Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa
File:                     3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa (raw, json)
Hash identifier:          QYvrAIheIKpZkGASrMc+uxLcPTTrW3Vw6K+l2RQEdUg=
Subject key identifier:   B5:AC:A0:78:23:1D:49:A4:5A:E4:2E:1D:DC:68:83:24:2E:97:89:D6
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       1C916C3F5A2225CB3B42ECF6A9965C18C7949CB8
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     28109
IP address blocks:        190.124.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:91:6c:3f:5a:22:25:cb:3b:42:ec:f6:a9:96:5c:18:c7:94:9c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=B5ACA078231D49A45AE42E1DDC6883242E9789D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:42:e1:4e:59:a9:21:64:41:c8:2c:c0:d4:
                    88:13:47:dc:16:a1:75:c1:cc:d3:47:2f:ca:69:1b:
                    d4:64:4b:57:42:51:aa:00:cb:80:86:5c:87:8f:9e:
                    e1:33:94:83:c3:ab:2c:47:9b:26:5f:86:3d:26:8c:
                    49:42:38:fd:ed:8f:a5:e4:73:07:a0:51:79:a2:21:
                    68:dd:6e:05:6d:54:cb:2b:5b:08:12:78:ef:f5:87:
                    49:27:d8:a2:fd:43:0c:51:46:4f:65:31:f3:6d:22:
                    b1:74:e8:8a:65:03:d7:f2:c5:1a:f4:c2:bf:64:e5:
                    9c:59:4d:4c:56:d5:b2:c8:0b:91:04:af:0b:c9:23:
                    f3:3b:b5:bb:fa:06:23:b3:eb:28:ab:92:e8:04:7d:
                    45:54:84:e9:db:59:61:e2:af:84:e8:25:da:76:5b:
                    45:1e:32:6d:27:fc:d2:d8:03:50:f6:1a:03:bd:91:
                    24:5b:93:9f:01:d8:16:48:0a:ea:54:cb:c9:8a:9f:
                    cf:88:45:b0:38:40:24:e0:7f:ce:8d:da:7b:a8:50:
                    43:97:4c:b5:90:3f:e2:97:40:1a:40:ed:f7:cc:26:
                    21:08:cf:b0:e8:ff:49:75:5f:09:19:18:c5:0d:15:
                    81:6e:03:45:60:c4:8c:d6:01:f1:35:8b:0f:5f:72:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:A0:78:23:1D:49:A4:5A:E4:2E:1D:DC:68:83:24:2E:97:89:D6
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:8c:fc:8e:38:4c:1f:98:4b:72:34:dc:7b:ff:4a:a9:c7:
         63:7c:03:1b:7d:1a:78:a1:42:b5:5b:38:15:3d:27:45:e1:45:
         4b:cd:e9:bb:4b:01:0d:01:aa:23:ab:af:33:e6:3e:da:c4:87:
         eb:38:76:03:c7:8d:44:10:d8:fd:ea:84:79:91:bd:13:3b:fb:
         f8:f0:d3:c1:4f:25:fd:40:10:24:f7:27:7d:a8:a1:0e:f3:58:
         e9:eb:6a:db:a2:7c:e6:08:cd:e7:10:ba:a0:b3:c9:ac:4f:0f:
         8b:c1:00:3a:e5:2c:15:e4:c5:53:59:9f:4d:9f:28:5b:ea:e3:
         6d:b5:a6:17:1b:b5:12:6e:c9:53:04:a3:1c:00:e3:67:8c:c4:
         5c:55:d1:81:22:c0:c3:9b:78:72:1d:ce:fa:89:be:d6:3f:f4:
         31:db:95:c7:c7:ca:e5:70:c2:48:2a:86:da:23:67:e8:82:41:
         d1:ce:a0:de:6d:2a:eb:ef:5b:0d:70:6b:5c:f9:5a:cf:95:db:
         c8:6a:1d:b4:ba:ea:df:3c:0a:24:64:25:c8:f9:68:6c:02:6e:
         d3:b6:cd:2a:b2:83:21:26:a0:19:ae:49:73:bb:a4:70:81:81:
         f3:ea:18:76:88:7a:6c:9d:2b:19:d6:36:fb:7a:2f:ec:93:b1:
         c7:b0:c4:97
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHJFsP1oiJcs7Quz2qZZcGMeUnLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVGQTIyOEEyMzAxQ0EzQzMzQkQ4ODMwRDU4QTQwNDcz
MzQ4NTk1RjAeFw0yNDAzMDUxODAxNTJaFw0yNTAzMDQxODA2NTJaMDMxMTAvBgNV
BAMTKEI1QUNBMDc4MjMxRDQ5QTQ1QUU0MkUxRERDNjg4MzI0MkU5Nzg5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7ULhTlmpIWRByCzA1IgTR9wW
oXXBzNNHL8ppG9RkS1dCUaoAy4CGXIePnuEzlIPDqyxHmyZfhj0mjElCOP3tj6Xk
cwegUXmiIWjdbgVtVMsrWwgSeO/1h0kn2KL9QwxRRk9lMfNtIrF06IplA9fyxRr0
wr9k5ZxZTUxW1bLIC5EErwvJI/M7tbv6BiOz6yirkugEfUVUhOnbWWHir4ToJdp2
W0UeMm0n/NLYA1D2GgO9kSRbk58B2BZICupUy8mKn8+IRbA4QCTgf86N2nuoUEOX
TLWQP+KXQBpA7ffMJiEIz7Do/0l1XwkZGMUNFYFuA0VgxIzWAfE1iw9fcoifAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtaygeCMdSaRa5C4d3GiDJC6XidYwHwYDVR0j
BBgwFoAU9foiiiMByjwzvYgw1YpARzNIWV8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COEU0RTlCQkQ3ODY2NTU2MzUyNTFCRTFBQjJCMzAxMTVG
ODY1QzQwRUVERkYxMjQ1OUUwNjM2RUQ4MDkzNkNELzAvRjVGQTIyOEEyMzAxQ0Ez
QzMzQkQ4ODMwRDU4QTQwNDczMzQ4NTk1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUZBMjI4QTIzMDFDQTNDMzNC
RDg4MzBENThBNDA0NzMzNDg1OTVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjhFNEU5QkJENzg2NjU1NjM1MjUxQkUxQUIyQjMwMTE1Rjg2NUM0MEVF
REZGMTI0NTlFMDYzNkVEODA5MzZDRC8wLzMxMzkzMDJlMzEzMjM0MmUzMTM5MzIy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4MzEzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnzA
MA0GCSqGSIb3DQEBCwUAA4IBAQB5f4z8jjhMH5hLcjTce/9KqcdjfAMbfRp4oUK1
WzgVPSdF4UVLzem7SwENAaojq68z5j7axIfrOHYDx41EENj96oR5kb0TO/v48NPB
TyX9QBAk9yd9qKEO81jp62rbonzmCM3nELqgs8msTw+LwQA65SwV5MVTWZ9Nnyhb
6uNttaYXG7USbslTBKMcAONnjMRcVdGBIsDDm3hyHc76ib7WP/Qx25XHx8rlcMJI
KobaI2fogkHRzqDebSrr71sNcGtc+VrPldvIah20uurfPAokZCXI+WhsAm7Tts0q
soMhJqAZrklzu6RwgYHz6hh2iHpsnSsZ1jb7ei/sk7HHsMSX
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org