Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131382e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3131382e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          jdNvpIahgk3eTTpM0zGZYkgZ5H8Biv543xh8fw0pB/A=
Subject key identifier:   A7:C1:92:24:17:85:E4:D5:AD:6A:A2:EB:9E:EB:E3:FE:AE:82:F5:21
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       5033FD6D4A9FBCC0064B9F195D7121CCCAAC763E
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131382e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:21 +0000
ROA not before:           Tue 05 Mar 2024 18:16:21 +0000
ROA not after:            Tue 04 Mar 2025 18:21:21 +0000
asID:                     20191
IP address blocks:        146.155.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:fd:6d:4a:9f:bc:c0:06:4b:9f:19:5d:71:21:cc:ca:ac:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:21 2024 GMT
            Not After : Mar  4 18:21:21 2025 GMT
        Subject: CN=A7C192241785E4D5AD6AA2EB9EEBE3FEAE82F521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:34:c4:7b:bf:ac:13:0a:ed:e1:81:7c:06:
                    27:8c:e4:d2:69:ba:cb:8b:60:69:36:e5:06:3a:b9:
                    9e:ad:fe:e3:81:86:3f:59:da:d4:08:b1:b2:3f:e5:
                    e7:52:aa:92:9e:65:9f:f0:cd:da:31:43:58:de:b8:
                    ac:b7:36:31:9d:e6:cc:ff:95:37:4d:70:25:ee:8d:
                    fc:04:5a:04:43:3d:25:b6:04:54:5d:58:7b:dd:70:
                    45:b1:9e:65:1d:82:c4:55:4a:af:b8:b5:02:b5:30:
                    36:6c:cc:a0:af:86:2f:88:42:a4:df:0b:d4:36:4d:
                    b0:e4:23:d7:94:ec:4c:e0:a7:f2:b9:1f:95:02:10:
                    c1:ea:82:5c:87:1d:5d:8b:42:7e:67:76:2c:e1:11:
                    b6:e6:e0:b0:a9:36:7b:fb:ac:1e:58:bb:75:24:cc:
                    ae:9c:82:1f:47:35:d8:6e:ab:0f:38:d7:ca:c7:85:
                    49:fe:3f:40:3a:c8:a5:e5:c7:3f:c5:34:d6:4b:92:
                    9a:3e:53:26:f1:0c:4f:4c:d1:4d:c2:21:78:45:4d:
                    f3:c9:c9:61:36:d9:e2:b5:46:f7:13:d5:4f:1e:99:
                    2a:d9:f3:72:43:93:71:7f:2c:5b:13:59:54:b4:0a:
                    72:60:f9:18:e5:eb:36:57:ca:a7:30:8a:9a:31:61:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:92:24:17:85:E4:D5:AD:6A:A2:EB:9E:EB:E3:FE:AE:82:F5:21
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3131382e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:cf:82:c3:ba:a1:30:f4:36:6e:0f:50:70:bc:ab:28:11:0f:
         6f:2c:82:95:18:5a:aa:b6:a0:ce:df:bf:52:0c:f2:bd:0d:fd:
         62:77:89:1c:bf:17:29:d6:e3:d7:e9:5b:88:d8:71:8a:e7:50:
         05:4f:b0:8a:a0:45:1e:28:3a:5c:8b:78:7b:c2:27:0d:24:aa:
         0c:8f:b5:2a:eb:d2:d3:f6:9e:e5:a8:28:36:e8:f2:b8:fe:42:
         30:ab:ea:19:85:92:49:04:07:22:ee:83:f9:38:f2:84:28:10:
         5c:e2:a8:b6:6e:b5:d3:36:9c:7e:89:d5:38:0d:73:8a:4e:2a:
         40:ef:88:8c:2e:00:3c:34:4d:f0:a0:a7:c5:34:5a:bd:08:2e:
         17:52:1e:ed:19:39:68:e8:f1:91:19:5e:a6:41:86:14:52:b1:
         67:70:e0:91:23:dd:f0:b6:2b:1a:32:a3:dd:dc:97:d2:9a:e9:
         0c:ca:e7:ba:16:ef:18:e8:e4:66:4e:72:e7:f7:83:89:ee:4c:
         c4:54:58:3a:1b:df:13:ff:cc:f6:50:99:df:b0:92:ee:c8:d5:
         4a:40:68:75:0c:b2:5c:99:5a:a1:4a:9d:68:bc:e2:fc:c4:53:
         eb:7f:13:a8:90:28:fe:9b:e4:79:52:15:31:a3:36:3e:45:77:
         51:50:cb:08
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUDP9bUqfvMAGS58ZXXEhzMqsdj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjFaFw0yNTAzMDQxODIxMjFaMDMxMTAvBgNV
BAMTKEE3QzE5MjI0MTc4NUU0RDVBRDZBQTJFQjlFRUJFM0ZFQUU4MkY1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhDTEe7+sEwrt4YF8BieM5NJp
usuLYGk25QY6uZ6t/uOBhj9Z2tQIsbI/5edSqpKeZZ/wzdoxQ1jeuKy3NjGd5sz/
lTdNcCXujfwEWgRDPSW2BFRdWHvdcEWxnmUdgsRVSq+4tQK1MDZszKCvhi+IQqTf
C9Q2TbDkI9eU7Ezgp/K5H5UCEMHqglyHHV2LQn5ndizhEbbm4LCpNnv7rB5Yu3Uk
zK6cgh9HNdhuqw8418rHhUn+P0A6yKXlxz/FNNZLkpo+UybxDE9M0U3CIXhFTfPJ
yWE22eK1RvcT1U8emSrZ83JDk3F/LFsTWVS0CnJg+Rjl6zZXyqcwipoxYXl7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUp8GSJBeF5NWtaqLrnuvj/q6C9SEwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzMTMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpt2
MA0GCSqGSIb3DQEBCwUAA4IBAQA7z4LDuqEw9DZuD1BwvKsoEQ9vLIKVGFqqtqDO
379SDPK9Df1id4kcvxcp1uPX6VuI2HGK51AFT7CKoEUeKDpci3h7wicNJKoMj7Uq
69LT9p7lqCg26PK4/kIwq+oZhZJJBAci7oP5OPKEKBBc4qi2brXTNpx+idU4DXOK
TipA74iMLgA8NE3woKfFNFq9CC4XUh7tGTlo6PGRGV6mQYYUUrFncOCRI93wtisa
MqPd3JfSmukMyue6Fu8Y6ORmTnLn94OJ7kzEVFg6G98T/8z2UJnfsJLuyNVKQGh1
DLJcmVqhSp1ovOL8xFPrfxOokCj+m+R5UhUxozY+RXdRUMsI
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org