Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e34392e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e34392e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          KEEy87Sxd+SCZW1ULjq6qVmkHnVZ3WoTDT78O+ABWo8=
Subject key identifier:   F1:EF:C9:CD:1C:FD:CA:17:8C:05:BC:40:37:E6:67:8B:F6:91:40:80
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       1DC0CA402564823EB673F2CE6B5C1D4349A3F2AF
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e34392e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:25 +0000
ROA not before:           Tue 05 Mar 2024 18:16:25 +0000
ROA not after:            Tue 04 Mar 2025 18:21:25 +0000
asID:                     20191
IP address blocks:        146.155.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:ca:40:25:64:82:3e:b6:73:f2:ce:6b:5c:1d:43:49:a3:f2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:25 2024 GMT
            Not After : Mar  4 18:21:25 2025 GMT
        Subject: CN=F1EFC9CD1CFDCA178C05BC4037E6678BF6914080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:8b:f1:02:db:01:7d:e4:cb:cf:3d:29:7e:
                    dc:fc:1e:e2:f9:a9:fc:cc:3f:fd:93:4a:cd:8f:ef:
                    aa:52:91:90:b4:6a:99:1c:62:7f:62:f8:a2:ea:5b:
                    f1:d4:ce:08:02:7f:f8:e3:13:b1:e1:c6:2b:0e:7d:
                    41:4a:e7:aa:9d:37:e3:1a:10:b1:15:61:04:8d:da:
                    bc:0e:b7:ee:8f:25:92:87:c3:c0:d0:61:03:9f:a2:
                    16:9b:59:8f:8c:c2:b1:c6:9e:c0:a8:ea:ce:57:89:
                    24:80:22:c9:7f:86:74:f5:89:a0:01:c5:65:ae:6f:
                    8e:fe:c9:38:e7:90:41:6a:c9:1a:ef:86:14:77:25:
                    f8:be:b2:5f:8d:ea:5d:8a:a0:f1:0a:42:b3:52:13:
                    9c:bf:ce:46:54:55:aa:30:e6:49:bf:c5:d7:05:25:
                    5a:ea:cf:aa:1d:56:00:ef:e9:9e:39:04:e7:37:57:
                    15:10:0e:fd:ff:d0:ea:ba:d1:24:b3:65:3c:6c:15:
                    d0:23:7b:af:46:1c:ec:c3:fc:fc:26:ee:e2:37:75:
                    a8:33:06:b0:f4:a7:d7:4a:29:43:fd:86:18:82:11:
                    ec:62:7f:d4:48:5b:9a:12:4f:7b:59:a4:a3:03:ec:
                    27:d1:d0:21:55:d1:7b:6f:a5:af:96:3f:83:ad:21:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EF:C9:CD:1C:FD:CA:17:8C:05:BC:40:37:E6:67:8B:F6:91:40:80
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e34392e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:c7:81:db:33:d3:c5:e6:31:4e:37:de:4e:09:1e:af:8c:
         05:9a:82:dc:5f:59:9e:48:09:a1:63:27:c1:7e:0a:1c:57:9e:
         3f:d6:e6:a9:17:15:df:0d:da:f3:d8:0e:e1:79:ad:8e:4f:b3:
         9d:f9:86:f1:5b:f6:76:8d:0e:db:93:93:02:a2:9c:60:56:94:
         48:3f:f7:66:8a:c2:e4:70:23:0a:26:35:09:7a:eb:e1:23:55:
         40:b8:6f:a2:3f:93:a0:19:ec:8a:7c:9b:cb:01:cd:73:75:b9:
         6e:22:2c:20:d1:7c:a0:7b:65:5f:04:b5:df:3f:21:31:4c:44:
         2c:dd:b6:66:42:e4:43:d0:f7:e7:cb:95:5d:8e:9f:b0:47:f4:
         ae:7a:0c:5d:80:f7:81:e8:41:8e:d8:01:3d:5c:76:68:02:66:
         02:33:3e:9c:56:60:11:a0:bf:75:89:40:a0:47:b0:b2:0c:2e:
         bf:5f:15:94:80:89:9a:03:9a:8c:d0:d7:05:88:e6:4c:a5:f6:
         5a:c5:82:21:c2:09:af:50:ca:34:82:84:9d:5c:51:8f:7e:77:
         82:81:2b:0d:5a:a9:c3:0b:d4:4d:8d:be:ab:1f:e3:ae:8f:ad:
         98:f7:0f:39:3b:91:c4:ef:2e:60:27:17:8d:d6:33:7b:93:11:
         5f:19:de:d6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHcDKQCVkgj62c/LOa1wdQ0mj8q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjVaFw0yNTAzMDQxODIxMjVaMDMxMTAvBgNV
BAMTKEYxRUZDOUNEMUNGRENBMTc4QzA1QkM0MDM3RTY2NzhCRjY5MTQwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeovxAtsBfeTLzz0pftz8HuL5
qfzMP/2TSs2P76pSkZC0apkcYn9i+KLqW/HUzggCf/jjE7HhxisOfUFK56qdN+Ma
ELEVYQSN2rwOt+6PJZKHw8DQYQOfohabWY+MwrHGnsCo6s5XiSSAIsl/hnT1iaAB
xWWub47+yTjnkEFqyRrvhhR3Jfi+sl+N6l2KoPEKQrNSE5y/zkZUVaow5km/xdcF
JVrqz6odVgDv6Z45BOc3VxUQDv3/0Oq60SSzZTxsFdAje69GHOzD/Pwm7uI3dagz
BrD0p9dKKUP9hhiCEexif9RIW5oST3tZpKMD7CfR0CFV0Xtvpa+WP4OtIZUPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8e/JzRz9yheMBbxAN+Zni/aRQIAwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKbMTAN
BgkqhkiG9w0BAQsFAAOCAQEAeofHgdsz08XmMU433k4JHq+MBZqC3F9ZnkgJoWMn
wX4KHFeeP9bmqRcV3w3a89gO4Xmtjk+znfmG8Vv2do0O25OTAqKcYFaUSD/3ZorC
5HAjCiY1CXrr4SNVQLhvoj+ToBnsinybywHNc3W5biIsINF8oHtlXwS13z8hMUxE
LN22ZkLkQ9D358uVXY6fsEf0rnoMXYD3gehBjtgBPVx2aAJmAjM+nFZgEaC/dYlA
oEewsgwuv18VlICJmgOajNDXBYjmTKX2WsWCIcIJr1DKNIKEnVxRj353goErDVqp
wwvUTY2+qx/jro+tmPcPOTuRxO8uYCcXjdYze5MRXxne1g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org