Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136382e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3136382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          p0mFYAl0GmG9cvnJ7eq0vabz6yXLj3GfKsg3k5k9LP0=
Subject key identifier:   F2:09:21:31:90:96:16:6C:72:85:51:B1:8C:45:8E:92:D3:CB:EA:B0
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4A9CC73E38CE6F3D2CD0663D209380BF4168B2D0
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:01 +0000
ROA not before:           Mon 27 May 2024 19:45:01 +0000
ROA not after:            Mon 26 May 2025 19:50:01 +0000
asID:                     22313
IP address blocks:        190.123.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9c:c7:3e:38:ce:6f:3d:2c:d0:66:3d:20:93:80:bf:41:68:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:01 2024 GMT
            Not After : May 26 19:50:01 2025 GMT
        Subject: CN=F20921319096166C728551B18C458E92D3CBEAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:98:17:55:7a:7b:8f:b9:f5:87:1e:8c:c6:
                    0e:5a:1e:11:24:83:e6:a0:72:4d:17:7c:78:ed:4a:
                    30:ee:97:d6:3a:9c:84:68:e8:e6:c8:c7:56:44:2a:
                    83:ce:49:3b:d9:ea:7d:8d:fc:bc:b5:56:d8:c7:f6:
                    f7:19:ee:b9:17:16:d2:cd:2e:5b:ef:c9:eb:49:b9:
                    ae:03:ac:f7:c3:b4:ad:4c:f7:ab:9e:87:56:19:71:
                    82:c2:6c:45:80:8f:b3:08:03:b9:5c:a5:df:15:17:
                    2f:3e:3f:a8:86:d1:44:81:c6:4d:3d:81:c8:7c:85:
                    f1:4f:b2:58:e9:91:ba:b3:ed:6f:a7:d5:df:4a:a5:
                    9d:da:91:5e:6f:6f:d0:f8:4f:3b:ac:47:89:22:ac:
                    99:ae:79:8b:a0:02:70:c4:ac:f4:bb:e0:32:20:bc:
                    eb:51:c4:b8:56:3b:c8:9a:ce:87:34:fd:6e:f7:54:
                    94:ae:bf:ec:6f:dd:38:c0:a8:72:ae:4e:65:e0:f1:
                    b7:07:ec:44:9c:43:7c:60:3a:c3:a2:4a:0a:9e:bb:
                    bc:f4:81:39:f6:ca:e7:d3:9a:84:a2:19:d7:06:8b:
                    84:79:66:91:f1:a6:9d:be:c5:1e:e3:17:73:4a:2a:
                    46:0c:39:1f:f5:7c:55:74:96:4f:51:d9:b7:df:62:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:09:21:31:90:96:16:6C:72:85:51:B1:8C:45:8E:92:D3:CB:EA:B0
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:80:7f:4e:4c:0d:da:d0:d3:9b:82:ed:6b:5e:f2:ce:23:8f:
         9c:64:0e:4f:85:72:d8:10:13:e2:bd:21:b9:a1:65:5a:93:26:
         2d:d1:47:19:93:03:0d:55:b5:75:e8:11:68:1d:70:56:bd:6a:
         93:c9:d1:60:4f:32:25:9c:9f:3c:91:28:16:37:25:be:4d:6b:
         ac:10:90:94:71:35:7f:b2:d3:e4:eb:28:8a:94:72:85:98:de:
         29:43:dd:c2:07:a1:78:a9:95:cf:78:d7:b6:bc:b6:22:5f:e7:
         04:8f:76:82:e4:73:0a:9f:7c:9c:0f:f0:5e:75:24:a7:7e:e4:
         4e:09:9f:21:01:70:70:af:74:61:cb:ff:b8:7e:f6:2a:6f:4e:
         97:8f:01:75:fa:8b:dc:6b:8b:3b:95:94:9b:a1:32:9e:72:e8:
         70:86:db:67:b3:df:c8:f4:71:f4:d0:0d:33:52:46:a5:e0:5b:
         5b:0b:09:6d:41:66:b9:e7:24:59:d3:3e:e8:66:be:6a:83:94:
         3f:44:73:a9:70:33:07:ad:4f:04:ea:c1:af:98:e2:26:76:79:
         50:05:af:3e:86:32:02:75:c7:c9:eb:74:3b:72:15:1b:d5:c7:
         7b:05:f5:ac:34:15:d4:53:fe:ab:95:2e:61:ce:16:37:57:8a:
         1e:7f:64:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSpzHPjjObz0s0GY9IJOAv0FostAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNDA1MjcxOTQ1MDFaFw0yNTA1MjYxOTUwMDFaMDMxMTAvBgNV
BAMTKEYyMDkyMTMxOTA5NjE2NkM3Mjg1NTFCMThDNDU4RTkyRDNDQkVBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHpgXVXp7j7n1hx6Mxg5aHhEk
g+agck0XfHjtSjDul9Y6nIRo6ObIx1ZEKoPOSTvZ6n2N/Ly1VtjH9vcZ7rkXFtLN
LlvvyetJua4DrPfDtK1M96ueh1YZcYLCbEWAj7MIA7lcpd8VFy8+P6iG0USBxk09
gch8hfFPsljpkbqz7W+n1d9KpZ3akV5vb9D4TzusR4kirJmueYugAnDErPS74DIg
vOtRxLhWO8iazoc0/W73VJSuv+xv3TjAqHKuTmXg8bcH7EScQ3xgOsOiSgqeu7z0
gTn2yufTmoSiGdcGi4R5ZpHxpp2+xR7jF3NKKkYMOR/1fFV0lk9R2bffYlXtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8gkhMZCWFmxyhVGxjEWOktPL6rAwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMxMzkzMDJlMzEzMjMzMmUzMTM2Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnuo
MA0GCSqGSIb3DQEBCwUAA4IBAQCQgH9OTA3a0NObgu1rXvLOI4+cZA5PhXLYEBPi
vSG5oWVakyYt0UcZkwMNVbV16BFoHXBWvWqTydFgTzIlnJ88kSgWNyW+TWusEJCU
cTV/stPk6yiKlHKFmN4pQ93CB6F4qZXPeNe2vLYiX+cEj3aC5HMKn3ycD/BedSSn
fuROCZ8hAXBwr3Rhy/+4fvYqb06XjwF1+ovca4s7lZSboTKecuhwhttns9/I9HH0
0A0zUkal4FtbCwltQWa55yRZ0z7oZr5qg5Q/RHOpcDMHrU8E6sGvmOImdnlQBa8+
hjICdcfJ63Q7chUb1cd7BfWsNBXUU/6rlS5hzhY3V4oef2SY
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org