Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa
File:                     3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa (raw, json)
Hash identifier:          mUSqE9XW178A4NP8DLz3Bh9K1yqbeAh/UVdGtYpM1Ac=
Subject key identifier:   58:18:DB:49:F9:26:95:96:5B:BF:DB:C5:EC:39:57:DC:AB:5C:4C:AC
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       2196A07628DF57A25689759E9B4617A90BA9E2C8
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa
Signing time:             Thu 17 Oct 2024 16:10:00 +0000
ROA not before:           Thu 17 Oct 2024 16:05:00 +0000
ROA not after:            Thu 16 Oct 2025 16:10:00 +0000
asID:                     14593
IP address blocks:        148.222.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:96:a0:76:28:df:57:a2:56:89:75:9e:9b:46:17:a9:0b:a9:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Oct 17 16:05:00 2024 GMT
            Not After : Oct 16 16:10:00 2025 GMT
        Subject: CN=5818DB49F92695965BBFDBC5EC3957DCAB5C4CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:5c:84:71:c7:85:fc:17:c8:6e:fb:a1:8d:
                    f8:b8:f6:a3:e5:0b:e5:39:81:ed:4f:85:71:9a:4c:
                    95:29:c7:be:97:72:d4:5c:a0:3e:81:50:8c:a5:19:
                    1a:bd:9d:b6:35:4f:f4:50:ac:bb:23:9c:5b:22:22:
                    89:37:83:5a:5b:65:48:5b:b8:6f:28:1a:0b:ad:ed:
                    a0:75:5a:8a:75:88:7c:41:07:e2:c5:06:f1:fc:c4:
                    40:92:d3:8a:16:99:3a:3b:54:85:3a:58:02:19:90:
                    d5:20:71:fd:ca:47:b8:b6:a2:d9:f5:08:09:fc:1f:
                    0c:8c:09:0c:27:4f:8c:da:66:86:92:ef:52:50:7d:
                    88:8a:06:26:32:ed:4b:53:77:02:68:4a:61:54:4c:
                    73:26:83:9a:1c:d2:0f:66:aa:03:f6:7f:fd:d8:3b:
                    54:3b:36:46:91:51:23:9b:0d:fa:b1:f7:27:83:ef:
                    7e:8e:56:c3:a6:31:d2:21:5d:10:20:07:53:54:58:
                    14:d9:79:ef:75:22:74:7d:1d:03:32:36:e0:bf:ca:
                    61:9e:95:a4:d6:45:41:51:92:f4:ac:b4:ed:2d:21:
                    c5:dc:7f:8e:08:33:4e:87:1d:fb:e2:22:08:53:93:
                    d3:dc:cc:64:da:ad:ca:28:07:5f:ff:69:7c:63:47:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:DB:49:F9:26:95:96:5B:BF:DB:C5:EC:39:57:DC:AB:5C:4C:AC
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d8:a0:52:be:e4:2d:5f:44:9f:63:f5:c7:a4:be:95:2f:bb:bc:
         c0:43:cb:2e:c3:d8:97:09:13:7c:49:35:ee:40:46:92:a0:20:
         23:e9:a2:34:7e:99:fe:92:97:04:3d:14:36:b3:c8:d2:16:fe:
         ff:2c:4c:92:fa:2a:20:fb:0a:55:02:c8:61:e0:49:84:bf:ac:
         d5:2c:09:77:77:8f:5a:e7:49:05:96:6d:94:59:e0:8d:3a:b0:
         eb:02:79:c0:eb:bb:28:a5:3a:53:a9:70:c0:6c:80:9e:42:c8:
         b6:84:2a:50:e2:ec:7d:1f:0c:49:6f:f6:f4:30:bd:e8:f5:b5:
         e6:2d:da:98:8c:ee:7d:40:02:3a:16:43:60:6e:77:6e:19:fe:
         52:49:f2:12:50:d0:2c:95:fe:c7:88:81:cd:dd:c2:ea:9c:35:
         32:e3:b4:3a:c9:33:2d:41:3e:c7:7b:e5:08:8d:0b:e3:24:ef:
         1a:47:bf:ec:35:34:08:b9:ff:95:28:03:a7:c8:96:fa:6a:00:
         6a:cc:8e:8a:b2:a9:c6:81:80:27:98:55:67:3f:69:11:ca:01:
         da:a4:7e:4d:25:46:94:62:58:f6:d4:f0:62:1a:02:71:ae:59:
         14:3d:cc:00:64:bd:c7:49:2d:fd:a4:f0:d2:f7:51:87:f5:75:
         80:08:da:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIZagdijfV6JWiXWem0YXqQup4sgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVEQTE3MUQ1QUUwOUU1NUE3MjgwREMyMjc2MTBEODJB
MkFCMDM1NjAeFw0yNDEwMTcxNjA1MDBaFw0yNTEwMTYxNjEwMDBaMDMxMTAvBgNV
BAMTKDU4MThEQjQ5RjkyNjk1OTY1QkJGREJDNUVDMzk1N0RDQUI1QzRDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS/1yEcceF/BfIbvuhjfi49qPl
C+U5ge1PhXGaTJUpx76XctRcoD6BUIylGRq9nbY1T/RQrLsjnFsiIok3g1pbZUhb
uG8oGgut7aB1Wop1iHxBB+LFBvH8xECS04oWmTo7VIU6WAIZkNUgcf3KR7i2otn1
CAn8HwyMCQwnT4zaZoaS71JQfYiKBiYy7UtTdwJoSmFUTHMmg5oc0g9mqgP2f/3Y
O1Q7NkaRUSObDfqx9yeD736OVsOmMdIhXRAgB1NUWBTZee91InR9HQMyNuC/ymGe
laTWRUFRkvSstO0tIcXcf44IM06HHfviIghTk9PczGTarcooB1//aXxjRx+nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWBjbSfkmlZZbv9vF7DlX3KtcTKwwHwYDVR0j
BBgwFoAUFdoXHVrgnlWnKA3CJ2ENgqKrA1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDgzNzdCOEY4MTBFNjlCMUU2REUzRjIyOTg0OEFCMzQ0
RkI3ODY0OTQyRjc2Q0NDQ0JFNUMyNTZCMjNENkJGLzAvMTVEQTE3MUQ1QUUwOUU1
NUE3MjgwREMyMjc2MTBEODJBMkFCMDM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNURBMTcxRDVBRTA5RTU1QTcy
ODBEQzIyNzYxMEQ4MkEyQUIwMzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ4Mzc3QjhGODEwRTY5QjFFNkRFM0YyMjk4NDhBQjM0NEZCNzg2NDk0
MkY3NkNDQ0NCRTVDMjU2QjIzRDZCRi8wLzMxMzQzODJlMzIzMjMyMmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM0MzUzOTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlN7A
MA0GCSqGSIb3DQEBCwUAA4IBAQDYoFK+5C1fRJ9j9cekvpUvu7zAQ8suw9iXCRN8
STXuQEaSoCAj6aI0fpn+kpcEPRQ2s8jSFv7/LEyS+iog+wpVAshh4EmEv6zVLAl3
d49a50kFlm2UWeCNOrDrAnnA67sopTpTqXDAbICeQsi2hCpQ4ux9HwxJb/b0ML3o
9bXmLdqYjO59QAI6FkNgbnduGf5SSfISUNAslf7HiIHN3cLqnDUy47Q6yTMtQT7H
e+UIjQvjJO8aR7/sNTQIuf+VKAOnyJb6agBqzI6KsqnGgYAnmFVnP2kRygHapH5N
JUaUYlj21PBiGgJxrlkUPcwAZL3HSS39pPDS91GH9XWACNpx
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org