Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa
File:                     3139302e31352e38302e302f32302d3234203d3e203532333532.roa (raw, json)
Hash identifier:          zAwSsmz7g+M27T2j8O6EGokh+DxHqwNtPRfjjgXdSM0=
Subject key identifier:   DF:3C:FA:CA:81:CA:01:C2:0C:35:79:C8:01:60:97:8E:F4:DC:FC:FF
Certificate issuer:       /CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
Certificate serial:       0BEED87DB4862843A8077E8EEE8A413974CEC623
Authority key identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa
Signing time:             Tue 05 Mar 2024 18:11:36 +0000
ROA not before:           Tue 05 Mar 2024 18:06:36 +0000
ROA not after:            Tue 04 Mar 2025 18:11:36 +0000
asID:                     52352
IP address blocks:        190.15.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ee:d8:7d:b4:86:28:43:a8:07:7e:8e:ee:8a:41:39:74:ce:c6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
        Validity
            Not Before: Mar  5 18:06:36 2024 GMT
            Not After : Mar  4 18:11:36 2025 GMT
        Subject: CN=DF3CFACA81CA01C20C3579C80160978EF4DCFCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:dc:68:c4:48:ae:fa:db:3d:80:2e:80:1e:
                    a9:c3:41:02:f9:1b:62:4b:75:cc:b0:d7:a6:a2:23:
                    67:6d:4d:45:c7:24:b0:05:c9:b6:8f:b4:4d:48:d9:
                    4c:84:75:4f:55:3f:3c:64:04:9c:55:34:2f:17:1b:
                    53:42:07:9b:df:22:f0:9c:22:24:44:17:c9:12:1e:
                    c3:a5:74:3b:fd:62:d4:42:56:eb:e8:45:8b:77:51:
                    c3:67:90:39:09:87:aa:12:1e:ab:0b:1c:6e:13:4d:
                    18:cf:82:cb:e8:1f:94:96:43:4d:f9:52:6f:00:98:
                    b5:c0:78:71:60:f4:ff:99:cb:18:61:0c:dd:4c:01:
                    fd:8e:ab:70:cb:98:39:21:74:fb:56:bf:7b:77:2e:
                    0e:f9:eb:e0:77:5e:f3:e8:63:d6:15:ce:8d:70:3d:
                    44:32:ca:30:2a:33:7a:0c:5a:39:1e:fc:50:57:fa:
                    15:05:fd:b9:15:ec:9e:0b:7c:bf:bc:2a:e3:9f:33:
                    56:8c:cf:42:0a:c7:24:f4:29:3f:18:1a:5c:12:86:
                    c0:90:11:bb:6f:79:7c:ef:94:e3:23:a7:f2:37:d5:
                    74:b7:a8:69:4d:a7:9b:2c:b4:98:26:d0:c9:f3:e6:
                    87:02:e5:bf:5e:d4:1e:37:63:2d:5f:84:48:e1:11:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:FA:CA:81:CA:01:C2:0C:35:79:C8:01:60:97:8E:F4:DC:FC:FF
            X509v3 Authority Key Identifier:
                keyid:A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:da:79:df:6b:18:93:0d:f6:83:85:1d:6c:f2:6c:65:68:
         c8:54:5e:8a:a4:1a:14:90:1d:e2:ca:8f:c0:2c:a6:0d:61:01:
         4b:79:e1:68:6c:55:61:22:4a:6e:1c:55:a7:9f:8e:32:2f:99:
         4e:18:89:34:3b:91:6b:19:13:5e:f7:c4:47:cf:8d:c8:a6:d3:
         b9:14:db:36:ea:fa:88:eb:ed:59:aa:00:8f:87:55:27:db:ff:
         3b:f3:74:f0:7a:f0:de:e6:5b:f4:7a:18:f7:46:d6:ab:80:48:
         6f:4a:ce:f6:0a:f3:ab:f4:81:75:e2:50:fd:3d:7b:bf:8f:6d:
         50:1a:ca:97:9c:5a:8e:e6:bc:8d:d8:9c:53:1a:a1:9f:0b:70:
         00:a1:d1:20:99:4d:8d:ec:4e:1a:10:81:a5:2e:28:84:21:e5:
         88:4d:6f:1b:95:2f:90:cb:20:b8:54:5c:4f:dc:99:ec:bb:79:
         cb:f5:ce:85:9d:90:cf:54:5f:52:2e:a4:b6:0b:91:82:5b:de:
         14:96:59:a0:51:51:60:2b:96:a0:ad:ed:d0:d8:fa:89:b7:18:
         aa:ba:42:4f:74:d8:5d:1c:ad:4e:4d:8a:2e:3d:70:12:c7:db:
         0b:78:76:b8:fa:98:39:bb:2b:c0:29:18:b8:11:af:e3:17:19:
         86:04:51:54
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUC+7YfbSGKEOoB36O7opBOXTOxiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQjIzRjg2QTIxRkU5Q0NCNENFMUU5QkM5MkMyQjIx
MEZFN0ZDODAeFw0yNDAzMDUxODA2MzZaFw0yNTAzMDQxODExMzZaMDMxMTAvBgNV
BAMTKERGM0NGQUNBODFDQTAxQzIwQzM1NzlDODAxNjA5NzhFRjREQ0ZDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6NxoxEiu+ts9gC6AHqnDQQL5
G2JLdcyw16aiI2dtTUXHJLAFybaPtE1I2UyEdU9VPzxkBJxVNC8XG1NCB5vfIvCc
IiREF8kSHsOldDv9YtRCVuvoRYt3UcNnkDkJh6oSHqsLHG4TTRjPgsvoH5SWQ035
Um8AmLXAeHFg9P+ZyxhhDN1MAf2Oq3DLmDkhdPtWv3t3Lg756+B3XvPoY9YVzo1w
PUQyyjAqM3oMWjke/FBX+hUF/bkV7J4LfL+8KuOfM1aMz0IKxyT0KT8YGlwShsCQ
EbtveXzvlOMjp/I31XS3qGlNp5sstJgm0Mnz5ocC5b9e1B43Yy1fhEjhEfSzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3zz6yoHKAcIMNXnIAWCXjvTc/P8wHwYDVR0j
BBgwFoAUphsj+Goh/pzLTOHpvJLCshD+f8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOUE2NDYxMUEyNDhDMzUxRTIyNEI0MzA5QUQzNkU5NTBD
OTRGQkRFQUYxMDQ0RkI1MkQxQUM5MzIyRTUzOTI0LzAvQTYxQjIzRjg2QTIxRkU5
Q0NCNENFMUU5QkM5MkMyQjIxMEZFN0ZDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjFCMjNGODZBMjFGRTlDQ0I0
Q0UxRTlCQzkyQzJCMjEwRkU3RkM4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzlBNjQ2MTFBMjQ4QzM1MUUyMjRCNDMwOUFEMzZFOTUwQzk0RkJERUFG
MTA0NEZCNTJEMUFDOTMyMkU1MzkyNC8wLzMxMzkzMDJlMzEzNTJlMzgzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+D1AwDQYJ
KoZIhvcNAQELBQADggEBAHZ/2nnfaxiTDfaDhR1s8mxlaMhUXoqkGhSQHeLKj8As
pg1hAUt54WhsVWEiSm4cVaefjjIvmU4YiTQ7kWsZE173xEfPjcim07kU2zbq+ojr
7VmqAI+HVSfb/zvzdPB68N7mW/R6GPdG1quASG9KzvYK86v0gXXiUP09e7+PbVAa
ypecWo7mvI3YnFMaoZ8LcACh0SCZTY3sThoQgaUuKIQh5YhNbxuVL5DLILhUXE/c
mey7ecv1zoWdkM9UX1IupLYLkYJb3hSWWaBRUWArlqCt7dDY+om3GKq6Qk902F0c
rU5Nii49cBLH2wt4drj6mDm7K8ApGLgRr+MXGYYEUVQ=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org