Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e342e302f32332d3233203d3e203332303938.roa
File:                     3138372e3235312e342e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          W9e3dRgkljFwHzsGTADUcrdG+hrxR0zbOE9I0YzlUCI=
Subject key identifier:   F2:81:81:C2:BA:07:D3:D9:29:F3:43:84:73:2D:84:BE:D4:1C:36:A2
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       518B2C957723FBBF88FD8FDEEF009E74CB26AE4C
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e342e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:48 +0000
ROA not before:           Tue 05 Mar 2024 18:12:48 +0000
ROA not after:            Tue 04 Mar 2025 18:17:48 +0000
asID:                     32098
IP address blocks:        187.251.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:2c:95:77:23:fb:bf:88:fd:8f:de:ef:00:9e:74:cb:26:ae:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:48 2024 GMT
            Not After : Mar  4 18:17:48 2025 GMT
        Subject: CN=F28181C2BA07D3D929F34384732D84BED41C36A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:4d:58:0f:19:36:d1:13:92:94:49:fa:e4:
                    6e:8c:4c:48:c0:68:e2:28:23:c9:f7:43:b2:5b:9c:
                    92:29:b3:65:7e:c9:ab:2d:7d:0e:02:08:22:30:f9:
                    cf:28:1f:7e:a8:65:cb:8a:b7:50:c3:5d:ad:85:ae:
                    0d:c4:d0:0c:e9:8c:d1:c5:7d:16:5a:73:30:22:d2:
                    01:e7:8a:af:bf:87:c5:13:3f:b0:00:5b:83:58:1a:
                    12:5e:1b:e0:83:6b:c2:39:0b:43:ff:b1:70:b6:e2:
                    45:c8:be:20:60:56:ad:3f:64:69:0c:46:72:c8:37:
                    b4:e8:6c:19:72:13:84:cb:fa:c5:c7:85:1a:2b:56:
                    a5:02:54:b9:36:8a:24:e8:9b:32:bf:ec:c2:66:90:
                    35:d5:3d:f0:df:04:fa:e4:24:9c:60:a6:7d:dd:41:
                    a3:ee:57:45:e8:71:77:b8:09:e9:26:70:3d:27:ab:
                    ac:d2:ca:79:92:5c:f6:a6:08:28:af:bc:1d:e3:41:
                    89:0a:d0:20:d9:ad:e9:12:03:95:31:ce:df:c7:30:
                    f3:a0:49:32:87:35:2d:25:41:0b:50:74:d3:83:49:
                    18:e0:b6:26:51:b1:eb:9f:b9:b9:07:26:04:18:5b:
                    e7:bf:a2:ed:20:77:16:e1:a5:fe:24:31:9e:7b:52:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:81:C2:BA:07:D3:D9:29:F3:43:84:73:2D:84:BE:D4:1C:36:A2
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e342e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:a3:93:2a:ec:12:2d:a3:59:42:8e:fc:76:3e:c9:b9:da:
         21:71:dd:53:9d:47:f8:e7:43:7d:3b:ec:da:fe:00:f2:08:26:
         f0:50:2d:ca:2d:31:5b:c9:dd:04:75:7f:d7:7a:c1:68:11:7a:
         ca:5f:d0:1b:43:16:d9:70:fa:06:13:60:66:68:b1:4a:2c:36:
         7e:98:66:7f:25:df:8d:80:c6:c9:94:98:a7:f4:de:0d:37:da:
         9f:a9:76:9c:c3:39:48:0f:b9:f3:22:60:ea:75:a4:07:8b:19:
         76:bb:82:17:2a:e9:ea:be:01:7b:5c:a4:ab:a1:a0:9c:fb:30:
         09:8a:6d:8f:4f:fc:60:6b:76:b6:06:f9:cf:41:f2:74:ab:5a:
         d2:19:a6:68:b7:b2:69:b7:48:0c:1b:b7:56:9c:99:48:a1:b0:
         27:c2:31:51:5d:80:7c:79:9d:f5:34:54:b4:d5:29:a0:b6:60:
         f1:a8:d0:be:d1:e7:43:d4:a0:77:75:50:0d:bd:8f:56:13:2f:
         ff:55:98:27:6f:07:eb:9a:45:49:dd:f0:92:fd:82:78:e0:f0:
         ae:a9:a5:76:41:03:50:f9:cf:5a:45:a2:dd:b4:53:6e:b3:31:
         28:19:dc:80:17:f8:1a:30:19:f7:4d:cf:41:62:1d:85:a0:bb:
         4d:fb:c5:ba
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUYsslXcj+7+I/Y/e7wCedMsmrkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNDAzMDUxODEyNDhaFw0yNTAzMDQxODE3NDhaMDMxMTAvBgNV
BAMTKEYyODE4MUMyQkEwN0QzRDkyOUYzNDM4NDczMkQ4NEJFRDQxQzM2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvU1YDxk20ROSlEn65G6MTEjA
aOIoI8n3Q7JbnJIps2V+yastfQ4CCCIw+c8oH36oZcuKt1DDXa2Frg3E0AzpjNHF
fRZaczAi0gHniq+/h8UTP7AAW4NYGhJeG+CDa8I5C0P/sXC24kXIviBgVq0/ZGkM
RnLIN7TobBlyE4TL+sXHhRorVqUCVLk2iiTomzK/7MJmkDXVPfDfBPrkJJxgpn3d
QaPuV0XocXe4CekmcD0nq6zSynmSXPamCCivvB3jQYkK0CDZrekSA5Uxzt/HMPOg
STKHNS0lQQtQdNODSRjgtiZRseufubkHJgQYW+e/ou0gdxbhpf4kMZ57UjC3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU8oGBwroH09kp80OEcy2EvtQcNqIwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMxMzgzNzJlMzIzNTMxMmUzNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzIzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG7+wQwDQYJ
KoZIhvcNAQELBQADggEBAHp1o5Mq7BIto1lCjvx2Psm52iFx3VOdR/jnQ3077Nr+
APIIJvBQLcotMVvJ3QR1f9d6wWgRespf0BtDFtlw+gYTYGZosUosNn6YZn8l342A
xsmUmKf03g032p+pdpzDOUgPufMiYOp1pAeLGXa7ghcq6eq+AXtcpKuhoJz7MAmK
bY9P/GBrdrYG+c9B8nSrWtIZpmi3smm3SAwbt1acmUihsCfCMVFdgHx5nfU0VLTV
KaC2YPGo0L7R50PUoHd1UA29j1YTL/9VmCdvB+uaRUnd8JL9gnjg8K6ppXZBA1D5
z1pFot20U26zMSgZ3IAX+BowGfdNz0FiHYWgu037xbo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org