Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa
File:                     3139302e38332e382e302f32322d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          gBnTyMZU8sl/O4iSuCaueLshG3GuvidENiuUOoqJjGw=
Subject key identifier:   BA:6F:A7:87:9D:AA:0D:81:BA:D7:8E:9E:28:EF:FF:C9:5B:CB:65:6C
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       1B4BF9A77FDC57F030C68548FCB937318BD642D2
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa
Signing time:             Tue 05 Mar 2024 18:21:53 +0000
ROA not before:           Tue 05 Mar 2024 18:16:53 +0000
ROA not after:            Tue 04 Mar 2025 18:21:53 +0000
asID:                     269926
IP address blocks:        190.83.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:f9:a7:7f:dc:57:f0:30:c6:85:48:fc:b9:37:31:8b:d6:42:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Mar  5 18:16:53 2024 GMT
            Not After : Mar  4 18:21:53 2025 GMT
        Subject: CN=BA6FA7879DAA0D81BAD78E9E28EFFFC95BCB656C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:94:bf:cd:76:94:a1:60:d0:7d:6c:04:97:
                    19:7b:a6:29:17:46:ef:32:5e:e5:cf:ee:22:40:14:
                    0c:91:ca:e5:76:4f:a1:39:bb:ca:f1:23:78:87:0a:
                    3f:a8:5f:84:e4:7c:b5:10:d1:83:8d:a8:e6:74:e6:
                    9d:f6:90:1f:5f:c4:45:f8:46:e1:11:90:66:cf:b9:
                    0d:a8:61:70:83:b9:42:c5:f9:25:0f:3c:e4:aa:e7:
                    f1:ba:dc:da:a2:b4:ee:00:20:6c:be:1a:4f:f8:33:
                    af:fb:0b:37:c9:78:2d:cc:fb:d8:1f:8c:22:b3:bd:
                    be:7d:50:22:a0:bd:73:10:2d:8a:72:7a:e8:42:64:
                    67:a0:48:55:d9:4e:0a:38:a2:2d:54:70:6c:3d:8e:
                    5e:a2:97:f2:0a:3e:d9:1b:e7:f7:8a:26:1e:c3:94:
                    92:de:95:0a:74:45:03:7c:4e:c5:71:7d:2e:8d:46:
                    60:ee:02:84:10:19:1d:0b:65:e3:7b:7f:fc:65:f3:
                    a4:24:12:33:de:e6:67:8c:25:51:66:bb:8e:a0:4a:
                    d9:cf:9d:aa:30:7d:1d:95:e0:cf:e1:1e:c1:66:72:
                    5e:41:f4:fc:54:0e:cd:da:0f:44:b3:7b:d8:66:38:
                    ac:45:aa:0b:10:91:cd:ca:8f:c5:72:c5:25:89:b1:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:A7:87:9D:AA:0D:81:BA:D7:8E:9E:28:EF:FF:C9:5B:CB:65:6C
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:04:6f:fa:9b:09:e4:7b:be:2e:15:e8:2e:de:34:6d:99:9b:
         23:13:93:a7:87:a4:b3:08:9d:9b:2c:78:2d:77:46:82:0f:7c:
         a5:76:0e:d3:0e:ea:39:3e:37:6c:40:6c:f7:d7:51:38:f9:0a:
         d9:35:df:89:89:f5:79:27:64:87:e6:7c:92:33:2b:05:1c:01:
         c4:fa:46:ce:68:27:a1:ea:14:c2:4f:95:04:45:ce:11:2b:14:
         bb:97:af:f1:1f:79:ab:e9:aa:bc:33:c4:8a:a0:a1:6c:90:7a:
         e5:04:1f:63:0f:ce:dc:7d:13:b2:3c:c1:4f:21:84:81:74:f2:
         cc:a8:2c:84:de:cf:49:ef:74:84:f3:e4:40:cf:e0:ed:8e:02:
         10:1b:cb:2c:42:7d:ea:6a:4a:d4:45:c2:fa:ba:cc:77:2c:79:
         c3:23:8d:c4:1c:36:db:78:93:dc:e2:6e:f6:55:22:b3:c7:d2:
         34:6a:d5:9f:aa:79:25:28:14:a3:71:98:59:1f:40:9b:8a:23:
         a9:79:6f:46:aa:9e:cc:4e:5d:32:e9:30:c6:7e:ac:53:77:88:
         e9:f5:a2:bf:ec:16:3f:37:4b:bf:ff:df:0b:2a:e1:9e:50:24:
         0d:04:a3:3e:f2:bc:3b:57:5a:8c:be:60:fd:60:b0:3e:cd:ea:
         ef:55:71:40
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUG0v5p3/cV/AwxoVI/Lk3MYvWQtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDQ0VDNDNBOTJCNEJDQzlCNzkyRDc1N0M3MTZGOTND
NTEzM0I2RjAeFw0yNDAzMDUxODE2NTNaFw0yNTAzMDQxODIxNTNaMDMxMTAvBgNV
BAMTKEJBNkZBNzg3OURBQTBEODFCQUQ3OEU5RTI4RUZGRkM5NUJDQjY1NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF9pS/zXaUoWDQfWwElxl7pikX
Ru8yXuXP7iJAFAyRyuV2T6E5u8rxI3iHCj+oX4TkfLUQ0YONqOZ05p32kB9fxEX4
RuERkGbPuQ2oYXCDuULF+SUPPOSq5/G63NqitO4AIGy+Gk/4M6/7CzfJeC3M+9gf
jCKzvb59UCKgvXMQLYpyeuhCZGegSFXZTgo4oi1UcGw9jl6il/IKPtkb5/eKJh7D
lJLelQp0RQN8TsVxfS6NRmDuAoQQGR0LZeN7f/xl86QkEjPe5meMJVFmu46gStnP
naowfR2V4M/hHsFmcl5B9PxUDs3aD0Sze9hmOKxFqgsQkc3Kj8VyxSWJsQDdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUum+nh52qDYG6146eKO//yVvLZWwwHwYDVR0j
BBgwFoAUKMzsQ6krS8ybeS11fHFvk8UTO28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDgxQkQ1RjYwOTZBNkFENTIxNzgyODZDRDY5MkJGQTMz
NTAwNkNCMTZERjBFNUZCQjhFMUNBOTczNzJFODAwLzAvMjhDQ0VDNDNBOTJCNEJD
QzlCNzkyRDc1N0M3MTZGOTNDNTEzM0I2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOENDRUM0M0E5MkI0QkNDOUI3
OTJENzU3QzcxNkY5M0M1MTMzQjZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ4MUJENUY2MDk2QTZBRDUyMTc4Mjg2Q0Q2OTJCRkEzMzUwMDZDQjE2
REYwRTVGQkI4RTFDQTk3MzcyRTgwMC8wLzMxMzkzMDJlMzgzMzJlMzgyZTMwMmYz
MjMyMmQzMzMyMjAzZDNlMjAzMjM2MzkzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+UwgwDQYJ
KoZIhvcNAQELBQADggEBAAQEb/qbCeR7vi4V6C7eNG2ZmyMTk6eHpLMInZsseC13
RoIPfKV2DtMO6jk+N2xAbPfXUTj5Ctk134mJ9XknZIfmfJIzKwUcAcT6Rs5oJ6Hq
FMJPlQRFzhErFLuXr/EfeavpqrwzxIqgoWyQeuUEH2MPztx9E7I8wU8hhIF08syo
LITez0nvdITz5EDP4O2OAhAbyyxCfepqStRFwvq6zHcsecMjjcQcNtt4k9zibvZV
IrPH0jRq1Z+qeSUoFKNxmFkfQJuKI6l5b0aqnsxOXTLpMMZ+rFN3iOn1or/sFj83
S7//3wsq4Z5QJA0Eoz7yvDtXWoy+YP1gsD7N6u9VcUA=
-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:32 2024 by rpki-client on console-fra.rpki-client.org