgzMTdBQTU4QkY1MEYw
MkU3MjY1NEQ5MkY1QUFGMTVGOTIxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjU4NUEzMEU2RkQ2Qzk2RDE1MDhERUIwNjQxNDZCQzNBQTI0MUUwNjEx
MTU5NTA4RTQyNUExQ0E5N0JDNzk2OS8wLzMxMzkzMDJlMzEzMTM1MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzAzMDM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
c8gwDQYJKoZIhvcNAQELBQADggEBALEc8oDst2wG3uDqbGoj7zlosb/R16El+VnR
avHjoNl0td27Xr7ABphOqEQvTsUfakxB1avLN22vryqNUCBepDxKazbCCgIgOZIR
E3rSCGhXajFU11Dq+2PRgdhZ7tFPLOR+QCQWUh1EUx23y3S/a3yqNCSgn2hsV9dm
Vxztt3v6YYzuvH5VwIxoS+VHmEUAYI/mpENF7p8nAy7LU/Rhx1S/69ZeAR5rlBM6
Z1nfYV3f6jgDJn+ucnRzGl/XC9FyKQDJ08DY/hCJ0m1MRkG8IsvoOIfEF9jH21kk
s8hU9+6AsqUOolUWbYGDF8QoMcJV8OjUNWpDtXDoHQdIQKD9g8s=
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org