Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
File:                     AS28414.roa (raw, json)
Hash identifier:          iv0QUNm7sgl5/zRLGrTin0oUzNeHHQeS0gZk4tct0Uk=
Subject key identifier:   C4:C6:88:88:C2:8B:5E:20:E7:17:41:30:69:D6:10:29:B3:A6:FD:EF
Certificate issuer:       /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
Certificate serial:       64BEF82B40CA0C41B103FA2920AB89E55B6C123D
Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa
Signing time:             Tue 05 Mar 2024 18:09:40 +0000
ROA not before:           Tue 05 Mar 2024 18:04:40 +0000
ROA not after:            Tue 04 Mar 2025 18:09:40 +0000
asID:                     28414
IP address blocks:        187.188.110.0/24 maxlen: 24
                          187.251.197.0/24 maxlen: 24
                          187.251.236.0/24 maxlen: 24
                          189.203.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:f8:2b:40:ca:0c:41:b1:03:fa:29:20:ab:89:e5:5b:6c:12:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF
        Validity
            Not Before: Mar  5 18:04:40 2024 GMT
            Not After : Mar  4 18:09:40 2025 GMT
        Subject: CN=C4C68888C28B5E20E717413069D61029B3A6FDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:da:65:14:92:14:0b:36:5e:94:bc:52:ec:
                    56:5b:f9:59:36:47:47:90:62:f9:19:38:a2:75:33:
                    57:65:06:ff:55:a5:68:ac:18:25:18:b0:85:af:ec:
                    dd:9b:9f:fe:4e:51:a1:59:ca:22:40:cb:70:b6:05:
                    a5:f5:96:83:ae:6b:18:60:c8:bc:cc:54:28:44:14:
                    7c:70:5e:88:0f:6b:61:d0:fe:06:cc:af:59:18:c1:
                    af:53:4c:52:a8:b3:c0:40:0b:99:69:b1:35:68:b3:
                    9a:0e:b1:19:f4:8c:bc:e4:82:12:f2:47:56:a0:79:
                    78:e0:e4:dc:79:d1:fd:45:66:d3:68:31:ba:89:a5:
                    c1:59:1e:50:ce:ab:a3:b9:c5:7e:d9:87:07:fa:35:
                    d3:78:e5:8c:f1:f4:c6:24:49:44:5c:6f:fa:62:e1:
                    0d:6f:30:e0:69:c0:bc:da:7b:1f:b9:8f:c8:f5:81:
                    bb:ff:f8:20:06:e2:a4:d1:3a:89:85:ff:6e:51:f6:
                    9d:52:f2:22:1a:0a:a4:5b:12:bd:e5:37:e4:7c:35:
                    5d:be:5f:55:aa:cc:2e:cf:86:1b:31:18:b9:b5:69:
                    cd:33:d2:85:3d:a7:f5:f0:ba:85:0f:b7:ae:95:00:
                    76:08:38:7e:19:6a:9c:67:d3:b9:f4:54:cb:96:63:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C6:88:88:C2:8B:5E:20:E7:17:41:30:69:D6:10:29:B3:A6:FD:EF
            X509v3 Authority Key Identifier:
                keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/AS28414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.188.110.0/24
                  187.251.197.0/24
                  187.251.236.0/24
                  189.203.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:98:c3:00:ce:98:2f:30:c5:64:da:f5:ad:03:e0:99:c8:52:
         4d:b6:e0:1b:6f:fd:5f:d6:75:de:18:d5:c2:73:e1:ed:b4:d3:
         13:64:73:a6:74:9a:ba:e6:16:92:ff:cc:a2:4f:69:ae:7f:8e:
         4d:62:ef:c7:9a:3b:bc:2f:bb:d4:4f:81:2c:0a:23:ac:84:dc:
         76:12:34:b9:ff:83:d3:e6:88:b8:52:89:ff:fb:78:15:9d:29:
         d4:a9:f0:bd:98:d6:90:6e:6a:21:fd:5b:77:4d:28:e3:ca:6f:
         74:96:46:8f:1e:dc:0a:98:f2:c2:8d:99:0b:35:4a:c3:63:20:
         58:07:62:e2:ee:ae:22:e0:b3:35:34:0c:a0:5a:9d:16:97:ed:
         0b:c6:ed:2d:21:c4:bd:2a:85:48:4a:bb:b1:c6:13:f8:3c:85:
         d5:76:b8:54:28:b4:41:96:b2:ac:81:fb:03:71:30:36:7b:14:
         70:73:1c:ae:a0:b1:5a:46:56:53:18:ad:04:41:77:cf:e6:03:
         13:5a:b1:31:a8:db:0c:80:d4:9b:6e:ad:63:67:c6:df:1d:32:
         a5:88:cd:a8:c6:66:8b:e7:cf:5f:28:9a:f3:a5:2e:39:6e:b6:
         b8:43:16:b9:34:bc:f0:96:1d:43:c5:d5:4a:0b:c9:08:b1:5a:
         94:81:58:ba
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIUZL74K0DKDEGxA/opIKuJ5VtsEj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1
OEFBMEJGRjAeFw0yNDAzMDUxODA0NDBaFw0yNTAzMDQxODA5NDBaMDMxMTAvBgNV
BAMTKEM0QzY4ODg4QzI4QjVFMjBFNzE3NDEzMDY5RDYxMDI5QjNBNkZERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J9plFJIUCzZelLxS7FZb+Vk2
R0eQYvkZOKJ1M1dlBv9VpWisGCUYsIWv7N2bn/5OUaFZyiJAy3C2BaX1loOuaxhg
yLzMVChEFHxwXogPa2HQ/gbMr1kYwa9TTFKos8BAC5lpsTVos5oOsRn0jLzkghLy
R1ageXjg5Nx50f1FZtNoMbqJpcFZHlDOq6O5xX7Zhwf6NdN45Yzx9MYkSURcb/pi
4Q1vMOBpwLzaex+5j8j1gbv/+CAG4qTROomF/25R9p1S8iIaCqRbEr3lN+R8NV2+
X1WqzC7PhhsxGLm1ac0z0oU9p/XwuoUPt66VAHYIOH4Zapxn07n0VMuWY9sZAgMB
AAGjggKqMIICpjAdBgNVHQ4EFgQUxMaIiMKLXiDnF0EwadYQKbOm/e8wHwYDVR0j
BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0
OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy
NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3
Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx
MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvQVMyODQxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALu8bgME
ALv7xQMEALv77AMEAL3LGDANBgkqhkiG9w0BAQsFAAOCAQEANpjDAM6YLzDFZNr1
rQPgmchSTbbgG2/9X9Z13hjVwnPh7bTTE2RzpnSauuYWkv/Mok9prn+OTWLvx5o7
vC+71E+BLAojrITcdhI0uf+D0+aIuFKJ//t4FZ0p1KnwvZjWkG5qIf1bd00o48pv
dJZGjx7cCpjywo2ZCzVKw2MgWAdi4u6uIuCzNTQMoFqdFpftC8btLSHEvSqFSEq7
scYT+DyF1Xa4VCi0QZayrIH7A3EwNnsUcHMcrqCxWkZWUxitBEF3z+YDE1qxMajb
DIDUm26tY2fG3x0ypYjNqMZmi+fPXyia86UuOW62uEMWuTS88JYdQ8XVSgvJCLFa
lIFYug==
-----END CERTIFICATE-----
Generated at Mon Jun 24 21:21:41 2024 by rpki-client on console-ams.rpki-client.org