Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/3139302e38392e33362e302f32322d3234203d3e20323639393530.roa
File:                     3139302e38392e33362e302f32322d3234203d3e20323639393530.roa (raw, json)
Hash identifier:          KcCSSlLXWr6hu2xBkc1KR5GwQg2Xp/dZ+53ljtRZBQY=
Subject key identifier:   80:31:6C:54:71:71:2D:A9:06:FC:C3:74:97:B4:93:98:F9:07:5D:57
Certificate issuer:       /CN=36C171B261E1BB795D105356800CC5335D46091A
Certificate serial:       676805FADE9DAB1E9A5EBBEAD50BF81CD52E7B24
Authority key identifier: 36:C1:71:B2:61:E1:BB:79:5D:10:53:56:80:0C:C5:33:5D:46:09:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/3139302e38392e33362e302f32322d3234203d3e20323639393530.roa
Signing time:             Tue 05 Mar 2024 18:11:59 +0000
ROA not before:           Tue 05 Mar 2024 18:06:59 +0000
ROA not after:            Tue 04 Mar 2025 18:11:59 +0000
asID:                     269950
IP address blocks:        190.89.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:68:05:fa:de:9d:ab:1e:9a:5e:bb:ea:d5:0b:f8:1c:d5:2e:7b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C171B261E1BB795D105356800CC5335D46091A
        Validity
            Not Before: Mar  5 18:06:59 2024 GMT
            Not After : Mar  4 18:11:59 2025 GMT
        Subject: CN=80316C5471712DA906FCC37497B49398F9075D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:cb:e2:78:0d:eb:79:5c:40:4d:cd:5d:3b:
                    54:57:7f:54:bc:42:e3:79:5a:c8:74:74:78:45:31:
                    98:6b:9f:0d:ce:f5:2f:71:ca:d2:2f:c0:95:66:ac:
                    e3:3d:92:b9:64:8d:5d:86:42:5c:60:4b:a0:8d:1c:
                    8e:b5:e4:8a:f6:a5:8c:b9:5b:89:4e:ca:3c:9f:46:
                    57:6f:b5:be:21:ee:53:d1:26:82:53:00:dc:b1:48:
                    11:06:f6:18:fa:11:d0:f1:34:24:5f:d6:93:5b:ee:
                    54:41:17:b8:27:08:4b:0d:bc:c0:e6:31:04:9d:81:
                    21:9d:d7:51:59:1b:b4:27:59:69:f7:5b:a5:97:fa:
                    6d:84:9d:10:e7:f9:a3:a3:4a:96:4e:69:8c:81:7d:
                    c7:07:ef:a7:3d:fe:a2:c1:c1:fd:de:a1:47:ae:1d:
                    2f:dd:99:e1:85:ba:2e:de:c4:a0:f9:3a:c9:e7:85:
                    95:fb:13:a7:ac:76:7c:2a:ed:4d:14:5b:58:d7:4d:
                    b5:10:8b:ab:2e:ae:1f:f0:6e:5d:3f:c2:2c:e4:b3:
                    43:c2:f9:32:4d:ae:5f:c0:7d:27:62:bc:14:87:3c:
                    27:8a:41:c8:1e:0d:05:fa:08:3c:b9:96:30:7d:0a:
                    77:30:85:d0:0d:5f:f9:c5:c6:fd:29:b9:23:e4:ce:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:6C:54:71:71:2D:A9:06:FC:C3:74:97:B4:93:98:F9:07:5D:57
            X509v3 Authority Key Identifier:
                keyid:36:C1:71:B2:61:E1:BB:79:5D:10:53:56:80:0C:C5:33:5D:46:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/36C171B261E1BB795D105356800CC5335D46091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36C171B261E1BB795D105356800CC5335D46091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9551B7564608940B81FE21B439BF3E8530D70BA42ABD01E8A695A28DC7C18EC6/0/3139302e38392e33362e302f32322d3234203d3e20323639393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:e2:20:57:9b:09:98:8c:f5:a9:ed:2d:b7:41:d2:a6:81:
         0c:33:02:58:98:e2:16:ea:7c:6f:6d:dc:c8:0d:80:6b:6c:a6:
         0c:0b:55:9e:e3:5d:ce:6f:e8:bc:bf:0d:e2:0d:ed:96:ce:98:
         8b:43:27:25:4d:3a:c0:27:3e:27:ea:c2:32:55:1c:4c:62:07:
         dc:79:04:61:70:72:0d:45:30:7f:d2:c0:6d:66:4a:42:a4:51:
         35:56:2f:15:17:d6:0f:56:19:7b:b3:e5:01:9e:61:76:ea:5d:
         71:e4:bd:28:a4:d4:03:dc:f0:d6:71:8d:3b:62:72:77:21:63:
         f6:67:6a:c4:67:cf:1d:08:d6:10:01:31:44:e3:57:54:29:56:
         3d:ff:46:96:96:62:99:8b:e8:7e:c8:ba:eb:64:b4:03:43:76:
         02:b4:2a:ea:8e:7a:0b:cc:e2:87:77:9e:ed:8f:e9:a2:3a:59:
         0f:84:41:51:cd:ca:ae:c5:56:c1:88:d5:ed:e2:7b:e6:a5:5e:
         c3:2a:6c:2b:05:cc:57:4b:e5:32:c9:dc:1d:89:cd:e9:99:42:
         4a:f8:bd:ab:6c:cf:9e:d8:f6:4c:fb:6a:30:85:72:66:ea:67:
         5f:a0:16:37:89:7d:f7:c5:c1:c0:46:b1:99:cd:d7:41:4a:76:
         b0:fa:d0:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZ2gF+t6dqx6aXrvq1Qv4HNUueyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDMTcxQjI2MUUxQkI3OTVEMTA1MzU2ODAwQ0M1MzM1
RDQ2MDkxQTAeFw0yNDAzMDUxODA2NTlaFw0yNTAzMDQxODExNTlaMDMxMTAvBgNV
BAMTKDgwMzE2QzU0NzE3MTJEQTkwNkZDQzM3NDk3QjQ5Mzk4RjkwNzVENTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2svieA3reVxATc1dO1RXf1S8
QuN5Wsh0dHhFMZhrnw3O9S9xytIvwJVmrOM9krlkjV2GQlxgS6CNHI615Ir2pYy5
W4lOyjyfRldvtb4h7lPRJoJTANyxSBEG9hj6EdDxNCRf1pNb7lRBF7gnCEsNvMDm
MQSdgSGd11FZG7QnWWn3W6WX+m2EnRDn+aOjSpZOaYyBfccH76c9/qLBwf3eoUeu
HS/dmeGFui7exKD5OsnnhZX7E6esdnwq7U0UW1jXTbUQi6surh/wbl0/wizks0PC
+TJNrl/AfSdivBSHPCeKQcgeDQX6CDy5ljB9CncwhdANX/nFxv0puSPkzjIxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgDFsVHFxLakG/MN0l7STmPkHXVcwHwYDVR0j
BBgwFoAUNsFxsmHhu3ldEFNWgAzFM11GCRowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTUxQjc1NjQ2MDg5NDBCODFGRTIxQjQzOUJGM0U4NTMw
RDcwQkE0MkFCRDAxRThBNjk1QTI4REM3QzE4RUM2LzAvMzZDMTcxQjI2MUUxQkI3
OTVEMTA1MzU2ODAwQ0M1MzM1RDQ2MDkxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkMxNzFCMjYxRTFCQjc5NUQx
MDUzNTY4MDBDQzUzMzVENDYwOTFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTU1MUI3NTY0NjA4OTQwQjgxRkUyMUI0MzlCRjNFODUzMEQ3MEJBNDJB
QkQwMUU4QTY5NUEyOERDN0MxOEVDNi8wLzMxMzkzMDJlMzgzOTJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5ZJDAN
BgkqhkiG9w0BAQsFAAOCAQEAqMDiIFebCZiM9antLbdB0qaBDDMCWJjiFup8b23c
yA2Aa2ymDAtVnuNdzm/ovL8N4g3tls6Yi0MnJU06wCc+J+rCMlUcTGIH3HkEYXBy
DUUwf9LAbWZKQqRRNVYvFRfWD1YZe7PlAZ5hdupdceS9KKTUA9zw1nGNO2JydyFj
9mdqxGfPHQjWEAExRONXVClWPf9GlpZimYvofsi662S0A0N2ArQq6o56C8zih3ee
7Y/pojpZD4RBUc3KrsVWwYjV7eJ75qVewypsKwXMV0vlMsncHYnN6ZlCSvi9q2zP
ntj2TPtqMIVyZupnX6AWN4l998XBwEaxmc3XQUp2sPrQfg==
-----END CERTIFICATE-----
Generated at Wed May 8 21:02:32 2024 by rpki-client on console-fra.rpki-client.org