Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa
File:                     3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa (raw, json)
Hash identifier:          3EyQ07xHkDsSIIJtD24DXCzcSw8k3IEpzNzDvAhuSeo=
Subject key identifier:   DF:82:1B:67:3E:6C:13:84:8F:F7:29:5C:E4:3E:F5:DF:F0:BB:98:A0
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       19062B244420FB77DD5841AB483BCCB25C795422
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa
Signing time:             Mon 06 May 2024 16:50:01 +0000
ROA not before:           Mon 06 May 2024 16:45:01 +0000
ROA not after:            Mon 05 May 2025 16:50:01 +0000
asID:                     265517
IP address blocks:        143.255.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:06:2b:24:44:20:fb:77:dd:58:41:ab:48:3b:cc:b2:5c:79:54:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: May  6 16:45:01 2024 GMT
            Not After : May  5 16:50:01 2025 GMT
        Subject: CN=DF821B673E6C13848FF7295CE43EF5DFF0BB98A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:a8:b8:f4:93:1a:86:6b:81:f6:2f:cf:3d:
                    49:18:91:38:ca:04:24:d5:5a:db:fc:e4:23:ec:6d:
                    bf:93:15:39:3a:65:3c:03:85:03:3d:39:c9:8e:c3:
                    06:aa:1c:d2:90:e3:9a:34:47:ce:ba:5f:3e:fe:9f:
                    44:e3:a6:07:83:df:79:e9:9e:8d:bf:2f:92:7c:58:
                    f3:f8:48:0a:11:bd:53:53:af:8d:3c:48:25:ef:5e:
                    0d:b6:b0:20:a1:33:6b:8c:46:9e:eb:89:d5:b2:26:
                    aa:68:ba:a0:ac:0c:0a:f2:54:24:28:44:b0:82:35:
                    46:ea:47:f3:e6:9d:15:bc:6b:54:1a:ab:15:42:3e:
                    d5:75:55:65:f7:a9:f4:c2:89:1d:ba:a0:34:54:e7:
                    b8:ba:97:a0:96:ae:6c:3e:2f:25:f5:29:f7:fe:9c:
                    0a:73:5a:34:e7:79:fe:47:f6:af:f6:be:5f:16:eb:
                    90:41:93:af:cc:06:09:2c:74:9f:ab:ec:18:d9:b3:
                    8b:6e:a9:21:34:2e:a4:d3:4d:c7:92:17:1b:05:6a:
                    c1:d0:1d:ed:38:c9:36:3b:a3:b3:51:ec:b5:8a:94:
                    82:e3:a6:57:19:73:91:69:75:f5:ea:e6:dd:c4:f5:
                    0b:9a:6d:56:35:cf:0e:19:3f:88:96:a8:21:c8:9e:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:1B:67:3E:6C:13:84:8F:F7:29:5C:E4:3E:F5:DF:F0:BB:98:A0
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:91:83:ff:7e:92:a0:37:0d:44:20:cd:dc:df:53:12:46:
         2e:23:b3:44:82:d8:e7:2e:b4:c8:a3:f2:ed:84:96:4b:3c:73:
         b5:93:19:c2:1d:65:05:82:52:70:56:22:9e:d0:fd:7d:4c:1f:
         29:de:8a:1d:72:93:73:91:34:0f:02:69:ce:ae:5e:97:13:62:
         5a:e6:ac:7f:1e:48:37:11:94:09:7c:ec:dc:2e:94:42:e5:2b:
         27:f0:76:0d:19:a5:6a:a4:cb:fa:c0:82:be:c5:92:23:6e:fc:
         75:bd:c5:82:9d:96:16:73:18:43:55:c2:cb:24:ad:d8:7c:d9:
         4d:33:ea:0f:c9:d9:64:ce:44:06:6b:4e:0a:e8:5a:6d:be:38:
         c1:07:17:63:a5:78:e2:c3:25:68:dd:c5:c9:18:57:f6:24:66:
         88:fb:67:96:73:9c:d7:2d:8d:e3:43:ee:a3:ba:0c:d0:35:8f:
         9c:e0:bd:e8:a0:43:fd:69:93:90:de:62:78:5c:22:03:e4:ce:
         b9:8a:29:a3:51:e1:3c:fc:0c:91:56:c2:04:43:4c:df:01:0f:
         8a:13:f6:5d:04:83:d5:ce:94:7e:d8:e6:8f:b4:42:34:fd:42:
         fc:6f:95:4b:7a:15:6b:cf:d2:f1:f2:c0:8f:27:4c:d8:4c:56:
         38:f1:cd:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGQYrJEQg+3fdWEGrSDvMslx5VCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5MDEzNDlFOURFNDQ2NDZENUVCQjRGQkJEODA4Qjg5
NEQ2ODgyRDAeFw0yNDA1MDYxNjQ1MDFaFw0yNTA1MDUxNjUwMDFaMDMxMTAvBgNV
BAMTKERGODIxQjY3M0U2QzEzODQ4RkY3Mjk1Q0U0M0VGNURGRjBCQjk4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2Ki49JMahmuB9i/PPUkYkTjK
BCTVWtv85CPsbb+TFTk6ZTwDhQM9OcmOwwaqHNKQ45o0R866Xz7+n0TjpgeD33np
no2/L5J8WPP4SAoRvVNTr408SCXvXg22sCChM2uMRp7ridWyJqpouqCsDAryVCQo
RLCCNUbqR/PmnRW8a1QaqxVCPtV1VWX3qfTCiR26oDRU57i6l6CWrmw+LyX1Kff+
nApzWjTnef5H9q/2vl8W65BBk6/MBgksdJ+r7BjZs4tuqSE0LqTTTceSFxsFasHQ
He04yTY7o7NR7LWKlILjplcZc5FpdfXq5t3E9QuabVY1zw4ZP4iWqCHIntJDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU34IbZz5sE4SP9ylc5D713/C7mKAwHwYDVR0j
BBgwFoAUipATSeneRGRtXrtPu9gIuJTWiC0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM1NkQwMUY3NzE5NTA5RTAxNDk2MEQ3MTU4ODFFMkVE
MEY1NUI5QjA2QjQ1NTU5NzYzNDNDOEFERjJFOUUwLzAvOEE5MDEzNDlFOURFNDQ2
NDZENUVCQjRGQkJEODA4Qjg5NEQ2ODgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTkwMTM0OUU5REU0NDY0NkQ1
RUJCNEZCQkQ4MDhCODk0RDY4ODJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNTZEMDFGNzcxOTUwOUUwMTQ5NjBENzE1ODgxRTJFRDBGNTVCOUIw
NkI0NTU1OTc2MzQzQzhBREYyRTlFMC8wLzMxMzQzMzJlMzIzNTM1MmUzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/8o
MA0GCSqGSIb3DQEBCwUAA4IBAQBew5GD/36SoDcNRCDN3N9TEkYuI7NEgtjnLrTI
o/LthJZLPHO1kxnCHWUFglJwViKe0P19TB8p3oodcpNzkTQPAmnOrl6XE2Ja5qx/
Hkg3EZQJfOzcLpRC5Ssn8HYNGaVqpMv6wIK+xZIjbvx1vcWCnZYWcxhDVcLLJK3Y
fNlNM+oPydlkzkQGa04K6FptvjjBBxdjpXjiwyVo3cXJGFf2JGaI+2eWc5zXLY3j
Q+6jugzQNY+c4L3ooEP9aZOQ3mJ4XCID5M65iimjUeE8/AyRVsIEQ0zfAQ+KE/Zd
BIPVzpR+2OaPtEI0/UL8b5VLehVrz9Lx8sCPJ0zYTFY48c1k
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org