Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
File:                     3139312e35322e3230382e302f32322d3234203d3e203130343831.roa (raw, json)
Hash identifier:          F8bw86LyhllFD+X9gZ+uQvXFR8dTd420+TDUrBkcq5k=
Subject key identifier:   1B:53:89:1A:90:A1:2E:10:16:2D:A8:8C:B6:0E:1C:1E:7E:70:EC:96
Certificate issuer:       /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial:       3A49B6EC59173531B24D2F043F775FE4BB40EBC4
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
Signing time:             Wed 07 Aug 2024 17:05:00 +0000
ROA not before:           Wed 07 Aug 2024 17:00:00 +0000
ROA not after:            Wed 06 Aug 2025 17:05:00 +0000
asID:                     10481
IP address blocks:        191.52.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:b6:ec:59:17:35:31:b2:4d:2f:04:3f:77:5f:e4:bb:40:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
        Validity
            Not Before: Aug  7 17:00:00 2024 GMT
            Not After : Aug  6 17:05:00 2025 GMT
        Subject: CN=1B53891A90A12E10162DA88CB60E1C1E7E70EC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:73:e6:c4:7b:61:c7:ba:f2:27:bf:02:25:
                    6a:cc:2c:ef:26:3b:2f:05:df:5c:01:37:7b:b7:6f:
                    38:4e:d5:a7:25:a5:65:c8:16:96:f4:e4:71:dd:c8:
                    ce:9b:a0:36:a7:60:47:99:24:d4:66:8d:57:ee:f5:
                    a2:86:76:c1:62:cb:5f:03:a3:af:a5:78:29:93:d7:
                    e8:23:ac:cc:cd:df:63:97:fb:8c:48:3d:05:fa:69:
                    1c:5a:1e:96:f0:b9:38:ba:53:7e:0f:27:01:4f:ba:
                    f3:e0:cb:4e:e2:00:4b:bd:47:33:96:ca:d8:ab:94:
                    24:3a:5b:65:5f:a0:10:66:91:a8:fa:ab:88:f8:b9:
                    17:61:13:ec:4f:06:95:ad:b9:91:a4:5b:ae:ce:ae:
                    04:da:cc:1e:74:94:58:98:03:ae:80:0b:5d:45:78:
                    0f:bf:f9:36:fa:4e:b8:c4:34:a7:08:98:ec:f4:14:
                    2d:94:06:98:31:53:a0:49:00:86:d6:5d:64:4b:ca:
                    e9:b5:26:49:83:d0:f2:78:3d:e3:ed:c6:d6:0e:54:
                    29:93:8b:92:3e:65:2e:b3:04:59:95:ec:0c:60:e6:
                    88:33:d2:92:76:01:ad:b3:e0:b1:9e:00:ad:6c:32:
                    0d:bc:90:a1:2b:de:d4:c2:cc:c1:c4:a0:91:e4:e2:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:89:1A:90:A1:2E:10:16:2D:A8:8C:B6:0E:1C:1E:7E:70:EC:96
            X509v3 Authority Key Identifier:
                keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:97:e1:f9:f4:7d:9a:cb:6c:33:fa:cc:7d:ef:e5:c8:e0:
         67:35:6b:0f:d4:f9:1a:45:87:72:9c:bd:ac:65:65:34:21:dc:
         d6:89:6d:5c:e0:2c:e8:41:f3:52:f7:29:80:b4:27:7e:67:11:
         e7:97:bf:90:62:40:a2:f5:5c:d2:72:19:3b:ea:07:49:8b:49:
         0e:c2:75:96:d4:67:fe:1c:74:0b:07:ac:1f:61:7c:05:5b:9c:
         bf:36:ec:fa:d3:e2:ce:1e:3b:39:6e:62:8e:22:df:a5:ff:b3:
         e9:ba:f5:e9:32:75:43:14:8d:49:7d:f0:fe:8b:2d:56:8b:46:
         42:1e:75:3a:53:0e:dc:2b:43:50:75:82:5f:e3:5a:93:3f:e2:
         98:20:5e:b4:bd:21:22:54:b3:91:78:ee:2e:15:6c:e2:f9:da:
         43:0a:91:e9:cb:64:51:2e:08:55:f3:a5:03:05:ed:38:b8:a2:
         26:6f:50:c4:cc:f5:2a:78:0f:0a:bc:12:28:4a:ec:6a:05:f1:
         2b:fb:80:4a:41:d5:c2:7d:ca:cc:4b:ff:74:8e:be:29:cb:25:
         d9:a3:b2:67:ad:05:56:26:60:fb:d8:db:0e:46:09:fb:41:cc:
         fe:dd:29:69:81:d5:1d:af:a1:66:5f:f7:e6:35:51:59:2b:46:
         a7:d6:10:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOkm27FkXNTGyTS8EP3df5LtA68QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGRjlFRDQyMjk4MzQ1N0U3ODRBMUM1REY0NDE3OTdC
MDBCMTg4NjAeFw0yNDA4MDcxNzAwMDBaFw0yNTA4MDYxNzA1MDBaMDMxMTAvBgNV
BAMTKDFCNTM4OTFBOTBBMTJFMTAxNjJEQTg4Q0I2MEUxQzFFN0U3MEVDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZh3PmxHthx7ryJ78CJWrMLO8m
Oy8F31wBN3u3bzhO1aclpWXIFpb05HHdyM6boDanYEeZJNRmjVfu9aKGdsFiy18D
o6+leCmT1+gjrMzN32OX+4xIPQX6aRxaHpbwuTi6U34PJwFPuvPgy07iAEu9RzOW
ytirlCQ6W2VfoBBmkaj6q4j4uRdhE+xPBpWtuZGkW67OrgTazB50lFiYA66AC11F
eA+/+Tb6TrjENKcImOz0FC2UBpgxU6BJAIbWXWRLyum1JkmD0PJ4PePtxtYOVCmT
i5I+ZS6zBFmV7Axg5ogz0pJ2Aa2z4LGeAK1sMg28kKEr3tTCzMHEoJHk4lHfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUG1OJGpChLhAWLaiMtg4cHn5w7JYwHwYDVR0j
BBgwFoAUv/+e1CKYNFfnhKHF30QXl7ALGIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDZCMTA2MzcxOEE2MUFFNTYxREIxOEE4NzBGNTgzRDE0
RDY1MTNDOTlFOTREQzE0RjQ3RDZEQkZCQkMwQTJDLzAvQkZGRjlFRDQyMjk4MzQ1
N0U3ODRBMUM1REY0NDE3OTdCMDBCMTg4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkZGOUVENDIyOTgzNDU3RTc4
NEExQzVERjQ0MTc5N0IwMEIxODg2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA2QjEwNjM3MThBNjFBRTU2MURCMThBODcwRjU4M0QxNEQ2NTEzQzk5
RTk0REMxNEY0N0Q2REJGQkJDMEEyQy8wLzMxMzkzMTJlMzUzMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMDM0MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr800DAN
BgkqhkiG9w0BAQsFAAOCAQEAV6GX4fn0fZrLbDP6zH3v5cjgZzVrD9T5GkWHcpy9
rGVlNCHc1oltXOAs6EHzUvcpgLQnfmcR55e/kGJAovVc0nIZO+oHSYtJDsJ1ltRn
/hx0CwesH2F8BVucvzbs+tPizh47OW5ijiLfpf+z6br16TJ1QxSNSX3w/ostVotG
Qh51OlMO3CtDUHWCX+Nakz/imCBetL0hIlSzkXjuLhVs4vnaQwqR6ctkUS4IVfOl
AwXtOLiiJm9QxMz1KngPCrwSKErsagXxK/uASkHVwn3KzEv/dI6+Kcsl2aOyZ60F
ViZg+9jbDkYJ+0HM/t0paYHVHa+hZl/35jVRWStGp9YQ4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:44 2024 by rpki-client on console-fra.rpki-client.org