Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa
File:                     3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa (raw, json)
Hash identifier:          /ili//UcxQsWNmonyCPtJoxVsLC7ysf1iRkS1MJrVbE=
Subject key identifier:   ED:61:8F:C5:2D:BD:1F:52:EF:24:FF:2D:9A:F7:0E:74:B2:EA:B9:18
Certificate issuer:       /CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
Certificate serial:       0A357EA78783B74FFF7F7383AB0D21F5DF282B4D
Authority key identifier: CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa
Signing time:             Tue 05 Mar 2024 18:16:12 +0000
ROA not before:           Tue 05 Mar 2024 18:11:12 +0000
ROA not after:            Tue 04 Mar 2025 18:16:12 +0000
asID:                     269924
IP address blocks:        207.191.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:7e:a7:87:83:b7:4f:ff:7f:73:83:ab:0d:21:f5:df:28:2b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEBDAD9C71E61342565EB3D654029F41F2AF533D
        Validity
            Not Before: Mar  5 18:11:12 2024 GMT
            Not After : Mar  4 18:16:12 2025 GMT
        Subject: CN=ED618FC52DBD1F52EF24FF2D9AF70E74B2EAB918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:31:f1:8e:5a:0a:65:ad:48:b3:e4:4c:2a:
                    3f:06:78:7a:fd:50:ff:d0:20:67:be:50:da:6f:a7:
                    9a:f0:d6:31:f7:8e:54:2e:16:b3:a2:f6:8a:39:a1:
                    f2:ff:f3:16:68:21:f0:b8:0d:00:cc:97:98:ca:ed:
                    fa:33:0a:5e:84:f1:6c:59:d2:c6:36:af:4b:9d:05:
                    6c:a1:84:04:55:1c:17:37:4d:91:ed:26:dd:b1:fd:
                    d1:05:57:89:3d:a7:3a:77:c2:43:d9:67:b7:45:ec:
                    5c:04:85:35:67:87:76:60:99:a3:63:2e:02:8c:fd:
                    b1:06:a2:40:3e:ef:3b:fe:49:76:72:eb:96:9d:51:
                    59:14:ea:d4:b3:27:03:55:ae:5e:05:c7:b9:df:3e:
                    14:01:a1:27:be:12:9f:06:07:9d:14:74:80:f0:49:
                    4f:3f:39:84:03:f4:1e:21:97:92:3f:b6:43:80:0e:
                    ea:d7:86:95:05:25:e9:f6:ed:d5:49:c7:55:f3:77:
                    42:63:96:af:3d:35:f6:9f:83:af:7b:1a:2a:a3:d0:
                    7e:d5:c9:d6:c1:6a:78:e5:8f:6c:a3:cb:bc:d3:d9:
                    f2:6b:8b:bd:90:3a:91:83:12:8c:ca:8c:aa:c0:f6:
                    b9:9e:2d:1e:33:ae:a9:43:80:5d:4e:5b:de:64:23:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:61:8F:C5:2D:BD:1F:52:EF:24:FF:2D:9A:F7:0E:74:B2:EA:B9:18
            X509v3 Authority Key Identifier:
                keyid:CE:BD:AD:9C:71:E6:13:42:56:5E:B3:D6:54:02:9F:41:F2:AF:53:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEBDAD9C71E61342565EB3D654029F41F2AF533D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/902887CD33B09A0E8F890217DB03FA0B889D478FB163910E844CA010A48CC275/0/3230372e3139312e3136342e302f32322d3234203d3e20323639393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:da:e0:b0:27:51:cf:82:72:60:89:e8:3a:de:2e:24:06:11:
         9e:8d:41:91:2e:72:4a:75:b7:e6:d1:c9:50:f9:a0:0b:d7:be:
         1b:66:55:ba:33:01:22:50:41:4e:b2:3d:75:e0:19:aa:d0:91:
         76:80:51:53:52:a5:3d:87:31:28:09:d6:54:9e:ca:df:1a:fb:
         8c:1d:a2:74:f6:d6:21:f7:95:9b:a0:62:66:50:0d:95:12:c1:
         ba:4f:a2:b5:c4:a3:8f:66:42:3a:f1:44:2b:9c:7a:36:cd:53:
         21:13:8e:1b:6e:d4:d8:cb:b5:80:85:83:f4:05:10:26:51:df:
         b6:70:ee:df:09:0e:d4:0f:f6:6f:5e:99:4e:4e:36:6d:e3:2c:
         1d:a9:0f:44:f2:06:50:a4:a2:ac:4e:27:13:b8:a1:6b:ac:30:
         15:98:26:a9:b7:bb:82:b6:e8:f2:a5:4f:bd:92:7c:39:c3:3f:
         7f:c4:3d:45:d8:e7:51:1c:d5:71:43:f1:d9:b4:a8:2a:cf:5a:
         78:7c:ae:31:a8:d7:f3:7f:27:3e:60:8f:1b:4d:db:77:c0:b5:
         22:b2:7a:c7:ee:08:d8:8b:f9:27:9f:7c:ae:4d:a2:3c:f5:45:
         ad:3e:c5:42:ea:d0:36:92:a1:09:f7:83:18:22:38:8a:16:99:
         50:40:19:dd
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCjV+p4eDt0//f3ODqw0h9d8oK00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VCREFEOUM3MUU2MTM0MjU2NUVCM0Q2NTQwMjlGNDFG
MkFGNTMzRDAeFw0yNDAzMDUxODExMTJaFw0yNTAzMDQxODE2MTJaMDMxMTAvBgNV
BAMTKEVENjE4RkM1MkRCRDFGNTJFRjI0RkYyRDlBRjcwRTc0QjJFQUI5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP0zHxjloKZa1Is+RMKj8GeHr9
UP/QIGe+UNpvp5rw1jH3jlQuFrOi9oo5ofL/8xZoIfC4DQDMl5jK7fozCl6E8WxZ
0sY2r0udBWyhhARVHBc3TZHtJt2x/dEFV4k9pzp3wkPZZ7dF7FwEhTVnh3ZgmaNj
LgKM/bEGokA+7zv+SXZy65adUVkU6tSzJwNVrl4Fx7nfPhQBoSe+Ep8GB50UdIDw
SU8/OYQD9B4hl5I/tkOADurXhpUFJen27dVJx1Xzd0Jjlq89Nfafg697Giqj0H7V
ydbBanjlj2yjy7zT2fJri72QOpGDEozKjKrA9rmeLR4zrqlDgF1OW95kI7JFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7WGPxS29H1LvJP8tmvcOdLLquRgwHwYDVR0j
BBgwFoAUzr2tnHHmE0JWXrPWVAKfQfKvUz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDI4ODdDRDMzQjA5QTBFOEY4OTAyMTdEQjAzRkEwQjg4
OUQ0NzhGQjE2MzkxMEU4NDRDQTAxMEE0OENDMjc1LzAvQ0VCREFEOUM3MUU2MTM0
MjU2NUVCM0Q2NTQwMjlGNDFGMkFGNTMzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUJEQUQ5QzcxRTYxMzQyNTY1
RUIzRDY1NDAyOUY0MUYyQUY1MzNELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTAyODg3Q0QzM0IwOUEwRThGODkwMjE3REIwM0ZBMEI4ODlENDc4RkIx
NjM5MTBFODQ0Q0EwMTBBNDhDQzI3NS8wLzMyMzAzNzJlMzEzOTMxMmUzMTM2MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMyMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALP
v6QwDQYJKoZIhvcNAQELBQADggEBAEDa4LAnUc+CcmCJ6DreLiQGEZ6NQZEuckp1
t+bRyVD5oAvXvhtmVbozASJQQU6yPXXgGarQkXaAUVNSpT2HMSgJ1lSeyt8a+4wd
onT21iH3lZugYmZQDZUSwbpPorXEo49mQjrxRCucejbNUyETjhtu1NjLtYCFg/QF
ECZR37Zw7t8JDtQP9m9emU5ONm3jLB2pD0TyBlCkoqxOJxO4oWusMBWYJqm3u4K2
6PKlT72SfDnDP3/EPUXY51Ec1XFD8dm0qCrPWnh8rjGo1/N/Jz5gjxtN23fAtSKy
esfuCNiL+SeffK5Nojz1Ra0+xULq0DaSoQn3gxgiOIoWmVBAGd0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org