Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e38382e302f32332d3234203d3e2036343030.roa
File:                     3139362e332e38382e302f32332d3234203d3e2036343030.roa (raw, json)
Hash identifier:          oqLTGQJvcUlxoGBcQxTjXb9XWs6/Do5nDNTYLCjqLmY=
Subject key identifier:   7F:CD:F7:A0:D2:8D:11:74:EB:DA:5E:09:94:C9:52:E2:88:F9:13:4D
Certificate issuer:       /CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
Certificate serial:       484BC76CB7F1F2D912287763198D8702F2B7A35B
Authority key identifier: 81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e38382e302f32332d3234203d3e2036343030.roa
Signing time:             Tue 03 Sep 2024 13:45:01 +0000
ROA not before:           Tue 03 Sep 2024 13:40:01 +0000
ROA not after:            Tue 02 Sep 2025 13:45:01 +0000
asID:                     6400
IP address blocks:        196.3.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4b:c7:6c:b7:f1:f2:d9:12:28:77:63:19:8d:87:02:f2:b7:a3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81DF8317A0EC6E3A5E6078C1892078DD270DBBFE
        Validity
            Not Before: Sep  3 13:40:01 2024 GMT
            Not After : Sep  2 13:45:01 2025 GMT
        Subject: CN=7FCDF7A0D28D1174EBDA5E0994C952E288F9134D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:88:e3:a9:f2:49:a0:09:d2:a9:cc:38:42:
                    38:4c:a2:14:8c:7a:b1:3f:d6:df:a3:80:b2:c9:c5:
                    6e:f0:14:b8:84:b5:84:d0:c4:8c:ed:ce:58:e5:40:
                    78:cc:43:f0:fc:20:b1:cd:d2:ce:44:70:b0:19:ca:
                    27:26:78:da:38:74:cd:91:12:27:cc:fe:d9:ce:35:
                    6a:c2:9c:da:b0:ce:8e:7b:f8:e0:c0:ac:3b:b0:b5:
                    d6:d3:ed:dc:8d:43:32:92:e3:82:6d:94:a8:b7:cb:
                    35:6a:dc:2c:cd:76:e9:f8:2e:38:36:2e:e6:49:ba:
                    64:78:ec:b7:37:74:10:0d:13:76:75:fa:09:0c:83:
                    0c:40:85:a5:13:b0:a5:2b:bd:eb:dc:f4:e9:01:0a:
                    26:36:33:49:9a:7f:32:e4:df:a7:46:fb:49:68:98:
                    99:98:cf:39:2b:92:77:20:40:c2:ce:f6:f9:32:99:
                    c6:0c:b2:00:43:b4:29:01:92:73:8b:24:cc:20:8f:
                    f8:a0:a1:0e:1b:35:fa:7d:4f:d9:c3:a1:40:c4:87:
                    d5:9d:85:fb:f9:02:4d:43:8a:91:9b:7e:71:eb:54:
                    78:ee:ea:5a:ba:26:bd:4c:84:1a:8f:3e:e1:0c:43:
                    bd:b6:66:54:30:85:0e:98:d4:2f:3c:b7:d8:e2:6c:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:F7:A0:D2:8D:11:74:EB:DA:5E:09:94:C9:52:E2:88:F9:13:4D
            X509v3 Authority Key Identifier:
                keyid:81:DF:83:17:A0:EC:6E:3A:5E:60:78:C1:89:20:78:DD:27:0D:BB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DF8317A0EC6E3A5E6078C1892078DD270DBBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F97E5C18B6ABA6EC1657D51A4B37502E266DE54E478D6FE6A135B1F2629ED6/0/3139362e332e38382e302f32332d3234203d3e2036343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:72:a5:77:79:45:15:11:22:29:21:5f:4d:ad:e4:38:26:a4:
         e9:7c:b2:80:50:9d:a9:38:89:0c:a1:9a:31:80:3f:5e:d4:b3:
         54:a3:01:0e:68:33:0b:85:01:75:65:1d:8f:72:17:d1:b0:9c:
         e6:5b:f1:61:09:fb:71:d0:2e:1d:e5:4e:09:8d:d0:50:45:84:
         9d:fc:c0:10:cf:a8:f0:e2:d8:fa:c9:e0:7a:64:4f:75:a5:32:
         f1:a9:50:5b:9c:da:88:ed:77:ec:e1:54:11:94:4a:d8:33:68:
         86:95:30:59:07:02:fb:23:ef:32:64:4d:c2:e6:ad:82:9d:e2:
         fc:cb:a6:73:50:09:73:c2:0c:e4:71:1c:dd:15:4b:87:bb:79:
         ce:72:6b:aa:4c:38:86:e8:e6:1d:17:59:30:88:bd:1f:2d:a7:
         58:3f:23:2f:03:b1:ec:12:dd:af:45:1d:a8:84:7d:6b:69:66:
         ac:7d:d4:23:de:70:49:21:94:20:2c:45:39:6a:c8:a6:d6:c2:
         b0:4f:91:de:2c:0e:6c:d1:0b:81:af:ad:3d:5f:7a:ce:cc:18:
         4b:c8:e3:b4:4a:8e:2c:03:f9:8c:f3:c9:82:12:8b:f2:e8:64:
         bb:88:bd:6d:ec:60:e4:d3:5d:5c:5f:71:fc:18:83:c3:ab:4b:
         e7:2c:a9:02
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUSEvHbLfx8tkSKHdjGY2HAvK3o1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFERjgzMTdBMEVDNkUzQTVFNjA3OEMxODkyMDc4REQy
NzBEQkJGRTAeFw0yNDA5MDMxMzQwMDFaFw0yNTA5MDIxMzQ1MDFaMDMxMTAvBgNV
BAMTKDdGQ0RGN0EwRDI4RDExNzRFQkRBNUUwOTk0Qzk1MkUyODhGOTEzNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQIjjqfJJoAnSqcw4QjhMohSM
erE/1t+jgLLJxW7wFLiEtYTQxIztzljlQHjMQ/D8ILHN0s5EcLAZyicmeNo4dM2R
EifM/tnONWrCnNqwzo57+ODArDuwtdbT7dyNQzKS44JtlKi3yzVq3CzNdun4Ljg2
LuZJumR47Lc3dBANE3Z1+gkMgwxAhaUTsKUrvevc9OkBCiY2M0mafzLk36dG+0lo
mJmYzzkrkncgQMLO9vkymcYMsgBDtCkBknOLJMwgj/igoQ4bNfp9T9nDoUDEh9Wd
hfv5Ak1DipGbfnHrVHju6lq6Jr1MhBqPPuEMQ722ZlQwhQ6Y1C88t9jibKx5AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUf833oNKNEXTr2l4JlMlS4oj5E00wHwYDVR0j
BBgwFoAUgd+DF6DsbjpeYHjBiSB43ScNu/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUY5N0U1QzE4QjZBQkE2RUMxNjU3RDUxQTRCMzc1MDJF
MjY2REU1NEU0NzhENkZFNkExMzVCMUYyNjI5RUQ2LzAvODFERjgzMTdBMEVDNkUz
QTVFNjA3OEMxODkyMDc4REQyNzBEQkJGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MURGODMxN0EwRUM2RTNBNUU2
MDc4QzE4OTIwNzhERDI3MERCQkZFLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlGOTdFNUMxOEI2QUJBNkVDMTY1N0Q1MUE0QjM3NTAyRTI2NkRFNTRF
NDc4RDZGRTZBMTM1QjFGMjYyOUVENi8wLzMxMzkzNjJlMzMyZTM4MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcQDWDANBgkqhkiG
9w0BAQsFAAOCAQEAB3Kld3lFFREiKSFfTa3kOCak6XyygFCdqTiJDKGaMYA/XtSz
VKMBDmgzC4UBdWUdj3IX0bCc5lvxYQn7cdAuHeVOCY3QUEWEnfzAEM+o8OLY+sng
emRPdaUy8alQW5zaiO137OFUEZRK2DNohpUwWQcC+yPvMmRNwuatgp3i/Mumc1AJ
c8IM5HEc3RVLh7t5znJrqkw4hujmHRdZMIi9Hy2nWD8jLwOx7BLdr0UdqIR9a2lm
rH3UI95wSSGUICxFOWrIptbCsE+R3iwObNELga+tPV96zswYS8jjtEqOLAP5jPPJ
ghKL8uhku4i9bexg5NNdXF9x/BiDw6tL5yypAg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org