Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
File:                     3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa (raw, json)
Hash identifier:          4NohnYHKtXn9NdTidxB1oUWicV+8BmN/PPtBbfogRNc=
Subject key identifier:   83:77:BD:32:66:F6:23:1D:BB:C0:4B:67:41:D7:38:10:75:E8:A6:85
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       31982041F8C29165A1F1EE05584EDD82F9B47497
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
Signing time:             Tue 05 Mar 2024 17:46:15 +0000
ROA not before:           Tue 05 Mar 2024 17:41:15 +0000
ROA not after:            Tue 04 Mar 2025 17:46:15 +0000
asID:                     28073
IP address blocks:        190.123.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:20:41:f8:c2:91:65:a1:f1:ee:05:58:4e:dd:82:f9:b4:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Mar  5 17:41:15 2024 GMT
            Not After : Mar  4 17:46:15 2025 GMT
        Subject: CN=8377BD3266F6231DBBC04B6741D7381075E8A685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:8d:09:26:ff:5f:f6:ed:42:d8:6f:b6:2f:
                    e7:7c:1f:9a:fe:e2:52:12:5b:ff:97:ee:8b:8b:46:
                    d0:9b:36:c3:b3:a4:4a:85:e4:b5:4b:66:e7:d5:e4:
                    df:a9:c6:a0:69:63:ec:b4:80:2a:e4:49:f1:f8:5a:
                    e9:b4:c3:91:ac:aa:f9:be:78:3c:0b:ec:e3:17:36:
                    8b:86:ef:46:8c:a3:d0:14:fb:26:e2:04:7a:8a:4c:
                    a8:0b:53:ec:53:b6:97:02:9f:69:1a:e7:5a:da:d9:
                    88:bd:f4:3b:06:00:6c:58:9a:f0:32:d3:68:06:27:
                    5f:9d:45:f8:d5:cb:81:6e:69:0b:ca:59:6f:fd:31:
                    53:27:de:0f:74:54:6f:27:15:81:36:0b:1a:f5:b2:
                    72:f4:c6:a5:be:5b:10:98:b4:11:1c:a1:91:3a:b7:
                    c8:29:ba:22:e5:f0:8f:92:82:47:ca:37:cf:1c:58:
                    4f:db:53:78:a6:66:bc:73:38:a9:c2:4d:c5:1c:19:
                    88:d5:64:d1:0f:75:06:6c:97:4d:9f:a9:26:05:81:
                    3a:f0:db:18:3d:02:4a:89:6e:f8:c6:be:df:a9:cd:
                    31:1d:77:c5:ef:1f:0a:1a:90:fd:8e:c1:e8:04:bb:
                    c0:2c:5b:a0:3a:eb:67:71:23:e3:c5:43:8e:48:8c:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:BD:32:66:F6:23:1D:BB:C0:4B:67:41:D7:38:10:75:E8:A6:85
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:ca:6e:e0:5b:a5:7f:36:2c:1b:8d:06:94:d3:8e:d5:1d:
         70:20:46:31:ea:63:b1:01:f3:fe:09:ef:40:26:fd:b4:24:20:
         2b:3f:e8:1a:7c:c4:15:a2:95:32:cb:f4:bc:7a:df:21:3b:9d:
         30:95:47:c9:2c:87:be:6e:8f:10:51:ad:a9:dc:19:f2:c3:e2:
         91:fd:7d:15:c1:47:d4:42:55:54:cb:ed:31:3e:fa:17:46:1f:
         1e:44:0f:1b:4f:e8:e7:79:35:76:ae:72:e0:38:25:9f:91:d1:
         f0:c3:b1:79:41:7e:65:94:35:23:4d:e6:9f:14:75:95:0a:ff:
         02:43:d5:c1:fb:62:67:e0:a2:99:ca:c2:d6:a1:7b:c9:fc:68:
         fe:c0:44:56:28:43:0b:61:08:57:dd:ed:6d:ab:dc:91:56:06:
         96:1b:14:41:94:fe:7c:5d:8a:ed:29:9b:40:6f:11:e4:b2:68:
         b9:5f:2a:62:6c:67:0a:fc:f3:85:2b:e9:88:32:df:0c:5a:da:
         a7:de:7d:77:11:9a:44:96:9f:a6:71:0e:da:4f:4c:3d:26:33:
         9b:74:cb:6d:48:c1:4a:b7:90:00:8d:39:74:86:f1:e1:05:1e:
         4b:7b:05:e5:7a:5b:c3:89:36:a0:04:e5:bc:7d:79:da:39:5b:
         e2:56:e1:6d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMZggQfjCkWWh8e4FWE7dgvm0dJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCODYxNkU2QTZBQTdGNThFNDA5N0IwOEZBOEMwQjc5
N0Q1RUVDMDAeFw0yNDAzMDUxNzQxMTVaFw0yNTAzMDQxNzQ2MTVaMDMxMTAvBgNV
BAMTKDgzNzdCRDMyNjZGNjIzMURCQkMwNEI2NzQxRDczODEwNzVFOEE2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ko0JJv9f9u1C2G+2L+d8H5r+
4lISW/+X7ouLRtCbNsOzpEqF5LVLZufV5N+pxqBpY+y0gCrkSfH4Wum0w5Gsqvm+
eDwL7OMXNouG70aMo9AU+ybiBHqKTKgLU+xTtpcCn2ka51ra2Yi99DsGAGxYmvAy
02gGJ1+dRfjVy4FuaQvKWW/9MVMn3g90VG8nFYE2Cxr1snL0xqW+WxCYtBEcoZE6
t8gpuiLl8I+SgkfKN88cWE/bU3imZrxzOKnCTcUcGYjVZNEPdQZsl02fqSYFgTrw
2xg9AkqJbvjGvt+pzTEdd8XvHwoakP2OwegEu8AsW6A662dxI+PFQ45IjL91AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUg3e9Mmb2Ix27wEtnQdc4EHXopoUwHwYDVR0j
BBgwFoAUcLhhbmpqp/WOQJewj6jAt5fV7sAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDg2NDVBQTBCNjAyMThFODhFQTIzQTUzODZERTJEODM3
MkNCNkMzQ0MzQzYxODAxM0E2N0UyQjU3NDQ2RTg5LzAvNzBCODYxNkU2QTZBQTdG
NThFNDA5N0IwOEZBOEMwQjc5N0Q1RUVDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEI4NjE2RTZBNkFBN0Y1OEU0
MDk3QjA4RkE4QzBCNzk3RDVFRUMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA4NjQ1QUEwQjYwMjE4RTg4RUEyM0E1Mzg2REUyRDgzNzJDQjZDM0ND
M0M2MTgwMTNBNjdFMkI1NzQ0NkU4OS8wLzMxMzkzMDJlMzEzMjMzMmUzMTM0MzQy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzAzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnuQ
MA0GCSqGSIb3DQEBCwUAA4IBAQArbcpu4FulfzYsG40GlNOO1R1wIEYx6mOxAfP+
Ce9AJv20JCArP+gafMQVopUyy/S8et8hO50wlUfJLIe+bo8QUa2p3Bnyw+KR/X0V
wUfUQlVUy+0xPvoXRh8eRA8bT+jneTV2rnLgOCWfkdHww7F5QX5llDUjTeafFHWV
Cv8CQ9XB+2Jn4KKZysLWoXvJ/Gj+wERWKEMLYQhX3e1tq9yRVgaWGxRBlP58XYrt
KZtAbxHksmi5XypibGcK/POFK+mIMt8MWtqn3n13EZpElp+mcQ7aT0w9JjObdMtt
SMFKt5AAjTl0hvHhBR5LewXlelvDiTagBOW8fXnaOVviVuFt
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org