Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/3138392e35302e3231302e302f32342d3234203d3e20323730303033.roa
File:                     3138392e35302e3231302e302f32342d3234203d3e20323730303033.roa (raw, json)
Hash identifier:          loXgo5BbfGSA8TQ5Pn859g6n4OkTFSlFCdxeAq0usFs=
Subject key identifier:   48:3F:93:FA:34:82:D8:B3:82:6E:80:44:A8:09:13:7F:55:6D:3F:F7
Certificate issuer:       /CN=66BA51E5AD3A5CC255E600193211E3B420DACCCB
Certificate serial:       6111C51ECD06C820683D5CAB62EE89C38DB69BBF
Authority key identifier: 66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/3138392e35302e3231302e302f32342d3234203d3e20323730303033.roa
Signing time:             Mon 25 Nov 2024 20:00:00 +0000
ROA not before:           Mon 25 Nov 2024 19:55:00 +0000
ROA not after:            Mon 24 Nov 2025 20:00:00 +0000
asID:                     270003
IP address blocks:        189.50.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 Jan 2025 15:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:11:c5:1e:cd:06:c8:20:68:3d:5c:ab:62:ee:89:c3:8d:b6:9b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BA51E5AD3A5CC255E600193211E3B420DACCCB
        Validity
            Not Before: Nov 25 19:55:00 2024 GMT
            Not After : Nov 24 20:00:00 2025 GMT
        Subject: CN=483F93FA3482D8B3826E8044A809137F556D3FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:ba:f2:7f:13:54:b5:22:ad:8e:24:1d:65:
                    71:a8:85:fb:7c:ca:c0:f6:72:91:08:5d:16:fd:f3:
                    49:7d:ff:ad:44:e8:b4:d0:cb:f1:95:c0:d4:d1:70:
                    44:c3:a0:8c:a2:6a:ec:1d:fa:27:d6:e2:98:66:60:
                    8c:0d:55:27:cf:3c:a9:18:08:bc:ea:3d:fb:4a:39:
                    57:84:42:df:ea:d2:1e:45:ab:a7:a8:bb:63:94:6c:
                    b8:f4:d1:3a:04:c9:b0:94:d4:a5:4c:49:22:1c:24:
                    91:4d:ee:d8:5f:8a:56:3a:71:99:d1:61:41:4f:14:
                    7f:aa:27:4f:ea:38:fb:37:7d:c2:d3:90:f3:f3:61:
                    72:94:84:75:74:3f:6c:3d:69:7a:ee:79:71:74:63:
                    94:11:40:9c:93:b2:5c:b2:35:56:02:46:6f:0c:70:
                    9f:9c:a0:b2:55:06:ab:cc:2d:ef:40:dc:d6:74:34:
                    07:93:cc:52:a1:91:12:0f:29:55:88:84:ca:d4:6d:
                    39:35:a9:a0:40:de:4e:32:db:6c:a7:ff:52:82:39:
                    4b:f3:e7:3b:94:5d:b5:1b:55:45:2f:be:25:3c:10:
                    d5:fc:ad:8a:5a:9f:02:3d:bf:21:63:de:47:47:ff:
                    44:f0:37:4f:c2:73:fb:46:fe:1b:b9:9f:1e:8b:c7:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:93:FA:34:82:D8:B3:82:6E:80:44:A8:09:13:7F:55:6D:3F:F7
            X509v3 Authority Key Identifier:
                keyid:66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/3138392e35302e3231302e302f32342d3234203d3e20323730303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:02:42:69:16:c0:5f:be:fb:f2:06:30:89:47:27:fd:7a:0b:
         8b:b2:94:6a:2f:e8:3e:07:b4:cd:e6:ce:75:68:60:a5:11:8e:
         7d:4f:42:7c:17:bd:ca:13:7e:cc:ad:b4:db:fe:07:86:af:59:
         8d:d1:f8:63:b1:1b:ec:78:9a:4f:3f:87:57:4a:48:13:fa:c4:
         7c:2e:64:26:e9:b5:6c:6c:41:e0:c5:20:08:c3:5f:45:a1:f3:
         56:80:62:a9:7b:89:01:45:ec:57:5b:22:f4:21:69:7a:d6:5b:
         09:c7:74:2a:a8:02:66:bd:5f:bc:79:4c:12:05:fb:01:12:26:
         07:60:83:8e:f1:98:f6:5c:69:9b:59:7e:ad:20:39:e5:ec:eb:
         81:42:01:0b:98:70:8b:e2:1c:d9:e7:cd:4d:20:4e:24:13:7a:
         eb:69:4f:b9:0b:b5:b7:a6:9b:7c:76:88:0f:7f:16:3c:78:3d:
         44:f7:f5:6b:7c:f0:18:9c:09:ae:b0:90:ae:4c:ec:d5:d8:8d:
         82:a2:13:3c:c8:3a:3c:02:1f:b7:f7:89:3f:d2:2b:61:23:73:
         b8:78:b8:55:62:9a:ba:d7:cb:19:b7:76:10:98:6a:23:48:28:
         3a:e8:b0:47:36:5f:e4:42:0e:25:3c:77:e9:a9:5e:5a:ef:c1:
         a7:56:2a:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYRHFHs0GyCBoPVyrYu6Jw422m78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZCQTUxRTVBRDNBNUNDMjU1RTYwMDE5MzIxMUUzQjQy
MERBQ0NDQjAeFw0yNDExMjUxOTU1MDBaFw0yNTExMjQyMDAwMDBaMDMxMTAvBgNV
BAMTKDQ4M0Y5M0ZBMzQ4MkQ4QjM4MjZFODA0NEE4MDkxMzdGNTU2RDNGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRD7ryfxNUtSKtjiQdZXGohft8
ysD2cpEIXRb980l9/61E6LTQy/GVwNTRcETDoIyiauwd+ifW4phmYIwNVSfPPKkY
CLzqPftKOVeEQt/q0h5Fq6eou2OUbLj00ToEybCU1KVMSSIcJJFN7thfilY6cZnR
YUFPFH+qJ0/qOPs3fcLTkPPzYXKUhHV0P2w9aXrueXF0Y5QRQJyTslyyNVYCRm8M
cJ+coLJVBqvMLe9A3NZ0NAeTzFKhkRIPKVWIhMrUbTk1qaBA3k4y22yn/1KCOUvz
5zuUXbUbVUUvviU8ENX8rYpanwI9vyFj3kdH/0TwN0/Cc/tG/hu5nx6Lx9tNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSD+T+jSC2LOCboBEqAkTf1VtP/cwHwYDVR0j
BBgwFoAUZrpR5a06XMJV5gAZMhHjtCDazMswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMUI5RkZCMDhFNUVCQjAxRDdGNTRBNEYzRDIwM0NBMDhB
RUE0RkQyQTIwMEU5MTY4QzY4RTUzRjYwREVDQzQ3LzAvNjZCQTUxRTVBRDNBNUND
MjU1RTYwMDE5MzIxMUUzQjQyMERBQ0NDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NkJBNTFFNUFEM0E1Q0MyNTVF
NjAwMTkzMjExRTNCNDIwREFDQ0NCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDFCOUZGQjA4RTVFQkIwMUQ3RjU0QTRGM0QyMDNDQTA4QUVBNEZEMkEy
MDBFOTE2OEM2OEU1M0Y2MERFQ0M0Ny8wLzMxMzgzOTJlMzUzMDJlMzIzMTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvTLS
MA0GCSqGSIb3DQEBCwUAA4IBAQCGAkJpFsBfvvvyBjCJRyf9eguLspRqL+g+B7TN
5s51aGClEY59T0J8F73KE37MrbTb/geGr1mN0fhjsRvseJpPP4dXSkgT+sR8LmQm
6bVsbEHgxSAIw19FofNWgGKpe4kBRexXWyL0IWl61lsJx3QqqAJmvV+8eUwSBfsB
EiYHYIOO8Zj2XGmbWX6tIDnl7OuBQgELmHCL4hzZ581NIE4kE3rraU+5C7W3ppt8
dogPfxY8eD1E9/VrfPAYnAmusJCuTOzV2I2CohM8yDo8Ah+394k/0ithI3O4eLhV
Ypq618sZt3YQmGojSCg66LBHNl/kQg4lPHfpqV5a78GnViqA
-----END CERTIFICATE-----
Generated at Sun Jan 12 12:19:30 2025 by rpki-client on console-ams.rpki-client.org