Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa
File:                     3139312e39382e302e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier:          qaS3EunYbh6YYsG11vGAZoRmQ82KCf6nfPFvNOJp1FQ=
Subject key identifier:   CB:10:CA:75:92:89:D8:52:A5:DB:1F:C4:14:84:8C:0D:48:19:DF:3E
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       57A1218A31810A6B0696FDCE2A7C93C6F46A668C
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:51 +0000
ROA not before:           Tue 05 Mar 2024 18:01:51 +0000
ROA not after:            Tue 04 Mar 2025 18:06:51 +0000
asID:                     13489
IP address blocks:        191.98.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:21:8a:31:81:0a:6b:06:96:fd:ce:2a:7c:93:c6:f4:6a:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:51 2024 GMT
            Not After : Mar  4 18:06:51 2025 GMT
        Subject: CN=CB10CA759289D852A5DB1FC414848C0D4819DF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:1c:70:27:2e:e0:b7:c9:2f:85:2f:45:99:
                    a9:0d:89:e9:e9:d5:4a:b3:6c:d4:7c:9a:4d:c0:f9:
                    9a:2f:1f:37:02:42:bb:21:93:6c:c2:c4:b9:fd:71:
                    02:62:b0:0a:d6:d0:14:96:9d:01:ee:b2:8e:3f:60:
                    84:08:21:fd:be:0a:82:de:0d:fc:e0:71:a5:38:69:
                    d7:7b:0f:87:7a:66:0a:1d:11:c4:7b:21:1c:fc:95:
                    61:7d:87:c9:1a:7d:5a:d5:d1:35:d4:ce:c3:72:8f:
                    46:9c:47:93:6f:54:f8:89:aa:e1:3d:57:34:89:e1:
                    45:9d:ec:b5:35:c4:d5:5d:77:91:7c:3f:7a:c4:1e:
                    6b:cc:2a:72:14:df:2b:9c:d4:39:c2:4e:4c:0f:f8:
                    23:db:5c:71:4a:83:31:88:7d:08:bf:5f:c0:8f:06:
                    ab:e9:d0:8b:0e:45:53:2d:2b:b7:4b:dd:0f:f3:d4:
                    20:68:b1:f8:62:04:d3:62:73:1c:26:e8:cc:fa:e0:
                    40:33:02:c0:ab:c1:11:75:66:19:18:ae:d3:f1:e6:
                    96:e4:e8:dd:3b:72:9c:a7:64:ef:3e:de:b6:c5:74:
                    e7:53:8d:db:78:10:20:76:8a:3d:08:ab:39:9d:9e:
                    5c:2a:be:f1:56:d8:ff:83:9d:65:40:26:ab:9d:a0:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:CA:75:92:89:D8:52:A5:DB:1F:C4:14:84:8C:0D:48:19:DF:3E
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:e1:05:3d:9e:6f:69:84:09:ce:57:71:b8:95:60:ec:38:
         e0:2a:2b:66:bd:da:f1:ff:08:26:6a:95:ca:48:c7:4d:63:7c:
         37:6e:38:d0:a9:6f:ef:de:de:11:83:af:55:08:e7:c4:15:4b:
         d5:94:58:8b:4d:14:68:99:81:42:0e:c0:f8:4c:1c:23:af:f6:
         23:ed:c4:f9:ea:6a:74:d6:04:72:73:cd:1c:be:0f:18:77:bf:
         fe:d2:61:9f:f9:c4:8a:20:f4:6c:16:04:65:27:dd:90:b8:94:
         f6:1a:ad:70:b2:bc:14:4b:99:9b:9f:b5:3e:2e:23:e0:bb:41:
         e4:d5:a9:ff:cc:1c:a1:84:89:be:74:e0:01:ac:86:90:f3:04:
         23:a3:e7:8f:9d:59:a1:0f:c4:e4:7e:f0:a8:87:10:50:47:63:
         67:fd:2c:a8:63:47:ac:1c:d6:54:db:41:31:6b:d6:fc:4c:e1:
         61:11:43:31:c9:aa:5b:5f:de:f2:c5:8c:59:63:5b:36:7a:e6:
         80:56:dd:48:c6:ba:b8:be:49:2e:18:79:50:aa:d4:65:95:8e:
         b5:8c:8a:c4:42:9d:92:2e:99:ea:7e:86:33:cf:fd:69:5e:04:
         9a:41:2a:63:f7:d1:93:77:3f:13:5c:6a:3a:c5:43:24:21:7e:
         82:45:52:4d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUV6EhijGBCmsGlv3OKnyTxvRqZowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDAzMDUxODAxNTFaFw0yNTAzMDQxODA2NTFaMDMxMTAvBgNV
BAMTKENCMTBDQTc1OTI4OUQ4NTJBNURCMUZDNDE0ODQ4QzBENDgxOURGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06BxwJy7gt8kvhS9FmakNienp
1UqzbNR8mk3A+ZovHzcCQrshk2zCxLn9cQJisArW0BSWnQHuso4/YIQIIf2+CoLe
DfzgcaU4add7D4d6ZgodEcR7IRz8lWF9h8kafVrV0TXUzsNyj0acR5NvVPiJquE9
VzSJ4UWd7LU1xNVdd5F8P3rEHmvMKnIU3yuc1DnCTkwP+CPbXHFKgzGIfQi/X8CP
Bqvp0IsORVMtK7dL3Q/z1CBosfhiBNNicxwm6Mz64EAzAsCrwRF1ZhkYrtPx5pbk
6N07cpynZO8+3rbFdOdTjdt4ECB2ij0IqzmdnlwqvvFW2P+DnWVAJqudoE5jAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUyxDKdZKJ2FKl2x/EFISMDUgZ3z4wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMTJlMzkzODJlMzAyZTMwMmYz
MTM3MmQzMTM3MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHv2IAMA0GCSqG
SIb3DQEBCwUAA4IBAQB14eEFPZ5vaYQJzldxuJVg7DjgKitmvdrx/wgmapXKSMdN
Y3w3bjjQqW/v3t4Rg69VCOfEFUvVlFiLTRRomYFCDsD4TBwjr/Yj7cT56mp01gRy
c80cvg8Yd7/+0mGf+cSKIPRsFgRlJ92QuJT2Gq1wsrwUS5mbn7U+LiPgu0Hk1an/
zByhhIm+dOABrIaQ8wQjo+ePnVmhD8TkfvCohxBQR2Nn/SyoY0esHNZU20Exa9b8
TOFhEUMxyapbX97yxYxZY1s2euaAVt1Ixrq4vkkuGHlQqtRllY61jIrEQp2SLpnq
foYzz/1pXgSaQSpj99GTdz8TXGo6xUMkIX6CRVJN
-----END CERTIFICATE-----
Generated at Fri May 10 19:16:13 2024 by rpki-client on console-ams.rpki-client.org