Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3139302e3132332e38302e302f32302d3234203d3e203532343434.roa
File:                     3139302e3132332e38302e302f32302d3234203d3e203532343434.roa (raw, json)
Hash identifier:          ZjdmwHKKo4BgYGXQ2hXffJM2mptbObvl6vySFrYAJpI=
Subject key identifier:   BB:2A:78:98:F3:52:2E:C5:C0:5C:BE:E2:B4:A7:67:E9:3D:E9:D9:37
Certificate issuer:       /CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
Certificate serial:       1CAC3FA0E7939A959C6EBC7BBAEEB643E6D92D48
Authority key identifier: B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3139302e3132332e38302e302f32302d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:11:49 +0000
ROA not before:           Tue 05 Mar 2024 18:06:49 +0000
ROA not after:            Tue 04 Mar 2025 18:11:49 +0000
asID:                     52444
IP address blocks:        190.123.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ac:3f:a0:e7:93:9a:95:9c:6e:bc:7b:ba:ee:b6:43:e6:d9:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
        Validity
            Not Before: Mar  5 18:06:49 2024 GMT
            Not After : Mar  4 18:11:49 2025 GMT
        Subject: CN=BB2A7898F3522EC5C05CBEE2B4A767E93DE9D937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:d8:1c:e6:8b:8c:ed:f9:ec:f7:cb:8d:6a:
                    50:1d:a8:73:28:81:16:bb:7b:30:77:4d:ef:45:d4:
                    40:3e:65:38:2d:1c:d0:38:ab:33:85:d7:3e:df:44:
                    8c:d7:0e:8b:aa:ec:47:6a:bc:e7:44:87:8b:26:e2:
                    90:ab:64:c1:23:3b:5e:ee:19:0e:26:82:82:eb:ab:
                    51:c1:ce:fb:c1:bc:9c:13:dc:99:05:ab:e9:77:72:
                    cf:32:71:6f:81:16:a8:a9:b4:c2:51:00:5c:8a:4d:
                    0a:ad:31:35:61:b9:59:27:f0:87:ab:1f:32:cf:f4:
                    c5:e6:2d:ce:8c:76:af:d7:80:c3:27:ba:e3:69:ba:
                    6d:fb:63:29:dc:e0:c9:b6:07:39:44:36:a9:2a:b5:
                    4a:58:d3:fd:40:22:2f:ff:6c:63:68:fe:ca:57:9d:
                    ba:8d:04:81:76:bd:b0:a3:e4:aa:59:52:fe:cb:36:
                    61:c0:59:83:3b:de:84:6f:b1:4e:bc:55:88:8c:77:
                    01:77:7d:db:35:64:b2:0b:80:09:ab:ca:bb:64:2c:
                    8a:f2:46:fc:2c:43:d6:bb:62:b9:4f:aa:ab:64:39:
                    52:2f:34:3c:fe:23:54:36:84:5e:fb:74:5f:de:eb:
                    d4:05:40:e2:9a:8a:4a:e0:5b:f5:8d:e2:00:5f:cc:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:78:98:F3:52:2E:C5:C0:5C:BE:E2:B4:A7:67:E9:3D:E9:D9:37
            X509v3 Authority Key Identifier:
                keyid:B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3139302e3132332e38302e302f32302d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:64:14:48:f3:99:ae:81:09:bc:b6:a4:81:8e:05:0e:6c:
         31:15:5b:49:29:21:18:a5:af:63:7d:9d:01:a7:6b:c2:7c:6e:
         2c:3b:68:28:ca:e2:f5:90:28:ce:0a:f9:b3:e1:f4:94:45:9d:
         c4:de:fc:c3:60:c9:8a:07:ac:41:2e:ee:6e:1b:81:83:23:ad:
         e8:e3:90:ea:10:fa:f1:74:93:0f:2f:19:8b:eb:62:88:51:30:
         14:6f:a5:0b:0d:ec:41:5a:40:69:f1:e6:61:e0:0f:a2:73:2f:
         10:46:e2:89:03:a0:44:39:15:cf:9e:18:d8:86:06:e2:3b:e3:
         2c:32:33:87:76:fd:24:6f:29:7b:2c:fd:da:ed:a3:6e:f7:3d:
         84:83:72:8d:5a:6e:70:59:70:f7:16:7f:8b:12:f3:a7:8b:6b:
         9a:25:ff:ab:45:a8:36:84:b7:59:f7:33:15:6c:b7:52:b5:8d:
         21:4b:c9:f5:8e:3e:7f:ce:67:fd:24:78:58:2d:09:98:40:14:
         ff:1b:52:53:87:f9:aa:e5:60:25:c1:7c:35:99:74:9b:fd:17:
         a2:78:62:ec:68:40:b9:de:b8:21:c3:bb:2a:51:72:06:b4:08:
         1e:af:1d:ac:59:2e:06:13:9a:b0:41:1d:b7:b6:d6:05:fd:04:
         ce:ef:2b:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHKw/oOeTmpWcbrx7uu62Q+bZLUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMzMDMxRUQ0OUM1Q0Q5RDQzOUJEMzgxMDBEMTBCRkQ3
NzlDNDY4MzAeFw0yNDAzMDUxODA2NDlaFw0yNTAzMDQxODExNDlaMDMxMTAvBgNV
BAMTKEJCMkE3ODk4RjM1MjJFQzVDMDVDQkVFMkI0QTc2N0U5M0RFOUQ5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNtgc5ouM7fns98uNalAdqHMo
gRa7ezB3Te9F1EA+ZTgtHNA4qzOF1z7fRIzXDouq7EdqvOdEh4sm4pCrZMEjO17u
GQ4mgoLrq1HBzvvBvJwT3JkFq+l3cs8ycW+BFqiptMJRAFyKTQqtMTVhuVkn8Ier
HzLP9MXmLc6Mdq/XgMMnuuNpum37Yync4Mm2BzlENqkqtUpY0/1AIi//bGNo/spX
nbqNBIF2vbCj5KpZUv7LNmHAWYM73oRvsU68VYiMdwF3fds1ZLILgAmryrtkLIry
RvwsQ9a7YrlPqqtkOVIvNDz+I1Q2hF77dF/e69QFQOKaikrgW/WN4gBfzFfpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuyp4mPNSLsXAXL7itKdn6T3p2TcwHwYDVR0j
BBgwFoAUszAx7UnFzZ1Dm9OBANEL/XecRoMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QzNEQ0QxMzRENkMyQkJDMTUyOTU3MDk1MDQ4MzREQkFE
N0FDMzNEOTVBRUM4MjI4NTY0RDA5ODY5QzE3RTJDLzAvQjMzMDMxRUQ0OUM1Q0Q5
RDQzOUJEMzgxMDBEMTBCRkQ3NzlDNDY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzMwMzFFRDQ5QzVDRDlENDM5
QkQzODEwMEQxMEJGRDc3OUM0NjgzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEMzRENEMTM0RDZDMkJCQzE1Mjk1NzA5NTA0ODM0REJBRDdBQzMzRDk1
QUVDODIyODU2NEQwOTg2OUMxN0UyQy8wLzMxMzkzMDJlMzEzMjMzMmUzODMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL57UDAN
BgkqhkiG9w0BAQsFAAOCAQEAe3xkFEjzma6BCby2pIGOBQ5sMRVbSSkhGKWvY32d
AadrwnxuLDtoKMri9ZAozgr5s+H0lEWdxN78w2DJigesQS7ubhuBgyOt6OOQ6hD6
8XSTDy8Zi+tiiFEwFG+lCw3sQVpAafHmYeAPonMvEEbiiQOgRDkVz54Y2IYG4jvj
LDIzh3b9JG8peyz92u2jbvc9hINyjVpucFlw9xZ/ixLzp4trmiX/q0WoNoS3Wfcz
FWy3UrWNIUvJ9Y4+f85n/SR4WC0JmEAU/xtSU4f5quVgJcF8NZl0m/0Xonhi7GhA
ud64IcO7KlFyBrQIHq8drFkuBhOasEEdt7bWBf0Ezu8rlA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org