Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e33322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          MMb34rgTV1lIjd0tgebKYlSr9lFAf3M6negHxCUJ7+o=
Subject key identifier:   95:5F:A9:FA:0B:86:1B:CE:96:8B:14:2D:D4:8F:83:22:59:9A:34:B8
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       34585E34E0C612CF0495E6387CDDCB131722E87B
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:01 +0000
ROA not before:           Mon 27 May 2024 19:45:01 +0000
ROA not after:            Mon 26 May 2025 19:50:01 +0000
asID:                     22313
IP address blocks:        190.103.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:5e:34:e0:c6:12:cf:04:95:e6:38:7c:dd:cb:13:17:22:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:01 2024 GMT
            Not After : May 26 19:50:01 2025 GMT
        Subject: CN=955FA9FA0B861BCE968B142DD48F8322599A34B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:db:ce:e3:80:dd:d3:a7:fc:f1:1d:76:c2:
                    ac:25:12:8b:f6:98:fa:91:02:64:54:17:ee:a5:ac:
                    b5:4c:3a:cd:89:e6:79:17:86:6d:e1:be:fa:95:6b:
                    8b:2b:7d:34:5c:99:ae:6e:18:6d:d7:a4:b9:56:f3:
                    e0:fb:fe:04:87:bc:cc:e2:5d:ee:6f:6b:c3:a5:7b:
                    33:a6:3a:1f:7f:c8:2d:8c:de:e6:b1:3b:6c:31:7b:
                    67:4c:54:06:49:69:b8:48:77:81:bb:2f:0a:57:47:
                    a1:ad:44:9a:5c:df:f1:b5:8e:77:ae:64:f9:02:5d:
                    83:54:b2:7e:60:28:2a:45:cb:29:df:8a:d5:34:76:
                    c4:a1:f3:57:81:85:e2:16:dd:3a:da:1a:4e:f0:4b:
                    09:05:d0:be:a5:1a:1f:4d:71:cb:86:67:17:d5:c5:
                    4d:ed:37:d3:53:86:cc:e5:11:07:ff:e8:08:2c:6a:
                    6e:1c:74:5c:66:2c:90:d4:b2:a8:42:69:14:d8:95:
                    93:03:04:7a:6a:5d:8b:5f:75:f7:9c:3c:c9:ae:9c:
                    d1:ca:3a:e2:9d:32:39:5f:7f:3b:ff:00:93:c6:9b:
                    d3:71:b3:2e:95:85:50:9e:82:3d:6b:14:d5:e7:72:
                    90:dd:d0:63:2d:b5:bf:fc:0a:8f:d0:18:af:09:1b:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:A9:FA:0B:86:1B:CE:96:8B:14:2D:D4:8F:83:22:59:9A:34:B8
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:08:c8:5d:9a:e6:52:96:d4:f7:bf:66:a3:70:b7:43:d6:
         3a:9f:57:be:2a:15:57:4a:b4:44:e3:64:cc:9f:18:d4:96:62:
         6f:f6:4e:aa:6e:b8:52:3a:a0:42:5c:27:1e:90:cc:5b:9c:7d:
         b0:ba:a3:30:4f:f4:2e:7a:8c:40:e4:91:d4:56:47:f1:da:af:
         86:97:9c:c3:94:51:4b:13:67:2b:65:c7:95:fc:72:1c:85:40:
         b2:1f:21:59:47:a1:fc:7e:df:37:95:c3:9f:8e:b4:26:b4:61:
         dc:04:77:e0:dc:27:cc:05:7d:14:61:de:69:4d:3e:24:75:77:
         c6:fc:ff:b0:ab:9f:23:36:15:98:1d:7c:61:d8:5a:71:38:7a:
         67:68:c8:31:7f:85:47:0d:85:89:d3:60:70:e4:42:de:ea:65:
         e9:14:4a:e2:49:5f:76:bc:12:f1:9f:47:2e:37:c1:12:25:4a:
         da:5f:44:9e:aa:19:e3:98:17:fa:1c:16:66:f7:7d:71:0f:4b:
         86:03:d0:66:15:28:06:91:51:ec:6d:7f:9e:11:2b:55:a7:22:
         f6:c2:a0:8e:af:a4:c3:d5:9f:3f:ee:b8:83:84:50:01:d5:36:
         e2:e9:e1:42:46:21:43:9e:7f:fc:1c:b2:9d:d6:ce:0b:4a:a0:
         b0:f6:ae:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNFheNODGEs8EleY4fN3LExci6HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNDA1MjcxOTQ1MDFaFw0yNTA1MjYxOTUwMDFaMDMxMTAvBgNV
BAMTKDk1NUZBOUZBMEI4NjFCQ0U5NjhCMTQyREQ0OEY4MzIyNTk5QTM0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CdvO44Dd06f88R12wqwlEov2
mPqRAmRUF+6lrLVMOs2J5nkXhm3hvvqVa4srfTRcma5uGG3XpLlW8+D7/gSHvMzi
Xe5va8OlezOmOh9/yC2M3uaxO2wxe2dMVAZJabhId4G7LwpXR6GtRJpc3/G1jneu
ZPkCXYNUsn5gKCpFyynfitU0dsSh81eBheIW3TraGk7wSwkF0L6lGh9NccuGZxfV
xU3tN9NThszlEQf/6Agsam4cdFxmLJDUsqhCaRTYlZMDBHpqXYtfdfecPMmunNHK
OuKdMjlffzv/AJPGm9Nxsy6VhVCegj1rFNXncpDd0GMttb/8Co/QGK8JGxtVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlV+p+guGG86WixQt1I+DIlmaNLgwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMxMzkzMDJlMzEzMDMzMmUzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5nIDAN
BgkqhkiG9w0BAQsFAAOCAQEAPVIIyF2a5lKW1Pe/ZqNwt0PWOp9XvioVV0q0RONk
zJ8Y1JZib/ZOqm64UjqgQlwnHpDMW5x9sLqjME/0LnqMQOSR1FZH8dqvhpecw5RR
SxNnK2XHlfxyHIVAsh8hWUeh/H7fN5XDn460JrRh3AR34NwnzAV9FGHeaU0+JHV3
xvz/sKufIzYVmB18YdhacTh6Z2jIMX+FRw2FidNgcORC3upl6RRK4klfdrwS8Z9H
LjfBEiVK2l9EnqoZ45gX+hwWZvd9cQ9LhgPQZhUoBpFR7G1/nhErVaci9sKgjq+k
w9WfP+64g4RQAdU24unhQkYhQ55//ByyndbOC0qgsPau4Q==
-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:20 2024 by rpki-client on console-ams.rpki-client.org