Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3134342e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3134342e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          HHBQZpjqVrYENoQPMBrvGyYLqOfTHHgJ9/J/Mv7zVMU=
Subject key identifier:   43:8C:F9:07:56:72:4F:97:21:D9:CC:57:CC:59:D4:78:71:A4:CE:11
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       6A851264B195D4067A01237EA72E28E3E7D2DFE9
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3134342e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:40 +0000
ROA not before:           Tue 05 Mar 2024 17:45:40 +0000
ROA not after:            Tue 04 Mar 2025 17:50:40 +0000
asID:                     18734
IP address blocks:        189.202.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:85:12:64:b1:95:d4:06:7a:01:23:7e:a7:2e:28:e3:e7:d2:df:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:40 2024 GMT
            Not After : Mar  4 17:50:40 2025 GMT
        Subject: CN=438CF90756724F9721D9CC57CC59D47871A4CE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:24:72:75:59:47:75:a5:c5:d5:7c:0f:6c:
                    a0:f2:9a:6e:6d:16:f0:c2:34:2a:07:7a:23:ac:4f:
                    8e:84:25:43:fb:44:af:a5:5c:5b:97:9d:40:dd:71:
                    70:9a:c5:83:89:d7:06:6e:8a:67:63:6d:7a:65:ee:
                    25:fe:de:c2:1d:b6:3e:86:04:1f:9f:07:f4:fa:4a:
                    ad:b2:c6:d6:92:57:6c:e9:08:41:38:83:b6:10:77:
                    94:ca:64:87:24:5a:be:3d:39:4d:8b:fa:8a:99:56:
                    bd:10:f5:74:c9:23:fb:aa:df:d8:1e:1a:33:99:d8:
                    84:2e:91:d4:05:5a:77:fa:52:61:f9:5c:6a:83:04:
                    61:c9:48:af:c6:42:ac:ef:fb:3f:76:5d:dd:ae:ea:
                    79:a8:13:f5:91:99:f0:fe:24:1c:b0:92:0a:42:0b:
                    6b:c6:31:8e:03:98:a6:12:63:31:14:77:e5:96:36:
                    b7:06:0a:38:20:5d:6e:0d:fc:27:f6:0e:cb:72:b7:
                    d0:3f:ba:51:5c:1a:3e:5b:1d:b2:89:40:ef:ae:1f:
                    68:3b:0b:15:ae:f6:0a:76:51:f6:47:da:a5:f9:c0:
                    1b:57:e8:53:7d:d4:38:b3:86:35:ce:6e:ff:b0:be:
                    cd:3e:1c:dc:18:b4:e3:76:06:87:76:84:82:32:75:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8C:F9:07:56:72:4F:97:21:D9:CC:57:CC:59:D4:78:71:A4:CE:11
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3134342e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:ef:68:48:3b:75:e3:66:fa:a3:82:a9:bf:d3:c3:dd:75:
         f8:05:8a:bc:3b:24:f3:41:ac:ad:9a:3c:c2:6b:f5:92:28:32:
         37:32:b9:36:99:7f:b8:74:76:ce:f7:11:04:8d:9e:f5:04:61:
         49:5e:fc:02:cb:64:82:75:f1:f3:ce:60:fa:50:6b:17:58:32:
         17:52:5a:b9:0e:3d:c5:57:2e:4d:a3:fc:13:a4:8d:fd:1c:71:
         c4:93:4d:a3:fc:05:9a:6a:1b:7b:fb:47:a2:22:be:54:c3:a2:
         d7:86:37:4b:7d:5f:56:1f:7f:a5:61:63:f5:83:7e:c8:ff:05:
         6e:ea:89:aa:e7:72:fb:1e:bc:23:5f:11:39:13:98:67:58:9c:
         6d:c7:44:f5:35:8e:05:42:3b:72:cf:34:d0:55:e7:ea:57:d6:
         ca:1f:da:26:e5:f4:27:ab:67:f9:5a:c1:9c:33:a0:ac:10:a3:
         34:54:ba:fa:a8:d0:7a:b7:40:ca:24:e5:95:ff:f1:88:50:ae:
         c5:32:17:1d:88:a0:16:2d:bb:58:5d:c0:87:3b:a6:37:33:da:
         35:86:a2:c8:e2:3a:75:3a:0d:9b:2a:cb:e0:6f:d4:a1:d9:9c:
         cd:c0:a7:a6:8f:9f:63:28:95:9f:6e:04:22:ae:d1:d8:34:b5:
         56:d7:60:16
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaoUSZLGV1AZ6ASN+py4o4+fS3+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNDAzMDUxNzQ1NDBaFw0yNTAzMDQxNzUwNDBaMDMxMTAvBgNV
BAMTKDQzOENGOTA3NTY3MjRGOTcyMUQ5Q0M1N0NDNTlENDc4NzFBNENFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiCRydVlHdaXF1XwPbKDymm5t
FvDCNCoHeiOsT46EJUP7RK+lXFuXnUDdcXCaxYOJ1wZuimdjbXpl7iX+3sIdtj6G
BB+fB/T6Sq2yxtaSV2zpCEE4g7YQd5TKZIckWr49OU2L+oqZVr0Q9XTJI/uq39ge
GjOZ2IQukdQFWnf6UmH5XGqDBGHJSK/GQqzv+z92Xd2u6nmoE/WRmfD+JBywkgpC
C2vGMY4DmKYSYzEUd+WWNrcGCjggXW4N/Cf2Dstyt9A/ulFcGj5bHbKJQO+uH2g7
CxWu9gp2UfZH2qX5wBtX6FN91DizhjXObv+wvs0+HNwYtON2Bod2hIIydcaXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQ4z5B1ZyT5ch2cxXzFnUeHGkzhEwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMxMzgzOTJlMzIzMDMyMmUzMTM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvcqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBOyO9oSDt142b6o4Kpv9PD3XX4BYq8OyTzQayt
mjzCa/WSKDI3Mrk2mX+4dHbO9xEEjZ71BGFJXvwCy2SCdfHzzmD6UGsXWDIXUlq5
Dj3FVy5No/wTpI39HHHEk02j/AWaaht7+0eiIr5Uw6LXhjdLfV9WH3+lYWP1g37I
/wVu6omq53L7HrwjXxE5E5hnWJxtx0T1NY4FQjtyzzTQVefqV9bKH9om5fQnq2f5
WsGcM6CsEKM0VLr6qNB6t0DKJOWV//GIUK7FMhcdiKAWLbtYXcCHO6Y3M9o1hqLI
4jp1Og2bKsvgb9Sh2ZzNwKemj59jKJWfbgQirtHYNLVW12AW
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org