Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203131333135.roa
File:                     3133312e302e3130342e302f32322d3232203d3e203131333135.roa (raw, json)
Hash identifier:          n6c/m8Pk+wrflqcwj6ogtULwLroQCZ0SoayXMwF1Es0=
Subject key identifier:   F2:31:3D:19:29:88:2A:83:CE:78:F7:85:BB:ED:87:BD:0F:97:D2:9B
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       25242CE2E6FF12889ACCA6EECF9AF883E6433478
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:36 +0000
ROA not before:           Tue 05 Mar 2024 18:02:36 +0000
ROA not after:            Tue 04 Mar 2025 18:07:36 +0000
asID:                     11315
IP address blocks:        131.0.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:2c:e2:e6:ff:12:88:9a:cc:a6:ee:cf:9a:f8:83:e6:43:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:36 2024 GMT
            Not After : Mar  4 18:07:36 2025 GMT
        Subject: CN=F2313D1929882A83CE78F785BBED87BD0F97D29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:d6:66:f5:10:3d:74:5c:58:60:e1:d1:bc:
                    84:bd:62:75:0e:55:4d:9e:7c:dc:34:58:83:82:7e:
                    ae:12:63:c5:46:07:9d:c1:89:b1:29:a9:92:ec:8d:
                    f1:4d:b8:9e:5b:11:20:95:00:9a:53:59:14:9e:7b:
                    35:37:a6:da:81:ae:f4:1c:8f:e8:b9:82:96:26:db:
                    0a:ba:96:19:d4:60:c4:e4:bd:aa:23:e6:b8:5a:83:
                    7b:34:4b:38:de:92:c4:61:87:54:42:9d:39:68:86:
                    fd:a6:74:d2:52:44:d0:24:b4:e2:30:8f:c5:4f:2a:
                    c7:9d:84:35:5b:9b:fe:71:c5:c9:84:f8:39:6d:3b:
                    02:46:af:e2:d2:f8:36:8c:dd:71:b1:dd:de:14:a1:
                    2d:1a:7e:44:69:9a:e7:b3:95:e0:5b:be:ac:36:54:
                    95:18:e0:fc:95:4f:32:df:22:dc:c7:a1:a2:a6:e8:
                    cf:68:2e:1f:71:35:4a:df:ae:3d:24:91:50:8b:ef:
                    1e:cb:3e:c1:9b:c0:1b:72:b8:62:f0:c6:a1:70:90:
                    d8:2a:10:e4:ab:6f:16:76:a4:ad:c2:83:8c:b9:ea:
                    41:0e:3b:0c:83:dd:52:46:69:bd:c8:b2:f9:75:c8:
                    27:ab:5f:e4:67:ab:6b:cf:f2:b9:69:ef:ce:6f:ef:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:31:3D:19:29:88:2A:83:CE:78:F7:85:BB:ED:87:BD:0F:97:D2:9B
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3133312e302e3130342e302f32322d3232203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:e5:80:9c:bd:ff:03:bf:a3:1b:ea:bb:e1:91:83:ac:34:
         24:87:c4:de:17:e8:42:ad:b8:55:59:c3:c3:1d:3f:7c:0d:04:
         88:15:a8:7c:d9:12:64:b4:40:c5:54:44:b7:53:d3:e4:37:9f:
         b0:0c:d9:ad:22:33:e7:b6:f4:35:6c:2c:4c:6f:73:9d:22:7b:
         4f:cb:a3:95:05:22:82:60:20:53:7a:78:89:72:93:65:08:5b:
         b7:09:40:e5:8f:1a:56:c3:3f:13:3b:20:4c:16:e8:76:91:cf:
         df:7c:4b:8f:0c:75:ff:8e:4b:77:eb:b2:3d:da:70:dc:d3:dc:
         76:cc:db:68:d1:9b:64:15:f9:cb:9e:7a:11:f7:90:f5:93:5b:
         29:29:66:c5:9a:8b:3e:76:b8:a1:7a:62:96:46:cb:db:ac:9d:
         f1:4d:3c:aa:c7:dd:07:43:fe:eb:bc:9d:49:7c:e0:45:4d:27:
         b0:19:8a:f1:3a:02:3c:6f:bc:35:3f:ad:f9:3f:f7:a5:58:1f:
         03:b1:78:58:d3:54:10:85:98:0b:34:83:3f:e2:9c:0c:c1:d2:
         d0:9b:25:73:8b:b6:04:1e:1f:ee:ad:5b:f7:95:a0:90:e2:b8:
         8d:3b:e0:d5:0b:4c:ed:fd:54:fa:52:f1:d6:53:22:d9:62:9c:
         fc:86:e0:51
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJSQs4ub/EoiazKbuz5r4g+ZDNHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyMzZaFw0yNTAzMDQxODA3MzZaMDMxMTAvBgNV
BAMTKEYyMzEzRDE5Mjk4ODJBODNDRTc4Rjc4NUJCRUQ4N0JEMEY5N0QyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPNZm9RA9dFxYYOHRvIS9YnUO
VU2efNw0WIOCfq4SY8VGB53BibEpqZLsjfFNuJ5bESCVAJpTWRSeezU3ptqBrvQc
j+i5gpYm2wq6lhnUYMTkvaoj5rhag3s0SzjeksRhh1RCnTlohv2mdNJSRNAktOIw
j8VPKsedhDVbm/5xxcmE+DltOwJGr+LS+DaM3XGx3d4UoS0afkRpmuezleBbvqw2
VJUY4PyVTzLfItzHoaKm6M9oLh9xNUrfrj0kkVCL7x7LPsGbwBtyuGLwxqFwkNgq
EOSrbxZ2pK3Cg4y56kEOOwyD3VJGab3Isvl1yCerX+Rnq2vP8rlp785v7/e3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU8jE9GSmIKoPOePeFu+2HvQ+X0pswHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzMzMTJlMzAyZTMxMzAzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzEzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKDAGgwDQYJ
KoZIhvcNAQELBQADggEBAErJ5YCcvf8Dv6Mb6rvhkYOsNCSHxN4X6EKtuFVZw8Md
P3wNBIgVqHzZEmS0QMVURLdT0+Q3n7AM2a0iM+e29DVsLExvc50ie0/Lo5UFIoJg
IFN6eIlyk2UIW7cJQOWPGlbDPxM7IEwW6HaRz998S48Mdf+OS3frsj3acNzT3HbM
22jRm2QV+cueehH3kPWTWykpZsWaiz52uKF6YpZGy9usnfFNPKrH3QdD/uu8nUl8
4EVNJ7AZivE6AjxvvDU/rfk/96VYHwOxeFjTVBCFmAs0gz/inAzB0tCbJXOLtgQe
H+6tW/eVoJDiuI074NULTO39VPpS8dZTItlinPyG4FE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org