Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/3139302e38332e3131362e302f32322d3234203d3e20323639393430.roa
File:                     3139302e38332e3131362e302f32322d3234203d3e20323639393430.roa (raw, json)
Hash identifier:          UWg9DhwQNDnoEVjla3kEMhyaEeuL5GyWShTvlgkJ8x8=
Subject key identifier:   DC:15:96:42:1F:69:F5:CC:E0:F8:51:8E:20:EE:47:FA:23:5A:F3:A5
Certificate issuer:       /CN=68C78301E8DE93E126F02541825380CE3FA602AB
Certificate serial:       31BE26FA951C3845BE88BAECBD8B3D45D0C05287
Authority key identifier: 68:C7:83:01:E8:DE:93:E1:26:F0:25:41:82:53:80:CE:3F:A6:02:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/3139302e38332e3131362e302f32322d3234203d3e20323639393430.roa
Signing time:             Tue 05 Mar 2024 18:10:09 +0000
ROA not before:           Tue 05 Mar 2024 18:05:09 +0000
ROA not after:            Tue 04 Mar 2025 18:10:09 +0000
asID:                     269940
IP address blocks:        190.83.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:be:26:fa:95:1c:38:45:be:88:ba:ec:bd:8b:3d:45:d0:c0:52:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C78301E8DE93E126F02541825380CE3FA602AB
        Validity
            Not Before: Mar  5 18:05:09 2024 GMT
            Not After : Mar  4 18:10:09 2025 GMT
        Subject: CN=DC1596421F69F5CCE0F8518E20EE47FA235AF3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:99:88:8c:ca:57:d6:c0:25:7e:ea:6a:f6:
                    db:eb:e7:40:cf:3e:ab:49:8d:ad:6a:dc:20:71:ec:
                    0a:ae:93:2b:f1:a3:f4:de:4c:5f:a0:46:db:5b:05:
                    39:90:f8:89:21:25:f8:f4:ce:e9:17:fa:d5:89:64:
                    c3:44:35:e9:fc:80:1c:88:90:f2:bc:20:1e:8d:66:
                    0f:71:cb:a3:e6:ef:07:a8:25:10:8e:b0:97:07:bb:
                    f0:10:f6:d5:01:b9:cf:f6:ba:65:1f:ee:7b:d0:ac:
                    1c:60:fa:72:53:93:43:c4:ad:5c:2f:ac:02:21:31:
                    7c:f1:e7:75:c7:21:60:15:b2:d2:30:91:2f:ea:54:
                    4b:a8:6d:87:bb:bd:2c:ce:8f:b9:1b:a3:c3:b6:99:
                    bf:79:98:91:f1:aa:17:50:28:7e:d9:f9:ad:ab:85:
                    69:54:86:1a:3a:ab:29:ca:49:0f:63:c1:f8:6f:43:
                    57:03:1c:3e:a1:cd:8f:76:ac:8f:f2:af:7c:70:3d:
                    44:1e:3f:09:05:8a:a6:b7:7e:5d:e1:3b:44:5c:a1:
                    b4:60:5f:2f:2a:e5:2e:bc:2b:93:bd:ae:2e:02:4d:
                    b2:5e:56:bd:97:7a:40:f1:8a:62:dd:22:a4:d9:91:
                    30:6e:7d:66:6a:ae:6d:41:76:6f:7f:92:9a:20:68:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:96:42:1F:69:F5:CC:E0:F8:51:8E:20:EE:47:FA:23:5A:F3:A5
            X509v3 Authority Key Identifier:
                keyid:68:C7:83:01:E8:DE:93:E1:26:F0:25:41:82:53:80:CE:3F:A6:02:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/68C78301E8DE93E126F02541825380CE3FA602AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C78301E8DE93E126F02541825380CE3FA602AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB920835C9D02D19B40991985303F5042E1C193169951ABE02034E896F228FD3/0/3139302e38332e3131362e302f32322d3234203d3e20323639393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:7c:9b:4e:07:1b:fa:99:a0:a4:32:2b:73:1a:3a:62:69:
         b2:f9:f2:8f:ec:6f:9d:46:ff:80:e8:7d:51:ac:64:d5:bd:e8:
         55:84:5e:cb:24:10:b8:4a:eb:30:0f:96:a7:29:06:e5:c8:53:
         1b:4b:5d:f6:11:8d:94:36:d0:9a:30:d3:e7:55:0f:e6:8d:9a:
         d7:51:24:b7:f6:ec:25:81:5c:50:6c:73:96:f2:7a:2f:66:fd:
         b7:fb:bc:6d:49:44:50:fe:75:48:f1:4f:cd:b8:2f:98:1d:db:
         40:e9:85:52:26:a5:9b:92:a8:b7:0b:e8:12:09:28:25:d4:d7:
         bd:08:f2:1a:e5:13:7f:62:50:58:e9:f8:f5:ab:65:b2:fe:3a:
         11:e5:fd:9d:d9:a8:9c:ba:05:49:72:9b:7a:b9:63:b7:d6:03:
         9c:ae:56:66:7b:9b:f7:d1:ae:99:e6:6e:85:56:f8:42:ce:5c:
         a1:87:74:cc:c5:b3:10:c4:87:92:1d:f8:4d:71:fb:23:d1:7a:
         d5:40:77:26:a5:ea:f4:f3:69:65:9c:a0:5b:51:e0:d2:46:f3:
         1f:0b:b7:00:2e:fa:5a:96:57:e2:80:68:62:96:a1:aa:02:59:
         8d:25:a7:5f:ca:d9:2a:00:e2:a8:b4:6a:f2:f5:85:09:bb:87:
         b3:ff:46:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMb4m+pUcOEW+iLrsvYs9RdDAUocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhDNzgzMDFFOERFOTNFMTI2RjAyNTQxODI1MzgwQ0Uz
RkE2MDJBQjAeFw0yNDAzMDUxODA1MDlaFw0yNTAzMDQxODEwMDlaMDMxMTAvBgNV
BAMTKERDMTU5NjQyMUY2OUY1Q0NFMEY4NTE4RTIwRUU0N0ZBMjM1QUYzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKZmIjMpX1sAlfupq9tvr50DP
PqtJja1q3CBx7Aqukyvxo/TeTF+gRttbBTmQ+IkhJfj0zukX+tWJZMNENen8gByI
kPK8IB6NZg9xy6Pm7weoJRCOsJcHu/AQ9tUBuc/2umUf7nvQrBxg+nJTk0PErVwv
rAIhMXzx53XHIWAVstIwkS/qVEuobYe7vSzOj7kbo8O2mb95mJHxqhdQKH7Z+a2r
hWlUhho6qynKSQ9jwfhvQ1cDHD6hzY92rI/yr3xwPUQePwkFiqa3fl3hO0RcobRg
Xy8q5S68K5O9ri4CTbJeVr2XekDximLdIqTZkTBufWZqrm1Bdm9/kpogaEFNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3BWWQh9p9czg+FGOIO5H+iNa86UwHwYDVR0j
BBgwFoAUaMeDAejek+Em8CVBglOAzj+mAqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQjkyMDgzNUM5RDAyRDE5QjQwOTkxOTg1MzAzRjUwNDJF
MUMxOTMxNjk5NTFBQkUwMjAzNEU4OTZGMjI4RkQzLzAvNjhDNzgzMDFFOERFOTNF
MTI2RjAyNTQxODI1MzgwQ0UzRkE2MDJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEM3ODMwMUU4REU5M0UxMjZG
MDI1NDE4MjUzODBDRTNGQTYwMkFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0I5MjA4MzVDOUQwMkQxOUI0MDk5MTk4NTMwM0Y1MDQyRTFDMTkzMTY5
OTUxQUJFMDIwMzRFODk2RjIyOEZEMy8wLzMxMzkzMDJlMzgzMzJlMzEzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvlN0
MA0GCSqGSIb3DQEBCwUAA4IBAQCEPXybTgcb+pmgpDIrcxo6Ymmy+fKP7G+dRv+A
6H1RrGTVvehVhF7LJBC4SuswD5anKQblyFMbS132EY2UNtCaMNPnVQ/mjZrXUSS3
9uwlgVxQbHOW8novZv23+7xtSURQ/nVI8U/NuC+YHdtA6YVSJqWbkqi3C+gSCSgl
1Ne9CPIa5RN/YlBY6fj1q2Wy/joR5f2d2aicugVJcpt6uWO31gOcrlZme5v30a6Z
5m6FVvhCzlyhh3TMxbMQxIeSHfhNcfsj0XrVQHcmper082llnKBbUeDSRvMfC7cA
LvpallfigGhilqGqAlmNJadfytkqAOKotGry9YUJu4ez/0bO
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org