Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e34392e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          Fb1+wQ9SUYlQLeHAXKUAPVJVrWlnv4hYrxbg54eoFVU=
Subject key identifier:   DF:D7:13:C2:07:99:FB:70:12:4C:28:7E:17:0E:0F:E3:1E:31:89:D8
Certificate issuer:       /CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
Certificate serial:       4EB0820F56C86CE62200C15215CB8EA3A5A94D99
Authority key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     27947
IP address blocks:        192.188.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b0:82:0f:56:c8:6c:e6:22:00:c1:52:15:cb:8e:a3:a5:a9:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=DFD713C20799FB70124C287E170E0FE31E3189D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:a7:bf:57:77:d7:74:e0:de:b2:5d:0a:f4:
                    6c:63:72:00:73:80:e7:b4:ef:d2:5f:15:5e:dc:a7:
                    85:e6:16:f2:b1:b6:53:cd:7d:c9:1f:6a:b3:df:5b:
                    e5:d2:da:38:ca:78:63:73:a3:01:4e:a5:a6:d1:ed:
                    d9:d8:33:01:3d:e0:92:45:f3:16:72:53:c4:c3:5e:
                    dc:42:73:b8:17:00:21:e0:b0:b4:9e:62:d5:af:bd:
                    85:2e:a0:03:61:4a:7b:f6:a2:b1:a7:dc:75:45:ff:
                    40:4b:ee:f4:8b:ab:61:cd:80:18:a1:1c:a7:93:02:
                    40:08:6e:4b:f1:98:25:70:27:09:4b:cf:9c:1e:ed:
                    8f:a6:cc:b0:63:ac:2a:4f:28:4e:05:68:4c:df:87:
                    a6:43:d6:c5:7d:b5:24:d1:dc:43:83:66:43:10:37:
                    44:16:78:e2:48:53:67:d4:94:46:50:dd:9d:03:2e:
                    3a:e4:b0:77:65:00:df:e9:fa:bb:18:a0:db:22:39:
                    ec:4b:53:92:5d:af:14:f5:f2:4e:a7:e2:82:50:35:
                    5f:08:2f:2b:4b:b7:df:bc:e0:64:bb:96:b2:e5:56:
                    cf:88:e0:9e:cd:e3:08:fc:14:5d:ba:c9:8f:b2:44:
                    4a:4c:18:de:93:1a:20:f7:2d:94:30:96:ff:3f:e7:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:13:C2:07:99:FB:70:12:4C:28:7E:17:0E:0F:E3:1E:31:89:D8
            X509v3 Authority Key Identifier:
                keyid:5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:24:0d:74:ab:57:54:4a:7c:fd:e8:ef:fb:36:8c:ab:cb:
         ee:d6:c2:31:6b:c6:dd:2a:d9:84:5b:5f:0d:fe:03:0c:21:b8:
         88:1c:f3:30:58:a7:16:3c:4f:2a:de:a3:20:de:3d:4f:83:26:
         71:28:d9:9b:3b:23:30:19:ff:32:fd:f8:48:e0:cd:5e:a8:58:
         d0:c2:e8:e6:be:82:25:51:a4:2c:06:fb:7c:60:85:8b:97:47:
         25:65:5b:3f:b7:fe:f5:d5:6d:74:90:f5:35:49:f3:8e:89:2f:
         2d:33:7c:fb:3e:0e:58:e0:d6:1b:42:cb:1b:4e:c3:4e:68:90:
         3c:7a:32:ef:1d:c2:58:7a:e3:39:9a:8f:42:66:be:22:d3:64:
         e3:99:63:28:80:e0:ec:bf:d2:5c:71:99:54:32:95:6e:21:b4:
         0b:5b:d0:0b:0a:d0:0f:c8:80:8f:eb:eb:44:92:05:0b:db:5f:
         92:58:f4:7f:12:76:4a:a1:d7:40:34:2f:ac:7c:f7:48:cc:0b:
         77:0c:80:c8:10:70:e1:b2:b6:28:db:8d:34:1b:fe:8b:5d:99:
         a0:b3:3d:90:90:07:0f:5d:aa:16:ec:07:e8:fc:72:16:2d:54:
         fa:fb:9d:da:e7:24:61:e4:b2:9e:ed:0b:69:f1:e6:ff:f5:68:
         68:ca:43:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTrCCD1bIbOYiAMFSFcuOo6WpTZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIzQ0IzQkJFQ0RENTQ3RjVBNURENTRBNEZBNjRCOEZE
NEFDRjdFRjAeFw0yNDAzMDUxODE3NTdaFw0yNTAzMDQxODIyNTdaMDMxMTAvBgNV
BAMTKERGRDcxM0MyMDc5OUZCNzAxMjRDMjg3RTE3MEUwRkUzMUUzMTg5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Xae/V3fXdODesl0K9GxjcgBz
gOe079JfFV7cp4XmFvKxtlPNfckfarPfW+XS2jjKeGNzowFOpabR7dnYMwE94JJF
8xZyU8TDXtxCc7gXACHgsLSeYtWvvYUuoANhSnv2orGn3HVF/0BL7vSLq2HNgBih
HKeTAkAIbkvxmCVwJwlLz5we7Y+mzLBjrCpPKE4FaEzfh6ZD1sV9tSTR3EODZkMQ
N0QWeOJIU2fUlEZQ3Z0DLjrksHdlAN/p+rsYoNsiOexLU5JdrxT18k6n4oJQNV8I
LytLt9+84GS7lrLlVs+I4J7N4wj8FF26yY+yREpMGN6TGiD3LZQwlv8/5wcBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU39cTwgeZ+3ASTCh+Fw4P4x4xidgwHwYDVR0j
BBgwFoAUWzyzu+zdVH9aXdVKT6ZLj9Ss9+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FREJEMEZENzdFMzg5MEM4OTMyMDg5MTE1QzY2RjBGMUE4
MDhDRTdDNzdCMkVDRUVBMEYzOTZENzEyNDRGNzg3LzAvNUIzQ0IzQkJFQ0RENTQ3
RjVBNURENTRBNEZBNjRCOEZENEFDRjdFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjNDQjNCQkVDREQ1NDdGNUE1
REQ1NEE0RkE2NEI4RkQ0QUNGN0VGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRURCRDBGRDc3RTM4OTBDODkzMjA4OTExNUM2NkYwRjFBODA4Q0U3Qzc3
QjJFQ0VFQTBGMzk2RDcxMjQ0Rjc4Ny8wLzMxMzkzMjJlMzEzODM4MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8MTAN
BgkqhkiG9w0BAQsFAAOCAQEAb9YkDXSrV1RKfP3o7/s2jKvL7tbCMWvG3SrZhFtf
Df4DDCG4iBzzMFinFjxPKt6jIN49T4MmcSjZmzsjMBn/Mv34SODNXqhY0MLo5r6C
JVGkLAb7fGCFi5dHJWVbP7f+9dVtdJD1NUnzjokvLTN8+z4OWODWG0LLG07DTmiQ
PHoy7x3CWHrjOZqPQma+ItNk45ljKIDg7L/SXHGZVDKVbiG0C1vQCwrQD8iAj+vr
RJIFC9tfklj0fxJ2SqHXQDQvrHz3SMwLdwyAyBBw4bK2KNuNNBv+i12ZoLM9kJAH
D12qFuwH6PxyFi1U+vud2uckYeSynu0LafHm//VoaMpDvw==
-----END CERTIFICATE-----
Generated at Mon May 6 22:39:58 2024 by rpki-client on console-ams.rpki-client.org