Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
File:                     3139302e352e3136302e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier:          XxDtLiIMgNEIm+YBtMvi0WRB0k1TfOGS4sIKNZ1+eOw=
Subject key identifier:   FB:08:7B:BD:19:3D:3B:06:24:A1:20:AD:02:B1:63:95:76:E5:C7:84
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       785733747C4C215512DB204D902FC365AC17E259
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:48 +0000
ROA not before:           Tue 05 Mar 2024 18:06:48 +0000
ROA not after:            Tue 04 Mar 2025 18:11:48 +0000
asID:                     28015
IP address blocks:        190.5.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:57:33:74:7c:4c:21:55:12:db:20:4d:90:2f:c3:65:ac:17:e2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:48 2024 GMT
            Not After : Mar  4 18:11:48 2025 GMT
        Subject: CN=FB087BBD193D3B0624A120AD02B1639576E5C784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:b1:db:94:18:e4:c8:4f:b1:b2:b7:1b:eb:
                    cd:51:47:60:c5:5f:c9:9c:c0:1b:27:bf:7e:76:32:
                    dc:48:89:d9:94:12:b2:fe:4e:d8:49:9f:c3:e5:ec:
                    be:2e:39:73:8e:19:cf:b0:64:c8:34:63:86:c5:af:
                    6c:9d:ec:36:59:b1:d7:b1:c8:a2:9c:cd:4c:03:7f:
                    de:7d:ef:b0:44:8f:9d:d5:fb:c7:40:ee:52:6d:f0:
                    1a:c9:77:ad:69:ed:22:e7:e2:0d:b9:f6:09:75:76:
                    03:76:9e:ed:a2:90:42:16:16:0c:04:34:bd:24:fb:
                    4f:75:15:3a:03:7b:f3:3e:36:0b:2f:66:9d:59:a2:
                    a4:c1:ba:4c:cd:04:7a:78:d0:70:40:c4:81:73:a6:
                    4c:5c:8f:06:3c:c4:3d:82:a2:40:5f:6d:cd:13:86:
                    c4:95:54:06:74:62:4c:cf:13:52:77:f8:6a:13:57:
                    56:09:8f:b5:4f:b2:75:94:8a:f2:ad:c3:55:ce:2a:
                    d0:0c:26:ff:96:56:89:d1:17:56:b0:c9:8e:fe:3b:
                    4a:e2:61:89:95:fd:39:49:e1:26:87:67:75:c8:85:
                    60:9b:fa:49:19:2c:56:c9:88:9e:8d:2e:e1:42:c0:
                    aa:f0:cf:c8:f3:06:a5:8c:7d:14:77:6b:f7:9e:36:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:7B:BD:19:3D:3B:06:24:A1:20:AD:02:B1:63:95:76:E5:C7:84
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:ff:07:dd:a3:ea:75:d8:ad:8e:19:2d:9a:4c:48:74:11:
         a4:f6:ca:a9:04:8b:d0:23:1a:06:3c:5a:bc:c3:11:c5:0a:7b:
         13:61:e7:7d:7d:d3:62:f7:43:ff:cc:6d:c9:ec:9d:ce:cb:f6:
         ab:58:9b:6f:10:86:57:c4:7e:ad:c5:ea:11:b5:fe:e9:9f:ed:
         3f:1d:8b:81:6d:80:63:c3:5a:00:52:0b:cb:0b:52:6a:29:0d:
         a1:7e:1a:04:65:70:9a:5c:4f:17:09:b9:94:60:ed:20:cc:dd:
         7a:a4:d7:c2:ae:77:84:df:1d:4d:2a:24:f9:c7:3d:b5:d5:f5:
         09:a5:b5:e8:8a:dd:2c:14:42:40:32:50:c8:11:7f:30:1f:79:
         63:13:32:ca:08:02:4c:07:33:0b:7c:bb:23:75:cf:d3:c3:fe:
         80:12:a6:e6:d0:06:c2:5a:cf:11:15:ed:58:ba:4e:7c:89:bc:
         46:be:f4:87:0a:4f:8c:c7:2d:6a:1a:db:b0:0d:49:78:a0:a2:
         8d:b0:c9:01:5c:74:a3:d2:ad:71:20:67:e9:be:3f:54:81:d0:
         81:ae:64:42:2c:98:e9:b6:30:42:a1:da:eb:83:7b:5c:46:9b:
         e9:08:ec:24:22:73:e9:a0:04:41:17:21:c1:2e:8e:05:05:21:
         a6:33:5a:84
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeFczdHxMIVUS2yBNkC/DZawX4lkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNDAzMDUxODA2NDhaFw0yNTAzMDQxODExNDhaMDMxMTAvBgNV
BAMTKEZCMDg3QkJEMTkzRDNCMDYyNEExMjBBRDAyQjE2Mzk1NzZFNUM3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5LHblBjkyE+xsrcb681RR2DF
X8mcwBsnv352MtxIidmUErL+TthJn8Pl7L4uOXOOGc+wZMg0Y4bFr2yd7DZZsdex
yKKczUwDf95977BEj53V+8dA7lJt8BrJd61p7SLn4g259gl1dgN2nu2ikEIWFgwE
NL0k+091FToDe/M+NgsvZp1ZoqTBukzNBHp40HBAxIFzpkxcjwY8xD2CokBfbc0T
hsSVVAZ0YkzPE1J3+GoTV1YJj7VPsnWUivKtw1XOKtAMJv+WVonRF1awyY7+O0ri
YYmV/TlJ4SaHZ3XIhWCb+kkZLFbJiJ6NLuFCwKrwz8jzBqWMfRR3a/eeNiU7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU+wh7vRk9OwYkoSCtArFjlXblx4QwHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMxMzkzMDJlMzUyZTMxMzYzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+BaAwDQYJ
KoZIhvcNAQELBQADggEBAFeN/wfdo+p12K2OGS2aTEh0EaT2yqkEi9AjGgY8WrzD
EcUKexNh531902L3Q//Mbcnsnc7L9qtYm28QhlfEfq3F6hG1/umf7T8di4FtgGPD
WgBSC8sLUmopDaF+GgRlcJpcTxcJuZRg7SDM3Xqk18Kud4TfHU0qJPnHPbXV9Qml
teiK3SwUQkAyUMgRfzAfeWMTMsoIAkwHMwt8uyN1z9PD/oASpubQBsJazxEV7Vi6
TnyJvEa+9IcKT4zHLWoa27ANSXigoo2wyQFcdKPSrXEgZ+m+P1SB0IGuZEIsmOm2
MEKh2uuDe1xGm+kI7CQic+mgBEEXIcEujgUFIaYzWoQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org