Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31362e302f32302d3234203d3e203232313232.roa
File:                     3134382e3230392e31362e302f32302d3234203d3e203232313232.roa (raw, json)
Hash identifier:          wx/KVZJudI/dPx0nOtdTYdLhW3HURHRC9keXFnlfn2o=
Subject key identifier:   99:F6:62:AA:27:6D:35:DB:78:AF:AC:73:49:D6:7D:F8:24:6A:07:FA
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       19B3571361028CD9BA7427512E2F581252B9321F
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31362e302f32302d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     22122
IP address blocks:        148.209.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b3:57:13:61:02:8c:d9:ba:74:27:51:2e:2f:58:12:52:b9:32:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=99F662AA276D35DB78AFAC7349D67DF8246A07FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:c0:1b:3b:51:25:45:d9:83:45:05:5a:22:
                    4f:8b:99:92:a2:27:b9:14:d0:b2:34:35:79:28:db:
                    56:ca:26:98:51:33:42:df:80:cd:92:1e:73:fd:cb:
                    d2:7f:6b:f6:93:d8:33:6b:d1:10:b1:6e:be:74:58:
                    33:dc:30:c0:dc:08:4b:9c:11:1f:a1:c3:c8:35:7e:
                    2e:41:2c:74:18:b7:e2:a9:8f:df:0d:66:3c:7c:41:
                    77:55:7d:76:71:7d:11:fe:74:8b:4c:14:0f:17:17:
                    03:80:ef:63:b6:9a:0f:9c:dc:e6:f1:95:5c:19:f3:
                    11:53:f5:55:df:6a:df:22:db:18:fa:c4:a9:a3:eb:
                    15:f9:52:91:10:0f:be:3f:9a:e9:ca:39:43:1d:54:
                    88:4b:24:d1:70:20:bd:bf:ea:d7:da:5e:e7:4c:84:
                    4a:eb:1a:a7:03:25:a3:75:06:de:1b:4b:8c:4f:ba:
                    95:a6:a3:3b:90:0b:b3:24:9c:63:63:0b:a5:69:7e:
                    13:6a:93:e4:59:4e:6c:c1:b3:cc:bd:14:fd:7a:0e:
                    be:75:f8:90:70:f6:a0:92:ab:2a:95:2c:2f:c9:50:
                    2b:0f:f0:3e:5a:85:6d:07:4e:81:31:16:c8:0d:57:
                    2d:a2:db:83:25:39:1a:50:90:07:9c:f5:a3:bd:53:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F6:62:AA:27:6D:35:DB:78:AF:AC:73:49:D6:7D:F8:24:6A:07:FA
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31362e302f32302d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:a5:43:6f:ab:79:75:41:f3:ae:b6:b2:4e:44:38:93:b4:
         8a:f6:28:ce:34:3b:c7:68:12:52:96:73:00:9d:6a:f5:a7:a1:
         a8:0c:07:5d:02:25:71:9f:e8:85:c7:fd:d4:48:1d:c0:db:e8:
         88:0f:4b:25:45:9b:0d:50:9d:5a:43:93:13:84:17:2d:c0:e6:
         a4:ab:0f:40:8e:fd:82:a2:ae:fc:fe:e4:81:67:e5:56:2b:59:
         38:71:2a:fb:3b:d5:69:05:af:21:cd:88:70:07:d3:35:b9:43:
         76:d8:95:c5:de:c1:3a:3c:03:6d:75:d8:50:3a:da:77:d7:40:
         85:d4:97:ce:99:26:4e:e4:8c:17:d8:d4:b6:94:41:17:26:04:
         53:d2:cb:37:b0:c8:aa:0d:ee:8a:7a:ae:81:b0:26:ac:5d:96:
         d8:53:9a:a3:0e:84:25:d0:0a:be:84:74:3f:02:2c:8e:b8:92:
         ab:47:a0:3c:a0:a1:79:5f:9f:33:c2:e3:b5:ac:ae:55:d6:af:
         b2:c0:d7:44:b3:8b:c8:82:39:ab:69:3c:9b:77:ad:bf:b3:9d:
         95:96:b4:24:87:7c:71:6b:28:c8:87:ed:50:18:79:3d:96:d7:
         fb:0d:35:fb:1f:a9:3c:d2:0b:17:4d:37:7f:73:99:f2:58:3e:
         66:b8:bd:b7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGbNXE2ECjNm6dCdRLi9YElK5Mh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNDAzMDUxNzQxNDJaFw0yNTAzMDQxNzQ2NDJaMDMxMTAvBgNV
BAMTKDk5RjY2MkFBMjc2RDM1REI3OEFGQUM3MzQ5RDY3REY4MjQ2QTA3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+McAbO1ElRdmDRQVaIk+LmZKi
J7kU0LI0NXko21bKJphRM0LfgM2SHnP9y9J/a/aT2DNr0RCxbr50WDPcMMDcCEuc
ER+hw8g1fi5BLHQYt+Kpj98NZjx8QXdVfXZxfRH+dItMFA8XFwOA72O2mg+c3Obx
lVwZ8xFT9VXfat8i2xj6xKmj6xX5UpEQD74/munKOUMdVIhLJNFwIL2/6tfaXudM
hErrGqcDJaN1Bt4bS4xPupWmozuQC7MknGNjC6VpfhNqk+RZTmzBs8y9FP16Dr51
+JBw9qCSqyqVLC/JUCsP8D5ahW0HToExFsgNVy2i24MlORpQkAec9aO9U2SNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmfZiqidtNdt4r6xzSdZ9+CRqB/owHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMjMxMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJTREDAN
BgkqhkiG9w0BAQsFAAOCAQEAQeGlQ2+reXVB8662sk5EOJO0ivYozjQ7x2gSUpZz
AJ1q9aehqAwHXQIlcZ/ohcf91EgdwNvoiA9LJUWbDVCdWkOTE4QXLcDmpKsPQI79
gqKu/P7kgWflVitZOHEq+zvVaQWvIc2IcAfTNblDdtiVxd7BOjwDbXXYUDrad9dA
hdSXzpkmTuSMF9jUtpRBFyYEU9LLN7DIqg3uinqugbAmrF2W2FOaow6EJdAKvoR0
PwIsjriSq0egPKCheV+fM8LjtayuVdavssDXRLOLyII5q2k8m3etv7OdlZa0JId8
cWsoyIftUBh5PZbX+w01+x+pPNILF003f3OZ8lg+Zri9tw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org