Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          jEOJd2LuPeIqQCcnhEVl290cJZB9t3h/JsatAsbAlgM=
Subject key identifier:   F1:93:1C:76:3A:8F:33:4B:34:60:27:28:20:7F:EF:B4:7E:1A:E2:FD
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       5AC50DFC1F4C0552C2B2F96D8F5D3E2856782D1F
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     263245
IP address blocks:        190.107.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c5:0d:fc:1f:4c:05:52:c2:b2:f9:6d:8f:5d:3e:28:56:78:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=F1931C763A8F334B34602728207FEFB47E1AE2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:06:35:c6:ef:33:ab:91:12:f4:9d:45:05:
                    d9:04:f7:93:33:87:44:f9:52:76:61:55:c3:4e:6c:
                    50:05:6c:e6:ef:ee:8b:a4:98:a7:59:33:16:f7:9d:
                    3d:0e:ae:78:36:2e:07:08:e2:a9:bf:ee:96:d5:fb:
                    f3:b5:9a:38:cf:a5:0c:5a:30:2e:f8:10:05:22:48:
                    69:b1:d0:9a:e4:05:06:ea:c9:03:1f:42:96:fe:9f:
                    1a:a5:cc:e3:13:12:92:b0:f7:2a:f6:5f:7f:ee:97:
                    66:b3:50:0e:52:62:2c:07:1b:38:ee:fc:39:1c:14:
                    91:03:9e:55:60:ee:f8:d8:7b:b8:99:72:67:cf:9e:
                    cd:c8:1d:a3:6c:ac:b3:c5:ca:a0:0f:ee:09:31:b9:
                    0b:cb:4b:32:73:53:72:0f:05:74:0c:12:2d:1b:1d:
                    32:e0:c0:40:68:7a:60:50:52:1c:b1:d1:1e:e1:59:
                    e4:83:3b:74:93:cb:38:d2:0e:d3:80:16:48:be:a0:
                    6b:6a:cb:ce:d3:07:f8:6b:16:15:c8:d8:0b:0a:c8:
                    b4:06:fe:6e:03:00:46:f5:9d:52:43:0d:4f:83:1d:
                    f3:f0:b8:c5:a5:6a:b4:f8:f0:fa:bf:26:ff:31:5e:
                    23:c3:eb:08:a7:32:e4:93:55:2b:dc:82:3f:aa:13:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:1C:76:3A:8F:33:4B:34:60:27:28:20:7F:EF:B4:7E:1A:E2:FD
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:99:ed:46:65:44:d6:30:22:b4:df:5e:85:ff:ad:08:3b:bd:
         8e:c5:3b:ba:39:cc:24:61:d4:2e:58:32:79:6d:00:5b:6a:6c:
         a0:1a:f7:3a:fd:9d:6d:33:d5:3f:41:40:34:8b:15:49:b2:c2:
         2f:47:99:3e:80:29:b9:82:60:1b:02:a0:73:67:72:b2:8e:f4:
         f1:95:80:e8:5b:e7:e4:42:03:e5:bf:db:66:bc:10:76:a0:68:
         d1:b4:66:4e:7e:09:76:18:a2:4f:f5:1b:5a:07:97:c9:0b:e9:
         6a:cf:79:cb:c5:bb:aa:d6:4a:4d:65:dc:c8:66:6f:93:e9:bb:
         ba:69:95:d3:2b:66:db:2c:5a:1e:7c:7a:b2:86:e1:3f:99:83:
         0a:0b:9c:ce:ac:ab:37:78:e2:df:9a:85:55:3c:9a:c1:ab:da:
         1c:12:78:6f:f9:33:ce:5e:54:b4:a0:b1:7b:2b:0d:21:d5:a8:
         63:e6:81:44:a9:f5:e8:fb:64:cb:81:9b:76:ab:96:46:06:70:
         2d:45:7e:6f:43:7a:3f:78:72:f1:cf:e0:9c:a5:45:a4:7e:60:
         0a:ba:c8:5b:d2:25:8a:68:f5:f9:1e:a2:42:f7:63:ea:b9:02:
         bb:3b:50:f1:47:a1:3d:20:62:d9:6a:d4:d4:9a:ae:d5:0b:62:
         8d:fb:4a:d6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWsUN/B9MBVLCsvltj10+KFZ4LR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjc3NzMwRDkxMjc4RDY1NkE5QjM1QjFFNTM0M0Yz
NTk4MDJBNDAeFw0yNDAzMDUxNzM1MjFaFw0yNTAzMDQxNzQwMjFaMDMxMTAvBgNV
BAMTKEYxOTMxQzc2M0E4RjMzNEIzNDYwMjcyODIwN0ZFRkI0N0UxQUUyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9wY1xu8zq5ES9J1FBdkE95Mz
h0T5UnZhVcNObFAFbObv7oukmKdZMxb3nT0Orng2LgcI4qm/7pbV+/O1mjjPpQxa
MC74EAUiSGmx0JrkBQbqyQMfQpb+nxqlzOMTEpKw9yr2X3/ul2azUA5SYiwHGzju
/DkcFJEDnlVg7vjYe7iZcmfPns3IHaNsrLPFyqAP7gkxuQvLSzJzU3IPBXQMEi0b
HTLgwEBoemBQUhyx0R7hWeSDO3STyzjSDtOAFki+oGtqy87TB/hrFhXI2AsKyLQG
/m4DAEb1nVJDDU+DHfPwuMWlarT48Pq/Jv8xXiPD6winMuSTVSvcgj+qE8k9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8ZMcdjqPM0s0YCcoIH/vtH4a4v0wHwYDVR0j
BBgwFoAUsqt3cw2RJ41laps1seU0PzWYAqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTQ5RDBGRjY3RTlBMjUzNjMyMzgyRDRFMkNENDQzQThE
MzBBN0FEMTcyOTUzQjAxRDM1Q0YyM0FBRkM0MTI5LzAvQjJBQjc3NzMwRDkxMjc4
RDY1NkE5QjM1QjFFNTM0M0YzNTk4MDJBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkFCNzc3MzBEOTEyNzhENjU2
QTlCMzVCMUU1MzQzRjM1OTgwMkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk0OUQwRkY2N0U5QTI1MzYzMjM4MkQ0RTJDRDQ0M0E4RDMwQTdBRDE3
Mjk1M0IwMUQzNUNGMjNBQUZDNDEyOS8wLzMxMzkzMDJlMzEzMDM3MmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a+swDQYJKoZIhvcNAQELBQADggEBAAiZ7UZlRNYwIrTfXoX/rQg7vY7FO7o5zCRh
1C5YMnltAFtqbKAa9zr9nW0z1T9BQDSLFUmywi9HmT6AKbmCYBsCoHNncrKO9PGV
gOhb5+RCA+W/22a8EHagaNG0Zk5+CXYYok/1G1oHl8kL6WrPecvFu6rWSk1l3Mhm
b5Ppu7ppldMrZtssWh58erKG4T+ZgwoLnM6sqzd44t+ahVU8msGr2hwSeG/5M85e
VLSgsXsrDSHVqGPmgUSp9ej7ZMuBm3arlkYGcC1Ffm9Dej94cvHP4JylRaR+YAq6
yFvSJYpo9fkeokL3Y+q5Ars7UPFHoT0gYtlq1NSartULYo37StY=
-----END CERTIFICATE-----
Generated at Sat May 4 14:44:42 2024 by rpki-client on console-ams.rpki-client.org