Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa
File:                     3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (raw, json)
Hash identifier:          +SMaX1Xj8v6GFN3TahzsfRVvrYuwQWzz1qzhS+pl7RU=
Subject key identifier:   CA:44:FD:C4:FA:2B:06:92:4C:3D:EF:37:D6:8D:05:D4:43:CB:4D:33
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       1D743964FAB2896253B779ABB663660330EB430A
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa
Signing time:             Tue 05 Mar 2024 17:50:19 +0000
ROA not before:           Tue 05 Mar 2024 17:45:19 +0000
ROA not after:            Tue 04 Mar 2025 17:50:19 +0000
asID:                     10617
IP address blocks:        216.244.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Dec 2024 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:74:39:64:fa:b2:89:62:53:b7:79:ab:b6:63:66:03:30:eb:43:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Mar  5 17:45:19 2024 GMT
            Not After : Mar  4 17:50:19 2025 GMT
        Subject: CN=CA44FDC4FA2B06924C3DEF37D68D05D443CB4D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:32:7b:4a:0e:99:7c:99:16:83:c4:cf:fc:
                    f5:07:2c:6a:6a:73:90:c9:ec:fd:4a:af:cb:4d:3a:
                    25:ab:62:b0:09:53:4e:da:2b:d8:8a:13:32:d5:4b:
                    a4:b2:8d:fe:ad:c1:e2:b8:43:bc:d7:9b:1c:3a:19:
                    30:5b:2f:90:07:c8:90:59:11:ad:51:5e:13:0e:d2:
                    8e:27:bd:9b:d8:67:46:a6:73:d1:04:3f:64:a2:54:
                    52:6a:61:fb:b2:ad:8d:0c:7c:b4:ee:93:bf:17:c8:
                    57:04:09:cc:aa:51:bc:f4:d2:1a:d8:1c:a3:dd:6f:
                    33:d7:ea:f8:51:9d:30:55:aa:2f:80:d4:31:07:75:
                    ef:3d:2f:32:45:86:c6:42:2d:da:ab:95:d0:03:d4:
                    15:50:5e:6e:8c:96:9c:44:f1:b2:6a:f6:45:47:4f:
                    1d:e9:2f:95:23:bb:60:c7:08:97:7c:24:ab:b3:10:
                    5a:54:15:e4:3c:0c:79:85:a3:bb:e7:7d:c8:05:2a:
                    0b:5e:66:1c:df:c9:c1:72:70:6b:a8:6c:99:e9:f1:
                    a2:aa:3e:90:77:e6:6e:54:8c:50:a8:e2:1d:e9:fb:
                    99:22:7a:c2:5b:8d:19:d1:42:8f:a2:bd:3a:34:da:
                    5f:36:fc:41:c3:97:90:e7:f9:1d:20:85:3b:61:51:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:FD:C4:FA:2B:06:92:4C:3D:EF:37:D6:8D:05:D4:43:CB:4D:33
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.244.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:03:5e:43:64:96:76:ca:f4:04:ce:6d:bc:12:df:82:4f:
         27:0b:7f:2e:5f:0f:2f:23:af:05:e1:1f:93:fd:21:bc:cd:65:
         06:1d:c1:45:94:25:e7:9d:b7:fa:6b:d7:21:45:a3:43:48:1e:
         5f:bc:9a:c0:5c:29:7d:3a:9f:fd:e6:06:e7:95:de:77:a7:b1:
         aa:7e:f3:ac:28:ad:29:51:5c:2a:ad:7a:ec:5f:1f:23:6c:76:
         e5:86:27:9c:de:36:8a:59:cd:53:f8:7e:6a:ca:d6:4e:b6:d4:
         e6:ed:bb:c3:7f:f2:18:69:e9:47:89:60:13:49:fe:fb:18:9c:
         16:c4:17:b8:d8:b8:78:7a:0f:b2:3e:94:e2:4a:ad:7e:f2:05:
         41:c2:ec:44:ba:df:5f:e0:8d:5e:57:7a:05:b0:e7:58:b7:ea:
         d3:44:68:b5:4e:98:1f:e8:f3:16:6d:df:7a:93:f7:fb:ac:b6:
         63:69:a0:4e:33:ce:22:1a:c3:a1:3c:6c:96:87:27:1b:7e:6a:
         61:e9:13:8e:58:05:d6:54:c4:2d:98:84:38:94:a4:36:a1:63:
         33:a5:a4:e3:11:b8:74:da:31:51:11:ff:cd:14:92:4a:47:d8:
         98:33:c0:e3:29:92:cf:c9:4c:24:f2:31:3a:e8:95:ef:57:c6:
         60:c2:74:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHXQ5ZPqyiWJTt3mrtmNmAzDrQwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxQzNFRENDMDNFMjI3MEE4RUFBRjgyMkVDMTdCRUM3
NDFCMUFBMzAeFw0yNDAzMDUxNzQ1MTlaFw0yNTAzMDQxNzUwMTlaMDMxMTAvBgNV
BAMTKENBNDRGREM0RkEyQjA2OTI0QzNERUYzN0Q2OEQwNUQ0NDNDQjREMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++jJ7Sg6ZfJkWg8TP/PUHLGpq
c5DJ7P1Kr8tNOiWrYrAJU07aK9iKEzLVS6Syjf6tweK4Q7zXmxw6GTBbL5AHyJBZ
Ea1RXhMO0o4nvZvYZ0amc9EEP2SiVFJqYfuyrY0MfLTuk78XyFcECcyqUbz00hrY
HKPdbzPX6vhRnTBVqi+A1DEHde89LzJFhsZCLdqrldAD1BVQXm6MlpxE8bJq9kVH
Tx3pL5Uju2DHCJd8JKuzEFpUFeQ8DHmFo7vnfcgFKgteZhzfycFycGuobJnp8aKq
PpB35m5UjFCo4h3p+5kiesJbjRnRQo+ivTo02l82/EHDl5Dn+R0ghTthUazLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUykT9xPorBpJMPe831o0F1EPLTTMwHwYDVR0j
BBgwFoAUmRw+3MA+InCo6q+CLsF77HQbGqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjJGRkYzM0MzMUM3ODlCMzgxMDYwRDE4NzY0RUZDMUIz
OUY2NzdGQTg5NTAzQzg5OUEyNjA5MDNCRjUyQUU1LzAvOTkxQzNFRENDMDNFMjI3
MEE4RUFBRjgyMkVDMTdCRUM3NDFCMUFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFDM0VEQ0MwM0UyMjcwQThF
QUFGODIyRUMxN0JFQzc0MUIxQUEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYyRkZGMzNDMzFDNzg5QjM4MTA2MEQxODc2NEVGQzFCMzlGNjc3RkE4
OTUwM0M4OTlBMjYwOTAzQkY1MkFFNS8wLzMyMzEzNjJlMzIzNDM0MmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTMwMzYzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PTA
MA0GCSqGSIb3DQEBCwUAA4IBAQA8wANeQ2SWdsr0BM5tvBLfgk8nC38uXw8vI68F
4R+T/SG8zWUGHcFFlCXnnbf6a9chRaNDSB5fvJrAXCl9Op/95gbnld53p7GqfvOs
KK0pUVwqrXrsXx8jbHblhiec3jaKWc1T+H5qytZOttTm7bvDf/IYaelHiWATSf77
GJwWxBe42Lh4eg+yPpTiSq1+8gVBwuxEut9f4I1eV3oFsOdYt+rTRGi1Tpgf6PMW
bd96k/f7rLZjaaBOM84iGsOhPGyWhycbfmph6ROOWAXWVMQtmIQ4lKQ2oWMzpaTj
Ebh02jFREf/NFJJKR9iYM8DjKZLPyUwk8jE66JXvV8ZgwnSB
-----END CERTIFICATE-----
Generated at Mon Dec 9 13:59:06 2024 by rpki-client on console-fra.rpki-client.org