Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          TpAtw289lzmKTC7C55jtHE3GRLWF4c5cNQaDFKCU+b8=
Subject key identifier:   13:33:33:1A:EB:61:24:D8:D7:B3:AE:00:92:EA:34:88:F5:33:3D:0F
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       7EE961B1AE870C5F6C357CB5E96004E523EE7F06
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     263245
IP address blocks:        190.107.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e9:61:b1:ae:87:0c:5f:6c:35:7c:b5:e9:60:04:e5:23:ee:7f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=1333331AEB6124D8D7B3AE0092EA3488F5333D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:3d:c1:2c:36:7f:8c:34:c1:ac:4d:a5:cf:
                    74:74:85:35:3d:d5:ac:e6:26:34:52:ec:19:d7:7e:
                    34:22:4c:ac:d7:2c:fd:78:fe:7f:86:10:07:7f:e5:
                    6c:6f:2b:9a:fd:11:31:71:27:f8:7e:21:0f:0a:65:
                    d1:cc:3d:69:a8:ac:e9:72:be:13:9f:20:62:b3:bf:
                    cb:66:f7:11:0e:ea:e7:87:51:0b:e2:4f:8e:3e:11:
                    df:22:71:f1:7e:29:54:84:bb:25:41:a2:0a:d0:62:
                    f7:f9:16:57:a6:99:01:6f:a0:22:02:80:6f:af:b5:
                    68:f3:ed:d9:18:78:43:27:e6:11:27:25:0a:97:a0:
                    25:1d:b5:b3:4a:c1:a0:e7:c5:f1:c1:1e:21:fd:ab:
                    8b:c9:ba:c9:e7:f5:bd:d0:1a:21:53:64:e9:3e:58:
                    20:54:9f:63:8f:f3:09:7a:8b:41:9d:39:08:cc:2e:
                    79:90:7c:60:98:e5:9e:82:e0:74:1c:69:7c:21:b4:
                    06:84:53:c0:ac:b8:6f:47:9d:ca:25:86:54:0d:71:
                    dc:47:2b:33:c9:20:57:51:de:90:48:61:68:a5:d9:
                    2a:e2:dc:ce:15:9a:96:6b:e4:ae:3e:7f:f9:71:06:
                    e3:86:17:38:ed:da:b4:33:62:7c:4a:41:0f:b1:b4:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:33:1A:EB:61:24:D8:D7:B3:AE:00:92:EA:34:88:F5:33:3D:0F
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:af:17:26:bc:20:4d:a0:68:b8:4e:87:6f:60:46:59:4e:34:
         4e:13:09:27:99:6c:62:69:74:45:74:26:8a:0c:88:dd:3a:03:
         c6:88:da:95:c6:e5:ec:43:e0:73:a8:83:17:ae:9f:9a:db:7e:
         d4:88:82:bc:3e:bd:93:9c:c4:90:49:2b:d4:82:e0:cc:9b:d8:
         93:17:b8:b1:43:f7:08:75:9a:80:85:65:f7:22:bf:a0:4d:49:
         40:db:4a:43:64:df:c0:10:ed:cf:97:d3:ee:e3:b1:b9:fe:a4:
         10:70:93:23:52:03:9a:54:ae:54:ad:20:67:98:87:27:05:0b:
         58:da:c1:e3:d7:ae:62:27:35:5d:89:c5:bb:8c:e3:01:69:91:
         a6:08:fa:f2:24:1a:e0:03:08:fa:20:7e:8c:b9:c1:c2:cd:fe:
         66:91:8d:7b:6f:b6:7b:42:a9:b6:82:d4:9d:ad:7e:ae:7e:1a:
         79:4e:74:bb:ee:fb:c8:2b:90:91:93:bc:bc:84:55:93:34:6b:
         7b:aa:82:22:0e:5a:e7:78:49:3f:65:79:3c:18:ce:1a:a3:bc:
         4f:66:15:10:06:9c:0e:50:10:d8:9b:c0:4b:f6:50:04:c8:fe:
         76:28:6d:cd:2e:93:3e:0c:c4:0d:7f:ef:7d:d3:fd:fd:4f:b9:
         17:bb:bc:54
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfulhsa6HDF9sNXy16WAE5SPufwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjc3NzMwRDkxMjc4RDY1NkE5QjM1QjFFNTM0M0Yz
NTk4MDJBNDAeFw0yNDAzMDUxNzM1MjNaFw0yNTAzMDQxNzQwMjNaMDMxMTAvBgNV
BAMTKDEzMzMzMzFBRUI2MTI0RDhEN0IzQUUwMDkyRUEzNDg4RjUzMzNEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDz3BLDZ/jDTBrE2lz3R0hTU9
1azmJjRS7BnXfjQiTKzXLP14/n+GEAd/5WxvK5r9ETFxJ/h+IQ8KZdHMPWmorOly
vhOfIGKzv8tm9xEO6ueHUQviT44+Ed8icfF+KVSEuyVBogrQYvf5FlemmQFvoCIC
gG+vtWjz7dkYeEMn5hEnJQqXoCUdtbNKwaDnxfHBHiH9q4vJusnn9b3QGiFTZOk+
WCBUn2OP8wl6i0GdOQjMLnmQfGCY5Z6C4HQcaXwhtAaEU8CsuG9HncolhlQNcdxH
KzPJIFdR3pBIYWil2Sri3M4VmpZr5K4+f/lxBuOGFzjt2rQzYnxKQQ+xtIeFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUEzMzGuthJNjXs64Akuo0iPUzPQ8wHwYDVR0j
BBgwFoAUsqt3cw2RJ41laps1seU0PzWYAqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTQ5RDBGRjY3RTlBMjUzNjMyMzgyRDRFMkNENDQzQThE
MzBBN0FEMTcyOTUzQjAxRDM1Q0YyM0FBRkM0MTI5LzAvQjJBQjc3NzMwRDkxMjc4
RDY1NkE5QjM1QjFFNTM0M0YzNTk4MDJBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkFCNzc3MzBEOTEyNzhENjU2
QTlCMzVCMUU1MzQzRjM1OTgwMkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk0OUQwRkY2N0U5QTI1MzYzMjM4MkQ0RTJDRDQ0M0E4RDMwQTdBRDE3
Mjk1M0IwMUQzNUNGMjNBQUZDNDEyOS8wLzMxMzkzMDJlMzEzMDM3MmUzMjMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a+gwDQYJKoZIhvcNAQELBQADggEBAMivFya8IE2gaLhOh29gRllONE4TCSeZbGJp
dEV0JooMiN06A8aI2pXG5exD4HOogxeun5rbftSIgrw+vZOcxJBJK9SC4Myb2JMX
uLFD9wh1moCFZfciv6BNSUDbSkNk38AQ7c+X0+7jsbn+pBBwkyNSA5pUrlStIGeY
hycFC1jawePXrmInNV2JxbuM4wFpkaYI+vIkGuADCPogfoy5wcLN/maRjXtvtntC
qbaC1J2tfq5+GnlOdLvu+8grkJGTvLyEVZM0a3uqgiIOWud4ST9leTwYzhqjvE9m
FRAGnA5QENibwEv2UATI/nYobc0ukz4MxA1/733T/f1PuRe7vFQ=
-----END CERTIFICATE-----
Generated at Sat May 4 14:44:42 2024 by rpki-client on console-ams.rpki-client.org