Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa
File:                     3230312e3134302e39362e302f31392d3234203d3e203138373334.roa (raw, json)
Hash identifier:          HcSf5hSCJVwnOcbPqsGJY97o5f2rdR76NX/PqrQ0dIo=
Subject key identifier:   D6:5C:16:BC:AF:94:71:AF:06:41:6C:4B:BF:8F:C9:09:56:B1:90:BA
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       1FD6A6098282729FEABE750C38B6D46B1C83BD05
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:37 +0000
ROA not before:           Tue 05 Mar 2024 17:45:37 +0000
ROA not after:            Tue 04 Mar 2025 17:50:37 +0000
asID:                     18734
IP address blocks:        201.140.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:a6:09:82:82:72:9f:ea:be:75:0c:38:b6:d4:6b:1c:83:bd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:37 2024 GMT
            Not After : Mar  4 17:50:37 2025 GMT
        Subject: CN=D65C16BCAF9471AF06416C4BBF8FC90956B190BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:38:aa:95:1c:5b:4e:bf:5c:e7:b2:02:0f:
                    16:10:11:7e:08:28:d6:93:e0:42:ff:b0:80:4f:82:
                    5d:0c:d4:3f:d2:eb:26:45:bf:70:c0:de:1b:6f:1b:
                    ca:ea:62:21:1f:4b:d9:08:a0:ca:0f:8b:4d:da:56:
                    38:dd:15:c2:4e:18:f6:c3:9c:68:e5:a9:73:9e:ea:
                    28:df:9c:57:c8:81:06:4c:51:d7:68:fc:49:a6:46:
                    61:72:6d:fc:b4:ba:57:60:cb:8b:07:12:a6:2a:15:
                    4a:01:18:7b:63:c2:0a:0b:fc:12:07:a0:9f:9d:44:
                    8d:53:5d:5e:c6:6b:e6:38:6d:76:99:98:ee:22:c3:
                    8a:a1:b4:7f:ff:4d:7c:57:70:87:7f:3a:8d:be:c2:
                    81:a6:fc:1e:60:ca:4d:69:da:d8:05:01:36:4f:20:
                    05:05:4b:8f:17:46:c9:17:90:9f:f3:f0:d3:1d:1c:
                    70:10:d4:2d:43:f4:83:36:06:fc:ac:15:18:5f:2f:
                    9c:db:d4:5b:e8:60:22:7b:f2:0a:54:51:95:1c:1f:
                    66:c1:75:34:3f:08:64:7a:e5:3b:01:94:17:59:fe:
                    28:d6:19:c6:ba:0f:9a:60:72:cd:54:c6:ef:cc:28:
                    d0:5a:7c:16:d0:4c:f0:5e:76:86:7e:cb:cd:01:d2:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5C:16:BC:AF:94:71:AF:06:41:6C:4B:BF:8F:C9:09:56:B1:90:BA
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:dc:a6:6d:07:19:9c:88:09:8d:af:f6:20:d4:27:75:25:
         69:d6:44:51:37:3c:97:f5:95:ca:e3:43:95:d5:59:c3:55:06:
         53:a0:f1:b9:d6:f7:aa:25:6a:38:42:aa:de:b3:84:b1:14:fe:
         68:44:6a:71:59:9f:eb:33:59:9f:f2:91:4d:c2:9c:98:61:e3:
         1e:3f:dc:7c:1a:c5:56:5a:0a:21:4e:b3:5f:4d:25:42:46:70:
         a8:41:75:fe:4d:13:f5:d2:da:c2:b0:c4:96:21:48:f3:1e:9d:
         70:42:2d:98:e8:a3:c7:ca:e6:80:66:9d:2d:a0:5d:1b:ff:c6:
         b5:32:24:ef:49:66:36:5c:90:d3:26:43:e0:ae:77:ef:86:54:
         4c:a4:98:5e:62:2a:6d:e2:49:71:24:5e:99:31:4c:00:c9:92:
         2d:f2:06:c1:44:1b:1b:89:db:9b:43:51:12:22:c3:b5:68:66:
         85:de:f3:b7:7f:13:3e:67:b7:3d:4f:7d:6d:33:20:8a:68:8e:
         42:ac:a1:fa:02:99:e3:13:b3:f2:ad:24:4c:63:be:8b:88:8d:
         0e:6c:3c:3d:84:69:c4:5a:61:25:83:0b:c4:a1:15:83:32:f8:
         ab:76:37:bb:5a:98:95:56:76:a2:c1:e9:ae:3d:6f:10:ed:be:
         35:cd:e1:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUH9amCYKCcp/qvnUMOLbUaxyDvQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNDAzMDUxNzQ1MzdaFw0yNTAzMDQxNzUwMzdaMDMxMTAvBgNV
BAMTKEQ2NUMxNkJDQUY5NDcxQUYwNjQxNkM0QkJGOEZDOTA5NTZCMTkwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUjiqlRxbTr9c57ICDxYQEX4I
KNaT4EL/sIBPgl0M1D/S6yZFv3DA3htvG8rqYiEfS9kIoMoPi03aVjjdFcJOGPbD
nGjlqXOe6ijfnFfIgQZMUddo/EmmRmFybfy0uldgy4sHEqYqFUoBGHtjwgoL/BIH
oJ+dRI1TXV7Ga+Y4bXaZmO4iw4qhtH//TXxXcId/Oo2+woGm/B5gyk1p2tgFATZP
IAUFS48XRskXkJ/z8NMdHHAQ1C1D9IM2BvysFRhfL5zb1FvoYCJ78gpUUZUcH2bB
dTQ/CGR65TsBlBdZ/ijWGca6D5pgcs1Uxu/MKNBafBbQTPBedoZ+y80B0kx1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1lwWvK+Uca8GQWxLv4/JCVaxkLowHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMTJlMzEzNDMwMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzODM3MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcmMYDAN
BgkqhkiG9w0BAQsFAAOCAQEAVLTcpm0HGZyICY2v9iDUJ3UladZEUTc8l/WVyuND
ldVZw1UGU6Dxudb3qiVqOEKq3rOEsRT+aERqcVmf6zNZn/KRTcKcmGHjHj/cfBrF
VloKIU6zX00lQkZwqEF1/k0T9dLawrDEliFI8x6dcEItmOijx8rmgGadLaBdG//G
tTIk70lmNlyQ0yZD4K5374ZUTKSYXmIqbeJJcSRemTFMAMmSLfIGwUQbG4nbm0NR
EiLDtWhmhd7zt38TPme3PU99bTMgimiOQqyh+gKZ4xOz8q0kTGO+i4iNDmw8PYRp
xFphJYMLxKEVgzL4q3Y3u1qYlVZ2osHprj1vEO2+Nc3hGg==
-----END CERTIFICATE-----
Generated at Tue May 7 14:07:16 2024 by rpki-client on console-ams.rpki-client.org