Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa
File:                     3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          +xs+5NN23h8l/eaFtdISIACGjHUbQRfy4E6PVQIHFoA=
Subject key identifier:   8A:6D:91:72:3D:7F:0B:15:A0:59:0B:B7:5A:86:97:F3:8A:E9:E7:E7
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       2F4846B957D7BBBABFC69E99CD9D7E10BB348822
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa
Signing time:             Tue 05 Mar 2024 17:50:21 +0000
ROA not before:           Tue 05 Mar 2024 17:45:21 +0000
ROA not after:            Tue 04 Mar 2025 17:50:21 +0000
asID:                     262208
IP address blocks:        190.13.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:48:46:b9:57:d7:bb:ba:bf:c6:9e:99:cd:9d:7e:10:bb:34:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Mar  5 17:45:21 2024 GMT
            Not After : Mar  4 17:50:21 2025 GMT
        Subject: CN=8A6D91723D7F0B15A0590BB75A8697F38AE9E7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:f1:11:e2:7d:5a:1a:a8:8a:53:2c:e9:f3:
                    ed:45:c5:f2:ea:7d:1b:1a:95:13:8c:89:c9:4b:ae:
                    4c:b8:dd:fa:f7:a4:21:12:26:38:3e:85:9c:7f:75:
                    6c:bb:ed:51:20:71:23:5e:df:85:3e:02:22:5f:5c:
                    09:ed:3f:2a:bc:0a:f1:e1:ee:80:a5:ca:78:ac:72:
                    f3:94:dd:3c:63:cb:6e:66:16:8c:1c:08:2f:d8:2b:
                    dd:89:91:7b:d1:b8:f1:dd:5e:19:2d:4f:92:a5:8b:
                    0f:64:b8:76:53:12:5f:5e:be:69:a2:35:da:20:55:
                    74:52:c9:27:c3:03:9c:a0:58:93:c6:73:bc:32:76:
                    28:d2:f2:f8:62:85:d4:49:e1:7c:d4:43:d9:96:cc:
                    3b:dc:0c:c5:70:1e:ae:2f:31:91:e9:3b:eb:53:cc:
                    fd:ec:70:b9:d2:13:a1:e1:ee:7b:88:bc:2d:4d:48:
                    6c:66:ea:fa:e3:b8:a1:12:2c:ee:3f:ca:fd:7d:e9:
                    f7:78:95:fb:57:29:d8:ce:b9:1e:3b:dd:b7:6e:99:
                    da:61:b0:41:e8:bf:e3:35:43:a6:79:1f:5e:68:87:
                    75:24:eb:4c:ac:e4:05:fc:0c:3b:39:c3:ef:9e:ec:
                    75:25:49:89:a5:fd:9d:3a:a0:24:53:e6:43:d5:77:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:91:72:3D:7F:0B:15:A0:59:0B:B7:5A:86:97:F3:8A:E9:E7:E7
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:80:cb:32:78:8c:5c:fa:7c:ae:3a:21:79:64:ab:6b:41:f5:
         85:1d:2d:fa:ac:7f:98:bb:cb:25:e8:de:5b:2b:59:6a:39:fd:
         56:b0:bf:85:fa:69:e6:92:68:38:63:65:39:8c:63:be:70:1e:
         f7:18:f1:01:8d:18:6e:7d:bc:26:56:7b:bf:0c:71:ff:68:59:
         35:f3:0e:98:69:6f:15:6e:d5:49:37:e4:7b:33:7c:b1:72:15:
         76:0c:d2:cd:d1:ad:14:f3:71:ff:39:a4:f0:d6:e9:89:f0:2c:
         66:0f:e0:fa:13:dc:df:d0:dc:e6:83:84:e1:61:6a:e4:f0:64:
         e7:9e:02:ca:34:b0:8f:bd:54:92:fc:72:31:4a:e8:ed:65:7f:
         1c:cc:de:d7:94:65:08:16:7a:6f:db:7c:67:22:78:26:06:5f:
         9c:30:f2:27:77:17:66:f1:18:81:45:31:5b:db:00:1c:39:a0:
         44:e8:cc:7a:6a:a1:7c:70:09:ef:35:68:21:b4:9d:80:c4:30:
         29:64:8c:07:28:88:bf:9e:b6:b2:71:c2:03:aa:f3:d6:9b:f3:
         ac:5f:1f:9b:fb:d1:b4:eb:f5:75:49:93:44:22:9c:8c:9e:e1:
         10:1f:f7:1f:1c:63:f1:47:34:af:6c:07:99:0d:76:2c:00:2b:
         62:f4:b5:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL0hGuVfXu7q/xp6ZzZ1+ELs0iCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE4Q0E1NkUzQjdCRjg4Q0QxMzQ3OTcxREJFRTg5NkYz
Njc3MTRDNzAeFw0yNDAzMDUxNzQ1MjFaFw0yNTAzMDQxNzUwMjFaMDMxMTAvBgNV
BAMTKDhBNkQ5MTcyM0Q3RjBCMTVBMDU5MEJCNzVBODY5N0YzOEFFOUU3RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ffER4n1aGqiKUyzp8+1FxfLq
fRsalROMiclLrky43fr3pCESJjg+hZx/dWy77VEgcSNe34U+AiJfXAntPyq8CvHh
7oClyniscvOU3Txjy25mFowcCC/YK92JkXvRuPHdXhktT5Kliw9kuHZTEl9evmmi
NdogVXRSySfDA5ygWJPGc7wydijS8vhihdRJ4XzUQ9mWzDvcDMVwHq4vMZHpO+tT
zP3scLnSE6Hh7nuIvC1NSGxm6vrjuKESLO4/yv196fd4lftXKdjOuR473bdumdph
sEHov+M1Q6Z5H15oh3Uk60ys5AX8DDs5w++e7HUlSYml/Z06oCRT5kPVd8JtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUim2Rcj1/CxWgWQu3WoaX84rp5+cwHwYDVR0j
BBgwFoAUSoylbjt7+IzRNHlx2+6JbzZ3FMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEZGMzM2QTZCMkY5RkFBOUE3OTgwODI5ODMyRERFNzU3
ODE0QzE3NUU0MjBFOTMxN0REQTUzMTA2Njg0MDQ3LzAvNEE4Q0E1NkUzQjdCRjg4
Q0QxMzQ3OTcxREJFRTg5NkYzNjc3MTRDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QThDQTU2RTNCN0JGODhDRDEz
NDc5NzFEQkVFODk2RjM2NzcxNEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhGRjMzNkE2QjJGOUZBQTlBNzk4MDgyOTgzMkRERTc1NzgxNEMxNzVF
NDIwRTkzMTdEREE1MzEwNjY4NDA0Ny8wLzMxMzkzMDJlMzEzMzJlMzIzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvg3f
MA0GCSqGSIb3DQEBCwUAA4IBAQCQgMsyeIxc+nyuOiF5ZKtrQfWFHS36rH+Yu8sl
6N5bK1lqOf1WsL+F+mnmkmg4Y2U5jGO+cB73GPEBjRhufbwmVnu/DHH/aFk18w6Y
aW8VbtVJN+R7M3yxchV2DNLN0a0U83H/OaTw1umJ8CxmD+D6E9zf0Nzmg4ThYWrk
8GTnngLKNLCPvVSS/HIxSujtZX8czN7XlGUIFnpv23xnIngmBl+cMPIndxdm8RiB
RTFb2wAcOaBE6Mx6aqF8cAnvNWghtJ2AxDApZIwHKIi/nrayccIDqvPWm/OsXx+b
+9G06/V1SZNEIpyMnuEQH/cfHGPxRzSvbAeZDXYsACti9LUY
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org