Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131372e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3131372e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          ONu8C9OCeE3igl64mfD0nlixhkYqbt1wR/2fk7xX5AQ=
Subject key identifier:   38:24:3A:79:47:3B:29:64:C3:AB:8E:28:05:FC:23:7D:FA:CC:6F:FD
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       0DF4C5C5C16C490A0D5779018D37692CAFBBCE19
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131372e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:20 +0000
ROA not before:           Tue 05 Mar 2024 18:16:20 +0000
ROA not after:            Tue 04 Mar 2025 18:21:20 +0000
asID:                     20191
IP address blocks:        146.155.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:c5:c5:c1:6c:49:0a:0d:57:79:01:8d:37:69:2c:af:bb:ce:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:20 2024 GMT
            Not After : Mar  4 18:21:20 2025 GMT
        Subject: CN=38243A79473B2964C3AB8E2805FC237DFACC6FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:ac:ba:9b:33:e2:6e:2f:05:a2:73:81:13:
                    9b:02:44:ac:3a:37:a9:17:f8:1e:a7:27:52:47:2d:
                    01:37:9d:f0:35:78:f8:47:49:6d:05:b6:b8:93:ac:
                    fa:a3:31:16:44:25:33:1b:0a:d1:c5:c6:14:64:47:
                    2b:82:8e:63:9d:a9:f5:6d:50:6c:d8:ea:24:fb:f8:
                    d2:2e:3b:8d:91:8f:6a:2b:ef:d3:2a:e3:81:95:03:
                    da:8b:29:54:73:18:a1:44:4d:a6:ff:1d:52:ba:54:
                    4a:d5:62:9f:2b:bf:e4:cc:ae:6c:0a:51:af:1e:7f:
                    87:b3:31:8d:1b:d7:3f:e3:d4:de:57:11:11:fb:a5:
                    9a:f3:37:30:97:80:e0:67:c3:60:3f:51:1e:61:68:
                    0b:ad:c4:bf:10:1f:6e:ae:fe:5b:8d:6c:bb:44:bb:
                    e4:66:26:e2:6d:6a:26:2a:be:53:5e:43:af:d8:60:
                    2d:4c:7e:49:06:ce:a4:d1:df:b6:28:26:79:ce:2f:
                    09:b1:43:03:fc:c6:c4:5c:40:04:db:a4:bf:8c:d1:
                    aa:e5:bb:ec:74:eb:43:bc:d6:b4:1e:2b:b6:b5:9f:
                    d9:d9:10:f0:c3:32:70:98:fb:fa:cb:9f:9e:c2:f5:
                    ca:80:43:22:65:23:bd:78:37:40:14:c8:c7:d3:d0:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:24:3A:79:47:3B:29:64:C3:AB:8E:28:05:FC:23:7D:FA:CC:6F:FD
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131372e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:ef:37:14:d7:e8:d2:a5:7c:b1:42:cc:d6:cd:45:9d:92:
         99:6d:f8:14:34:ef:7b:b7:99:c7:6a:d0:71:9b:a5:4f:33:10:
         9f:c5:32:24:2f:c0:4a:fa:a2:52:cc:b4:a3:20:72:83:d3:f4:
         4d:1f:b9:68:7d:71:4c:db:c6:5e:dd:63:b0:70:5e:5b:93:d7:
         f8:ec:d6:07:0b:7d:a0:28:b0:14:d1:03:e3:ea:c8:64:cf:48:
         0b:ba:3d:5a:99:10:d5:e9:4d:f8:8e:45:82:3e:2c:89:17:3d:
         2a:53:ca:39:03:8b:4a:8e:30:d9:30:83:ad:10:f8:b4:ef:85:
         88:56:c5:c7:ad:ff:92:37:7a:6b:a1:28:66:f7:c2:b7:81:57:
         86:54:5b:1f:d0:4d:66:bf:3d:ba:23:4b:79:c0:fb:fa:d4:58:
         80:1f:ca:ba:3f:fe:26:ee:5c:23:19:96:6a:26:83:dd:44:4d:
         4b:37:4a:81:5d:9e:cb:26:3d:59:4e:e0:71:29:e3:a1:9e:2b:
         c1:0b:95:c9:df:8b:6b:fe:b9:e5:0c:bf:94:e7:2c:36:1a:99:
         49:32:d1:df:3e:31:d3:97:1c:95:37:03:7d:de:35:a4:ad:b1:
         9c:61:16:6e:3f:c4:9d:8a:97:af:e3:94:29:89:0a:8e:db:f9:
         a4:4b:64:74
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDfTFxcFsSQoNV3kBjTdpLK+7zhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjBaFw0yNTAzMDQxODIxMjBaMDMxMTAvBgNV
BAMTKDM4MjQzQTc5NDczQjI5NjRDM0FCOEUyODA1RkMyMzdERkFDQzZGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0ay6mzPibi8FonOBE5sCRKw6
N6kX+B6nJ1JHLQE3nfA1ePhHSW0FtriTrPqjMRZEJTMbCtHFxhRkRyuCjmOdqfVt
UGzY6iT7+NIuO42Rj2or79Mq44GVA9qLKVRzGKFETab/HVK6VErVYp8rv+TMrmwK
Ua8ef4ezMY0b1z/j1N5XERH7pZrzNzCXgOBnw2A/UR5haAutxL8QH26u/luNbLtE
u+RmJuJtaiYqvlNeQ6/YYC1MfkkGzqTR37YoJnnOLwmxQwP8xsRcQATbpL+M0arl
u+x060O81rQeK7a1n9nZEPDDMnCY+/rLn57C9cqAQyJlI714N0AUyMfT0EGzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOCQ6eUc7KWTDq44oBfwjffrMb/0wHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzMTMxMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpt1
MA0GCSqGSIb3DQEBCwUAA4IBAQAQ4u83FNfo0qV8sULM1s1FnZKZbfgUNO97t5nH
atBxm6VPMxCfxTIkL8BK+qJSzLSjIHKD0/RNH7lofXFM28Ze3WOwcF5bk9f47NYH
C32gKLAU0QPj6shkz0gLuj1amRDV6U34jkWCPiyJFz0qU8o5A4tKjjDZMIOtEPi0
74WIVsXHrf+SN3proShm98K3gVeGVFsf0E1mvz26I0t5wPv61FiAH8q6P/4m7lwj
GZZqJoPdRE1LN0qBXZ7LJj1ZTuBxKeOhnivBC5XJ34tr/rnlDL+U5yw2GplJMtHf
PjHTlxyVNwN93jWkrbGcYRZuP8Sdipev45QpiQqO2/mkS2R0
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org