Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa
File:                     3139302e3130382e38302e302f32302d3234203d3e203238303332.roa (raw, json)
Hash identifier:          GP2vlm+7fTWYUCBqe66f8eoFUE1T/L39n1j0Xay3+hY=
Subject key identifier:   22:69:FA:D8:BF:FB:1D:D8:BA:68:8A:71:E6:F9:BC:80:22:88:AE:10
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       0C82B82AD673DEC596C22935A7E34382FA784D34
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:14:00 +0000
ROA not before:           Tue 05 Mar 2024 18:09:00 +0000
ROA not after:            Tue 04 Mar 2025 18:14:00 +0000
asID:                     28032
IP address blocks:        190.108.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:b8:2a:d6:73:de:c5:96:c2:29:35:a7:e3:43:82:fa:78:4d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:00 2024 GMT
            Not After : Mar  4 18:14:00 2025 GMT
        Subject: CN=2269FAD8BFFB1DD8BA688A71E6F9BC802288AE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:3b:93:b9:bc:d8:54:66:4c:29:0e:36:21:
                    0d:65:16:38:71:98:3d:29:cc:e5:57:4a:b9:98:c6:
                    3f:8a:ec:f8:7c:af:26:92:41:0e:64:fc:61:f3:fe:
                    e5:7b:4a:ee:f6:72:c4:57:a6:4a:d1:2d:cd:10:a5:
                    ff:cd:80:f1:22:2b:51:cb:76:dd:61:61:29:55:44:
                    84:c3:1f:e1:d0:4b:a9:1c:b9:38:d3:c9:da:4c:41:
                    4e:c3:d3:7a:cf:ab:e8:0c:25:79:14:2a:d4:11:a6:
                    af:2c:bf:3a:6f:d9:55:27:4e:fe:38:a3:46:da:09:
                    a0:56:96:27:e5:0b:71:65:cb:9a:1d:a6:c4:d7:11:
                    cd:9e:4c:8a:8b:1f:b9:6c:27:1b:99:bc:0f:02:00:
                    c5:8a:40:15:a8:56:0a:07:20:5b:b7:26:4e:57:55:
                    82:aa:19:ad:78:05:d8:43:05:19:53:21:ac:5b:e9:
                    25:32:c8:63:4d:95:4e:6a:b2:45:f2:a8:26:d2:5b:
                    20:ce:1e:b4:fb:9f:8e:7e:64:43:b0:9a:43:1d:1b:
                    4a:dd:85:23:1d:f2:f2:1f:36:d0:50:c9:5c:eb:78:
                    7c:c5:29:cf:89:7b:b3:20:81:9f:04:45:87:90:f8:
                    dc:97:0f:10:83:20:4e:98:d2:19:22:f4:15:9f:ff:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:69:FA:D8:BF:FB:1D:D8:BA:68:8A:71:E6:F9:BC:80:22:88:AE:10
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38302e302f32302d3234203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:43:6a:a1:d1:a7:dc:f5:7a:4d:47:dc:f9:93:46:70:f5:51:
         1d:11:e3:a8:12:b8:c9:24:d9:50:0e:f0:9d:a0:fb:5e:c8:6f:
         c2:9d:9f:38:09:cf:c8:c0:13:76:8e:61:e2:8f:f6:02:79:6d:
         17:1d:29:28:bf:6e:50:89:dd:cf:1f:bb:62:d8:96:4f:11:5b:
         ad:4d:dd:cf:56:a9:9e:45:4b:1a:38:ad:31:51:26:e0:64:40:
         67:6d:78:5a:fd:72:8a:47:9e:6a:78:6c:2d:75:dc:e9:25:b3:
         ef:b7:d0:53:06:d8:76:c6:3d:15:6a:07:af:99:6b:93:25:56:
         4e:21:84:5c:75:2b:a5:a4:d2:65:ff:b3:00:6a:8f:8f:9c:f2:
         d1:dc:0a:24:1d:68:ff:fa:70:a1:b9:9f:dd:e4:a2:56:e0:e9:
         94:81:3a:37:36:6d:f4:2f:6e:ba:af:64:3c:96:ce:d7:c2:50:
         93:89:5f:ab:2d:e8:de:26:98:47:bd:51:cc:35:15:2c:7a:17:
         6f:39:56:96:2c:5b:bd:d9:73:45:e8:7c:56:ba:90:12:44:3b:
         34:70:80:c3:90:3a:24:73:fa:95:66:18:f4:e6:6c:7e:02:4c:
         14:05:99:92:bd:83:07:58:b0:80:2e:7b:58:70:d7:cc:41:8d:
         6b:64:cd:fe
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDIK4KtZz3sWWwik1p+NDgvp4TTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUyMjU5MzUyNjBC
ODM3RTc0RDAeFw0yNDAzMDUxODA5MDBaFw0yNTAzMDQxODE0MDBaMDMxMTAvBgNV
BAMTKDIyNjlGQUQ4QkZGQjFERDhCQTY4OEE3MUU2RjlCQzgwMjI4OEFFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFTuTubzYVGZMKQ42IQ1lFjhx
mD0pzOVXSrmYxj+K7Ph8ryaSQQ5k/GHz/uV7Su72csRXpkrRLc0Qpf/NgPEiK1HL
dt1hYSlVRITDH+HQS6kcuTjTydpMQU7D03rPq+gMJXkUKtQRpq8svzpv2VUnTv44
o0baCaBWliflC3Fly5odpsTXEc2eTIqLH7lsJxuZvA8CAMWKQBWoVgoHIFu3Jk5X
VYKqGa14BdhDBRlTIaxb6SUyyGNNlU5qskXyqCbSWyDOHrT7n45+ZEOwmkMdG0rd
hSMd8vIfNtBQyVzreHzFKc+Je7MggZ8ERYeQ+NyXDxCDIE6Y0hki9BWf/zrNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUImn62L/7Hdi6aIpx5vm8gCKIrhAwHwYDVR0j
BBgwFoAUjp6Jat+AQeB6tnNSJZNSYLg3500wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQy
RUUyRDlCQTIzNDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFF
MDdBQjY3MzUyMjU5MzUyNjBCODM3RTc0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTlFODk2QURGODA0MUUwN0FC
NjczNTIyNTkzNTI2MEI4MzdFNzRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFCNkVBNDE0RTk0MkVFMkQ5QkEy
MzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzMxMzkzMDJlMzEzMDM4MmUzODMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMwMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL5sUDAN
BgkqhkiG9w0BAQsFAAOCAQEAdkNqodGn3PV6TUfc+ZNGcPVRHRHjqBK4ySTZUA7w
naD7Xshvwp2fOAnPyMATdo5h4o/2AnltFx0pKL9uUIndzx+7YtiWTxFbrU3dz1ap
nkVLGjitMVEm4GRAZ214Wv1yikeeanhsLXXc6SWz77fQUwbYdsY9FWoHr5lrkyVW
TiGEXHUrpaTSZf+zAGqPj5zy0dwKJB1o//pwobmf3eSiVuDplIE6NzZt9C9uuq9k
PJbO18JQk4lfqy3o3iaYR71RzDUVLHoXbzlWlixbvdlzReh8VrqQEkQ7NHCAw5A6
JHP6lWYY9OZsfgJMFAWZkr2DB1iwgC57WHDXzEGNa2TN/g==
-----END CERTIFICATE-----
Generated at Thu May 2 05:57:05 2024 by rpki-client on console-ams.rpki-client.org