Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3233203d3e20323633373031.roa
File:                     3134332e302e39362e302f32322d3233203d3e20323633373031.roa (raw, json)
Hash identifier:          jQqyax/NRJq90xmzEH1YxxIBV+RqV/YC07arZd/2U1M=
Subject key identifier:   64:88:95:2E:DC:AC:74:43:6C:1D:EF:16:56:A0:FA:8B:3C:E4:8D:41
Certificate issuer:       /CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
Certificate serial:       0B1D7B612B7B675C71016D404E14CBF9C5D42DD8
Authority key identifier: 2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3233203d3e20323633373031.roa
Signing time:             Tue 05 Mar 2024 17:57:32 +0000
ROA not before:           Tue 05 Mar 2024 17:52:32 +0000
ROA not after:            Tue 04 Mar 2025 17:57:32 +0000
asID:                     263701
IP address blocks:        143.0.96.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1d:7b:61:2b:7b:67:5c:71:01:6d:40:4e:14:cb:f9:c5:d4:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
        Validity
            Not Before: Mar  5 17:52:32 2024 GMT
            Not After : Mar  4 17:57:32 2025 GMT
        Subject: CN=6488952EDCAC74436C1DEF1656A0FA8B3CE48D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:99:bc:60:72:b1:e5:32:21:9b:7e:8e:75:
                    fc:74:cb:45:2b:ae:f9:71:cd:4f:ca:5f:c1:02:02:
                    06:2c:57:69:da:4f:c4:1d:72:85:4d:f1:2c:24:28:
                    75:77:89:b0:dc:a5:1c:da:8e:8e:8e:90:f1:f9:53:
                    35:5d:65:aa:06:44:59:89:30:c1:71:39:3c:5e:d7:
                    15:f6:79:8f:dc:63:c0:a2:aa:cd:82:1f:ca:05:97:
                    2c:a1:54:a5:84:58:8c:af:d9:80:57:50:c8:76:6a:
                    cb:89:aa:a7:2b:fc:58:2e:0b:35:47:ad:d1:20:cb:
                    cd:4c:93:0f:5d:26:3c:c4:85:12:b4:f3:61:eb:67:
                    4d:2d:d3:ec:ce:f0:00:0f:b9:b1:01:b1:ab:04:a1:
                    b6:ef:c6:ec:2c:93:c5:d5:33:9b:b9:58:32:ca:21:
                    9d:95:fb:7f:d6:f3:82:52:53:bd:1a:92:98:85:6a:
                    b5:a3:4d:21:98:c7:c9:2f:31:bd:4b:58:b5:cf:02:
                    0a:7b:da:40:92:63:8e:92:ad:6e:ee:c9:c9:ae:4c:
                    71:e3:c8:59:97:a3:05:59:bf:2c:14:37:e0:17:46:
                    24:28:3f:9b:92:92:e2:0a:9f:60:1a:ea:49:fa:55:
                    d4:38:9d:38:f3:d3:11:bd:a9:fc:03:f6:5a:47:be:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:95:2E:DC:AC:74:43:6C:1D:EF:16:56:A0:FA:8B:3C:E4:8D:41
            X509v3 Authority Key Identifier:
                keyid:2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3233203d3e20323633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:49:9e:32:28:05:f6:df:cc:d1:d3:ca:4d:32:03:cd:e6:66:
         42:ec:3e:51:a1:8e:40:28:d0:2b:f4:7b:5f:ce:a8:a4:69:b4:
         87:18:6b:38:1c:1b:39:5c:91:25:24:4a:c4:ac:79:54:89:58:
         82:d0:2f:5c:97:7b:b4:8f:a4:cc:c4:a3:ae:ec:ea:34:23:c6:
         43:b0:96:26:0e:83:e5:f0:65:a2:0e:38:59:aa:bc:25:1e:c5:
         e8:d0:70:aa:a5:63:b8:e1:63:7b:76:38:03:bb:4d:e6:fd:03:
         8c:ef:7a:0c:98:cf:5c:63:45:e3:c8:f1:ae:dd:bd:28:4b:49:
         a4:94:52:c4:b9:6d:c6:cd:58:90:c0:86:47:dd:1f:ca:ce:d8:
         c3:a3:36:a3:5b:7d:14:b4:dd:50:2a:dd:ac:e7:35:78:f1:42:
         5b:77:1d:a7:48:24:d0:b4:4a:e7:cc:8d:0e:0b:58:77:08:fe:
         5a:0f:a5:b7:b8:08:ce:e9:28:08:55:8a:52:f5:b9:3b:e4:06:
         86:58:2f:56:a8:22:e2:1e:6b:c8:1e:7a:73:05:83:06:9e:b6:
         91:99:b5:cb:a1:7e:d7:0c:f0:6a:5b:70:15:ed:93:21:ca:6d:
         cb:74:f2:a6:45:ba:47:e4:43:7e:82:ba:a9:bd:c7:fe:fd:f6:
         6d:19:f4:3b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCx17YSt7Z1xxAW1AThTL+cXULdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ4QUIyODQ4NjU0RDUxNjY0QUM2RjQ1QTQ0RTU0MDdD
NkIzNTkxMjAeFw0yNDAzMDUxNzUyMzJaFw0yNTAzMDQxNzU3MzJaMDMxMTAvBgNV
BAMTKDY0ODg5NTJFRENBQzc0NDM2QzFERUYxNjU2QTBGQThCM0NFNDhENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDleJm8YHKx5TIhm36Odfx0y0Ur
rvlxzU/KX8ECAgYsV2naT8QdcoVN8SwkKHV3ibDcpRzajo6OkPH5UzVdZaoGRFmJ
MMFxOTxe1xX2eY/cY8Ciqs2CH8oFlyyhVKWEWIyv2YBXUMh2asuJqqcr/FguCzVH
rdEgy81Mkw9dJjzEhRK082HrZ00t0+zO8AAPubEBsasEobbvxuwsk8XVM5u5WDLK
IZ2V+3/W84JSU70akpiFarWjTSGYx8kvMb1LWLXPAgp72kCSY46SrW7uycmuTHHj
yFmXowVZvywUN+AXRiQoP5uSkuIKn2Aa6kn6VdQ4nTjz0xG9qfwD9lpHvnu/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZIiVLtysdENsHe8WVqD6izzkjUEwHwYDVR0j
BBgwFoAULYqyhIZU1RZkrG9FpE5UB8azWRIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjYxNTIyQTdEMUIxNTk5NjAxRjBBMUFBQjgzOTFBN0Q2
RUEwQTVCREY5NUIwNDVBQkEwMDFFNzlERDRCNjMyLzAvMkQ4QUIyODQ4NjU0RDUx
NjY0QUM2RjQ1QTQ0RTU0MDdDNkIzNTkxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDhBQjI4NDg2NTRENTE2NjRB
QzZGNDVBNDRFNTQwN0M2QjM1OTEyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDI2MTUyMkE3RDFCMTU5OTYwMUYwQTFBQUI4MzkxQTdENkVBMEE1QkRG
OTVCMDQ1QUJBMDAxRTc5REQ0QjYzMi8wLzMxMzQzMzJlMzAyZTM5MzYyZTMwMmYz
MjMyMmQzMjMzMjAzZDNlMjAzMjM2MzMzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKPAGAwDQYJ
KoZIhvcNAQELBQADggEBAGdJnjIoBfbfzNHTyk0yA83mZkLsPlGhjkAo0Cv0e1/O
qKRptIcYazgcGzlckSUkSsSseVSJWILQL1yXe7SPpMzEo67s6jQjxkOwliYOg+Xw
ZaIOOFmqvCUexejQcKqlY7jhY3t2OAO7Teb9A4zvegyYz1xjRePI8a7dvShLSaSU
UsS5bcbNWJDAhkfdH8rO2MOjNqNbfRS03VAq3aznNXjxQlt3HadIJNC0SufMjQ4L
WHcI/loPpbe4CM7pKAhVilL1uTvkBoZYL1aoIuIea8geenMFgwaetpGZtcuhftcM
8GpbcBXtkyHKbct08qZFukfkQ36Cuqm9x/799m0Z9Ds=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org