Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
File:                     3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa (raw, json)
Hash identifier:          11iotp+v3ZQyT2wqbTmxArqPsuaEHN3lSxmKJnax5iQ=
Subject key identifier:   49:37:84:18:09:E0:85:77:4F:98:E4:F3:68:21:9C:92:1F:D3:02:83
Certificate issuer:       /CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
Certificate serial:       3F5EE2D5AB3E1F9CF6DDC91AC64EDC6AAF447BC0
Authority key identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
Signing time:             Tue 05 Mar 2024 18:21:12 +0000
ROA not before:           Tue 05 Mar 2024 18:16:12 +0000
ROA not after:            Tue 04 Mar 2025 18:21:12 +0000
asID:                     398712
IP address blocks:        190.111.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5e:e2:d5:ab:3e:1f:9c:f6:dd:c9:1a:c6:4e:dc:6a:af:44:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
        Validity
            Not Before: Mar  5 18:16:12 2024 GMT
            Not After : Mar  4 18:21:12 2025 GMT
        Subject: CN=4937841809E085774F98E4F368219C921FD30283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:5f:dc:69:df:99:f1:75:81:77:f2:d7:6a:
                    23:ac:30:81:04:b9:57:f0:89:5c:33:82:be:eb:36:
                    a4:65:79:2e:d0:20:42:ae:c5:ab:ce:8c:93:98:40:
                    2f:07:7d:1d:55:9d:dc:39:d6:89:80:3d:85:b4:82:
                    fa:5e:c4:ae:64:bc:43:b3:42:2f:bd:21:59:06:1e:
                    42:de:70:02:e8:73:a7:be:fa:8f:a1:3f:59:1e:60:
                    49:44:56:4a:f2:8a:93:00:ee:99:c0:7d:49:65:a6:
                    e5:56:93:23:71:5f:10:e2:b8:78:26:a0:46:f6:a1:
                    7a:69:0b:ce:54:3b:2e:04:6f:9a:35:13:84:c9:3d:
                    2b:4d:6f:de:5b:9e:5e:05:24:f7:d4:db:bd:cc:03:
                    4a:02:a1:55:2d:d7:e3:8d:9d:1c:93:e5:36:f9:4b:
                    4c:b8:b0:55:83:16:0b:49:02:6b:32:1a:46:06:b9:
                    d4:ca:b4:d5:c4:fe:10:2b:37:54:e1:f8:fd:de:c1:
                    1b:b3:14:c9:6a:4d:d3:2d:74:8c:f3:70:24:81:ff:
                    ad:b8:3d:1f:f9:63:1a:62:1f:6a:e1:a9:cc:e0:0f:
                    11:71:bb:d8:ab:65:41:74:95:f7:3a:cd:40:3a:13:
                    20:2a:fd:15:6c:20:43:46:71:0d:6a:42:88:e4:5d:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:84:18:09:E0:85:77:4F:98:E4:F3:68:21:9C:92:1F:D3:02:83
            X509v3 Authority Key Identifier:
                keyid:3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:21:6c:9f:b9:e3:2f:79:be:47:ec:bd:d4:f1:b2:77:11:19:
         be:1a:52:10:00:77:7a:1d:2d:d6:50:45:43:6d:bd:9c:d0:62:
         3d:41:cc:12:84:73:68:91:f3:51:cf:8b:43:a1:56:e8:42:12:
         6a:b0:02:17:1d:e0:5b:00:83:82:a1:87:42:fa:39:cc:dc:aa:
         7b:cf:d8:d0:a4:f5:6c:55:04:1c:1d:c2:46:fa:b8:48:fe:cb:
         a0:21:df:4b:6f:a8:9e:83:fe:a5:87:69:b9:f4:e1:c1:f6:78:
         36:90:54:4e:2a:c5:b6:bd:99:fd:2e:0d:22:28:cb:4e:44:8f:
         7b:0f:6c:d3:4d:52:d9:74:e1:bd:f0:20:e4:47:bf:34:39:05:
         55:68:dd:b7:4e:31:74:5f:fa:b4:ab:93:c1:00:0e:da:59:12:
         ee:26:90:69:fd:35:77:d4:98:90:72:99:a6:83:38:e5:5f:49:
         db:7a:6d:59:24:1a:5d:93:8b:95:14:c2:db:5b:60:09:31:d8:
         fb:fe:b6:57:7c:4f:64:97:6e:aa:b2:48:80:ff:94:15:29:76:
         c1:4d:fe:79:56:02:4e:dc:6c:32:0a:8d:ba:d6:82:81:68:34:
         d3:84:42:49:46:e5:a7:f6:88:5a:e8:d1:45:27:2a:b7:55:59:
         46:2e:68:6e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUP17i1as+H5z23ckaxk7caq9Ee8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyNzc3QUI5MkVGNUFDNkQ1MDJFMjlGMDkyQjIxRDZC
MUU5RDNCNjAeFw0yNDAzMDUxODE2MTJaFw0yNTAzMDQxODIxMTJaMDMxMTAvBgNV
BAMTKDQ5Mzc4NDE4MDlFMDg1Nzc0Rjk4RTRGMzY4MjE5QzkyMUZEMzAyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXV/cad+Z8XWBd/LXaiOsMIEE
uVfwiVwzgr7rNqRleS7QIEKuxavOjJOYQC8HfR1Vndw51omAPYW0gvpexK5kvEOz
Qi+9IVkGHkLecALoc6e++o+hP1keYElEVkryipMA7pnAfUllpuVWkyNxXxDiuHgm
oEb2oXppC85UOy4Eb5o1E4TJPStNb95bnl4FJPfU273MA0oCoVUt1+ONnRyT5Tb5
S0y4sFWDFgtJAmsyGkYGudTKtNXE/hArN1Th+P3ewRuzFMlqTdMtdIzzcCSB/624
PR/5YxpiH2rhqczgDxFxu9irZUF0lfc6zUA6EyAq/RVsIENGcQ1qQojkXZ1tAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUSTeEGAnghXdPmOTzaCGckh/TAoMwHwYDVR0j
BBgwFoAUPid3q5LvWsbVAuKfCSsh1rHp07YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkIxNDg3REQxMUFBN0JBMzEzODlBQUJEREVGMjE4MUIw
Q0YwQ0JFOEYwMTVBNUFCNDgxQTU3NEQ3M0RCNkQ2LzAvM0UyNzc3QUI5MkVGNUFD
NkQ1MDJFMjlGMDkyQjIxRDZCMUU5RDNCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRTI3NzdBQjkyRUY1QUM2RDUw
MkUyOUYwOTJCMjFENkIxRTlEM0I2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCMTQ4N0REMTFBQTdCQTMxMzg5QUFCRERFRjIxODFCMENGMENCRThG
MDE1QTVBQjQ4MUE1NzRENzNEQjZENi8wLzMxMzkzMDJlMzEzMTMxMmUzMTM2MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzM5MzgzNzMxMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
b6AwDQYJKoZIhvcNAQELBQADggEBAJUhbJ+54y95vkfsvdTxsncRGb4aUhAAd3od
LdZQRUNtvZzQYj1BzBKEc2iR81HPi0OhVuhCEmqwAhcd4FsAg4Khh0L6OczcqnvP
2NCk9WxVBBwdwkb6uEj+y6Ah30tvqJ6D/qWHabn04cH2eDaQVE4qxba9mf0uDSIo
y05Ej3sPbNNNUtl04b3wIORHvzQ5BVVo3bdOMXRf+rSrk8EADtpZEu4mkGn9NXfU
mJBymaaDOOVfSdt6bVkkGl2Ti5UUwttbYAkx2Pv+tld8T2SXbqqySID/lBUpdsFN
/nlWAk7cbDIKjbrWgoFoNNOEQklG5af2iFro0UUnKrdVWUYuaG4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org