Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e20323632353839.roa
File:                     3139302e3132312e3134322e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          22317UqFo5OftUlrobezrz8wEpKXX+e58mFAXIfEBDI=
Subject key identifier:   70:D2:6F:9A:05:D0:8E:89:9B:A2:3C:90:CA:85:3E:90:75:87:03:21
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       46F504754BE5C6D8DD573C54333581FBDF4506B1
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:33 +0000
ROA not before:           Tue 05 Mar 2024 17:57:33 +0000
ROA not after:            Tue 04 Mar 2025 18:02:33 +0000
asID:                     262589
IP address blocks:        190.121.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:04:75:4b:e5:c6:d8:dd:57:3c:54:33:35:81:fb:df:45:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:33 2024 GMT
            Not After : Mar  4 18:02:33 2025 GMT
        Subject: CN=70D26F9A05D08E899BA23C90CA853E9075870321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:10:b1:b3:00:e0:7c:a6:01:c4:e7:83:ee:
                    6a:e3:9c:e0:41:c6:3c:04:a3:90:f5:6e:49:e2:83:
                    ca:de:19:35:af:1b:d0:56:66:79:70:19:f5:a2:d5:
                    57:30:95:71:a0:40:57:da:ea:d7:2a:3d:65:1a:0b:
                    8f:ad:7a:43:4f:94:65:ba:ca:10:14:11:6d:ee:7e:
                    ad:d1:f5:23:fe:aa:e0:54:49:dc:b0:cf:a7:6e:87:
                    41:2d:d4:c4:d9:e4:b0:56:9c:4b:7d:16:a4:93:7e:
                    f9:7a:8e:f4:7d:62:e7:a8:b2:4a:5f:00:94:76:ae:
                    e1:ed:1c:ed:41:40:fd:1f:bb:d0:3a:48:f9:08:b3:
                    67:da:19:30:12:2b:09:82:82:84:d0:44:9a:c8:ae:
                    47:ba:f7:b4:9e:5b:01:59:7a:f7:bd:a0:ef:b0:e6:
                    34:fd:ea:6b:ff:aa:3d:f0:48:c6:19:d7:5e:47:ff:
                    dd:ad:88:fc:32:8e:6d:3f:76:b5:4a:d8:d7:3c:80:
                    10:cb:8d:39:9d:47:8e:5d:4a:00:f5:0b:a4:73:7c:
                    ad:c9:41:08:8c:44:46:01:24:6c:6f:18:f7:75:8e:
                    2c:28:33:c6:a5:6e:91:ab:07:f8:f3:23:8b:cb:7f:
                    9f:07:97:20:47:8a:96:8b:f6:36:83:e9:77:96:5d:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:6F:9A:05:D0:8E:89:9B:A2:3C:90:CA:85:3E:90:75:87:03:21
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:3a:ca:98:52:a7:69:29:24:a8:96:b3:dc:18:bc:de:e2:
         35:01:20:18:e5:8c:af:18:06:3f:57:24:86:02:0b:9d:25:9e:
         d8:33:a3:92:b0:9b:1e:ae:e0:93:69:b8:5e:63:b9:8b:87:19:
         19:c2:62:1b:7c:f3:bb:e3:2d:36:49:77:23:cb:8e:1b:31:1d:
         cf:48:c1:bc:73:c2:98:be:46:97:b3:85:6b:d4:d0:ff:98:b6:
         a9:65:20:1a:18:d6:05:bd:40:86:f4:15:36:49:be:ae:6a:4c:
         18:b3:f7:85:53:7e:df:60:7a:1a:f6:4f:69:49:56:e6:21:c6:
         6f:7e:02:f7:89:6b:a2:0a:23:96:40:98:07:aa:74:47:07:8a:
         57:8a:f5:cc:e1:71:d4:dd:8e:a0:ef:3a:4d:b8:c7:06:86:51:
         b4:88:97:aa:36:34:2c:1e:9a:18:65:3e:32:db:e1:9b:d3:c0:
         63:45:17:94:11:96:93:01:14:18:2a:78:23:62:41:b9:83:87:
         49:55:c0:21:d4:11:0c:17:d4:06:61:f9:40:57:e0:c9:bf:af:
         a5:13:4b:cb:89:a1:78:e4:5d:2b:65:c0:d5:ab:45:ae:4a:da:
         ec:8a:13:e3:6e:c5:75:0a:ea:d2:fa:c0:7f:18:d2:18:5b:ba:
         a0:42:13:06
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURvUEdUvlxtjdVzxUMzWB+99FBrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNDAzMDUxNzU3MzNaFw0yNTAzMDQxODAyMzNaMDMxMTAvBgNV
BAMTKDcwRDI2RjlBMDVEMDhFODk5QkEyM0M5MENBODUzRTkwNzU4NzAzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHRCxswDgfKYBxOeD7mrjnOBB
xjwEo5D1bknig8reGTWvG9BWZnlwGfWi1VcwlXGgQFfa6tcqPWUaC4+tekNPlGW6
yhAUEW3ufq3R9SP+quBUSdywz6duh0Et1MTZ5LBWnEt9FqSTfvl6jvR9Yueoskpf
AJR2ruHtHO1BQP0fu9A6SPkIs2faGTASKwmCgoTQRJrIrke697SeWwFZeve9oO+w
5jT96mv/qj3wSMYZ115H/92tiPwyjm0/drVK2Nc8gBDLjTmdR45dSgD1C6RzfK3J
QQiMREYBJGxvGPd1jiwoM8albpGrB/jzI4vLf58HlyBHipaL9jaD6XeWXVfvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcNJvmgXQjombojyQyoU+kHWHAyEwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzkzMDJlMzEzMjMxMmUzMTM0MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
eY4wDQYJKoZIhvcNAQELBQADggEBAFPlOsqYUqdpKSSolrPcGLze4jUBIBjljK8Y
Bj9XJIYCC50lntgzo5Kwmx6u4JNpuF5juYuHGRnCYht887vjLTZJdyPLjhsxHc9I
wbxzwpi+RpezhWvU0P+YtqllIBoY1gW9QIb0FTZJvq5qTBiz94VTft9gehr2T2lJ
VuYhxm9+AveJa6IKI5ZAmAeqdEcHileK9czhcdTdjqDvOk24xwaGUbSIl6o2NCwe
mhhlPjLb4ZvTwGNFF5QRlpMBFBgqeCNiQbmDh0lVwCHUEQwX1AZh+UBX4Mm/r6UT
S8uJoXjkXStlwNWrRa5K2uyKE+NuxXUK6tL6wH8Y0hhbuqBCEwY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org