Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
File:                     3133382e3231392e342e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          JO0qkRTyqhHB0g3o/njYdaw289jJVmBE9vZ+9mJgMl8=
Subject key identifier:   3B:EF:54:73:97:9F:FC:4E:80:CF:E3:BB:00:E4:C1:CA:D8:12:2D:86
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       3F11A22D946365F3F8FA149FCE77530D54E17D26
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
Signing time:             Tue 05 Mar 2024 17:50:25 +0000
ROA not before:           Tue 05 Mar 2024 17:45:25 +0000
ROA not after:            Tue 04 Mar 2025 17:50:25 +0000
asID:                     14232
IP address blocks:        138.219.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:11:a2:2d:94:63:65:f3:f8:fa:14:9f:ce:77:53:0d:54:e1:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Mar  5 17:45:25 2024 GMT
            Not After : Mar  4 17:50:25 2025 GMT
        Subject: CN=3BEF5473979FFC4E80CFE3BB00E4C1CAD8122D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:bc:c1:f2:1c:14:15:b2:f6:6e:64:4f:30:
                    b1:20:2e:58:65:ac:42:7f:c3:3b:ec:69:a2:2f:4c:
                    b7:00:d4:12:35:a9:e4:9f:b0:64:e1:11:63:ca:89:
                    6c:95:00:12:7a:ee:8b:1f:04:17:40:f1:4c:e9:35:
                    32:6f:39:6f:e5:31:93:72:60:b0:63:d8:ae:d3:22:
                    a8:41:3c:4b:6b:a9:c5:ca:87:a6:dd:5e:37:cf:e1:
                    32:24:d8:20:df:d0:94:d8:c9:05:b1:03:3e:86:1c:
                    a2:d0:db:1e:ea:1d:d5:4a:9e:2b:c0:d2:18:01:6b:
                    56:2a:37:7a:ce:a1:25:06:50:6b:9f:56:7a:e8:da:
                    df:f4:85:f8:30:b0:e5:4a:d4:cf:23:a2:27:ed:18:
                    2b:52:5f:06:43:e1:a0:2a:51:e8:90:05:d4:2a:aa:
                    6f:d3:ad:3f:38:b3:0c:db:82:e1:e4:9b:76:bd:12:
                    4c:d8:2e:10:65:15:70:ba:f5:95:a7:d2:d1:90:ce:
                    7e:2b:e9:ef:a0:cf:f1:70:48:f8:98:39:59:db:39:
                    3c:ef:ce:fb:c4:8a:57:1e:ff:4c:f2:31:38:2b:99:
                    f1:9c:dc:8a:59:c8:dc:a6:24:24:26:2c:c2:74:8a:
                    51:9f:1e:6a:9a:5c:52:53:e7:a4:21:fd:47:09:f7:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EF:54:73:97:9F:FC:4E:80:CF:E3:BB:00:E4:C1:CA:D8:12:2D:86
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:00:55:19:ae:ed:28:98:a5:c4:ae:7b:2b:89:64:f3:a8:
         3b:90:62:64:49:24:d4:f7:4f:c8:ab:2e:98:aa:5d:be:a9:13:
         6d:ef:38:f2:13:bc:e0:ec:1f:94:bc:36:43:a8:20:bb:d1:72:
         b7:d6:67:c5:ec:16:79:89:fe:f7:31:84:58:ef:64:ec:1c:34:
         51:07:b6:c4:19:6b:c2:7e:a5:ac:46:69:b4:32:d7:2a:d2:14:
         51:91:23:83:b9:bd:85:c4:d5:9f:4d:7f:61:3e:2b:74:96:a5:
         bc:66:94:20:10:18:11:70:e0:00:6e:2a:7f:15:5a:a8:47:82:
         14:11:f0:68:8d:c0:19:4e:07:41:c6:8f:e4:f6:9c:f2:a5:9e:
         ce:a9:1c:24:70:79:e8:34:cb:97:a1:d6:d5:cb:c7:d0:64:0b:
         e8:ed:9a:03:9c:10:53:85:76:8a:4b:f6:d1:41:33:13:da:34:
         de:02:1f:7a:2b:da:34:86:b6:9b:43:e3:51:63:ef:fe:f9:bb:
         1b:14:00:4c:de:0a:d4:38:a4:3d:79:48:16:8f:f4:14:9c:a8:
         22:f6:78:1b:b7:32:ef:b9:e7:b2:9b:61:97:49:08:31:56:ae:
         e4:e8:50:68:7d:c7:47:59:b7:f9:98:ce:de:15:fa:eb:e7:ab:
         74:be:f6:fa
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPxGiLZRjZfP4+hSfzndTDVThfSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNDAzMDUxNzQ1MjVaFw0yNTAzMDQxNzUwMjVaMDMxMTAvBgNV
BAMTKDNCRUY1NDczOTc5RkZDNEU4MENGRTNCQjAwRTRDMUNBRDgxMjJEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpy7zB8hwUFbL2bmRPMLEgLlhl
rEJ/wzvsaaIvTLcA1BI1qeSfsGThEWPKiWyVABJ67osfBBdA8UzpNTJvOW/lMZNy
YLBj2K7TIqhBPEtrqcXKh6bdXjfP4TIk2CDf0JTYyQWxAz6GHKLQ2x7qHdVKnivA
0hgBa1YqN3rOoSUGUGufVnro2t/0hfgwsOVK1M8joiftGCtSXwZD4aAqUeiQBdQq
qm/TrT84swzbguHkm3a9EkzYLhBlFXC69ZWn0tGQzn4r6e+gz/FwSPiYOVnbOTzv
zvvEilce/0zyMTgrmfGc3IpZyNymJCQmLMJ0ilGfHmqaXFJT56Qh/UcJ9z6xAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUO+9Uc5ef/E6Az+O7AOTBytgSLYYwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMxMzMzODJlMzIzMTM5MmUzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK2wQwDQYJ
KoZIhvcNAQELBQADggEBAEyaAFUZru0omKXErnsriWTzqDuQYmRJJNT3T8irLpiq
Xb6pE23vOPITvODsH5S8NkOoILvRcrfWZ8XsFnmJ/vcxhFjvZOwcNFEHtsQZa8J+
paxGabQy1yrSFFGRI4O5vYXE1Z9Nf2E+K3SWpbxmlCAQGBFw4ABuKn8VWqhHghQR
8GiNwBlOB0HGj+T2nPKlns6pHCRweeg0y5eh1tXLx9BkC+jtmgOcEFOFdopL9tFB
MxPaNN4CH3or2jSGtptD41Fj7/75uxsUAEzeCtQ4pD15SBaP9BScqCL2eBu3Mu+5
57KbYZdJCDFWruToUGh9x0dZt/mYzt4V+uvnq3S+9vo=
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:44 2024 by rpki-client on console-ams.rpki-client.org