Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
File:                     3136382e3132312e38342e302f32322d3234203d3e203532333938.roa (raw, json)
Hash identifier:          6Sklm1CZ6uPj4yoKglujwgXUeG3kuuQJBMJjedBWOSk=
Subject key identifier:   98:BF:25:F6:9F:41:80:7A:0E:90:A9:B8:49:EC:A0:43:38:AD:2B:65
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       2BBB741197E875C57F3A424FD20FCC3C50233AE1
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa
Signing time:             Tue 05 Mar 2024 17:58:20 +0000
ROA not before:           Tue 05 Mar 2024 17:53:20 +0000
ROA not after:            Tue 04 Mar 2025 17:58:20 +0000
asID:                     52398
IP address blocks:        168.121.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
                          rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:74:11:97:e8:75:c5:7f:3a:42:4f:d2:0f:cc:3c:50:23:3a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Mar  5 17:53:20 2024 GMT
            Not After : Mar  4 17:58:20 2025 GMT
        Subject: CN=98BF25F69F41807A0E90A9B849ECA04338AD2B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:6e:8f:dd:46:c1:9d:82:4c:66:be:6e:85:
                    d5:4e:44:93:04:21:24:97:9f:e2:85:33:d6:76:fd:
                    3e:52:7c:39:11:1d:bf:2c:82:15:85:10:5a:8e:72:
                    c1:a5:62:c2:36:f7:42:56:31:f7:67:6f:b6:4c:fd:
                    52:9f:52:e9:aa:db:94:f4:23:8e:3f:27:a2:9e:84:
                    1a:eb:43:59:77:45:2d:b1:a6:75:0e:a0:87:49:5c:
                    90:9c:38:3e:1b:c0:8b:d4:b1:bd:5f:26:f4:a6:9d:
                    e6:06:d0:01:01:b1:5a:0b:2a:5a:60:59:81:5a:07:
                    53:e6:80:9c:40:a0:12:9d:fa:34:fc:e2:d0:73:98:
                    e8:a1:af:a7:4c:30:5c:dd:79:58:3b:a1:e9:18:20:
                    51:16:f4:03:e0:a6:a3:e5:74:57:9a:66:b5:c8:f2:
                    82:bf:e9:ca:58:9a:17:50:b2:fd:91:9e:57:58:06:
                    34:df:31:83:0a:c1:d9:e2:13:80:2c:57:09:c8:d5:
                    7f:d6:b9:b2:9a:56:6b:91:e8:27:56:46:3d:cf:af:
                    65:ca:45:d9:f9:62:08:ee:b9:7c:ae:43:d7:49:a3:
                    18:5b:de:e0:2a:da:b8:97:c6:1c:86:43:17:07:a7:
                    79:8a:93:29:ba:c5:02:a0:3a:11:d4:e9:39:ef:a9:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:25:F6:9F:41:80:7A:0E:90:A9:B8:49:EC:A0:43:38:AD:2B:65
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3136382e3132312e38342e302f32322d3234203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:e0:ca:73:2c:2d:a8:53:e1:d5:58:9b:fa:e0:1b:fa:0d:
         63:1a:cc:ca:ee:67:d2:57:17:f3:2e:99:92:ff:8f:a7:67:7b:
         4e:4b:53:12:a2:09:22:59:2a:8b:c9:d8:56:c4:e4:47:e2:e2:
         27:0f:74:a3:6b:67:da:8e:8e:23:d4:1e:ae:d4:7d:be:3e:56:
         a2:b1:86:df:bf:f0:f1:8a:18:87:18:de:e6:be:dd:d1:42:17:
         f6:5f:13:5e:03:85:20:ab:5a:c4:fe:56:34:1a:1d:76:4d:57:
         07:ce:53:07:2c:90:20:f9:e3:b7:16:d1:4c:2d:09:e0:c9:80:
         79:1f:d3:b3:45:13:c0:25:d7:38:31:c3:81:58:5a:d2:0a:c6:
         a0:7d:bf:c6:7d:2e:7f:9a:a8:b1:bd:62:a5:03:d8:dd:7b:5a:
         fc:ab:33:ec:0c:9f:3e:af:63:47:ef:ff:3f:5d:c8:38:b3:cc:
         61:20:22:71:98:27:e4:bb:d5:99:6f:ab:c3:cb:5b:a0:b8:ff:
         bb:28:ef:72:03:4c:93:8b:14:76:0b:7b:c0:72:86:f4:64:d3:
         9c:a5:b2:cd:9e:56:52:1d:ff:ce:ce:0a:9f:18:17:2d:00:7f:
         f2:2b:18:2c:4a:3f:a5:8c:90:bf:1f:2a:27:7b:e5:3d:a0:05:
         0d:bd:48:5a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUK7t0EZfodcV/OkJP0g/MPFAjOuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RDYyNjQ1ODcxRDNCMjRDMzNBRjI0RThGMUMzMDc5
NEE1OTQ3NjAeFw0yNDAzMDUxNzUzMjBaFw0yNTAzMDQxNzU4MjBaMDMxMTAvBgNV
BAMTKDk4QkYyNUY2OUY0MTgwN0EwRTkwQTlCODQ5RUNBMDQzMzhBRDJCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkG6P3UbBnYJMZr5uhdVORJME
ISSXn+KFM9Z2/T5SfDkRHb8sghWFEFqOcsGlYsI290JWMfdnb7ZM/VKfUumq25T0
I44/J6KehBrrQ1l3RS2xpnUOoIdJXJCcOD4bwIvUsb1fJvSmneYG0AEBsVoLKlpg
WYFaB1PmgJxAoBKd+jT84tBzmOihr6dMMFzdeVg7oekYIFEW9APgpqPldFeaZrXI
8oK/6cpYmhdQsv2RnldYBjTfMYMKwdniE4AsVwnI1X/WubKaVmuR6CdWRj3Pr2XK
Rdn5YgjuuXyuQ9dJoxhb3uAq2riXxhyGQxcHp3mKkym6xQKgOhHU6TnvqUb7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmL8l9p9BgHoOkKm4SeygQzitK2UwHwYDVR0j
BBgwFoAUMZ1iZFhx07JMM68k6PHDB5SllHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzRCODRFRDM2RDM5N0QxQ0NCRTE0RjA4Mzk1MzkzMEM4
QzIwOTc0RjJGRTg2M0FBREVERDhGNTEzNDY5NEMxLzAvMzE5RDYyNjQ1ODcxRDNC
MjRDMzNBRjI0RThGMUMzMDc5NEE1OTQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTlENjI2NDU4NzFEM0IyNEMz
M0FGMjRFOEYxQzMwNzk0QTU5NDc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM0Qjg0RUQzNkQzOTdEMUNDQkUxNEYwODM5NTM5MzBDOEMyMDk3NEYy
RkU4NjNBQURFREQ4RjUxMzQ2OTRDMS8wLzMxMzYzODJlMzEzMjMxMmUzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5VDAN
BgkqhkiG9w0BAQsFAAOCAQEAJyvgynMsLahT4dVYm/rgG/oNYxrMyu5n0lcX8y6Z
kv+Pp2d7TktTEqIJIlkqi8nYVsTkR+LiJw90o2tn2o6OI9QertR9vj5WorGG37/w
8YoYhxje5r7d0UIX9l8TXgOFIKtaxP5WNBoddk1XB85TByyQIPnjtxbRTC0J4MmA
eR/Ts0UTwCXXODHDgVha0grGoH2/xn0uf5qosb1ipQPY3Xta/Ksz7AyfPq9jR+//
P13IOLPMYSAicZgn5LvVmW+rw8tboLj/uyjvcgNMk4sUdgt7wHKG9GTTnKWyzZ5W
Uh3/zs4KnxgXLQB/8isYLEo/pYyQvx8qJ3vlPaAFDb1IWg==
-----END CERTIFICATE-----
Generated at Thu May 2 22:11:26 2024 by rpki-client on console-fra.rpki-client.org