Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35302e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          ycLcMDX4KrTi99Q3NFqMLYoOLaNRG0rb/+FplYjrnlk=
Subject key identifier:   9D:35:C9:8D:EC:4A:43:A6:D7:F8:57:A6:AF:0E:7E:10:C6:0E:7D:36
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       6414D0FA2F454BC5EA0EBD3EC47EE4AE2F598623
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:20:34 +0000
ROA not before:           Tue 05 Mar 2024 18:15:34 +0000
ROA not after:            Tue 04 Mar 2025 18:20:34 +0000
asID:                     27947
IP address blocks:        192.188.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:14:d0:fa:2f:45:4b:c5:ea:0e:bd:3e:c4:7e:e4:ae:2f:59:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:34 2024 GMT
            Not After : Mar  4 18:20:34 2025 GMT
        Subject: CN=9D35C98DEC4A43A6D7F857A6AF0E7E10C60E7D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cd:95:9b:40:64:e2:aa:10:e0:ef:6c:e7:aa:
                    ad:71:b5:d6:60:f1:e8:91:62:11:2b:9a:14:e7:a1:
                    a1:99:2a:70:12:1e:06:3d:85:0e:33:74:53:04:11:
                    d1:aa:1c:61:59:29:e0:b2:c0:38:41:3c:f5:ad:09:
                    e8:2a:50:5b:5b:d8:cc:a6:92:6c:22:e6:be:06:b6:
                    97:d0:a8:7a:7b:57:80:0f:d9:58:b8:0a:2e:40:d9:
                    b1:40:11:c6:66:1c:d5:90:98:26:7a:d0:42:f8:a8:
                    cc:a9:ab:56:2f:70:c4:bf:32:8a:26:e7:22:11:af:
                    d2:66:9b:71:92:b1:ce:2b:05:95:50:1c:47:95:3d:
                    17:55:5f:0a:86:71:44:f5:b1:b8:dc:6a:ee:d8:97:
                    4e:11:74:b3:63:c0:40:3c:da:b2:8b:cc:7e:40:78:
                    30:7c:86:95:10:59:76:8a:28:2f:6a:94:a0:8e:88:
                    d6:d9:59:65:07:e9:8a:90:8f:41:1f:36:c9:82:46:
                    fa:a9:a6:70:e5:ea:26:c3:81:11:33:13:6c:d9:72:
                    50:73:24:bf:80:b2:6a:7b:76:50:c3:e6:59:d9:77:
                    62:30:7a:18:99:18:02:a3:83:02:e4:69:ec:ac:c9:
                    d8:3c:5a:f5:5a:20:ce:69:3e:90:59:8a:35:b9:ce:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:C9:8D:EC:4A:43:A6:D7:F8:57:A6:AF:0E:7E:10:C6:0E:7D:36
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:09:24:9d:dc:2a:c2:47:51:a7:96:29:f7:22:bc:44:44:a1:
         88:d9:fc:77:d1:ab:47:eb:20:c9:90:38:2c:79:2f:b2:ed:75:
         76:ff:68:9c:43:25:84:49:a8:65:d6:a5:78:fb:e1:4d:41:e9:
         19:b2:a5:07:de:f8:c2:7d:9f:de:0b:8b:53:14:88:39:cc:d5:
         5d:06:79:21:19:e7:53:a4:6d:62:63:73:53:e5:71:a8:4b:b5:
         05:f5:08:92:c9:12:fc:54:89:bd:e8:ce:e2:3d:3a:dd:d7:2e:
         1a:9d:97:e8:44:0f:a0:ff:a6:ff:99:75:0f:d5:1b:b7:1d:ae:
         b0:ac:75:39:b2:64:f4:fd:dc:fc:98:47:dc:df:5e:95:6a:fd:
         4e:37:fb:ce:81:39:c0:ba:9b:f0:64:62:f5:d8:8e:5d:87:d4:
         78:e1:73:cb:a4:cd:9c:1b:7b:34:d7:f9:8e:01:a1:37:b0:d2:
         e9:fd:24:e0:d4:7a:d1:15:6d:27:83:8d:db:e9:fc:27:84:1c:
         b5:15:bc:d9:5e:0a:32:88:53:7a:c3:c2:71:57:d3:74:b2:56:
         a7:81:9b:b4:46:93:dd:b5:a5:0e:cd:a9:97:f9:df:68:55:f7:
         fa:7e:db:29:f7:ca:f7:47:cc:4e:ad:84:cc:be:c5:97:dd:99:
         11:11:90:00
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZBTQ+i9FS8XqDr0+xH7kri9ZhiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0Qzc4RjM3MjkyMDc1MzQxMThGRkUwMDJFMjE4NkZD
NTM3NTkwMTAeFw0yNDAzMDUxODE1MzRaFw0yNTAzMDQxODIwMzRaMDMxMTAvBgNV
BAMTKDlEMzVDOThERUM0QTQzQTZEN0Y4NTdBNkFGMEU3RTEwQzYwRTdEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4zZWbQGTiqhDg72znqq1xtdZg
8eiRYhErmhTnoaGZKnASHgY9hQ4zdFMEEdGqHGFZKeCywDhBPPWtCegqUFtb2Mym
kmwi5r4GtpfQqHp7V4AP2Vi4Ci5A2bFAEcZmHNWQmCZ60EL4qMypq1YvcMS/Moom
5yIRr9Jmm3GSsc4rBZVQHEeVPRdVXwqGcUT1sbjcau7Yl04RdLNjwEA82rKLzH5A
eDB8hpUQWXaKKC9qlKCOiNbZWWUH6YqQj0EfNsmCRvqppnDl6ibDgREzE2zZclBz
JL+Asmp7dlDD5lnZd2IwehiZGAKjgwLkaeysydg8WvVaIM5pPpBZijW5zna1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnTXJjexKQ6bX+Femrw5+EMYOfTYwHwYDVR0j
BBgwFoAUAEx483KSB1NBGP/gAuIYb8U3WQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTYyREMyRENCRTg2NjAyQUU2QTJFNDIzOTM0ODdFNTJB
RjVDNjgxNUQxMjM2Q0FEMTEwQzhBNkM4NzgyMzNELzAvMDA0Qzc4RjM3MjkyMDc1
MzQxMThGRkUwMDJFMjE4NkZDNTM3NTkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDRDNzhGMzcyOTIwNzUzNDEx
OEZGRTAwMkUyMTg2RkM1Mzc1OTAxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2MkRDMkRDQkU4NjYwMkFFNkEyRTQyMzkzNDg3RTUyQUY1QzY4MTVE
MTIzNkNBRDExMEM4QTZDODc4MjMzRC8wLzMxMzkzMjJlMzEzODM4MmUzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8MjAN
BgkqhkiG9w0BAQsFAAOCAQEAAwkkndwqwkdRp5Yp9yK8REShiNn8d9GrR+sgyZA4
LHkvsu11dv9onEMlhEmoZdalePvhTUHpGbKlB974wn2f3guLUxSIOczVXQZ5IRnn
U6RtYmNzU+VxqEu1BfUIkskS/FSJvejO4j063dcuGp2X6EQPoP+m/5l1D9Ubtx2u
sKx1ObJk9P3c/JhH3N9elWr9Tjf7zoE5wLqb8GRi9diOXYfUeOFzy6TNnBt7NNf5
jgGhN7DS6f0k4NR60RVtJ4ON2+n8J4QctRW82V4KMohTesPCcVfTdLJWp4GbtEaT
3bWlDs2pl/nfaFX3+n7bKffK90fMTq2EzL7Fl92ZERGQAA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org