Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/3139322e3230372e3234342e302f32342d3234203d3e203237393437.roa
File:                     3139322e3230372e3234342e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          WZR7uRPZnWQGOsLJDamI73kl+1PsmYQEPw+z31N4B6g=
Subject key identifier:   BE:43:D0:58:FB:6D:7A:C2:90:31:09:5D:DF:0D:31:98:A8:08:5F:EE
Certificate issuer:       /CN=92ADD87F06B04FDA0992196502F615DB0D8D2ADB
Certificate serial:       219E412F295A5FFCA5895BF944A1063C92B57B2B
Authority key identifier: 92:AD:D8:7F:06:B0:4F:DA:09:92:19:65:02:F6:15:DB:0D:8D:2A:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/3139322e3230372e3234342e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:21:40 +0000
ROA not before:           Tue 05 Mar 2024 18:16:40 +0000
ROA not after:            Tue 04 Mar 2025 18:21:40 +0000
asID:                     27947
IP address blocks:        192.207.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:41:2f:29:5a:5f:fc:a5:89:5b:f9:44:a1:06:3c:92:b5:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ADD87F06B04FDA0992196502F615DB0D8D2ADB
        Validity
            Not Before: Mar  5 18:16:40 2024 GMT
            Not After : Mar  4 18:21:40 2025 GMT
        Subject: CN=BE43D058FB6D7AC29031095DDF0D3198A8085FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:c5:69:0a:32:01:78:7d:a1:ec:04:c5:ba:
                    51:fa:62:f2:7d:8c:13:1d:82:9d:00:c3:34:5c:d9:
                    8a:0a:f0:dc:d3:cf:89:58:74:53:7e:d0:cf:ce:7f:
                    1d:ec:c7:39:7c:d8:bc:c2:b5:3c:0e:b1:3a:ac:bd:
                    a6:87:3f:91:49:7c:d1:6e:d1:64:a6:02:84:19:ff:
                    36:56:6f:23:d1:96:07:af:51:b8:83:2c:6f:71:da:
                    56:8e:4e:94:b1:0b:e8:80:a4:2a:74:20:7b:5a:8f:
                    b2:e8:a2:88:07:f2:12:d2:3c:c5:a9:93:e3:bb:7b:
                    7f:ec:5d:af:31:9b:34:b6:9f:06:2c:c5:2d:19:35:
                    43:96:e5:69:ee:fc:6c:da:b9:88:c9:db:89:6d:6d:
                    c7:20:f9:67:15:d4:38:d0:4e:66:2a:86:83:5d:69:
                    ba:cd:7c:56:60:2d:62:c2:53:51:33:ad:6b:96:6e:
                    39:90:bb:51:05:fd:54:0b:8c:82:fd:50:be:f6:c5:
                    75:c7:80:85:2e:0c:0d:ab:d2:15:28:74:3c:ad:d5:
                    58:89:fe:40:65:e8:1c:7a:5f:64:d4:90:b7:8a:0e:
                    f4:2c:96:60:62:8d:1c:91:f5:67:cd:78:f6:ac:a3:
                    87:a6:2c:72:48:ef:56:28:5d:a9:02:d5:24:2d:4c:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:43:D0:58:FB:6D:7A:C2:90:31:09:5D:DF:0D:31:98:A8:08:5F:EE
            X509v3 Authority Key Identifier:
                keyid:92:AD:D8:7F:06:B0:4F:DA:09:92:19:65:02:F6:15:DB:0D:8D:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92ADD87F06B04FDA0992196502F615DB0D8D2ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55FEBACB8D2D6151A1FAAC0393D10C92B6709F14033CE5E950E538922B3F816E/0/3139322e3230372e3234342e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:87:d9:ef:ae:ba:35:01:42:0e:48:ca:eb:5f:94:3c:0e:
         1d:cf:71:ef:3e:28:20:e0:44:a1:65:34:13:95:27:8e:02:77:
         01:ef:f1:e8:12:a8:4f:a7:7b:c2:db:30:c2:e5:54:bb:17:a3:
         3d:71:fc:40:9b:c4:6b:59:40:9d:1e:b9:0e:13:f3:2a:89:b0:
         1d:04:e1:6f:90:ba:fc:7c:80:0b:68:06:88:59:7d:d4:9e:32:
         0e:0c:c9:63:bb:80:a3:90:b4:d6:77:b3:d0:00:cc:da:7e:49:
         2d:19:35:43:1c:6c:81:fd:e4:42:37:43:20:80:ee:18:2c:1c:
         81:11:22:35:91:16:f9:80:09:24:11:87:97:4c:17:1b:3d:1c:
         5e:d9:4d:fb:f0:24:7e:cc:38:db:71:f6:e8:18:b2:de:29:9a:
         11:da:26:8b:69:14:73:46:d1:f1:6c:9c:ad:e0:b1:21:21:bc:
         86:bb:55:d4:50:21:76:b5:ed:3a:23:c3:23:61:b2:04:7e:e7:
         c0:d4:4e:74:78:17:67:35:14:c9:28:6b:8e:c3:a7:be:43:6e:
         6b:51:d6:72:9d:c3:c3:58:9d:51:97:d4:a2:0b:3c:d1:e7:c0:
         27:34:42:99:58:6d:dd:68:dd:f2:9e:62:64:05:a2:be:e5:63:
         85:fe:38:c3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIZ5BLylaX/yliVv5RKEGPJK1eyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJBREQ4N0YwNkIwNEZEQTA5OTIxOTY1MDJGNjE1REIw
RDhEMkFEQjAeFw0yNDAzMDUxODE2NDBaFw0yNTAzMDQxODIxNDBaMDMxMTAvBgNV
BAMTKEJFNDNEMDU4RkI2RDdBQzI5MDMxMDk1RERGMEQzMTk4QTgwODVGRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQmMVpCjIBeH2h7ATFulH6YvJ9
jBMdgp0AwzRc2YoK8NzTz4lYdFN+0M/Ofx3sxzl82LzCtTwOsTqsvaaHP5FJfNFu
0WSmAoQZ/zZWbyPRlgevUbiDLG9x2laOTpSxC+iApCp0IHtaj7LooogH8hLSPMWp
k+O7e3/sXa8xmzS2nwYsxS0ZNUOW5Wnu/GzauYjJ24ltbccg+WcV1DjQTmYqhoNd
abrNfFZgLWLCU1EzrWuWbjmQu1EF/VQLjIL9UL72xXXHgIUuDA2r0hUodDyt1ViJ
/kBl6Bx6X2TUkLeKDvQslmBijRyR9WfNePaso4emLHJI71YoXakC1SQtTOfJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvkPQWPttesKQMQld3w0xmKgIX+4wHwYDVR0j
BBgwFoAUkq3YfwawT9oJkhllAvYV2w2NKtswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NUZFQkFDQjhEMkQ2MTUxQTFGQUFDMDM5M0QxMEM5MkI2
NzA5RjE0MDMzQ0U1RTk1MEU1Mzg5MjJCM0Y4MTZFLzAvOTJBREQ4N0YwNkIwNEZE
QTA5OTIxOTY1MDJGNjE1REIwRDhEMkFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkFERDg3RjA2QjA0RkRBMDk5
MjE5NjUwMkY2MTVEQjBEOEQyQURCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTVGRUJBQ0I4RDJENjE1MUExRkFBQzAzOTNEMTBDOTJCNjcwOUYxNDAz
M0NFNUU5NTBFNTM4OTIyQjNGODE2RS8wLzMxMzkzMjJlMzIzMDM3MmUzMjM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/0
MA0GCSqGSIb3DQEBCwUAA4IBAQB9KofZ7666NQFCDkjK61+UPA4dz3HvPigg4ESh
ZTQTlSeOAncB7/HoEqhPp3vC2zDC5VS7F6M9cfxAm8RrWUCdHrkOE/MqibAdBOFv
kLr8fIALaAaIWX3UnjIODMlju4CjkLTWd7PQAMzafkktGTVDHGyB/eRCN0MggO4Y
LByBESI1kRb5gAkkEYeXTBcbPRxe2U378CR+zDjbcfboGLLeKZoR2iaLaRRzRtHx
bJyt4LEhIbyGu1XUUCF2te06I8MjYbIEfufA1E50eBdnNRTJKGuOw6e+Q25rUdZy
ncPDWJ1Rl9SiCzzR58AnNEKZWG3daN3ynmJkBaK+5WOF/jjD
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:12 2024 by rpki-client on console-fra.rpki-client.org