Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
File:                     3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (raw, json)
Hash identifier:          6ywDjLeZkQwLoD81XA1VmTLgWnt4OZiUxU0Fd2IKD8I=
Subject key identifier:   BD:0F:93:8F:43:33:37:3C:28:96:53:3B:BE:BD:5A:47:FB:86:9B:1B
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       1DDC278D61F2BFDB18A7247BF362F4E16EA55956
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
Signing time:             Tue 05 Mar 2024 18:15:39 +0000
ROA not before:           Tue 05 Mar 2024 18:10:39 +0000
ROA not after:            Tue 04 Mar 2025 18:15:39 +0000
asID:                     262932
IP address blocks:        191.103.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dc:27:8d:61:f2:bf:db:18:a7:24:7b:f3:62:f4:e1:6e:a5:59:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Mar  5 18:10:39 2024 GMT
            Not After : Mar  4 18:15:39 2025 GMT
        Subject: CN=BD0F938F4333373C2896533BBEBD5A47FB869B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:58:db:57:7c:45:ca:dd:9b:5b:c5:8c:4d:
                    39:d5:da:a6:9d:12:cf:ed:15:19:08:8a:4e:af:e8:
                    b2:b8:09:5d:5c:8a:6f:f3:fc:e3:55:e3:f0:76:dd:
                    d1:1d:14:0b:5c:93:98:de:97:2c:b9:21:62:ca:ac:
                    8c:a1:4a:ed:5a:da:71:99:44:e3:62:9e:63:62:4e:
                    3b:c9:1a:7c:cc:ec:b5:b7:33:6d:ff:40:78:a6:dd:
                    38:35:65:fa:1d:b0:db:c8:f9:09:44:52:e3:88:77:
                    b6:86:d1:cb:7e:e8:ef:e6:85:8b:c7:2f:68:90:3d:
                    a4:49:ed:3c:27:00:8c:03:8b:9f:a1:ea:2f:60:ee:
                    ea:01:e4:ec:fb:f6:6e:0d:50:e5:07:25:5d:42:7a:
                    65:72:a4:91:1a:a3:a5:64:67:cf:99:7b:51:27:ff:
                    c1:ab:58:b0:af:f0:08:53:7b:11:1d:3d:78:38:eb:
                    78:4d:37:d6:8e:75:58:fe:23:1f:6f:e2:58:67:df:
                    fc:a6:97:70:58:3e:2c:1c:f4:79:cb:d3:0e:84:36:
                    a1:2c:9d:07:95:b7:1e:a6:1e:7a:8e:39:92:e7:bc:
                    82:f2:5d:e6:e4:f6:a0:8f:3f:6d:38:00:19:94:12:
                    3b:ef:37:3f:ff:d7:5a:53:ce:1c:60:85:19:14:8e:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0F:93:8F:43:33:37:3C:28:96:53:3B:BE:BD:5A:47:FB:86:9B:1B
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:93:98:39:a9:c0:eb:ca:40:15:2a:ac:09:8d:ce:58:45:
         fc:24:3a:19:cb:69:33:ed:85:f7:26:36:05:31:12:dd:18:31:
         b3:16:ef:ff:ad:63:15:d8:9e:fe:44:1d:67:2b:8f:79:3b:cc:
         e6:a0:de:82:ae:a8:c9:6d:d8:d2:b0:8c:d3:41:f9:b4:d6:10:
         a9:14:26:bc:24:0d:46:56:22:d7:e0:f2:07:79:96:bd:a9:c2:
         41:4e:d2:d3:ce:ba:32:88:5f:b0:d7:1f:50:2e:87:07:02:52:
         e0:ab:ab:2f:de:9e:e5:70:23:b1:a2:0e:73:ce:ad:b1:46:9f:
         3d:da:8f:74:94:c2:27:bb:e8:ce:82:87:54:78:6e:22:a5:bc:
         31:53:1e:6a:bd:fd:fe:a2:24:c5:70:ec:63:d6:f7:14:9a:ba:
         c8:c0:21:c3:dc:00:3e:ee:36:1a:3c:99:90:f3:8b:de:af:0f:
         6d:6f:3a:5d:ef:55:d4:58:50:49:c5:d5:48:bf:1a:c3:6b:b1:
         76:b1:94:81:1b:47:1b:af:5c:93:2a:11:01:30:a4:7f:b6:6d:
         0a:2d:1b:93:98:f0:b4:48:04:24:66:ec:6e:0c:0c:c2:38:14:
         a0:db:b3:28:0f:f1:e1:73:59:2f:0e:d9:7f:1f:b2:eb:b5:2c:
         6e:0f:7d:68
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHdwnjWHyv9sYpyR782L04W6lWVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkxMjkxQTVCMzYxODY0OEE4RTFCOEU3RDMxNDlCQzhE
MjVENzFCRDAeFw0yNDAzMDUxODEwMzlaFw0yNTAzMDQxODE1MzlaMDMxMTAvBgNV
BAMTKEJEMEY5MzhGNDMzMzM3M0MyODk2NTMzQkJFQkQ1QTQ3RkI4NjlCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG0FjbV3xFyt2bW8WMTTnV2qad
Es/tFRkIik6v6LK4CV1cim/z/ONV4/B23dEdFAtck5jelyy5IWLKrIyhSu1a2nGZ
RONinmNiTjvJGnzM7LW3M23/QHim3Tg1ZfodsNvI+QlEUuOId7aG0ct+6O/mhYvH
L2iQPaRJ7TwnAIwDi5+h6i9g7uoB5Oz79m4NUOUHJV1CemVypJEao6VkZ8+Ze1En
/8GrWLCv8AhTexEdPXg463hNN9aOdVj+Ix9v4lhn3/yml3BYPiwc9HnL0w6ENqEs
nQeVtx6mHnqOOZLnvILyXebk9qCPP204ABmUEjvvNz//11pTzhxghRkUjizVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvQ+Tj0MzNzwollM7vr1aR/uGmxswHwYDVR0j
BBgwFoAUWRKRpbNhhkio4bjn0xSbyNJdcb0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMUJEREEzMTdBQTVERjlENTc2NDI1NTM0MDY4QTJCMzM2
Q0VCNUNEN0I1RENGMjU1RUFEQzM5NDZGM0M4MjUwLzAvNTkxMjkxQTVCMzYxODY0
OEE4RTFCOEU3RDMxNDlCQzhEMjVENzFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTEyOTFBNUIzNjE4NjQ4QThF
MUI4RTdEMzE0OUJDOEQyNUQ3MUJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjFCRERBMzE3QUE1REY5RDU3NjQyNTUzNDA2OEEyQjMzNkNFQjVDRDdC
NURDRjI1NUVBREMzOTQ2RjNDODI1MC8wLzMxMzkzMTJlMzEzMDMzMmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEv2dg
MA0GCSqGSIb3DQEBCwUAA4IBAQAajpOYOanA68pAFSqsCY3OWEX8JDoZy2kz7YX3
JjYFMRLdGDGzFu//rWMV2J7+RB1nK495O8zmoN6CrqjJbdjSsIzTQfm01hCpFCa8
JA1GViLX4PIHeZa9qcJBTtLTzroyiF+w1x9QLocHAlLgq6sv3p7lcCOxog5zzq2x
Rp892o90lMInu+jOgodUeG4ipbwxUx5qvf3+oiTFcOxj1vcUmrrIwCHD3AA+7jYa
PJmQ84verw9tbzpd71XUWFBJxdVIvxrDa7F2sZSBG0cbr1yTKhEBMKR/tm0KLRuT
mPC0SAQkZuxuDAzCOBSg27MoD/Hhc1kvDtl/H7LrtSxuD31o
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org