Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          8VlgynIpNwj4eko3EOQJdsZ7WD6kFBfUA/a7lhdo4k0=
Subject key identifier:   EF:1F:89:90:62:FE:12:37:62:BC:41:06:5A:2A:D9:A2:59:99:1A:A3
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       560F1BE268E0C6AF84D764DEE1C36ED9E1ED6286
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     265831
IP address blocks:        192.141.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0f:1b:e2:68:e0:c6:af:84:d7:64:de:e1:c3:6e:d9:e1:ed:62:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=EF1F899062FE123762BC41065A2AD9A259991AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:63:84:e8:5c:cd:19:53:31:66:3b:f2:4d:
                    3a:63:85:6d:28:f5:3a:19:04:9c:3e:7d:36:96:b1:
                    48:f8:43:07:d6:70:81:38:4c:09:8d:e0:2c:5c:7c:
                    83:de:8e:8b:9f:e2:e1:64:d2:f3:67:8a:92:b8:1a:
                    ee:f1:d9:89:ff:25:8c:a1:bd:ca:81:a4:eb:32:19:
                    4a:98:6b:74:5e:07:1a:be:08:7c:71:4c:d7:53:f8:
                    d8:de:89:0a:9a:53:6e:51:7a:66:8e:1e:c1:ea:f1:
                    bb:6b:5b:bc:96:47:06:f0:06:67:7b:db:ae:a4:98:
                    36:99:23:e9:04:ef:49:53:ab:ad:1e:58:5d:69:90:
                    33:a3:f5:93:20:b0:a9:fe:0f:b8:0f:59:9e:96:bc:
                    15:91:1d:4a:fd:1f:8d:7f:8a:a1:9d:cb:58:fc:56:
                    ab:74:33:c2:8e:84:9e:fa:28:36:50:48:d2:0f:2a:
                    39:36:40:e9:b3:6f:77:67:4c:3a:5f:a7:a6:dd:f0:
                    94:33:24:9b:94:6e:19:14:1d:df:ef:70:09:4c:7e:
                    82:09:93:b2:6c:e1:5c:5f:75:61:24:3b:77:e4:0e:
                    0d:c9:48:cd:20:e2:f7:19:b7:35:82:17:47:dc:17:
                    f5:82:47:d5:e3:84:23:0a:67:c0:80:a0:0e:4e:96:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:89:90:62:FE:12:37:62:BC:41:06:5A:2A:D9:A2:59:99:1A:A3
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:f8:73:6a:66:9d:cb:2a:56:b1:b0:25:72:8e:56:42:6b:
         b7:32:e5:8b:9f:d9:42:b1:2d:6a:6f:8d:44:5b:df:83:93:e0:
         e9:c1:16:08:97:b5:e5:37:b0:44:51:ab:54:c7:eb:ed:25:fd:
         2a:ba:1c:c0:70:83:34:5c:88:41:57:1e:b6:7a:16:b4:6a:a0:
         0f:5b:9f:99:21:e1:1d:66:19:01:5c:87:35:7a:e1:fa:70:ff:
         57:7c:8b:92:fe:3f:75:01:c3:e1:fe:a1:6c:58:83:b0:5f:1e:
         80:30:13:99:6b:f8:01:a7:0d:23:13:52:f0:f7:7d:fd:d7:50:
         27:cd:64:8b:04:af:c2:b9:0c:3f:bb:b7:cb:a9:51:63:23:c5:
         52:98:4a:41:60:65:88:d6:39:61:09:c8:af:ff:ef:fb:2f:12:
         58:33:fd:b9:5f:ec:34:c8:2f:25:2d:81:f0:f9:cb:8a:2f:1d:
         0f:d2:13:4f:1d:db:27:3f:fa:83:cf:de:78:e1:99:5f:e5:b2:
         a4:14:25:2a:c1:50:84:2d:73:28:f9:d8:3b:d8:0c:82:b3:e0:
         e8:43:a5:dd:e8:7a:6b:e4:bb:7c:39:6c:5e:e9:93:de:45:24:
         64:90:83:63:e7:9c:b1:a0:1f:b7:b2:85:3e:42:60:cc:e6:2d:
         5f:63:47:73
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVg8b4mjgxq+E12Te4cNu2eHtYoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxMTE4NEY1RjBCRUU2MDZGMzE0QzE4ODAzNkZERENG
MEYyOTRGODAeFw0yNDAzMDUxNzM5NTNaFw0yNTAzMDQxNzQ0NTNaMDMxMTAvBgNV
BAMTKEVGMUY4OTkwNjJGRTEyMzc2MkJDNDEwNjVBMkFEOUEyNTk5OTFBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiGOE6FzNGVMxZjvyTTpjhW0o
9ToZBJw+fTaWsUj4QwfWcIE4TAmN4CxcfIPejouf4uFk0vNnipK4Gu7x2Yn/JYyh
vcqBpOsyGUqYa3ReBxq+CHxxTNdT+NjeiQqaU25RemaOHsHq8btrW7yWRwbwBmd7
266kmDaZI+kE70lTq60eWF1pkDOj9ZMgsKn+D7gPWZ6WvBWRHUr9H41/iqGdy1j8
Vqt0M8KOhJ76KDZQSNIPKjk2QOmzb3dnTDpfp6bd8JQzJJuUbhkUHd/vcAlMfoIJ
k7Js4VxfdWEkO3fkDg3JSM0g4vcZtzWCF0fcF/WCR9XjhCMKZ8CAoA5OltVHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7x+JkGL+EjdivEEGWirZolmZGqMwHwYDVR0j
BBgwFoAUnREYT18L7mBvMUwYgDb93PDylPgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTdBQjgzOEVCMjhCMzQ2NUJCNDAzQjU0NDkyODI1MzM1
MDRDNkE3MTRFRkE1NDVFMjVBMzgzMkY2QUZGRUZCLzAvOUQxMTE4NEY1RjBCRUU2
MDZGMzE0QzE4ODAzNkZERENGMEYyOTRGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDExMTg0RjVGMEJFRTYwNkYz
MTRDMTg4MDM2RkREQ0YwRjI5NEY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEU3QUI4MzhFQjI4QjM0NjVCQjQwM0I1NDQ5MjgyNTMzNTA0QzZBNzE0
RUZBNTQ1RTI1QTM4MzJGNkFGRkVGQi8wLzMxMzkzMjJlMzEzNDMxMmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwI0w
MA0GCSqGSIb3DQEBCwUAA4IBAQCbRPhzamadyypWsbAlco5WQmu3MuWLn9lCsS1q
b41EW9+Dk+DpwRYIl7XlN7BEUatUx+vtJf0quhzAcIM0XIhBVx62eha0aqAPW5+Z
IeEdZhkBXIc1euH6cP9XfIuS/j91AcPh/qFsWIOwXx6AMBOZa/gBpw0jE1Lw9339
11AnzWSLBK/CuQw/u7fLqVFjI8VSmEpBYGWI1jlhCciv/+/7LxJYM/25X+w0yC8l
LYHw+cuKLx0P0hNPHdsnP/qDz9544Zlf5bKkFCUqwVCELXMo+dg72AyCs+DoQ6Xd
6Hpr5Lt8OWxe6ZPeRSRkkINj55yxoB+3soU+QmDM5i1fY0dz
-----END CERTIFICATE-----
Generated at Sat May 11 09:49:13 2024 by rpki-client on console-fra.rpki-client.org