Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa
File:                     3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          9BHNahxbh8XFyWa/f7xMlmjyFqe/2D/2KsPyY76Gnnw=
Subject key identifier:   83:9B:B7:5F:AE:8C:AB:5F:40:17:18:BA:BE:33:C8:A3:AC:B2:FB:61
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       2124A40EDDEFEA912D4B745C2D9C470305920902
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa
Signing time:             Tue 05 Mar 2024 17:50:21 +0000
ROA not before:           Tue 05 Mar 2024 17:45:21 +0000
ROA not after:            Tue 04 Mar 2025 17:50:21 +0000
asID:                     262208
IP address blocks:        190.13.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:24:a4:0e:dd:ef:ea:91:2d:4b:74:5c:2d:9c:47:03:05:92:09:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Mar  5 17:45:21 2024 GMT
            Not After : Mar  4 17:50:21 2025 GMT
        Subject: CN=839BB75FAE8CAB5F401718BABE33C8A3ACB2FB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:ea:40:e8:a7:47:94:4e:6d:a6:d1:c1:00:
                    84:65:4d:60:54:18:0e:26:8d:4e:4b:8f:cc:dd:05:
                    72:39:f1:43:d0:31:68:5f:63:6f:8b:fb:db:c9:69:
                    e9:05:e7:37:12:52:1b:30:29:fc:dd:3e:9e:2a:98:
                    49:ec:3d:b2:39:7f:49:60:4a:ca:2f:c0:80:b5:2b:
                    37:7a:c9:79:12:ff:d1:ce:19:7d:9b:ca:0a:18:c0:
                    91:55:54:34:3c:b7:ef:32:7f:29:4f:53:75:98:9e:
                    2c:9e:ee:e7:3d:70:aa:a2:d9:e5:6e:e6:39:6c:6a:
                    61:2f:ad:27:3e:b1:39:be:44:80:a7:e2:c0:99:a9:
                    20:e4:0d:67:76:e0:aa:38:40:f2:53:d7:a4:51:98:
                    5c:b0:ef:91:0d:74:ec:3c:bc:0a:ed:a5:76:21:57:
                    02:a4:44:59:5d:b5:45:22:3e:1f:2f:67:41:1c:87:
                    32:f3:58:9d:77:f3:4a:6b:1d:1c:3f:d5:f5:28:b6:
                    7c:db:08:77:d9:50:b8:eb:4e:e2:29:bd:e3:33:c4:
                    41:d7:3c:d2:67:4a:43:59:6f:54:50:7c:3f:91:81:
                    6c:e7:55:80:ab:68:83:e7:86:5c:cf:1d:fb:e8:90:
                    c8:8c:bc:08:79:68:22:99:5a:67:7a:9d:8f:ce:72:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:B7:5F:AE:8C:AB:5F:40:17:18:BA:BE:33:C8:A3:AC:B2:FB:61
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:0b:39:f4:2d:9b:47:bf:49:ca:55:aa:07:be:c9:95:c7:25:
         d0:3b:ff:c7:f9:e8:30:7a:0c:80:3b:dc:d4:00:ff:dd:17:5f:
         f0:96:1c:b7:91:82:67:c9:c8:90:27:69:20:90:ba:56:ce:e5:
         99:f4:d8:84:39:80:1a:f9:1f:48:fe:dd:29:f4:13:8e:ca:e6:
         22:2c:ee:2d:16:09:45:9f:cc:a1:ed:c1:1e:f4:09:f9:91:56:
         c4:70:54:fb:a2:52:52:02:4b:0e:3c:ef:6e:ff:f4:07:6a:74:
         e7:82:3b:78:54:2b:09:19:61:26:7e:e4:83:f4:34:d9:cf:69:
         db:ed:2c:64:df:12:04:a6:bc:1f:31:91:7e:54:c1:79:eb:3e:
         95:ce:50:92:e7:78:20:88:d6:e0:bf:c8:0f:a3:ae:b8:29:92:
         f2:dd:3b:93:26:36:4d:26:0c:1a:d7:8f:c3:63:c6:0f:b5:97:
         18:1a:c9:3d:05:97:ec:cb:5e:6d:d2:ed:29:65:d5:11:2a:88:
         c8:7d:fb:c0:35:41:b8:70:a7:51:2d:3f:43:02:7f:4d:e5:ca:
         99:fd:cf:60:f6:13:c0:52:82:65:ee:03:b3:35:cf:11:63:89:
         e4:f5:f5:ce:97:c1:65:8d:4e:0d:19:ff:9d:ce:0b:9f:ad:b0:
         b5:55:f2:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUISSkDt3v6pEtS3RcLZxHAwWSCQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE4Q0E1NkUzQjdCRjg4Q0QxMzQ3OTcxREJFRTg5NkYz
Njc3MTRDNzAeFw0yNDAzMDUxNzQ1MjFaFw0yNTAzMDQxNzUwMjFaMDMxMTAvBgNV
BAMTKDgzOUJCNzVGQUU4Q0FCNUY0MDE3MThCQUJFMzNDOEEzQUNCMkZCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmepA6KdHlE5tptHBAIRlTWBU
GA4mjU5Lj8zdBXI58UPQMWhfY2+L+9vJaekF5zcSUhswKfzdPp4qmEnsPbI5f0lg
SsovwIC1Kzd6yXkS/9HOGX2bygoYwJFVVDQ8t+8yfylPU3WYniye7uc9cKqi2eVu
5jlsamEvrSc+sTm+RICn4sCZqSDkDWd24Ko4QPJT16RRmFyw75ENdOw8vArtpXYh
VwKkRFldtUUiPh8vZ0EchzLzWJ1380prHRw/1fUotnzbCHfZULjrTuIpveMzxEHX
PNJnSkNZb1RQfD+RgWznVYCraIPnhlzPHfvokMiMvAh5aCKZWmd6nY/OcoOHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUg5u3X66Mq19AFxi6vjPIo6yy+2EwHwYDVR0j
BBgwFoAUSoylbjt7+IzRNHlx2+6JbzZ3FMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEZGMzM2QTZCMkY5RkFBOUE3OTgwODI5ODMyRERFNzU3
ODE0QzE3NUU0MjBFOTMxN0REQTUzMTA2Njg0MDQ3LzAvNEE4Q0E1NkUzQjdCRjg4
Q0QxMzQ3OTcxREJFRTg5NkYzNjc3MTRDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QThDQTU2RTNCN0JGODhDRDEz
NDc5NzFEQkVFODk2RjM2NzcxNEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhGRjMzNkE2QjJGOUZBQTlBNzk4MDgyOTgzMkRERTc1NzgxNEMxNzVF
NDIwRTkzMTdEREE1MzEwNjY4NDA0Ny8wLzMxMzkzMDJlMzEzMzJlMzIzMTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvg3a
MA0GCSqGSIb3DQEBCwUAA4IBAQBFCzn0LZtHv0nKVaoHvsmVxyXQO//H+egwegyA
O9zUAP/dF1/wlhy3kYJnyciQJ2kgkLpWzuWZ9NiEOYAa+R9I/t0p9BOOyuYiLO4t
FglFn8yh7cEe9An5kVbEcFT7olJSAksOPO9u//QHanTngjt4VCsJGWEmfuSD9DTZ
z2nb7Sxk3xIEprwfMZF+VMF56z6VzlCS53ggiNbgv8gPo664KZLy3TuTJjZNJgwa
14/DY8YPtZcYGsk9BZfsy15t0u0pZdURKojIffvANUG4cKdRLT9DAn9N5cqZ/c9g
9hPAUoJl7gOzNc8RY4nk9fXOl8FljU4NGf+dzgufrbC1VfK8
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org