Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e3131322e302f32302d3234203d3e203238303338.roa
File:                     3139302e302e3131322e302f32302d3234203d3e203238303338.roa (raw, json)
Hash identifier:          RXfTyjNyzzJkTDN28NY6CsboK6l/7LgK+qTm7GR1fD8=
Subject key identifier:   70:F3:5E:BF:E5:56:60:BC:77:0B:4D:E1:7D:A3:D7:5B:85:31:DB:C2
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       475749723DCAEB2D1D4CF5A61953F8DF57750CBC
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e3131322e302f32302d3234203d3e203238303338.roa
Signing time:             Tue 05 Mar 2024 18:02:34 +0000
ROA not before:           Tue 05 Mar 2024 17:57:34 +0000
ROA not after:            Tue 04 Mar 2025 18:02:34 +0000
asID:                     28038
IP address blocks:        190.0.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:49:72:3d:ca:eb:2d:1d:4c:f5:a6:19:53:f8:df:57:75:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Mar  5 17:57:34 2024 GMT
            Not After : Mar  4 18:02:34 2025 GMT
        Subject: CN=70F35EBFE55660BC770B4DE17DA3D75B8531DBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:54:2d:c6:1e:9b:5c:b7:dd:bc:a9:fa:e9:
                    6a:9c:bd:74:5d:c6:5b:ce:18:04:4c:53:de:b4:30:
                    7c:54:2c:4b:d6:c9:e4:e1:28:c2:08:b3:02:2e:86:
                    46:c4:0c:43:74:e1:06:e6:b3:eb:46:ed:ac:64:16:
                    9a:f6:5b:d6:34:57:f5:86:20:fb:6d:44:da:11:22:
                    62:fc:ad:61:a1:cc:40:c1:df:67:a1:6f:ce:d3:6d:
                    8e:a9:b7:ee:0c:b5:6c:ac:f1:ae:4e:01:51:b5:25:
                    48:fa:35:9f:20:ac:9f:d1:40:6d:8f:4b:3d:e8:a8:
                    41:b6:4c:42:23:5c:0b:1b:6a:10:4c:20:06:83:52:
                    c8:b2:f2:56:88:9a:07:7b:f3:49:3a:57:06:4e:c6:
                    f5:2d:14:7e:da:00:93:89:84:fa:d0:97:04:f4:20:
                    8e:a4:86:05:a8:af:f6:80:d3:39:11:3f:21:52:31:
                    b4:1b:8b:71:ff:61:42:16:04:8a:3d:a5:fa:65:32:
                    d2:41:90:f2:2d:3a:ba:3f:27:5b:34:d2:e6:fa:1a:
                    c3:38:b0:ad:39:69:82:97:c5:0e:38:fd:bc:d7:65:
                    76:36:51:f4:0d:a2:74:e3:87:7f:d1:e9:c8:e1:eb:
                    d1:0c:5b:30:98:f8:d6:38:ac:26:65:d6:4a:af:bd:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:5E:BF:E5:56:60:BC:77:0B:4D:E1:7D:A3:D7:5B:85:31:DB:C2
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e3131322e302f32302d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:a2:47:18:b5:44:d2:6a:b6:41:ac:b5:0c:4c:f8:74:e0:
         e2:fc:48:d5:62:5a:31:4b:cb:cb:b0:09:9e:41:6c:ac:3f:0d:
         b7:f4:c7:5f:57:61:2e:41:d6:11:12:cb:03:b5:5a:5b:09:ba:
         b6:05:dd:28:a0:66:81:36:cd:31:46:f8:b0:c4:9b:b9:b9:00:
         f1:75:e4:cc:fc:73:88:36:55:16:34:64:17:16:9f:d8:4b:19:
         74:20:9a:15:8e:f4:b8:4d:2b:37:39:18:48:66:08:9b:ed:73:
         8b:0e:26:49:8c:b4:33:6d:dc:c1:55:1e:c7:f1:10:4d:13:d2:
         3a:6e:d2:36:cc:61:0d:89:a1:fd:9a:55:17:65:94:e9:13:0b:
         c4:97:6d:f6:b5:81:98:ed:55:07:d9:91:42:3e:e3:37:b4:41:
         b6:07:c8:56:03:8b:8a:a8:e2:c2:af:9f:3b:34:0d:0b:36:ea:
         de:0f:a2:aa:76:5d:27:07:12:52:69:c1:e9:e6:73:93:cd:1e:
         97:ad:af:29:8c:d1:7a:b3:82:c2:be:01:08:27:84:5c:c9:2f:
         78:20:e9:d3:b2:10:31:f0:d4:13:51:de:e8:6b:7c:35:96:53:
         05:19:ad:bc:16:11:e6:72:4d:40:e5:10:cd:39:aa:e5:71:69:
         d6:5d:1a:ce
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUR1dJcj3K6y0dTPWmGVP431d1DLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IzRDY2MzA1RkNEOEYxOTc0RTFFNEFEOTJEOEQ0RjE4
N0JBNTFFODAeFw0yNDAzMDUxNzU3MzRaFw0yNTAzMDQxODAyMzRaMDMxMTAvBgNV
BAMTKDcwRjM1RUJGRTU1NjYwQkM3NzBCNERFMTdEQTNENzVCODUzMURCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXlQtxh6bXLfdvKn66WqcvXRd
xlvOGARMU960MHxULEvWyeThKMIIswIuhkbEDEN04Qbms+tG7axkFpr2W9Y0V/WG
IPttRNoRImL8rWGhzEDB32ehb87TbY6pt+4MtWys8a5OAVG1JUj6NZ8grJ/RQG2P
Sz3oqEG2TEIjXAsbahBMIAaDUsiy8laImgd780k6VwZOxvUtFH7aAJOJhPrQlwT0
II6khgWor/aA0zkRPyFSMbQbi3H/YUIWBIo9pfplMtJBkPItOro/J1s00ub6GsM4
sK05aYKXxQ44/bzXZXY2UfQNonTjh3/R6cjh69EMWzCY+NY4rCZl1kqvvY3vAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcPNev+VWYLx3C03hfaPXW4Ux28IwHwYDVR0j
BBgwFoAUyz1mMF/Njxl04eStktjU8Ye6UegwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OUQ0NEYzNjQ5MDcwNUNGMTMzOTI5NTI4QkI2NzkzQzMz
NDREMTBGNzkyNTRCNjI0NjUxMzEyNUExMDQyMDIwLzAvQ0IzRDY2MzA1RkNEOEYx
OTc0RTFFNEFEOTJEOEQ0RjE4N0JBNTFFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjNENjYzMDVGQ0Q4RjE5NzRF
MUU0QUQ5MkQ4RDRGMTg3QkE1MUU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjlENDRGMzY0OTA3MDVDRjEzMzkyOTUyOEJCNjc5M0MzMzQ0RDEwRjc5
MjU0QjYyNDY1MTMxMjVBMTA0MjAyMC8wLzMxMzkzMDJlMzAyZTMxMzEzMjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+AHAwDQYJ
KoZIhvcNAQELBQADggEBABM7okcYtUTSarZBrLUMTPh04OL8SNViWjFLy8uwCZ5B
bKw/Dbf0x19XYS5B1hESywO1WlsJurYF3SigZoE2zTFG+LDEm7m5APF15Mz8c4g2
VRY0ZBcWn9hLGXQgmhWO9LhNKzc5GEhmCJvtc4sOJkmMtDNt3MFVHsfxEE0T0jpu
0jbMYQ2Jof2aVRdllOkTC8SXbfa1gZjtVQfZkUI+4ze0QbYHyFYDi4qo4sKvnzs0
DQs26t4Poqp2XScHElJpwenmc5PNHpetrymM0XqzgsK+AQgnhFzJL3gg6dOyEDHw
1BNR3uhrfDWWUwUZrbwWEeZyTUDlEM05quVxadZdGs4=
-----END CERTIFICATE-----
Generated at Sat May 18 01:29:16 2024 by rpki-client on console-fra.rpki-client.org