Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS12956.roa
File:                     AS12956.roa (raw, json)
Hash identifier:          C4uURUAja7z6J7F+mnMDGRLWGCqLlDbGOAJQnpPBp7Y=
Subject key identifier:   85:3C:3D:79:76:31:62:BF:66:96:0F:C7:B2:56:61:58:A1:DC:9D:13
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       33045369E4413578B76679DEA486CE5BDE79ED8F
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS12956.roa
Signing time:             Tue 05 Mar 2024 17:55:23 +0000
ROA not before:           Tue 05 Mar 2024 17:50:23 +0000
ROA not after:            Tue 04 Mar 2025 17:55:23 +0000
asID:                     12956
IP address blocks:        190.66.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 01 May 2024 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:04:53:69:e4:41:35:78:b7:66:79:de:a4:86:ce:5b:de:79:ed:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:23 2024 GMT
            Not After : Mar  4 17:55:23 2025 GMT
        Subject: CN=853C3D79763162BF66960FC7B2566158A1DC9D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:34:05:3c:ea:61:5c:36:6e:8b:cc:88:75:
                    3f:83:2b:bc:12:ac:bc:15:11:f4:7e:ab:12:68:47:
                    13:92:88:d5:74:e4:92:80:95:10:d1:6a:b1:cd:1a:
                    37:a6:fa:f3:9e:f9:f2:07:c6:8e:e5:0f:37:c6:51:
                    e1:2a:42:ce:08:ea:54:e7:37:2f:ef:ee:66:e0:c6:
                    b3:ad:72:8d:4f:e7:93:eb:99:c8:7b:71:cd:c0:d4:
                    51:86:07:7b:62:d7:f4:4c:a7:e1:fe:07:a2:cc:7c:
                    8f:39:08:30:e1:a9:3a:0c:2e:db:34:9c:29:f9:c9:
                    df:de:9d:d2:2a:e9:37:cc:53:74:32:0d:ff:6f:54:
                    2d:a8:0e:25:26:1f:74:1a:fb:9c:f2:44:16:4a:51:
                    bd:46:b0:df:c4:af:75:e3:25:71:79:02:da:b3:7f:
                    13:ba:41:ea:57:dd:f3:fe:1b:b1:2e:70:44:e1:39:
                    c0:6e:68:51:cf:c6:99:54:27:02:13:38:40:96:8d:
                    7d:89:2e:f3:63:88:1a:1a:88:db:b3:ed:d0:d3:e3:
                    da:ed:29:34:0b:a7:23:54:74:a5:ba:51:cc:21:42:
                    53:6c:a0:0d:63:25:dd:f3:3a:67:2a:78:75:98:38:
                    fa:fd:64:ec:b3:56:34:c1:a0:de:59:76:ae:e9:ab:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:3D:79:76:31:62:BF:66:96:0F:C7:B2:56:61:58:A1:DC:9D:13
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS12956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.66.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b0:1d:98:77:f2:04:56:cf:3e:f8:3f:96:62:8d:0b:01:d3:
         97:58:7f:d8:00:29:10:ad:c8:22:66:3d:75:ad:a6:29:44:6a:
         37:d7:2e:17:e1:e8:3e:2b:c5:76:8c:48:f8:9a:78:cf:e1:5d:
         17:14:26:3d:51:11:d3:a1:51:87:bd:8f:88:0b:1f:2a:0c:ae:
         54:8b:81:46:aa:64:fa:1c:2a:e7:9e:b9:a6:c4:8c:20:63:fd:
         7a:40:6c:ce:55:aa:41:2b:13:28:1e:cf:85:98:5e:b0:0b:91:
         f7:81:20:06:b8:a7:f6:53:06:21:f9:c7:f2:a6:ee:6e:6d:c4:
         3f:99:39:61:0a:3d:ea:f8:25:e5:b9:dc:d6:27:17:36:d6:f5:
         f4:8a:fc:9f:40:9c:f2:15:81:00:5d:7b:b4:ff:ef:52:8c:63:
         58:32:69:12:a6:c6:7a:42:78:52:55:74:9f:a5:0c:68:db:c3:
         c2:eb:dc:95:90:78:47:de:d3:ae:41:45:5e:fd:ee:ff:35:a9:
         88:bf:4e:bf:0d:19:4f:b4:83:54:ec:1d:2a:c9:67:b3:ad:a8:
         19:92:f6:c7:da:10:94:a3:be:51:e7:9f:0d:1f:bf:f9:8a:ca:
         5f:6b:66:ef:4c:34:13:ac:3c:3c:30:ae:21:c9:03:bc:b9:81:
         0e:f8:74:12
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUMwRTaeRBNXi3ZnnepIbOW9557Y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNjIzNkI5NkVFMDA5MzRGQ0QzOUE1NjBFNUJDMDRF
QjdCOUVBNDAeFw0yNDAzMDUxNzUwMjNaFw0yNTAzMDQxNzU1MjNaMDMxMTAvBgNV
BAMTKDg1M0MzRDc5NzYzMTYyQkY2Njk2MEZDN0IyNTY2MTU4QTFEQzlEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqzQFPOphXDZui8yIdT+DK7wS
rLwVEfR+qxJoRxOSiNV05JKAlRDRarHNGjem+vOe+fIHxo7lDzfGUeEqQs4I6lTn
Ny/v7mbgxrOtco1P55Prmch7cc3A1FGGB3ti1/RMp+H+B6LMfI85CDDhqToMLts0
nCn5yd/endIq6TfMU3QyDf9vVC2oDiUmH3Qa+5zyRBZKUb1GsN/Er3XjJXF5Atqz
fxO6QepX3fP+G7EucEThOcBuaFHPxplUJwITOECWjX2JLvNjiBoaiNuz7dDT49rt
KTQLpyNUdKW6UcwhQlNsoA1jJd3zOmcqeHWYOPr9ZOyzVjTBoN5Zdq7pqzHhAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUhTw9eXYxYr9mlg/HslZhWKHcnRMwHwYDVR0j
BBgwFoAU2wYja5buAJNPzTmlYOW8BOt7nqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIx
RDI0N0Q3RTc3RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvREIwNjIzNkI5NkVFMDA5
MzRGQ0QzOUE1NjBFNUJDMDRFQjdCOUVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA2MjM2Qjk2RUUwMDkzNEZD
RDM5QTU2MEU1QkMwNEVCN0I5RUE0LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIxRDI0N0Q3RTc3
RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvQVMxMjk1Ni5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5CBDAN
BgkqhkiG9w0BAQsFAAOCAQEAarAdmHfyBFbPPvg/lmKNCwHTl1h/2AApEK3IImY9
da2mKURqN9cuF+HoPivFdoxI+Jp4z+FdFxQmPVER06FRh72PiAsfKgyuVIuBRqpk
+hwq5565psSMIGP9ekBszlWqQSsTKB7PhZhesAuR94EgBrin9lMGIfnH8qbubm3E
P5k5YQo96vgl5bnc1icXNtb19Ir8n0Cc8hWBAF17tP/vUoxjWDJpEqbGekJ4UlV0
n6UMaNvDwuvclZB4R97TrkFFXv3u/zWpiL9Ovw0ZT7SDVOwdKslns62oGZL2x9oQ
lKO+UeefDR+/+YrKX2tm70w0E6w8PDCuIckDvLmBDvh0Eg==
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:45:06 2024 by rpki-client on console-fra.rpki-client.org