Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa
File:                     3138362e36342e36342e302f31392d3234203d3e203237393533.roa (raw, json)
Hash identifier:          Ju2A9GfvuaLaRiakbo9YGYHWdEqjUAE4h5WK//+EnuA=
Subject key identifier:   4F:EE:A5:9C:E8:9D:F3:B7:41:D5:79:1B:74:FD:18:D5:43:0A:A1:4C
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       29F43F313740A222AC50E7FC8B24BD79E1F735BC
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:53 +0000
ROA not before:           Tue 05 Mar 2024 18:02:53 +0000
ROA not after:            Tue 04 Mar 2025 18:07:53 +0000
asID:                     27953
IP address blocks:        186.64.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:3f:31:37:40:a2:22:ac:50:e7:fc:8b:24:bd:79:e1:f7:35:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:53 2024 GMT
            Not After : Mar  4 18:07:53 2025 GMT
        Subject: CN=4FEEA59CE89DF3B741D5791B74FD18D5430AA14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:01:8d:de:51:97:23:38:cf:07:c6:e6:b4:
                    13:d7:d4:cf:ab:62:ef:ad:95:3e:f6:39:f5:a2:9b:
                    43:0b:86:77:ca:98:df:0b:a9:de:78:c2:ea:5a:bd:
                    b1:3b:bf:e3:32:8a:08:6b:0a:02:e2:26:e6:ad:5f:
                    17:30:ef:cc:61:7e:f3:cf:c3:20:4d:2d:61:0c:cc:
                    91:78:4b:7d:6d:52:59:a3:fa:17:2f:60:90:2b:82:
                    f1:e4:68:e8:4b:57:c0:4e:e6:07:41:44:8c:fa:ad:
                    d6:47:d1:d1:16:6f:05:6b:0e:07:a6:13:90:ba:77:
                    b4:cb:c8:65:f7:87:6b:79:ff:47:13:68:d2:7d:e6:
                    47:22:df:7d:88:ae:73:77:ab:cb:53:1f:30:ba:a2:
                    55:fb:1c:46:92:2c:7c:48:11:e6:8c:93:96:e7:a9:
                    16:c5:b7:07:ad:5a:eb:73:63:79:33:06:ca:32:fd:
                    f3:f4:3f:0e:f1:d9:62:b6:62:1e:e3:2e:cd:ef:01:
                    23:83:88:e8:44:77:30:48:19:cc:19:60:90:03:c6:
                    85:4a:3e:48:26:79:39:72:ab:a0:aa:ec:bf:e9:36:
                    8f:2d:e4:62:98:f6:1b:75:05:e2:dd:e3:09:09:df:
                    80:22:00:b8:1f:ff:bb:6a:cb:a4:22:ac:f6:9a:ca:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:A5:9C:E8:9D:F3:B7:41:D5:79:1B:74:FD:18:D5:43:0A:A1:4C
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:04:c7:ed:06:45:05:7d:82:1e:32:0d:35:1f:1e:00:4f:ce:
         2b:08:fa:76:14:a2:9f:f2:37:21:88:ad:97:6a:10:c2:9a:b5:
         61:25:2d:12:21:cf:6a:5b:48:19:9e:ca:10:2f:d0:73:e7:c3:
         f9:45:79:f1:37:09:83:77:3b:f8:5b:ad:6b:4b:f0:28:c9:b5:
         69:5f:52:8f:47:a3:ec:20:38:f6:c3:8a:4d:4a:01:21:56:0a:
         db:7b:72:39:07:fc:34:ae:dd:ee:83:6c:8f:f6:0e:f2:d5:11:
         00:bd:3e:80:5b:dd:f6:07:9e:32:a3:b3:7c:8a:20:ba:44:0a:
         e9:18:ad:f6:b4:c9:d9:18:3a:de:46:13:c9:1e:4e:db:71:3e:
         0f:e7:79:03:56:1a:b7:a9:51:8c:d5:20:0c:3c:0d:86:2c:94:
         29:d9:7d:1c:a0:54:9a:3d:7e:27:aa:f3:34:53:28:3d:17:ca:
         b3:4d:8c:75:f9:79:e2:45:f0:a2:06:b7:c4:7d:39:cc:ad:00:
         4c:f3:4b:cd:f1:27:ec:2c:db:b1:3f:28:a3:09:70:2c:e7:5c:
         00:87:ea:45:f5:80:63:d6:24:d5:e8:16:6c:8f:ad:6f:1a:38:
         8b:6c:97:20:a8:5d:98:42:61:0a:c3:43:77:d2:25:ff:f9:3b:
         a7:b1:21:47
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKfQ/MTdAoiKsUOf8iyS9eeH3NbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY3RTU2NDRENDM5RUNCNjE1QTkzMTgwOEIwRDZGMkFD
NjZBMTlGMjAeFw0yNDAzMDUxODAyNTNaFw0yNTAzMDQxODA3NTNaMDMxMTAvBgNV
BAMTKDRGRUVBNTlDRTg5REYzQjc0MUQ1NzkxQjc0RkQxOEQ1NDMwQUExNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWgGN3lGXIzjPB8bmtBPX1M+r
Yu+tlT72OfWim0MLhnfKmN8Lqd54wupavbE7v+MyighrCgLiJuatXxcw78xhfvPP
wyBNLWEMzJF4S31tUlmj+hcvYJArgvHkaOhLV8BO5gdBRIz6rdZH0dEWbwVrDgem
E5C6d7TLyGX3h2t5/0cTaNJ95kci332IrnN3q8tTHzC6olX7HEaSLHxIEeaMk5bn
qRbFtwetWutzY3kzBsoy/fP0Pw7x2WK2Yh7jLs3vASODiOhEdzBIGcwZYJADxoVK
PkgmeTlyq6Cq7L/pNo8t5GKY9ht1BeLd4wkJ34AiALgf/7tqy6QirPaayrIXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUT+6lnOid87dB1XkbdP0Y1UMKoUwwHwYDVR0j
BBgwFoAU1n5WRNQ57LYVqTGAiw1vKsZqGfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yREVBNEI5NTlCRTQyMTQ4MUMxMzdCQUU1RkJDMkZCRTFC
REREODdDMDdBNjVENTJGMEM5RUNGNjhGN0M1OTlGLzAvRDY3RTU2NDRENDM5RUNC
NjE1QTkzMTgwOEIwRDZGMkFDNjZBMTlGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjdFNTY0NEQ0MzlFQ0I2MTVB
OTMxODA4QjBENkYyQUM2NkExOUYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkRFQTRCOTU5QkU0MjE0ODFDMTM3QkFFNUZCQzJGQkUxQkRERDg3QzA3
QTY1RDUyRjBDOUVDRjY4RjdDNTk5Ri8wLzMxMzgzNjJlMzYzNDJlMzYzNDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzczOTM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW6QEAwDQYJ
KoZIhvcNAQELBQADggEBAHUEx+0GRQV9gh4yDTUfHgBPzisI+nYUop/yNyGIrZdq
EMKatWElLRIhz2pbSBmeyhAv0HPnw/lFefE3CYN3O/hbrWtL8CjJtWlfUo9Ho+wg
OPbDik1KASFWCtt7cjkH/DSu3e6DbI/2DvLVEQC9PoBb3fYHnjKjs3yKILpECukY
rfa0ydkYOt5GE8keTttxPg/neQNWGrepUYzVIAw8DYYslCnZfRygVJo9fieq8zRT
KD0XyrNNjHX5eeJF8KIGt8R9OcytAEzzS83xJ+ws27E/KKMJcCznXACH6kX1gGPW
JNXoFmyPrW8aOItslyCoXZhCYQrDQ3fSJf/5O6exIUc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:01 2024 by rpki-client on console-fra.rpki-client.org