Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa
File:                     3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa (raw, json)
Hash identifier:          gDA2jicHXnELkmN0oLO+fMd/PZASEvMVUh7feHy16Yo=
Subject key identifier:   40:D2:69:8A:62:28:9E:50:AA:1A:63:6B:2C:81:6B:ED:EF:A9:4D:D3
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       0753C6ACA0A1CB05AB87FC0190D61767CEC958A6
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa
Signing time:             Fri 24 May 2024 15:00:00 +0000
ROA not before:           Fri 24 May 2024 14:55:00 +0000
ROA not after:            Fri 23 May 2025 15:00:00 +0000
asID:                     271917
IP address blocks:        181.189.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:53:c6:ac:a0:a1:cb:05:ab:87:fc:01:90:d6:17:67:ce:c9:58:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: May 24 14:55:00 2024 GMT
            Not After : May 23 15:00:00 2025 GMT
        Subject: CN=40D2698A62289E50AA1A636B2C816BEDEFA94DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:13:7e:e3:eb:2b:ff:84:e1:9a:d3:1d:b1:
                    db:bb:dd:93:cd:7d:4d:63:59:64:a1:56:a5:89:63:
                    b8:01:71:b2:7d:7a:f9:bf:74:60:c2:8e:14:4a:c5:
                    dc:d7:d6:5c:af:05:39:23:bd:1c:b8:d8:8a:c3:d0:
                    f5:81:9f:9e:8d:a5:26:6b:32:ff:45:37:8d:32:c8:
                    87:08:0a:93:3a:e6:eb:5f:eb:3b:ce:79:bd:20:e7:
                    39:c6:0a:a8:f3:0d:c9:c0:8b:50:9f:24:ac:0d:07:
                    80:69:43:1c:0a:cf:ed:b2:46:7d:cf:f7:d0:77:3a:
                    14:f9:3e:b2:2b:55:df:c8:c3:98:e5:a9:d5:a2:3c:
                    f5:46:bc:4d:8c:4e:c7:d8:ee:c4:22:80:3d:a3:78:
                    5e:e4:d2:72:d2:17:bc:d9:42:d1:ef:a6:8f:24:8c:
                    b2:6a:ec:de:a5:72:00:6f:b5:99:6d:0c:97:eb:1e:
                    7b:7b:61:48:b4:f9:6f:71:e3:3e:d2:5e:c7:55:9e:
                    27:b4:a4:29:a5:11:f6:7d:ff:22:00:86:d6:11:4c:
                    ec:34:2b:92:40:eb:0b:68:99:02:94:32:c3:eb:97:
                    e6:32:a7:3d:9d:28:82:13:da:a2:31:c2:a5:cd:12:
                    07:41:4e:ed:b0:9f:ac:46:62:60:9a:a2:c4:31:75:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:69:8A:62:28:9E:50:AA:1A:63:6B:2C:81:6B:ED:EF:A9:4D:D3
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:7c:61:47:97:17:0b:14:0f:2e:3e:31:2a:0d:7f:b1:ba:
         ad:36:6e:3e:07:53:17:25:27:a8:7f:d6:ca:98:5c:b1:22:cf:
         ea:f9:a4:eb:74:a1:7d:d7:61:ab:c4:2b:bd:71:95:63:9f:80:
         a7:98:c2:a7:92:e0:f8:16:27:88:24:ea:6b:79:6e:c3:a4:39:
         5b:58:13:dc:84:41:ec:d6:1d:ce:f2:0a:11:a1:b2:6b:0f:19:
         64:9a:97:ef:bb:b7:9c:9a:5d:60:cd:8f:80:8d:aa:7e:f5:0b:
         f9:3c:ae:76:64:65:34:f4:71:06:22:e5:12:48:c8:ad:ab:de:
         6a:a7:43:24:02:89:e4:a8:57:05:c8:f8:d8:0f:e1:e7:da:26:
         a0:a5:87:e9:bc:37:4b:47:a9:2a:f8:12:47:a8:c1:a6:4d:2d:
         0c:8f:df:0e:21:c9:30:0f:29:5b:38:81:27:55:0f:1d:e9:01:
         5a:18:cc:94:5d:9d:a7:c0:40:0d:ed:2c:cc:2b:10:d4:b0:b1:
         bf:c6:b1:09:9f:af:88:c2:97:61:c1:93:f4:a6:af:f2:10:12:
         43:6d:de:02:e5:97:52:4f:b2:ac:11:51:0f:ad:21:69:d1:68:
         10:ec:ea:4d:6e:04:0c:52:81:05:da:9f:2b:22:27:f3:85:b1:
         08:8e:e6:f3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB1PGrKChywWrh/wBkNYXZ87JWKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MDgyMDQwM0U5NEM2MjJBOTkxREJFQjg3N0VCNzE5
NzE5ODQzMDAeFw0yNDA1MjQxNDU1MDBaFw0yNTA1MjMxNTAwMDBaMDMxMTAvBgNV
BAMTKDQwRDI2OThBNjIyODlFNTBBQTFBNjM2QjJDODE2QkVERUZBOTRERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYhN+4+sr/4ThmtMdsdu73ZPN
fU1jWWShVqWJY7gBcbJ9evm/dGDCjhRKxdzX1lyvBTkjvRy42IrD0PWBn56NpSZr
Mv9FN40yyIcICpM65utf6zvOeb0g5znGCqjzDcnAi1CfJKwNB4BpQxwKz+2yRn3P
99B3OhT5PrIrVd/Iw5jlqdWiPPVGvE2MTsfY7sQigD2jeF7k0nLSF7zZQtHvpo8k
jLJq7N6lcgBvtZltDJfrHnt7YUi0+W9x4z7SXsdVnie0pCmlEfZ9/yIAhtYRTOw0
K5JA6wtomQKUMsPrl+Yypz2dKIIT2qIxwqXNEgdBTu2wn6xGYmCaosQxdZDtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQNJpimIonlCqGmNrLIFr7e+pTdMwHwYDVR0j
BBgwFoAUGpCCBAPpTGIqmR2+uHfrcZcZhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURFMDk1QTFFMjg1QUFCRThDMTkxNjI1QjgzQzBEQTA4
QjUxNEEzQkI3QjZFOURCNjVENEVGQjNCQkVGRTk2LzAvMUE5MDgyMDQwM0U5NEM2
MjJBOTkxREJFQjg3N0VCNzE5NzE5ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQTkwODIwNDAzRTk0QzYyMkE5
OTFEQkVCODc3RUI3MTk3MTk4NDMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERTA5NUExRTI4NUFBQkU4QzE5MTYyNUI4M0MwREEwOEI1MTRBM0JC
N0I2RTlEQjY1RDRFRkIzQkJFRkU5Ni8wLzMxMzgzMTJlMzEzODM5MmUzNzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMxMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtb1M
MA0GCSqGSIb3DQEBCwUAA4IBAQAMt3xhR5cXCxQPLj4xKg1/sbqtNm4+B1MXJSeo
f9bKmFyxIs/q+aTrdKF912GrxCu9cZVjn4CnmMKnkuD4FieIJOpreW7DpDlbWBPc
hEHs1h3O8goRobJrDxlkmpfvu7ecml1gzY+Ajap+9Qv5PK52ZGU09HEGIuUSSMit
q95qp0MkAonkqFcFyPjYD+Hn2iagpYfpvDdLR6kq+BJHqMGmTS0Mj98OIckwDylb
OIEnVQ8d6QFaGMyUXZ2nwEAN7SzMKxDUsLG/xrEJn6+IwpdhwZP0pq/yEBJDbd4C
5ZdST7KsEVEPrSFp0WgQ7OpNbgQMUoEF2p8rIifzhbEIjubz
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org