Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f32322d3232203d3e203232303437.roa
File:                     3139302e3136302e302e302f32322d3232203d3e203232303437.roa (raw, json)
Hash identifier:          n7y30JfVhTDiZAxdMNRcFG40OalJkyXrCZSAThKyeMA=
Subject key identifier:   B9:C2:8F:49:40:8B:FE:7F:7A:44:59:98:2C:CF:49:22:A7:8F:7E:A5
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       2C6C6075693BDA9A0372E9D1718827C359455F95
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f32322d3232203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:19 +0000
ROA not before:           Tue 05 Mar 2024 18:04:19 +0000
ROA not after:            Tue 04 Mar 2025 18:09:19 +0000
asID:                     22047
IP address blocks:        190.160.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6c:60:75:69:3b:da:9a:03:72:e9:d1:71:88:27:c3:59:45:5f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:19 2024 GMT
            Not After : Mar  4 18:09:19 2025 GMT
        Subject: CN=B9C28F49408BFE7F7A4459982CCF4922A78F7EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:0b:74:f9:a1:43:d3:02:b3:d4:43:7e:e3:
                    5e:af:45:20:d8:d9:92:bf:b6:3f:99:fc:a8:a7:3b:
                    37:fd:a2:23:e0:41:a3:6e:45:dc:3a:4a:60:69:a0:
                    53:ad:62:55:e8:b9:6e:65:36:c6:f0:64:69:45:48:
                    a8:5f:de:a7:66:ba:de:06:e1:5f:f4:b9:75:6f:87:
                    d4:fd:e4:91:bf:4d:aa:06:88:9b:25:a8:9b:5e:e6:
                    70:77:9f:15:23:40:a2:a2:8d:9b:78:2a:18:39:f4:
                    ec:1d:4b:6c:15:63:6d:e6:2b:28:55:3b:d0:f3:0d:
                    f9:68:c8:e7:b8:55:0c:3a:8b:90:a4:e7:28:20:06:
                    77:ff:24:09:4a:eb:61:c9:65:e8:24:fd:7a:00:87:
                    22:65:fd:72:8d:81:55:e1:dd:c9:6f:04:e5:46:65:
                    d4:83:9b:c3:b8:f3:34:50:c4:c9:b4:48:5e:eb:95:
                    7f:3b:30:b1:e1:8f:7d:80:bb:19:c1:8f:2d:cd:59:
                    e8:83:47:0b:06:b3:4f:03:b6:0c:fc:d6:b9:ba:72:
                    e6:d4:23:02:88:25:62:63:22:bc:b2:91:69:c0:8e:
                    db:c7:f8:db:21:ad:b2:5e:b8:7a:a3:30:61:6d:82:
                    40:49:44:b1:ce:36:59:5d:a7:e0:e9:b4:cd:86:c6:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:8F:49:40:8B:FE:7F:7A:44:59:98:2C:CF:49:22:A7:8F:7E:A5
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f32322d3232203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.160.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:60:9d:58:b8:d6:53:e3:bc:2d:82:18:f4:36:0c:53:a6:
         cd:3e:7b:cc:d9:66:05:d1:85:44:cb:77:81:65:11:48:0f:41:
         e4:15:81:a3:fd:09:63:13:2e:a1:46:b4:6c:01:38:4b:60:b8:
         4c:47:8a:45:68:fb:ce:0b:c6:19:65:1f:44:80:90:d1:a3:98:
         08:73:36:f4:c3:43:ab:a1:4f:59:fc:a6:a1:6c:c2:1b:56:7d:
         fe:fa:1a:9f:6b:11:8f:f4:2f:c2:e9:c9:08:b8:03:1e:a6:9b:
         53:3b:b9:50:84:e3:be:8a:8f:70:dd:0d:bf:a8:a3:94:f9:63:
         78:b6:5c:b4:b5:4f:66:30:d1:0e:be:70:5a:e6:08:d5:21:77:
         57:00:8f:d9:86:d1:f2:15:66:d3:00:74:1b:8e:2c:cc:0d:f1:
         21:fc:97:47:d0:39:1d:e3:3b:fb:21:43:c4:6f:76:a5:a8:d6:
         d4:8f:3e:8d:ee:5b:03:08:9b:3d:82:d1:e2:f4:c7:16:85:75:
         f1:eb:a1:54:7d:02:98:5d:fa:e1:06:60:77:b7:f8:42:38:a9:
         cb:49:a2:73:35:d8:1c:ef:d5:a6:53:86:20:3c:6b:97:17:e8:
         34:bc:4e:f5:31:ee:73:f3:9c:31:12:18:51:ed:19:ff:d0:b6:
         00:92:10:2e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULGxgdWk72poDcunRcYgnw1lFX5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNDAzMDUxODA0MTlaFw0yNTAzMDQxODA5MTlaMDMxMTAvBgNV
BAMTKEI5QzI4RjQ5NDA4QkZFN0Y3QTQ0NTk5ODJDQ0Y0OTIyQTc4RjdFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyQt0+aFD0wKz1EN+416vRSDY
2ZK/tj+Z/KinOzf9oiPgQaNuRdw6SmBpoFOtYlXouW5lNsbwZGlFSKhf3qdmut4G
4V/0uXVvh9T95JG/TaoGiJslqJte5nB3nxUjQKKijZt4Khg59OwdS2wVY23mKyhV
O9DzDfloyOe4VQw6i5Ck5yggBnf/JAlK62HJZegk/XoAhyJl/XKNgVXh3clvBOVG
ZdSDm8O48zRQxMm0SF7rlX87MLHhj32AuxnBjy3NWeiDRwsGs08Dtgz81rm6cubU
IwKIJWJjIryykWnAjtvH+NshrbJeuHqjMGFtgkBJRLHONlldp+DptM2GxqzJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUucKPSUCL/n96RFmYLM9JIqePfqUwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMxMzkzMDJlMzEzNjMwMmUzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzIzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+oAAwDQYJ
KoZIhvcNAQELBQADggEBAB1BYJ1YuNZT47wtghj0NgxTps0+e8zZZgXRhUTLd4Fl
EUgPQeQVgaP9CWMTLqFGtGwBOEtguExHikVo+84LxhllH0SAkNGjmAhzNvTDQ6uh
T1n8pqFswhtWff76Gp9rEY/0L8LpyQi4Ax6mm1M7uVCE476Kj3DdDb+oo5T5Y3i2
XLS1T2Yw0Q6+cFrmCNUhd1cAj9mG0fIVZtMAdBuOLMwN8SH8l0fQOR3jO/shQ8Rv
dqWo1tSPPo3uWwMImz2C0eL0xxaFdfHroVR9Aphd+uEGYHe3+EI4qctJonM12Bzv
1aZThiA8a5cX6DS8TvUx7nPznDESGFHtGf/QtgCSEC4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org