Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137312e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          ERxxsyufE2iB+9eCmnr76gYD3Jx+2y1gBXzM7PPTqvY=
Subject key identifier:   2D:2C:85:B7:D4:4D:A4:39:25:5E:16:A3:A9:54:95:FD:82:8F:BE:49
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       727CBDE61C1100E2A5EC39E80FA1CB665B87D3B0
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:20 +0000
ROA not before:           Mon 27 May 2024 19:45:20 +0000
ROA not after:            Mon 26 May 2025 19:50:20 +0000
asID:                     22313
IP address blocks:        190.123.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7c:bd:e6:1c:11:00:e2:a5:ec:39:e8:0f:a1:cb:66:5b:87:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:20 2024 GMT
            Not After : May 26 19:50:20 2025 GMT
        Subject: CN=2D2C85B7D44DA439255E16A3A95495FD828FBE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:db:89:35:75:a3:06:07:ba:c7:85:4f:cc:
                    f0:c5:29:19:e9:ca:55:6a:ae:21:29:3f:54:8a:f8:
                    14:d9:c4:68:5b:35:1f:e0:0b:52:05:74:83:ed:0e:
                    b8:4b:29:dc:84:69:8a:60:8f:75:1b:e3:25:2f:ba:
                    bd:05:5b:e1:36:73:c7:04:71:99:b5:99:11:e5:cd:
                    fe:b7:09:98:8e:4b:01:0e:a6:8d:67:55:b7:71:e5:
                    66:54:bf:ac:4d:b5:64:ca:47:68:48:5c:76:2a:07:
                    da:f4:17:78:3d:e1:40:9c:e5:d1:ec:a9:e3:31:c1:
                    15:b1:db:2d:0f:f1:bb:1e:19:7b:3b:d7:29:23:56:
                    d2:67:7b:3d:f5:00:e4:e3:e7:af:e1:14:f4:bc:3b:
                    33:e9:18:15:3e:eb:25:41:47:81:12:92:16:a0:8a:
                    1c:82:97:5f:5b:df:0b:9d:6a:70:bf:6e:f5:e6:00:
                    f2:3e:ea:b3:a2:2a:26:83:11:62:93:5f:a0:c2:48:
                    62:a0:42:27:a7:5a:f2:2c:ea:85:b0:b7:0f:3f:a0:
                    a8:28:eb:0b:b1:6a:8a:e6:4e:29:dc:f9:ef:22:c5:
                    90:05:7b:58:2b:c1:7d:44:11:43:a5:25:47:d0:43:
                    a6:77:fd:88:ff:b4:d9:aa:82:d1:a9:40:dc:82:a2:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:85:B7:D4:4D:A4:39:25:5E:16:A3:A9:54:95:FD:82:8F:BE:49
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a0:37:47:88:cf:7d:83:2d:e9:84:88:a5:ad:51:94:3f:e0:
         d6:bc:28:56:d0:98:10:1b:03:58:e7:20:2e:32:87:0e:06:a5:
         07:19:e8:93:19:57:f2:7b:db:9d:ac:73:b8:92:fe:ca:62:f5:
         10:d8:22:3c:6f:9b:e8:29:38:80:0a:07:3e:ab:27:a2:f8:c1:
         63:32:8b:f7:9b:cd:f3:b2:84:ec:2c:1c:77:05:d7:30:36:ee:
         77:b8:61:ef:de:6f:55:a8:10:da:f4:f9:f8:cc:e8:3d:1e:2c:
         73:a9:d7:9a:c9:86:05:64:f6:f3:65:44:f6:93:46:2d:1c:db:
         fa:73:5d:79:d8:c7:53:c9:e1:92:88:7e:56:00:12:2a:d4:79:
         a8:33:5c:39:09:a9:fc:8c:ee:6f:c6:17:70:b7:6b:39:5e:72:
         46:90:66:87:33:58:9b:99:21:58:00:48:6f:6a:85:f1:76:00:
         2b:ea:49:21:00:6f:4e:02:32:76:b2:58:c4:db:42:d9:57:bf:
         9a:2e:db:4f:64:b0:23:f9:61:9c:21:64:e9:b2:60:92:f3:c1:
         60:08:da:f6:51:cd:8d:24:58:12:5d:34:b5:76:8b:f5:8d:06:
         05:74:2f:32:25:53:9a:2a:38:1b:03:19:53:9d:6f:a9:59:e7:
         c1:29:6c:73
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcny95hwRAOKl7DnoD6HLZluH07AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNDA1MjcxOTQ1MjBaFw0yNTA1MjYxOTUwMjBaMDMxMTAvBgNV
BAMTKDJEMkM4NUI3RDQ0REE0MzkyNTVFMTZBM0E5NTQ5NUZEODI4RkJFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVtuJNXWjBge6x4VPzPDFKRnp
ylVqriEpP1SK+BTZxGhbNR/gC1IFdIPtDrhLKdyEaYpgj3Ub4yUvur0FW+E2c8cE
cZm1mRHlzf63CZiOSwEOpo1nVbdx5WZUv6xNtWTKR2hIXHYqB9r0F3g94UCc5dHs
qeMxwRWx2y0P8bseGXs71ykjVtJnez31AOTj56/hFPS8OzPpGBU+6yVBR4ESkhag
ihyCl19b3wudanC/bvXmAPI+6rOiKiaDEWKTX6DCSGKgQienWvIs6oWwtw8/oKgo
6wuxaormTinc+e8ixZAFe1grwX1EEUOlJUfQQ6Z3/Yj/tNmqgtGpQNyCojMVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULSyFt9RNpDklXhajqVSV/YKPvkkwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMxMzkzMDJlMzEzMjMzMmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnur
MA0GCSqGSIb3DQEBCwUAA4IBAQCjoDdHiM99gy3phIilrVGUP+DWvChW0JgQGwNY
5yAuMocOBqUHGeiTGVfye9udrHO4kv7KYvUQ2CI8b5voKTiACgc+qyei+MFjMov3
m83zsoTsLBx3BdcwNu53uGHv3m9VqBDa9Pn4zOg9HixzqdeayYYFZPbzZUT2k0Yt
HNv6c1152MdTyeGSiH5WABIq1HmoM1w5Can8jO5vxhdwt2s5XnJGkGaHM1ibmSFY
AEhvaoXxdgAr6kkhAG9OAjJ2sljE20LZV7+aLttPZLAj+WGcIWTpsmCS88FgCNr2
Uc2NJFgSXTS1dov1jQYFdC8yJVOaKjgbAxlTnW+pWefBKWxz
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org