Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37332e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e37332e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          ebXuOFYBKh6u2egtBSWpgjrKjgYiv5IYADm5VFQEx/M=
Subject key identifier:   A7:65:03:C4:94:79:7A:0D:DE:07:8E:C6:FB:75:A3:59:75:71:6B:D6
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       42424C7BE51F380350B3C3AA91A29353FD3ACBDD
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37332e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:23 +0000
ROA not before:           Tue 05 Mar 2024 18:16:23 +0000
ROA not after:            Tue 04 Mar 2025 18:21:23 +0000
asID:                     20191
IP address blocks:        146.155.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:4c:7b:e5:1f:38:03:50:b3:c3:aa:91:a2:93:53:fd:3a:cb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:23 2024 GMT
            Not After : Mar  4 18:21:23 2025 GMT
        Subject: CN=A76503C494797A0DDE078EC6FB75A35975716BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:2a:c3:63:2c:f4:c5:40:f4:a6:06:bb:45:
                    8d:24:f1:0e:20:54:ce:14:54:4e:cb:ab:99:ec:8a:
                    7c:29:54:72:4d:ef:b5:34:93:ad:12:a4:23:cc:03:
                    ce:c5:03:26:b1:a7:38:89:ec:1d:b0:78:dc:4f:f3:
                    a3:3a:3f:fd:9e:52:42:59:74:ec:44:bf:00:5d:ea:
                    8e:5e:26:e0:dd:80:dc:0d:94:0a:a9:b2:f6:7f:a6:
                    89:b8:20:57:95:13:3a:e6:f2:70:75:c8:61:91:90:
                    f3:40:56:8d:bd:49:48:ae:c8:39:19:42:4c:d4:83:
                    16:d0:02:31:c8:97:92:98:9b:c3:50:be:f6:a7:aa:
                    5a:cf:8d:b9:0e:73:e8:f1:f5:7b:98:cb:67:34:9f:
                    20:50:5a:de:14:b1:30:47:ea:5f:0a:b5:57:59:64:
                    af:55:c9:67:6c:5e:56:74:79:39:e2:e7:1b:d2:71:
                    c8:fa:e4:77:0e:24:22:c3:ac:5a:71:8f:0d:2e:37:
                    9d:0e:77:e9:2d:1b:8f:4e:3d:f6:e0:a4:d3:95:05:
                    68:eb:e7:9e:c2:70:20:d4:76:bb:ad:11:2f:10:ed:
                    58:20:34:30:94:f4:2f:3d:b1:92:78:e6:9d:30:a4:
                    0c:15:0e:d2:5a:e0:3d:11:b5:af:57:d5:bb:f2:24:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:65:03:C4:94:79:7A:0D:DE:07:8E:C6:FB:75:A3:59:75:71:6B:D6
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37332e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:c2:63:10:36:fb:cc:61:ee:bf:21:7d:e9:52:35:bc:70:
         72:28:c4:ba:8a:e9:49:bb:c6:d6:7a:15:ab:b3:24:c1:aa:d8:
         f2:9f:3f:79:80:54:25:35:47:db:28:1a:88:8b:5e:14:81:29:
         5b:88:f0:23:d7:e2:b7:8a:bb:9f:f9:59:ce:33:c7:a8:4c:34:
         9b:d6:67:6e:15:38:8e:da:75:3b:e6:7a:ee:61:d9:58:29:f6:
         9b:95:91:82:41:0d:11:c3:8c:47:a8:5e:c3:80:f4:59:3f:bb:
         70:6e:37:ac:c2:52:b8:2a:b0:d0:7e:a2:87:c7:10:ee:28:c7:
         d6:65:f9:dd:32:c7:ed:35:8c:f3:42:ab:af:ab:fb:f4:cc:7c:
         02:4a:e5:ea:dc:5f:02:b4:bc:7c:19:33:11:9f:c7:1f:6a:23:
         6f:b2:82:3a:8f:40:95:ab:6c:aa:0b:79:b2:82:a3:42:ba:6b:
         60:c3:17:b2:cb:4f:06:d0:f5:dd:99:6c:ef:cb:9d:d7:fe:71:
         c8:78:cb:7b:f4:58:1b:f6:1d:bb:f7:96:0d:e1:d8:78:fe:f0:
         8c:d0:e3:26:41:d4:85:a6:d4:bb:d0:55:e2:6a:aa:8b:96:64:
         97:a9:64:9d:86:92:bd:c7:23:6c:26:2d:81:bd:27:3d:c1:01:
         43:e1:c0:55
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQkJMe+UfOANQs8OqkaKTU/06y90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjNaFw0yNTAzMDQxODIxMjNaMDMxMTAvBgNV
BAMTKEE3NjUwM0M0OTQ3OTdBMERERTA3OEVDNkZCNzVBMzU5NzU3MTZCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBirDYyz0xUD0pga7RY0k8Q4g
VM4UVE7Lq5nsinwpVHJN77U0k60SpCPMA87FAyaxpziJ7B2weNxP86M6P/2eUkJZ
dOxEvwBd6o5eJuDdgNwNlAqpsvZ/pom4IFeVEzrm8nB1yGGRkPNAVo29SUiuyDkZ
QkzUgxbQAjHIl5KYm8NQvvanqlrPjbkOc+jx9XuYy2c0nyBQWt4UsTBH6l8KtVdZ
ZK9VyWdsXlZ0eTni5xvSccj65HcOJCLDrFpxjw0uN50Od+ktG49OPfbgpNOVBWjr
557CcCDUdrutES8Q7VggNDCU9C89sZJ45p0wpAwVDtJa4D0Rta9X1bvyJNbNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUp2UDxJR5eg3eB47G+3WjWXVxa9YwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKbSTAN
BgkqhkiG9w0BAQsFAAOCAQEAf5rCYxA2+8xh7r8hfelSNbxwcijEuorpSbvG1noV
q7MkwarY8p8/eYBUJTVH2ygaiIteFIEpW4jwI9fit4q7n/lZzjPHqEw0m9ZnbhU4
jtp1O+Z67mHZWCn2m5WRgkENEcOMR6hew4D0WT+7cG43rMJSuCqw0H6ih8cQ7ijH
1mX53TLH7TWM80Krr6v79Mx8Akrl6txfArS8fBkzEZ/HH2ojb7KCOo9Alatsqgt5
soKjQrprYMMXsstPBtD13Zls78ud1/5xyHjLe/RYG/Ydu/eWDeHYeP7wjNDjJkHU
habUu9BV4mqqi5Zkl6lknYaSvccjbCYtgb0nPcEBQ+HAVQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org