Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa
File:                     3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa (raw, json)
Hash identifier:          5uG6xke94Gxtppo8gNu69g5hvFDPCKPvvPlU5W6oDtE=
Subject key identifier:   EB:4F:B3:71:60:73:E8:B1:DC:BC:46:CF:76:9A:10:FC:27:4E:B9:94
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       78CEF5EC68AFF0E57E614B78A68EBA0C3FA41D4B
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa
Signing time:             Tue 05 Mar 2024 17:42:45 +0000
ROA not before:           Tue 05 Mar 2024 17:37:45 +0000
ROA not after:            Tue 04 Mar 2025 17:42:45 +0000
asID:                     61490
IP address blocks:        131.108.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ce:f5:ec:68:af:f0:e5:7e:61:4b:78:a6:8e:ba:0c:3f:a4:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Mar  5 17:37:45 2024 GMT
            Not After : Mar  4 17:42:45 2025 GMT
        Subject: CN=EB4FB3716073E8B1DCBC46CF769A10FC274EB994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:a5:cb:f3:c4:d3:39:4e:ea:5d:8c:ca:6e:
                    04:3f:0b:a8:67:31:37:f4:5e:3d:a8:b4:a6:bc:f5:
                    b7:cd:fa:69:d6:0d:78:d8:51:28:05:b2:ef:cc:14:
                    99:4e:1b:72:70:e3:fc:e7:05:90:2e:3d:c3:84:79:
                    02:57:5c:42:68:70:8e:52:80:ab:cd:f1:80:21:eb:
                    de:24:e7:31:b7:c9:e1:6a:cc:ac:24:00:cb:85:b9:
                    4d:44:e0:7c:71:4d:8b:fb:5d:0f:28:55:ef:b3:f0:
                    f6:10:4c:8c:4d:59:42:82:f6:17:b5:a2:36:68:65:
                    58:7b:0e:68:e5:10:20:f2:73:ae:94:07:55:fb:be:
                    bc:2e:17:88:e2:7a:18:59:94:26:ce:12:22:f5:23:
                    8c:85:fb:2c:8d:52:7a:6a:45:94:0a:12:b4:f9:17:
                    d3:29:30:3f:3a:4d:12:8f:dc:81:6a:ec:01:ed:3d:
                    25:05:aa:7f:85:70:6d:3e:f3:ad:f9:01:5c:3b:6c:
                    9d:58:38:9c:e7:b6:76:d9:91:ab:11:e0:1f:4d:70:
                    ad:63:36:0c:56:d0:2e:f8:9e:f2:24:81:45:36:a5:
                    f3:20:43:b1:a7:0f:c3:3a:18:f9:ad:cc:1b:94:ca:
                    3f:73:0a:94:d9:dd:d5:ce:bf:cb:5c:ca:1d:f2:68:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4F:B3:71:60:73:E8:B1:DC:BC:46:CF:76:9A:10:FC:27:4E:B9:94
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134302e302f32342d3234203d3e203631343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:da:61:63:2a:11:9e:2a:87:f6:35:2e:cc:23:38:98:18:
         0c:11:aa:fb:ef:65:c6:f4:03:af:88:cc:7a:9a:6f:94:fa:82:
         3d:a4:fe:4d:14:59:16:f5:f3:c3:6b:84:75:c4:e2:7c:61:9e:
         01:af:7b:8b:43:87:58:b3:9c:12:9a:e1:ac:94:5c:52:70:83:
         4a:23:47:04:ed:8c:60:b6:ca:ba:57:ac:54:69:2d:c2:9e:31:
         09:ae:64:4c:f8:dd:a5:12:83:43:14:63:3a:a1:22:15:c4:bc:
         2d:12:a1:61:f4:b8:dd:b0:39:81:6d:29:af:79:6f:9c:45:10:
         26:2b:b6:5e:7d:90:7d:88:d3:05:41:3b:1b:2f:e4:01:70:61:
         01:02:99:ef:b3:86:2a:f2:60:fb:14:44:2b:98:b5:d5:86:f8:
         ba:0b:68:a3:83:94:db:25:3e:f3:99:ed:83:1e:41:25:9d:65:
         a7:90:05:06:21:95:28:a7:ca:3c:68:99:80:98:02:7a:1d:34:
         24:d4:3f:d7:4a:af:db:0e:dd:57:cd:1c:fe:ff:60:cf:96:f1:
         fb:67:79:73:4e:91:3f:4a:a9:e8:1e:34:1c:4a:b9:19:d5:e9:
         d6:04:e3:8f:ab:7e:a4:61:51:b8:82:d8:06:f7:94:98:97:f4:
         f6:ff:1c:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeM717Giv8OV+YUt4po66DD+kHUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc0RUVDMzMyODAyNTcyMDQ3Q0JFMEZBQjEzRjNDRjJC
QTQxN0FGRjAeFw0yNDAzMDUxNzM3NDVaFw0yNTAzMDQxNzQyNDVaMDMxMTAvBgNV
BAMTKEVCNEZCMzcxNjA3M0U4QjFEQ0JDNDZDRjc2OUExMEZDMjc0RUI5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HqXL88TTOU7qXYzKbgQ/C6hn
MTf0Xj2otKa89bfN+mnWDXjYUSgFsu/MFJlOG3Jw4/znBZAuPcOEeQJXXEJocI5S
gKvN8YAh694k5zG3yeFqzKwkAMuFuU1E4HxxTYv7XQ8oVe+z8PYQTIxNWUKC9he1
ojZoZVh7DmjlECDyc66UB1X7vrwuF4jiehhZlCbOEiL1I4yF+yyNUnpqRZQKErT5
F9MpMD86TRKP3IFq7AHtPSUFqn+FcG0+8635AVw7bJ1YOJzntnbZkasR4B9NcK1j
NgxW0C74nvIkgUU2pfMgQ7GnD8M6GPmtzBuUyj9zCpTZ3dXOv8tcyh3yaLE5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU60+zcWBz6LHcvEbPdpoQ/CdOuZQwHwYDVR0j
BBgwFoAU107sMygCVyBHy+D6sT888rpBev8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTZDQUNGNERCRUU3NzUwMjk0MEZBRDUwMjc5NzIzQUYw
REExMzlFNUM3NUE2QjVCQ0VCQTZCMUMxNDNEQjg4LzAvRDc0RUVDMzMyODAyNTcy
MDQ3Q0JFMEZBQjEzRjNDRjJCQTQxN0FGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzRFRUMzMzI4MDI1NzIwNDdD
QkUwRkFCMTNGM0NGMkJBNDE3QUZGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2Q0FDRjREQkVFNzc1MDI5NDBGQUQ1MDI3OTcyM0FGMERBMTM5RTVD
NzVBNkI1QkNFQkE2QjFDMTQzREI4OC8wLzMxMzMzMTJlMzEzMDM4MmUzMTM0MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg2yM
MA0GCSqGSIb3DQEBCwUAA4IBAQB1X9phYyoRniqH9jUuzCM4mBgMEar772XG9AOv
iMx6mm+U+oI9pP5NFFkW9fPDa4R1xOJ8YZ4Br3uLQ4dYs5wSmuGslFxScINKI0cE
7Yxgtsq6V6xUaS3CnjEJrmRM+N2lEoNDFGM6oSIVxLwtEqFh9LjdsDmBbSmveW+c
RRAmK7ZefZB9iNMFQTsbL+QBcGEBApnvs4Yq8mD7FEQrmLXVhvi6C2ijg5TbJT7z
me2DHkElnWWnkAUGIZUop8o8aJmAmAJ6HTQk1D/XSq/bDt1XzRz+/2DPlvH7Z3lz
TpE/SqnoHjQcSrkZ1enWBOOPq36kYVG4gtgG95SYl/T2/xye
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org