Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
File:                     3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier:          2uxf5auFrcEPMF3Nn2u+5uCUYYUpDrVZb0y6dwWyW9k=
Subject key identifier:   46:A4:4C:FC:02:E3:AE:8D:89:B8:32:8E:64:07:08:14:BE:64:8D:15
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       27CC32397B2BDE94580FF2107A8A5AE7ECA8E2B9
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa
Signing time:             Tue 05 Mar 2024 17:45:14 +0000
ROA not before:           Tue 05 Mar 2024 17:40:14 +0000
ROA not after:            Tue 04 Mar 2025 17:45:14 +0000
asID:                     263744
IP address blocks:        143.137.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:32:39:7b:2b:de:94:58:0f:f2:10:7a:8a:5a:e7:ec:a8:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Mar  5 17:40:14 2024 GMT
            Not After : Mar  4 17:45:14 2025 GMT
        Subject: CN=46A44CFC02E3AE8D89B8328E64070814BE648D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:96:23:11:18:74:b0:9b:a2:23:0b:ad:62:
                    8e:4e:47:e3:71:90:c0:88:90:6f:b7:77:6b:cd:5d:
                    12:81:df:47:dd:77:80:ca:da:89:36:2b:8a:05:37:
                    9b:e2:12:62:d5:39:aa:22:28:86:b5:b7:b7:d1:ba:
                    dd:36:3e:43:74:63:2b:8a:dc:c7:26:ee:7a:27:d0:
                    21:25:d6:97:36:d7:f9:2b:7f:7c:3b:a6:2b:37:2a:
                    84:ee:ad:99:9b:33:1d:49:1d:d3:e2:fb:83:e6:3f:
                    b0:93:4c:56:05:cf:56:fe:1f:24:97:e7:fb:f9:6d:
                    c2:4c:2d:c5:70:b3:a4:5f:75:e0:fd:ea:d8:45:5a:
                    76:fe:6f:84:ef:a3:b2:ba:e7:7b:84:89:dd:5a:7f:
                    d5:c7:ca:79:81:0b:b3:cc:90:c5:50:a2:39:b7:82:
                    53:26:17:ed:56:fd:c1:83:ce:26:bf:fa:d6:d0:0f:
                    d8:15:4f:c5:6d:c8:8e:bd:fe:c2:e7:18:41:ad:70:
                    0f:d7:c4:62:36:5f:9d:82:fc:52:5d:53:98:85:1b:
                    67:2a:e5:54:d2:aa:29:51:c6:af:4d:6d:db:bc:bc:
                    b9:28:1c:8b:3c:31:b2:e7:67:bf:d7:24:4d:6b:0f:
                    fa:0a:14:49:d4:2d:fd:2a:4b:37:d5:e6:47:3a:ee:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A4:4C:FC:02:E3:AE:8D:89:B8:32:8E:64:07:08:14:BE:64:8D:15
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3134332e3133372e3136382e302f32322d3232203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:7a:8d:87:96:5d:18:57:19:dd:68:39:9d:59:26:0c:32:62:
         31:97:9a:15:1b:c5:6d:c8:b0:7f:b2:c1:f6:a5:7a:45:a1:5d:
         59:fa:83:1e:23:a6:2f:c3:27:c3:2d:ba:35:85:f2:bd:6b:0b:
         93:db:a9:a2:f2:a1:aa:70:72:eb:2c:2e:ef:13:c7:2f:d6:4e:
         57:3c:79:2c:92:40:9e:75:82:83:dc:5b:72:67:cc:65:d6:8e:
         67:87:f7:5a:12:4a:09:e9:b2:19:f1:fc:db:77:d0:fe:00:ef:
         89:de:3a:23:82:25:c1:a5:99:99:5f:18:00:b1:39:13:df:4b:
         8d:7f:52:54:ef:63:94:4c:33:44:75:25:75:c8:8f:62:37:d9:
         ca:0c:e9:38:84:b0:cf:fa:91:87:b2:65:3f:a5:09:aa:f6:6e:
         c3:de:f6:72:23:16:ee:c8:a7:9a:80:e1:5c:a0:ed:43:1e:c0:
         27:83:f4:52:00:29:da:3d:b6:f1:99:93:b9:96:90:20:91:8c:
         ab:97:aa:3d:14:5e:74:96:ef:c5:a7:ea:ae:b6:3b:42:0b:01:
         0c:bd:01:84:64:ad:85:a7:79:0d:b5:15:e2:d1:c3:69:0d:f1:
         ce:5d:48:3f:ec:47:77:02:09:8c:a4:9c:a2:0d:99:ce:76:57:
         9a:f4:2d:85
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJ8wyOXsr3pRYD/IQeopa5+yo4rkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMwQUI2OTEyNzgy
NkY3NTZBMjAeFw0yNDAzMDUxNzQwMTRaFw0yNTAzMDQxNzQ1MTRaMDMxMTAvBgNV
BAMTKDQ2QTQ0Q0ZDMDJFM0FFOEQ4OUI4MzI4RTY0MDcwODE0QkU2NDhEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NZYjERh0sJuiIwutYo5OR+Nx
kMCIkG+3d2vNXRKB30fdd4DK2ok2K4oFN5viEmLVOaoiKIa1t7fRut02PkN0YyuK
3Mcm7non0CEl1pc21/krf3w7pis3KoTurZmbMx1JHdPi+4PmP7CTTFYFz1b+HySX
5/v5bcJMLcVws6RfdeD96thFWnb+b4Tvo7K653uEid1af9XHynmBC7PMkMVQojm3
glMmF+1W/cGDzia/+tbQD9gVT8VtyI69/sLnGEGtcA/XxGI2X52C/FJdU5iFG2cq
5VTSqilRxq9Nbdu8vLkoHIs8MbLnZ7/XJE1rD/oKFEnULf0qSzfV5kc67pJ7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQURqRM/ALjro2JuDKOZAcIFL5kjRUwHwYDVR0j
BBgwFoAUYy1xBidRdztfpRrAq2kSeCb3VqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZG
RTdGMDI4MDQyM0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzcz
QjVGQTUxQUMwQUI2OTEyNzgyNkY3NTZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzJENzEwNjI3NTE3NzNCNUZB
NTFBQzBBQjY5MTI3ODI2Rjc1NkEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMwNzQyNzUzQUM2RkU3RjAyODA0
MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzMxMzQzMzJlMzEzMzM3MmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzNzM0MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
iagwDQYJKoZIhvcNAQELBQADggEBAKB6jYeWXRhXGd1oOZ1ZJgwyYjGXmhUbxW3I
sH+ywfalekWhXVn6gx4jpi/DJ8MtujWF8r1rC5PbqaLyoapwcussLu8Txy/WTlc8
eSySQJ51goPcW3JnzGXWjmeH91oSSgnpshnx/Nt30P4A74neOiOCJcGlmZlfGACx
ORPfS41/UlTvY5RMM0R1JXXIj2I32coM6TiEsM/6kYeyZT+lCar2bsPe9nIjFu7I
p5qA4Vyg7UMewCeD9FIAKdo9tvGZk7mWkCCRjKuXqj0UXnSW78Wn6q62O0ILAQy9
AYRkrYWneQ21FeLRw2kN8c5dSD/sR3cCCYyknKINmc52V5r0LYU=
-----END CERTIFICATE-----
Generated at Fri May 24 21:41:14 2024 by rpki-client on console-ams.rpki-client.org