Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31382d3234203d3e203132393536.roa
File:                     3139302e39382e3132382e302f31382d3234203d3e203132393536.roa (raw, json)
Hash identifier:          jk6jt0qsAXVEOorn6VuhrtUszGRhWh2V2OFUMwnlyG4=
Subject key identifier:   00:17:2D:48:9C:FA:A6:E4:F9:D6:80:F5:7B:77:7D:9A:6E:2C:F2:F1
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       1C35D8E9C6DB473C4165073BA7F46C20846F4FC9
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31382d3234203d3e203132393536.roa
Signing time:             Tue 05 Mar 2024 18:18:41 +0000
ROA not before:           Tue 05 Mar 2024 18:13:41 +0000
ROA not after:            Tue 04 Mar 2025 18:18:41 +0000
asID:                     12956
IP address blocks:        190.98.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:d8:e9:c6:db:47:3c:41:65:07:3b:a7:f4:6c:20:84:6f:4f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Mar  5 18:13:41 2024 GMT
            Not After : Mar  4 18:18:41 2025 GMT
        Subject: CN=00172D489CFAA6E4F9D680F57B777D9A6E2CF2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:f5:a3:b5:de:a4:10:35:ee:a4:74:dd:8e:
                    3d:b5:57:fa:b1:15:cf:c7:e3:f4:8f:de:84:21:df:
                    32:8a:dd:2b:b8:55:8b:f4:a1:e6:8e:57:b1:1e:67:
                    a0:4b:8b:31:13:bf:00:98:d1:e2:fe:24:3c:a4:75:
                    0c:91:b3:73:7e:44:99:d9:70:9d:f6:5b:6c:55:58:
                    2c:e3:af:71:09:10:23:2c:9d:39:7c:5d:d1:22:8d:
                    e7:7f:34:cf:14:ea:a1:5c:0f:b9:0c:54:c0:cd:2d:
                    92:b6:6b:45:0c:44:c0:a1:cd:74:09:bb:08:9b:86:
                    a5:80:28:db:1e:61:fa:45:e4:72:31:58:32:42:3d:
                    8f:bd:5c:9d:f5:17:fd:56:c1:41:36:98:46:72:79:
                    ce:ca:ce:5c:ef:40:91:ee:bb:46:57:fa:1f:06:9c:
                    0a:6b:dc:d2:5c:52:e0:e9:be:68:0f:fa:68:74:ea:
                    3a:5f:b0:21:9d:87:72:e6:d0:ea:b9:47:4c:6e:ff:
                    0c:0a:93:28:a5:bc:29:38:0a:4b:de:da:f6:3c:17:
                    7a:10:72:a9:c4:00:50:a3:42:80:43:24:84:18:e4:
                    56:60:e0:9c:c1:a1:00:f3:16:5f:9b:18:2f:44:b4:
                    8d:52:7e:3b:46:27:69:bd:ef:ea:f0:6b:80:3e:5f:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:2D:48:9C:FA:A6:E4:F9:D6:80:F5:7B:77:7D:9A:6E:2C:F2:F1
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f31382d3234203d3e203132393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:09:db:cc:0f:bf:5a:6c:d1:e6:ec:9a:2e:64:37:5b:e4:
         62:c0:a3:d8:b8:4c:57:3c:ee:20:1c:49:91:ef:c3:23:aa:b2:
         e2:05:e6:e7:e3:6a:ee:d0:56:9b:bc:5b:8b:65:d7:d2:fd:48:
         85:25:85:94:1d:e0:d8:ce:2d:5a:37:21:40:77:f0:74:24:ec:
         90:9a:e5:f6:8c:b8:52:75:5f:50:05:1b:d1:e8:4e:ab:c3:08:
         f8:aa:66:24:58:c3:ac:0e:9f:0c:0a:e6:70:e4:ff:c0:00:c6:
         a6:61:6c:83:fd:cc:ba:44:5e:52:ea:57:34:da:e7:ee:40:c9:
         a3:31:69:73:44:ce:4e:75:b7:75:93:91:c7:15:20:06:f2:e0:
         2d:a7:92:dd:bc:29:6a:c6:be:c7:2a:65:4c:0d:4f:d4:41:87:
         75:bd:9f:7b:55:ae:5f:90:4d:b9:29:08:8c:ab:cf:56:03:f3:
         dc:8d:eb:cd:d0:fe:95:2c:3a:ca:59:86:c4:ed:b5:ff:a9:65:
         c3:b3:c6:4e:98:51:2f:d0:c5:00:3d:2c:be:88:c7:8f:e2:66:
         bb:da:33:ce:20:66:65:44:7e:2b:cf:5c:13:07:c8:28:8b:c2:
         ab:9a:60:db:40:40:9c:ba:39:dc:9a:94:72:b5:18:1b:64:ce:
         22:83:82:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHDXY6cbbRzxBZQc7p/RsIIRvT8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxQUJGMjM3Mjc3RkVBRjI0MTE3RUJCRTI4RDlENTdF
NDQyNDMzQTAeFw0yNDAzMDUxODEzNDFaFw0yNTAzMDQxODE4NDFaMDMxMTAvBgNV
BAMTKDAwMTcyRDQ4OUNGQUE2RTRGOUQ2ODBGNTdCNzc3RDlBNkUyQ0YyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SPWjtd6kEDXupHTdjj21V/qx
Fc/H4/SP3oQh3zKK3Su4VYv0oeaOV7EeZ6BLizETvwCY0eL+JDykdQyRs3N+RJnZ
cJ32W2xVWCzjr3EJECMsnTl8XdEijed/NM8U6qFcD7kMVMDNLZK2a0UMRMChzXQJ
uwibhqWAKNseYfpF5HIxWDJCPY+9XJ31F/1WwUE2mEZyec7KzlzvQJHuu0ZX+h8G
nApr3NJcUuDpvmgP+mh06jpfsCGdh3Lm0Oq5R0xu/wwKkyilvCk4Ckve2vY8F3oQ
cqnEAFCjQoBDJIQY5FZg4JzBoQDzFl+bGC9EtI1SfjtGJ2m97+rwa4A+XwFZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUABctSJz6puT51oD1e3d9mm4s8vEwHwYDVR0j
BBgwFoAUthq/I3J3/q8kEX674o2dV+RCQzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRDlEODEwOUI1QjBFRDg2RkY5MUMwMjJEOTY0MTJENkRB
MDg2Qjg2NDlDNTk3NUJBREVCMzY5RjUwRjIzOTIzLzAvQjYxQUJGMjM3Mjc3RkVB
RjI0MTE3RUJCRTI4RDlENTdFNDQyNDMzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjFBQkYyMzcyNzdGRUFGMjQx
MTdFQkJFMjhEOUQ1N0U0NDI0MzNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUQ5RDgxMDlCNUIwRUQ4NkZGOTFDMDIyRDk2NDEyRDZEQTA4NkI4NjQ5
QzU5NzVCQURFQjM2OUY1MEYyMzkyMy8wLzMxMzkzMDJlMzkzODJlMzEzMjM4MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzMjM5MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr5igDAN
BgkqhkiG9w0BAQsFAAOCAQEAVckJ28wPv1ps0ebsmi5kN1vkYsCj2LhMVzzuIBxJ
ke/DI6qy4gXm5+Nq7tBWm7xbi2XX0v1IhSWFlB3g2M4tWjchQHfwdCTskJrl9oy4
UnVfUAUb0ehOq8MI+KpmJFjDrA6fDArmcOT/wADGpmFsg/3MukReUupXNNrn7kDJ
ozFpc0TOTnW3dZORxxUgBvLgLaeS3bwpasa+xyplTA1P1EGHdb2fe1WuX5BNuSkI
jKvPVgPz3I3rzdD+lSw6ylmGxO21/6llw7PGTphRL9DFAD0svojHj+Jmu9ozziBm
ZUR+K89cEwfIKIvCq5pg20BAnLo53JqUcrUYG2TOIoOCzA==
-----END CERTIFICATE-----
Generated at Mon Apr 29 09:04:08 2024 by rpki-client on console-fra.rpki-client.org