Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa
File:                     3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (raw, json)
Hash identifier:          fYCfx5q6EzM0SUn0LEJET5VWJ4N9E0m0JImJiRoZ+jA=
Subject key identifier:   73:D2:CB:29:EB:46:C9:34:0E:6E:90:82:64:DD:79:DD:E4:E7:D0:28
Certificate issuer:       /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial:       0935F6FDBF19C67EDBEDF21196BB076CD1ADE8B7
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     270156
IP address blocks:        138.255.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:f6:fd:bf:19:c6:7e:db:ed:f2:11:96:bb:07:6c:d1:ad:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=73D2CB29EB46C9340E6E908264DD79DDE4E7D028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:fd:57:5c:4d:e1:8f:bd:9f:67:44:62:54:
                    73:41:f6:3f:5c:62:7e:c1:58:c3:b2:e3:34:9f:14:
                    70:9c:bb:25:7c:d5:5d:13:4c:34:63:ab:b7:13:3b:
                    38:01:3d:c8:f8:be:5b:eb:2d:c5:02:b3:fe:db:03:
                    1b:74:67:bc:ab:d2:75:69:a8:49:9f:6a:7f:94:11:
                    bd:90:53:9c:31:6c:2f:70:e6:7f:14:a4:ce:a6:6d:
                    d5:ea:d9:a3:0b:8b:9a:ec:33:e6:ff:d8:f0:30:ca:
                    65:41:ea:bc:9c:7b:8f:78:da:2c:87:f5:de:47:2b:
                    59:55:f7:9e:94:94:a2:53:35:40:0d:ba:8e:56:a6:
                    22:d6:f4:bc:34:c0:a1:42:5d:68:7c:2e:5a:b9:c1:
                    d7:05:e8:b5:c3:a0:e1:e8:9a:5e:75:f4:00:49:29:
                    ed:e9:bf:89:ab:46:ea:da:47:97:c0:54:35:01:9d:
                    38:d8:93:e7:f3:58:29:08:04:fe:97:ea:2b:62:55:
                    4a:35:c4:50:27:b6:36:b7:e4:67:df:87:45:4d:d9:
                    e6:c2:95:1f:6e:ca:34:43:8c:25:72:1c:f8:0d:90:
                    e3:5c:4b:5c:ae:19:31:10:ee:fd:55:0d:19:36:02:
                    4c:e9:fe:34:98:db:4f:56:c9:b9:88:d1:ac:60:93:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:CB:29:EB:46:C9:34:0E:6E:90:82:64:DD:79:DD:E4:E7:D0:28
            X509v3 Authority Key Identifier:
                keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:c2:8e:52:a8:2f:0b:98:30:29:7b:1b:f2:ae:a0:ac:ab:
         8f:db:63:76:1c:1c:fe:31:bc:be:cc:8a:80:21:f7:7c:59:40:
         2c:fc:39:f3:5a:b3:bf:8a:79:4f:ed:86:0a:53:a3:ae:42:15:
         fa:ba:ce:25:94:a3:07:ed:ce:d2:cc:0d:80:b0:3b:48:3f:aa:
         c2:01:4a:88:30:d6:1d:9f:cc:72:38:3a:3d:2b:b0:af:4b:3e:
         73:6e:ce:44:ab:66:65:35:b1:1a:9b:63:e9:40:0e:15:ca:7b:
         40:80:f6:4b:92:fc:a9:1d:4c:d5:4b:dc:fd:ec:a3:4b:8e:5b:
         e8:96:df:08:13:c4:b3:38:6e:c8:b7:fc:b1:86:e2:ba:cc:b5:
         2a:5b:35:12:55:c8:37:9d:cd:fe:ec:7e:a5:ba:a1:2c:f3:0a:
         15:31:cd:92:b0:00:87:ee:cf:8c:37:1a:81:b1:bb:06:8c:c7:
         06:e9:de:bc:39:fb:4d:5a:e1:fc:f3:49:5e:49:95:a4:4d:9e:
         90:f5:62:04:59:e0:31:c4:b1:4c:83:28:d4:78:5a:c1:a2:89:
         29:e2:da:30:d7:10:55:d5:b4:42:56:c8:70:12:5d:5c:67:45:
         6a:99:8e:94:56:76:e3:95:76:8d:a7:a6:52:a0:e0:8a:fe:eb:
         28:3f:2a:3d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCTX2/b8Zxn7b7fIRlrsHbNGt6LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVENjE5NzMzQTNEM0E3NzZCMkQ1RkI4NDMwNTE4NkI5
NDJFMjQ5QTAeFw0yNDAzMDUxNzU1NDRaFw0yNTAzMDQxODAwNDRaMDMxMTAvBgNV
BAMTKDczRDJDQjI5RUI0NkM5MzQwRTZFOTA4MjY0REQ3OURERTRFN0QwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKf1XXE3hj72fZ0RiVHNB9j9c
Yn7BWMOy4zSfFHCcuyV81V0TTDRjq7cTOzgBPcj4vlvrLcUCs/7bAxt0Z7yr0nVp
qEmfan+UEb2QU5wxbC9w5n8UpM6mbdXq2aMLi5rsM+b/2PAwymVB6ryce4942iyH
9d5HK1lV956UlKJTNUANuo5WpiLW9Lw0wKFCXWh8Llq5wdcF6LXDoOHoml519ABJ
Ke3pv4mrRuraR5fAVDUBnTjYk+fzWCkIBP6X6itiVUo1xFAntja35Gffh0VN2ebC
lR9uyjRDjCVyHPgNkONcS1yuGTEQ7v1VDRk2Akzp/jSY209WybmI0axgk8AxAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUc9LLKetGyTQObpCCZN153eTn0CgwHwYDVR0j
BBgwFoAUNdYZczo9OndrLV+4QwUYa5QuJJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkM5QjBEQzA1QUZBQjdFQ0IzQTM3OUREQzZENTFDNTQ4
RDNBNzExRDlDMTA0NjJGMkI2QUJDMUU3NUUxMDE5LzAvMzVENjE5NzMzQTNEM0E3
NzZCMkQ1RkI4NDMwNTE4NkI5NDJFMjQ5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUQ2MTk3MzNBM0QzQTc3NkIy
RDVGQjg0MzA1MTg2Qjk0MkUyNDlBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZDOUIwREMwNUFGQUI3RUNCM0EzNzlEREM2RDUxQzU0OEQzQTcxMUQ5
QzEwNDYyRjJCNkFCQzFFNzVFMTAxOS8wLzMxMzMzODJlMzIzNTM1MmUzMTMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMTM1MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
/3QwDQYJKoZIhvcNAQELBQADggEBACk6wo5SqC8LmDApexvyrqCsq4/bY3YcHP4x
vL7MioAh93xZQCz8OfNas7+KeU/thgpTo65CFfq6ziWUowftztLMDYCwO0g/qsIB
Sogw1h2fzHI4Oj0rsK9LPnNuzkSrZmU1sRqbY+lADhXKe0CA9kuS/KkdTNVL3P3s
o0uOW+iW3wgTxLM4bsi3/LGG4rrMtSpbNRJVyDedzf7sfqW6oSzzChUxzZKwAIfu
z4w3GoGxuwaMxwbp3rw5+01a4fzzSV5JlaRNnpD1YgRZ4DHEsUyDKNR4WsGiiSni
2jDXEFXVtEJWyHASXVxnRWqZjpRWduOVdo2nplKg4Ir+6yg/Kj0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org