Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa
File:                     3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          +pgZxo+gQE0tbSikdWYJWYDqzih2zo1kwevpZCpX1SE=
Subject key identifier:   8B:56:C9:75:A1:E9:DD:55:F2:57:76:5E:2E:39:E3:DF:E5:65:E1:6B
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       77AD34584492386ACAD723F3EAE1486891CF7F44
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:32 +0000
ROA not before:           Tue 05 Mar 2024 17:42:32 +0000
ROA not after:            Tue 04 Mar 2025 17:47:32 +0000
asID:                     263740
IP address blocks:        143.137.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:34:58:44:92:38:6a:ca:d7:23:f3:ea:e1:48:68:91:cf:7f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:32 2024 GMT
            Not After : Mar  4 17:47:32 2025 GMT
        Subject: CN=8B56C975A1E9DD55F257765E2E39E3DFE565E16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:f1:4d:2a:36:a1:d7:c8:9c:11:f1:3b:39:
                    2f:98:6b:5e:cf:db:42:1e:3d:3e:7d:25:2c:fa:77:
                    5f:bf:06:54:eb:8c:4e:11:8c:74:98:8e:46:ca:11:
                    f2:34:73:fc:13:b5:96:05:7d:7f:82:58:25:39:b0:
                    ba:d4:aa:54:0d:98:c2:c2:e9:9a:12:e0:d4:32:8b:
                    32:57:9f:97:5c:ee:8e:bf:9f:38:d9:90:f6:3a:d9:
                    80:e5:8d:10:00:be:30:6c:3a:7f:ab:f0:51:f8:e7:
                    0c:62:05:8b:fb:88:86:1a:6c:cf:bc:69:a1:2c:12:
                    f7:0e:3f:a3:c3:ac:d7:f4:ef:3c:e4:1e:ee:36:33:
                    9d:84:30:46:82:c9:88:11:b4:10:88:36:88:03:7b:
                    93:d1:8d:fd:7e:f1:0b:e5:f8:b4:9c:e9:2d:1b:21:
                    36:32:12:3f:f8:e3:2a:09:a5:d0:79:d0:1c:46:f9:
                    7c:43:4e:db:9e:74:47:d2:e5:e7:92:f1:48:d2:bf:
                    e8:09:44:20:fe:2d:7c:b1:5a:71:5a:59:fe:46:02:
                    d2:7f:16:aa:d7:00:03:49:ec:ae:1a:e6:b7:83:20:
                    2b:0b:fe:ab:07:2a:18:92:ee:02:d2:d2:19:5f:b7:
                    8b:7d:36:5c:c3:b3:59:06:c6:e1:c9:d4:96:42:8e:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:56:C9:75:A1:E9:DD:55:F2:57:76:5E:2E:39:E3:DF:E5:65:E1:6B
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:b4:30:22:f6:93:e1:c8:05:9f:0d:dd:9b:fc:44:94:eb:
         9a:f9:48:0c:e5:5f:b4:ee:d2:76:89:3f:21:c2:c9:8e:ce:71:
         47:54:e1:3a:9c:06:b9:15:c5:58:83:6c:6c:c7:a8:91:88:7d:
         ec:84:a6:da:16:ea:b8:a8:a3:9d:63:c4:b1:4e:60:ce:ed:ee:
         2b:4e:1e:99:b9:0b:a9:1e:07:93:da:2f:1f:2c:e4:9b:45:cf:
         07:68:33:3d:bf:5e:43:01:aa:2a:4c:83:02:2e:e0:6f:15:07:
         d6:c2:7f:06:b1:c8:41:56:52:7b:21:1a:79:8f:82:ac:73:64:
         67:7d:42:62:20:c6:0f:c2:39:21:eb:2d:07:43:63:8d:86:c4:
         a4:e9:d9:a5:df:0c:4f:0e:bb:e5:a1:d2:99:2f:fa:bf:c5:8d:
         ff:d8:25:eb:7c:e3:07:ac:68:6c:4c:45:29:65:74:b9:57:f3:
         f9:40:97:e3:19:95:57:8f:4a:91:2c:b2:8a:34:b9:aa:a0:44:
         81:40:db:eb:37:da:2d:be:d5:27:02:a5:bb:06:cd:a0:e9:37:
         69:6f:ef:6e:be:71:a5:7d:b1:d0:35:88:09:09:ae:4a:7d:07:
         07:b9:ee:b0:31:39:73:f1:b8:15:53:57:79:bd:5b:20:d6:68:
         c5:06:5e:78
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUd600WESSOGrK1yPz6uFIaJHPf0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNDAzMDUxNzQyMzJaFw0yNTAzMDQxNzQ3MzJaMDMxMTAvBgNV
BAMTKDhCNTZDOTc1QTFFOURENTVGMjU3NzY1RTJFMzlFM0RGRTU2NUUxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hfFNKjah18icEfE7OS+Ya17P
20IePT59JSz6d1+/BlTrjE4RjHSYjkbKEfI0c/wTtZYFfX+CWCU5sLrUqlQNmMLC
6ZoS4NQyizJXn5dc7o6/nzjZkPY62YDljRAAvjBsOn+r8FH45wxiBYv7iIYabM+8
aaEsEvcOP6PDrNf07zzkHu42M52EMEaCyYgRtBCINogDe5PRjf1+8Qvl+LSc6S0b
ITYyEj/44yoJpdB50BxG+XxDTtuedEfS5eeS8UjSv+gJRCD+LXyxWnFaWf5GAtJ/
FqrXAANJ7K4a5reDICsL/qsHKhiS7gLS0hlft4t9NlzDs1kGxuHJ1JZCjsNVAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUi1bJdaHp3VXyV3ZeLjnj3+Vl4WswHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMxMzQzMzJlMzEzMzM3MmUzMTM2MzQy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
iaQwDQYJKoZIhvcNAQELBQADggEBAB4MtDAi9pPhyAWfDd2b/ESU65r5SAzlX7Tu
0naJPyHCyY7OcUdU4TqcBrkVxViDbGzHqJGIfeyEptoW6rioo51jxLFOYM7t7itO
Hpm5C6keB5PaLx8s5JtFzwdoMz2/XkMBqipMgwIu4G8VB9bCfwaxyEFWUnshGnmP
gqxzZGd9QmIgxg/COSHrLQdDY42GxKTp2aXfDE8Ou+Wh0pkv+r/Fjf/YJet84wes
aGxMRSlldLlX8/lAl+MZlVePSpEssoo0uaqgRIFA2+s32i2+1ScCpbsGzaDpN2lv
726+caV9sdA1iAkJrkp9Bwe57rAxOXPxuBVTV3m9WyDWaMUGXng=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org