Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/3139302e3131332e3233322e302f32322d3234203d3e203532333838.roa
File:                     3139302e3131332e3233322e302f32322d3234203d3e203532333838.roa (raw, json)
Hash identifier:          mNjhpL2I7MhpdRp3YL77bdmkesLeCdwrcSX28xrp7gE=
Subject key identifier:   97:FA:83:8A:8F:D0:E2:30:E4:1A:0E:3A:DF:77:02:46:53:55:49:B5
Certificate issuer:       /CN=17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921
Certificate serial:       3447ABBA4459147B0529D5CFE034287B3D66F39F
Authority key identifier: 17:D3:DC:5F:F7:FF:3C:C6:F2:C6:84:61:B3:5D:CB:37:05:6D:09:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/3139302e3131332e3233322e302f32322d3234203d3e203532333838.roa
Signing time:             Tue 05 Mar 2024 17:45:13 +0000
ROA not before:           Tue 05 Mar 2024 17:40:13 +0000
ROA not after:            Tue 04 Mar 2025 17:45:13 +0000
asID:                     52388
IP address blocks:        190.113.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:47:ab:ba:44:59:14:7b:05:29:d5:cf:e0:34:28:7b:3d:66:f3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921
        Validity
            Not Before: Mar  5 17:40:13 2024 GMT
            Not After : Mar  4 17:45:13 2025 GMT
        Subject: CN=97FA838A8FD0E230E41A0E3ADF770246535549B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:90:52:41:c7:17:15:ca:0c:6d:a6:02:2f:
                    77:68:9b:8d:9c:5a:b7:f0:3c:c7:f1:e8:fa:6a:df:
                    5f:66:73:8d:f9:9e:6f:8f:a7:53:52:df:0d:00:b3:
                    57:ee:b9:d9:42:7f:73:e7:c2:9c:66:9b:38:53:0a:
                    4b:f5:54:c9:fd:7a:6d:88:fe:ae:cd:cb:98:96:df:
                    98:fd:8e:90:a6:03:d3:d9:b4:34:4e:0e:1e:72:cb:
                    a0:81:5e:f3:8a:06:95:59:19:e4:34:12:24:f9:45:
                    8e:98:53:de:fd:86:cd:3e:dd:62:fd:5e:4a:ee:38:
                    ba:18:84:b4:eb:ed:dd:ab:15:be:08:34:67:d5:b2:
                    49:6e:f0:1e:5c:b8:70:91:aa:7b:3b:c4:ce:43:7c:
                    29:73:b9:a6:62:bc:f6:80:8c:8c:a2:aa:a6:26:fd:
                    51:24:c8:4b:33:c3:90:4c:8e:5b:1b:5d:ec:4c:5b:
                    ce:6c:d2:76:6e:5f:b6:2b:09:ea:67:25:26:b7:3d:
                    a1:22:4d:33:41:47:21:e7:2d:b1:78:0d:bc:71:2a:
                    20:a9:9b:66:e2:fe:8b:df:14:ee:cc:dc:4f:e4:b8:
                    27:2f:d2:fc:cd:a4:ad:a3:7f:34:28:7c:34:5d:9f:
                    ba:09:e6:38:a2:2c:a9:32:2f:73:9e:d1:ea:bc:6d:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:83:8A:8F:D0:E2:30:E4:1A:0E:3A:DF:77:02:46:53:55:49:B5
            X509v3 Authority Key Identifier:
                keyid:17:D3:DC:5F:F7:FF:3C:C6:F2:C6:84:61:B3:5D:CB:37:05:6D:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17D3DC5FF7FF3CC6F2C68461B35DCB37056D0921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B267B2F68808C485FEB14DBAE07F5B3E7271F22CC510EA315B94DB7ABDDADB2/0/3139302e3131332e3233322e302f32322d3234203d3e203532333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ac:65:9c:c4:12:49:0e:f6:4f:95:25:5b:21:20:63:a0:47:
         2b:e9:82:d3:1d:43:b3:1c:68:65:05:75:04:95:12:68:6b:4a:
         c3:4c:b5:08:9a:4e:c6:1f:d6:8e:b0:cc:4e:0e:8b:c8:e2:cd:
         6b:10:3b:b3:54:74:9d:c2:63:f8:e6:e8:ad:f0:13:5a:91:48:
         fa:20:bc:a7:57:5e:af:86:54:f5:34:8a:3b:e8:c1:43:81:ec:
         07:5e:23:84:17:60:92:8d:7a:03:a7:d2:b1:b8:a4:b6:b5:e6:
         36:79:b2:04:1a:9e:fa:6b:4a:a9:13:ef:bf:5f:68:44:18:87:
         9a:77:e5:4d:59:8e:2a:e9:3a:c3:ac:7c:79:ea:e0:6a:2e:4c:
         65:52:67:e6:f8:bc:fc:75:bb:84:64:15:77:ef:11:80:22:b0:
         b1:46:d0:0f:60:ee:90:27:c4:02:a6:b0:9e:f7:f6:9b:7b:11:
         c4:5f:ba:8e:08:c1:1e:19:6d:10:26:5e:5c:a8:83:b5:2d:a9:
         2d:20:02:dc:38:c3:f7:c0:1b:12:64:97:95:1f:32:66:96:d0:
         12:94:b7:40:ff:f0:b4:7f:14:28:8c:3c:a1:be:1f:2c:9e:37:
         5b:7a:5e:84:d7:46:18:82:3f:4d:53:3e:60:f1:82:05:c5:a3:
         00:9f:29:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNEerukRZFHsFKdXP4DQoez1m858wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEM0RDNUZGN0ZGM0NDNkYyQzY4NDYxQjM1RENCMzcw
NTZEMDkyMTAeFw0yNDAzMDUxNzQwMTNaFw0yNTAzMDQxNzQ1MTNaMDMxMTAvBgNV
BAMTKDk3RkE4MzhBOEZEMEUyMzBFNDFBMEUzQURGNzcwMjQ2NTM1NTQ5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUpBSQccXFcoMbaYCL3dom42c
WrfwPMfx6Ppq319mc435nm+Pp1NS3w0As1fuudlCf3PnwpxmmzhTCkv1VMn9em2I
/q7Ny5iW35j9jpCmA9PZtDRODh5yy6CBXvOKBpVZGeQ0EiT5RY6YU979hs0+3WL9
XkruOLoYhLTr7d2rFb4INGfVsklu8B5cuHCRqns7xM5DfClzuaZivPaAjIyiqqYm
/VEkyEszw5BMjlsbXexMW85s0nZuX7YrCepnJSa3PaEiTTNBRyHnLbF4DbxxKiCp
m2bi/ovfFO7M3E/kuCcv0vzNpK2jfzQofDRdn7oJ5jiiLKkyL3Oe0eq8bdMBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUl/qDio/Q4jDkGg4633cCRlNVSbUwHwYDVR0j
BBgwFoAUF9PcX/f/PMbyxoRhs13LNwVtCSEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjI2N0IyRjY4ODA4QzQ4NUZFQjE0REJBRTA3RjVCM0U3
MjcxRjIyQ0M1MTBFQTMxNUI5NERCN0FCRERBREIyLzAvMTdEM0RDNUZGN0ZGM0ND
NkYyQzY4NDYxQjM1RENCMzcwNTZEMDkyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xN0QzREM1RkY3RkYzQ0M2RjJD
Njg0NjFCMzVEQ0IzNzA1NkQwOTIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkIyNjdCMkY2ODgwOEM0ODVGRUIxNERCQUUwN0Y1QjNFNzI3MUYyMkND
NTEwRUEzMTVCOTREQjdBQkREQURCMi8wLzMxMzkzMDJlMzEzMTMzMmUzMjMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnHo
MA0GCSqGSIb3DQEBCwUAA4IBAQB4rGWcxBJJDvZPlSVbISBjoEcr6YLTHUOzHGhl
BXUElRJoa0rDTLUImk7GH9aOsMxODovI4s1rEDuzVHSdwmP45uit8BNakUj6ILyn
V16vhlT1NIo76MFDgewHXiOEF2CSjXoDp9KxuKS2teY2ebIEGp76a0qpE++/X2hE
GIead+VNWY4q6TrDrHx56uBqLkxlUmfm+Lz8dbuEZBV37xGAIrCxRtAPYO6QJ8QC
prCe9/abexHEX7qOCMEeGW0QJl5cqIO1LaktIALcOMP3wBsSZJeVHzJmltASlLdA
//C0fxQojDyhvh8snjdbel6E10YYgj9NUz5g8YIFxaMAnymc
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:28 2024 by rpki-client on console-fra.rpki-client.org