Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35302e302f32342d3234203d3e203238303735.roa
File:                     3139382e31322e35302e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier:          DT3R2aplUMEihtDe3CmLjn8FCIeiGMOyRfT94awRL3w=
Subject key identifier:   0D:42:7B:30:BF:6B:94:A2:32:76:FB:E7:34:E3:7F:47:EB:35:4F:76
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       4E6A99B40CB43B89E4B22DE245C4C1F584BFE5F4
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35302e302f32342d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:48 +0000
ROA not before:           Tue 05 Mar 2024 18:06:48 +0000
ROA not after:            Tue 04 Mar 2025 18:11:48 +0000
asID:                     28075
IP address blocks:        198.12.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:99:b4:0c:b4:3b:89:e4:b2:2d:e2:45:c4:c1:f5:84:bf:e5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:48 2024 GMT
            Not After : Mar  4 18:11:48 2025 GMT
        Subject: CN=0D427B30BF6B94A23276FBE734E37F47EB354F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:ce:83:f4:75:49:25:19:e2:aa:ff:13:d6:
                    64:c2:94:c5:be:06:47:8b:ab:d9:3d:b2:bf:01:32:
                    2d:ee:1d:54:db:1e:ce:a4:ac:fe:ef:f5:ef:33:3f:
                    b9:bf:57:57:79:d4:72:04:b2:77:17:7f:27:52:fa:
                    16:a1:b9:0f:38:f1:34:9c:eb:36:8e:ae:c0:a5:a7:
                    8d:19:cb:c4:50:5d:16:ae:52:c2:98:57:ce:64:3f:
                    d5:da:55:03:ef:cf:9a:3d:49:c8:9d:a0:4a:24:f4:
                    1d:ce:e4:3e:10:78:7c:f8:08:4b:0a:5f:de:dc:6f:
                    67:f0:e0:97:7f:16:36:d4:b9:5a:a9:63:94:83:c2:
                    53:3f:94:d9:33:6f:23:1f:e1:2d:97:35:2c:85:93:
                    a3:a3:23:6b:0c:43:4b:36:50:c9:f9:c2:53:ce:47:
                    8d:46:e9:7c:e7:84:3d:86:9a:27:56:38:02:66:60:
                    13:d6:63:a5:1b:a4:8e:eb:f5:bf:8d:34:dc:bf:29:
                    a3:f7:af:92:ea:28:0e:fb:3a:8a:5f:ab:04:fc:72:
                    6f:cb:ea:70:d5:de:f5:f2:ac:55:2f:92:08:50:95:
                    ce:3c:51:d6:61:94:c7:7f:6a:dd:a1:47:2b:c4:c9:
                    7f:fa:e3:e6:79:4a:c1:80:74:73:14:9e:ba:8a:09:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:7B:30:BF:6B:94:A2:32:76:FB:E7:34:E3:7F:47:EB:35:4F:76
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35302e302f32342d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b4:ce:be:62:2f:52:c3:52:81:7e:4e:d6:e8:e0:2b:69:4d:
         ad:10:3e:60:9b:ea:26:d3:f5:c9:69:dc:b9:c0:e3:f1:7b:84:
         39:53:43:0d:c7:9d:aa:f9:23:e7:59:a8:35:a0:a2:0c:6e:42:
         ec:a9:02:19:65:18:bf:33:e4:c2:c0:59:cd:9f:91:91:40:33:
         4f:1a:84:ab:cb:3e:19:81:8b:c9:a4:07:e7:df:ba:3e:1a:6d:
         ce:db:bb:22:d9:3e:fb:18:06:ae:59:56:66:3b:52:d3:39:32:
         b0:d1:84:06:64:e8:c1:bc:25:d9:86:99:fe:29:3b:e0:8e:4a:
         32:66:fe:9e:01:5c:d8:13:1a:cd:c4:0f:6f:21:bc:4f:a0:40:
         58:43:a3:6b:93:1a:66:2a:b1:23:d0:a3:5d:e5:39:a4:f4:15:
         98:33:d8:a2:fc:3e:01:67:3d:e9:f1:32:47:15:c0:f5:ee:c9:
         13:53:df:ca:c4:72:c4:c9:27:53:c2:be:99:55:89:b4:09:08:
         f9:d6:1f:06:92:ac:ed:cc:1c:37:9c:47:37:f3:c4:e8:5a:c8:
         e9:6b:4c:7d:f7:d5:73:f5:d2:94:72:42:6e:09:3d:f9:7b:ec:
         f4:36:a8:4e:36:14:3f:6b:3d:53:d9:08:06:0e:65:1d:ef:a1:
         2c:4f:06:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTmqZtAy0O4nksi3iRcTB9YS/5fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNDAzMDUxODA2NDhaFw0yNTAzMDQxODExNDhaMDMxMTAvBgNV
BAMTKDBENDI3QjMwQkY2Qjk0QTIzMjc2RkJFNzM0RTM3RjQ3RUIzNTRGNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnM86D9HVJJRniqv8T1mTClMW+
BkeLq9k9sr8BMi3uHVTbHs6krP7v9e8zP7m/V1d51HIEsncXfydS+hahuQ848TSc
6zaOrsClp40Zy8RQXRauUsKYV85kP9XaVQPvz5o9ScidoEok9B3O5D4QeHz4CEsK
X97cb2fw4Jd/FjbUuVqpY5SDwlM/lNkzbyMf4S2XNSyFk6OjI2sMQ0s2UMn5wlPO
R41G6XznhD2GmidWOAJmYBPWY6UbpI7r9b+NNNy/KaP3r5LqKA77OopfqwT8cm/L
6nDV3vXyrFUvkghQlc48UdZhlMd/at2hRyvEyX/64+Z5SsGAdHMUnrqKCQTvAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDUJ7ML9rlKIydvvnNON/R+s1T3YwHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzkzODJlMzEzMjJlMzUzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGDDIwDQYJ
KoZIhvcNAQELBQADggEBAKq0zr5iL1LDUoF+Ttbo4CtpTa0QPmCb6ibT9clp3LnA
4/F7hDlTQw3Hnar5I+dZqDWgogxuQuypAhllGL8z5MLAWc2fkZFAM08ahKvLPhmB
i8mkB+ffuj4abc7buyLZPvsYBq5ZVmY7UtM5MrDRhAZk6MG8JdmGmf4pO+COSjJm
/p4BXNgTGs3ED28hvE+gQFhDo2uTGmYqsSPQo13lOaT0FZgz2KL8PgFnPenxMkcV
wPXuyRNT38rEcsTJJ1PCvplVibQJCPnWHwaSrO3MHDecRzfzxOhayOlrTH331XP1
0pRyQm4JPfl77PQ2qE42FD9rPVPZCAYOZR3voSxPBk0=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org