Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa
File:                     AS64099.roa (raw, json)
Hash identifier:          tLgg8HdoCOe5RSOhh5Z+Aa+OCHs5A4I/f8v+89RqrSw=
Subject key identifier:   BA:DE:1E:06:F0:59:8C:FF:71:DA:C1:CB:BA:C7:E6:DC:49:4D:B2:C7
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       3D959B8BB910E9A190D7A6809872D25EC9600CEC
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa
Signing time:             Tue 05 Mar 2024 18:12:23 +0000
ROA not before:           Tue 05 Mar 2024 18:07:23 +0000
ROA not after:            Tue 04 Mar 2025 18:12:23 +0000
asID:                     64099
IP address blocks:        190.228.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:9b:8b:b9:10:e9:a1:90:d7:a6:80:98:72:d2:5e:c9:60:0c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:23 2024 GMT
            Not After : Mar  4 18:12:23 2025 GMT
        Subject: CN=BADE1E06F0598CFF71DAC1CBBAC7E6DC494DB2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:d4:6b:b9:d1:25:40:27:39:9b:bf:31:c8:
                    e8:6c:ae:22:38:31:ef:4c:cb:0d:36:3a:a4:68:55:
                    8d:80:25:b5:a3:29:19:3d:c6:75:a6:f7:5d:71:7f:
                    ff:87:18:f8:26:2f:48:f2:b4:6b:f4:f5:f3:14:ee:
                    d5:f6:2d:ff:9e:16:85:28:81:0d:03:78:19:44:a9:
                    9c:23:59:ae:b0:0b:09:76:f3:0b:52:47:57:5e:cb:
                    99:ae:f2:21:dd:8b:71:ef:53:09:2b:25:a7:ad:94:
                    5a:d4:e9:e2:11:be:b1:94:11:1c:70:38:15:44:fc:
                    bb:b0:9d:0c:aa:87:23:07:bb:1d:7c:43:58:73:ab:
                    c1:39:93:2d:d6:fb:28:52:53:92:c9:ce:42:56:f7:
                    7d:e5:00:09:92:8c:20:ba:9d:d9:99:a0:46:12:5a:
                    71:58:5b:f3:19:b6:d8:36:ae:35:78:2a:a0:30:93:
                    70:fd:cd:d4:6f:3e:5d:d0:e3:27:00:19:ef:cd:f8:
                    fd:c1:b8:96:13:b2:9d:77:ab:d4:af:de:8b:a0:d7:
                    05:7e:d4:15:47:ed:91:bf:18:58:38:fc:b6:49:a6:
                    4a:0f:10:02:b6:8f:47:00:b9:84:24:7d:83:07:d9:
                    19:73:dd:a6:6d:f8:65:2c:b3:56:e3:c4:37:81:b8:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:1E:06:F0:59:8C:FF:71:DA:C1:CB:BA:C7:E6:DC:49:4D:B2:C7
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:18:32:1b:98:b2:a7:6d:93:b6:ae:6f:7d:98:f8:19:12:
         3c:4c:dd:e9:6a:a7:03:3c:80:7d:92:40:42:7e:c2:d3:20:5e:
         34:84:58:36:7f:bd:e6:79:d9:8a:1c:4a:46:23:35:af:ea:e8:
         c0:e1:86:ec:54:3b:d2:e8:7d:9a:4c:a8:f1:45:79:41:c7:d5:
         cb:cc:34:6a:1f:25:26:dc:c3:1c:19:ce:56:81:ba:1e:5c:1e:
         82:d2:14:44:49:95:04:8b:df:17:34:5f:c9:8e:29:75:75:40:
         ed:20:42:0c:7d:fb:a7:91:b3:95:24:9b:04:d5:16:83:21:09:
         f3:4f:71:66:91:a2:40:f1:66:fb:5c:b5:a0:03:e8:24:d4:61:
         de:64:05:1f:b0:89:cb:7b:98:3c:db:c4:d0:85:a0:37:c5:0f:
         6c:06:66:36:e6:30:39:0b:91:b6:f0:32:24:8e:e8:31:61:db:
         30:63:f5:99:c2:3c:f7:10:26:a6:ec:35:a1:35:02:14:3f:57:
         37:4e:a1:83:d7:49:51:6b:e4:e1:0c:ed:b0:27:8e:29:fa:0f:
         df:c2:52:74:b5:69:b7:54:6b:5b:67:03:b8:21:47:04:0a:23:
         7f:19:32:78:8e:e7:ab:97:60:f1:b4:9b:59:f9:e8:0c:9a:25:
         fc:f9:44:83
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUPZWbi7kQ6aGQ16aAmHLSXslgDOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDAzMDUxODA3MjNaFw0yNTAzMDQxODEyMjNaMDMxMTAvBgNV
BAMTKEJBREUxRTA2RjA1OThDRkY3MURBQzFDQkJBQzdFNkRDNDk0REIyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIR9RrudElQCc5m78xyOhsriI4
Me9Myw02OqRoVY2AJbWjKRk9xnWm911xf/+HGPgmL0jytGv09fMU7tX2Lf+eFoUo
gQ0DeBlEqZwjWa6wCwl28wtSR1dey5mu8iHdi3HvUwkrJaetlFrU6eIRvrGUERxw
OBVE/LuwnQyqhyMHux18Q1hzq8E5ky3W+yhSU5LJzkJW933lAAmSjCC6ndmZoEYS
WnFYW/MZttg2rjV4KqAwk3D9zdRvPl3Q4ycAGe/N+P3BuJYTsp13q9Sv3oug1wV+
1BVH7ZG/GFg4/LZJpkoPEAK2j0cAuYQkfYMH2Rlz3aZt+GUss1bjxDeBuN2nAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUut4eBvBZjP9x2sHLusfm3ElNsscwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVM2NDA5OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7kqTAN
BgkqhkiG9w0BAQsFAAOCAQEAbcUYMhuYsqdtk7aub32Y+BkSPEzd6WqnAzyAfZJA
Qn7C0yBeNIRYNn+95nnZihxKRiM1r+rowOGG7FQ70uh9mkyo8UV5QcfVy8w0ah8l
JtzDHBnOVoG6HlwegtIUREmVBIvfFzRfyY4pdXVA7SBCDH37p5GzlSSbBNUWgyEJ
809xZpGiQPFm+1y1oAPoJNRh3mQFH7CJy3uYPNvE0IWgN8UPbAZmNuYwOQuRtvAy
JI7oMWHbMGP1mcI89xAmpuw1oTUCFD9XN06hg9dJUWvk4QztsCeOKfoP38JSdLVp
t1RrW2cDuCFHBAojfxkyeI7nq5dg8bSbWfnoDJol/PlEgw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org