Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa
File:                     3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa (raw, json)
Hash identifier:          uAiy811rg3ygNkdOF+qMjtD+1QCewk75ES+lRBu3N/0=
Subject key identifier:   55:BD:90:50:38:96:71:26:E3:BC:FE:61:38:C7:53:ED:CC:A9:75:F9
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       5D665A63CC1DCC86FBB21537442156E826A6E053
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     263703
IP address blocks:        143.255.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 May 2024 13:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:66:5a:63:cc:1d:cc:86:fb:b2:15:37:44:21:56:e8:26:a6:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=55BD905038967126E3BCFE6138C753EDCCA975F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:16:c7:f1:ce:90:f3:54:7b:e0:a5:ab:ad:
                    a7:a9:83:7e:a6:5f:1b:2e:11:5f:44:52:07:fe:6d:
                    42:7f:6d:22:bf:f7:e4:12:b3:1f:03:17:3a:8b:e7:
                    51:8f:5d:b1:ca:2e:46:c4:d3:88:02:5d:24:5c:1e:
                    53:52:53:ea:54:dd:11:59:88:1a:6e:91:59:fc:80:
                    05:0d:df:5d:30:24:d7:c9:2b:a5:b4:39:81:1a:d4:
                    3b:3b:10:b4:8d:98:a8:af:c5:03:cc:07:b3:2d:32:
                    56:db:ab:8d:40:fa:c3:5c:06:42:6a:25:56:78:7d:
                    39:e1:8a:28:0d:fd:32:bb:cf:51:84:33:d3:ef:1d:
                    c0:17:f8:64:64:e6:0f:61:91:dc:76:4d:66:dc:30:
                    a6:11:f6:da:a4:a4:c6:0a:c9:c1:73:10:2d:e1:be:
                    f3:be:df:73:af:d4:31:31:e8:6c:ee:c7:3c:e1:ba:
                    f3:98:ae:41:5d:d8:ff:06:d2:19:2a:bb:7c:f9:19:
                    eb:5e:ad:5f:33:03:7d:47:53:46:1e:00:9c:f2:7e:
                    98:45:df:27:0f:31:6a:50:02:2c:5d:25:08:45:a0:
                    6b:4e:d8:75:74:b5:69:59:a1:11:21:7c:01:02:44:
                    9c:ac:c0:7d:42:d1:a6:1d:51:d6:f7:e8:fc:5e:49:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BD:90:50:38:96:71:26:E3:BC:FE:61:38:C7:53:ED:CC:A9:75:F9
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3134332e3235352e38342e302f32322d3234203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:45:a2:e0:eb:d7:ea:b0:ef:b2:10:6c:5d:3d:7a:0e:f8:cb:
         5b:f4:63:8a:a1:e5:37:80:44:ae:08:b7:ab:25:4f:ba:f0:ba:
         3c:e1:d1:96:de:cf:00:3e:7b:31:8a:03:91:e6:2e:be:4f:77:
         fc:85:15:bf:3a:54:cb:71:ac:3a:a0:31:fa:37:d4:47:36:18:
         95:ce:dc:91:c0:95:22:c2:14:f6:79:f4:62:23:15:9c:76:64:
         db:07:1a:3c:d3:48:83:c6:5e:1e:51:ad:cd:67:5d:1c:24:ab:
         80:e7:bc:b3:d3:35:c4:a2:3f:89:e7:41:6d:fd:b0:39:27:53:
         52:b2:5e:cd:51:ef:fb:6a:dc:a0:55:7a:89:a6:60:9c:fe:43:
         e9:bf:7d:f5:c1:f1:d1:67:0f:68:59:79:e5:85:96:0a:01:42:
         4a:e7:f0:0f:91:96:6c:f0:43:73:bb:7d:0c:ef:e6:65:f4:40:
         a4:e7:7d:7c:6b:db:40:45:7a:06:c4:78:1e:5f:0f:fe:31:60:
         00:a7:db:d7:eb:c7:78:18:76:b0:80:7f:3a:32:dc:89:3d:79:
         55:95:1f:33:52:49:2c:2b:6a:32:84:c7:4e:79:71:1b:32:04:
         99:af:8e:02:98:4f:78:78:32:ba:e9:d2:a9:d6:1f:bb:23:b2:
         28:d0:5e:a8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXWZaY8wdzIb7shU3RCFW6Cam4FMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRGM0Q2QTkzRUQzOTIwMEI3QkUwRTdEQTI4NzdCRkVC
RDMwNDE4NDAeFw0yNDAzMDUxNzUxMDhaFw0yNTAzMDQxNzU2MDhaMDMxMTAvBgNV
BAMTKDU1QkQ5MDUwMzg5NjcxMjZFM0JDRkU2MTM4Qzc1M0VEQ0NBOTc1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PhbH8c6Q81R74KWrraepg36m
XxsuEV9EUgf+bUJ/bSK/9+QSsx8DFzqL51GPXbHKLkbE04gCXSRcHlNSU+pU3RFZ
iBpukVn8gAUN310wJNfJK6W0OYEa1Ds7ELSNmKivxQPMB7MtMlbbq41A+sNcBkJq
JVZ4fTnhiigN/TK7z1GEM9PvHcAX+GRk5g9hkdx2TWbcMKYR9tqkpMYKycFzEC3h
vvO+33Ov1DEx6GzuxzzhuvOYrkFd2P8G0hkqu3z5GeterV8zA31HU0YeAJzyfphF
3ycPMWpQAixdJQhFoGtO2HV0tWlZoREhfAECRJyswH1C0aYdUdb36PxeScktAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVb2QUDiWcSbjvP5hOMdT7cypdfkwHwYDVR0j
BBgwFoAUxPPWqT7TkgC3vg59ood7/r0wQYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjIxNDgxOEM1OUExMzAyOTQ5NUNFNzFCRjlFODM0Q0U0
NkIwM0UwNERCQkFFQjE0QzFDRDZDRDU2RTE5NjhFLzAvQzRGM0Q2QTkzRUQzOTIw
MEI3QkUwRTdEQTI4NzdCRkVCRDMwNDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEYzRDZBOTNFRDM5MjAwQjdC
RTBFN0RBMjg3N0JGRUJEMzA0MTg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIyMTQ4MThDNTlBMTMwMjk0OTVDRTcxQkY5RTgzNENFNDZCMDNFMDRE
QkJBRUIxNEMxQ0Q2Q0Q1NkUxOTY4RS8wLzMxMzQzMzJlMzIzNTM1MmUzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj/9U
MA0GCSqGSIb3DQEBCwUAA4IBAQBWRaLg69fqsO+yEGxdPXoO+Mtb9GOKoeU3gESu
CLerJU+68Lo84dGW3s8APnsxigOR5i6+T3f8hRW/OlTLcaw6oDH6N9RHNhiVztyR
wJUiwhT2efRiIxWcdmTbBxo800iDxl4eUa3NZ10cJKuA57yz0zXEoj+J50Ft/bA5
J1NSsl7NUe/7atygVXqJpmCc/kPpv331wfHRZw9oWXnlhZYKAUJK5/APkZZs8ENz
u30M7+Zl9ECk5318a9tARXoGxHgeXw/+MWAAp9vX68d4GHawgH86MtyJPXlVlR8z
UkksK2oyhMdOeXEbMgSZr44CmE94eDK66dKp1h+7I7Io0F6o
-----END CERTIFICATE-----
Generated at Wed May 22 22:41:04 2024 by rpki-client on console-fra.rpki-client.org