Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa
File:                     3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa (raw, json)
Hash identifier:          W7Y5/EoL9WNQV/JG5snIlLna8/MBMXe+MO9jiyB8alU=
Subject key identifier:   43:A4:87:4C:4D:AF:84:15:AA:92:8C:3F:E3:CB:0D:71:11:37:99:E5
Certificate issuer:       /CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
Certificate serial:       5F49125756859A91817C678DF49B8BEEA921EFC6
Authority key identifier: 42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa
Signing time:             Tue 16 Apr 2024 16:30:00 +0000
ROA not before:           Tue 16 Apr 2024 16:25:00 +0000
ROA not after:            Tue 15 Apr 2025 16:30:00 +0000
asID:                     6471
IP address blocks:        192.141.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:12:57:56:85:9a:91:81:7c:67:8d:f4:9b:8b:ee:a9:21:ef:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
        Validity
            Not Before: Apr 16 16:25:00 2024 GMT
            Not After : Apr 15 16:30:00 2025 GMT
        Subject: CN=43A4874C4DAF8415AA928C3FE3CB0D71113799E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:65:40:5f:a8:b5:d4:d8:25:cb:bb:e6:8e:
                    02:0d:7e:72:fe:dc:40:3a:e2:dc:3a:c7:0c:25:cd:
                    fb:c4:bd:9b:6e:33:ef:83:33:df:83:f2:b3:c7:b7:
                    b6:6a:71:ed:9c:12:37:ff:fe:04:c0:9d:41:22:ca:
                    c9:da:62:cc:36:43:5f:25:f4:e0:cf:c8:c9:1e:2f:
                    6d:03:77:16:0b:c9:0f:e9:ff:99:ae:5e:56:e7:c4:
                    7d:f3:d3:e6:f1:35:ac:ff:7e:18:32:3f:0c:ee:5f:
                    28:05:4d:27:84:87:43:1e:4e:80:51:d4:a3:f5:7e:
                    79:71:ec:35:7b:31:29:15:65:37:73:47:8b:00:66:
                    c8:8b:c8:f3:bb:6a:84:1d:a0:7f:df:de:dc:da:3f:
                    ab:77:09:7f:50:a6:5d:31:f4:ef:0e:26:5f:dd:82:
                    86:2e:af:52:2b:74:23:67:fe:0b:23:2e:1b:50:61:
                    0d:07:22:94:78:d8:c1:5c:42:80:ce:fb:b1:9f:0f:
                    51:70:8b:26:00:12:dd:1f:93:53:84:6a:03:5e:cd:
                    fb:74:77:2b:52:1c:92:b5:44:e8:67:3a:a7:b8:40:
                    cb:0d:a5:e1:d9:cb:dd:c5:f6:f2:4c:41:83:72:44:
                    14:71:18:0b:c2:1b:52:aa:49:73:1f:80:81:fa:ac:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:87:4C:4D:AF:84:15:AA:92:8C:3F:E3:CB:0D:71:11:37:99:E5
            X509v3 Authority Key Identifier:
                keyid:42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:52:c1:4e:2c:02:23:5a:00:a1:17:fe:a3:52:0b:16:c1:9d:
         d1:37:83:6d:74:91:c4:aa:b5:98:57:63:47:ba:f8:91:6e:b9:
         08:a5:aa:4b:b4:a7:40:b9:9d:37:54:d3:69:82:90:49:1d:4c:
         06:3b:59:c9:d6:6c:ea:7a:31:30:96:80:c3:d5:f2:db:29:01:
         5d:24:ee:13:7e:67:b9:46:f8:fd:ee:8e:a4:78:b8:a0:74:ce:
         6c:46:a1:4c:8b:d8:a6:8a:76:51:4d:6f:1a:04:93:d7:c7:cc:
         47:39:88:96:ad:5c:e1:53:11:7e:f2:43:f4:b5:3d:2a:55:76:
         bc:b5:e5:00:9f:36:1c:77:34:f1:a8:1d:25:ba:66:ea:20:89:
         1a:1d:ce:26:b2:b5:b0:73:14:6c:e6:b9:9b:c8:0d:c7:e5:94:
         8b:f5:60:1c:dc:61:c4:a5:b8:a5:30:f9:a3:0a:a8:c0:d4:d9:
         87:55:a2:38:1a:73:72:27:04:9c:42:56:89:6e:8b:d6:1d:d0:
         5c:c8:61:62:9c:eb:4c:eb:c1:76:93:6f:6a:40:01:ff:43:ce:
         68:33:7f:bb:80:32:ac:d5:f2:9c:e4:cc:22:73:b3:db:64:20:
         46:e9:9a:6a:41:b4:8e:da:8f:6c:67:41:12:b7:74:cc:78:6a:
         6d:f4:25:25
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUX0kSV1aFmpGBfGeN9JuL7qkh78YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJCRDhEODc4QzgyNDM1NDNGMDhGMDZFQjkyMjY5Q0NG
NEZGNDZDOTAeFw0yNDA0MTYxNjI1MDBaFw0yNTA0MTUxNjMwMDBaMDMxMTAvBgNV
BAMTKDQzQTQ4NzRDNERBRjg0MTVBQTkyOEMzRkUzQ0IwRDcxMTEzNzk5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+p2VAX6i11Ngly7vmjgINfnL+
3EA64tw6xwwlzfvEvZtuM++DM9+D8rPHt7Zqce2cEjf//gTAnUEiysnaYsw2Q18l
9ODPyMkeL20DdxYLyQ/p/5muXlbnxH3z0+bxNaz/fhgyPwzuXygFTSeEh0MeToBR
1KP1fnlx7DV7MSkVZTdzR4sAZsiLyPO7aoQdoH/f3tzaP6t3CX9Qpl0x9O8OJl/d
goYur1IrdCNn/gsjLhtQYQ0HIpR42MFcQoDO+7GfD1FwiyYAEt0fk1OEagNezft0
dytSHJK1ROhnOqe4QMsNpeHZy93F9vJMQYNyRBRxGAvCG1KqSXMfgIH6rFubAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQ6SHTE2vhBWqkow/48sNcRE3meUwHwYDVR0j
BBgwFoAUQr2Nh4yCQ1Q/CPBuuSJpzPT/RskwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0FDOThGQTQ3Rjc0QkQwMEYyNjVENzYzMkY4MjFFMDI3
NjlGNUQ3OTk5RTkyMENDMDFGNUIyOUNGRjdBMEZCLzAvNDJCRDhEODc4QzgyNDM1
NDNGMDhGMDZFQjkyMjY5Q0NGNEZGNDZDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkJEOEQ4NzhDODI0MzU0M0Yw
OEYwNkVCOTIyNjlDQ0Y0RkY0NkM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBQzk4RkE0N0Y3NEJEMDBGMjY1RDc2MzJGODIxRTAyNzY5RjVENzk5
OUU5MjBDQzAxRjVCMjlDRkY3QTBGQi8wLzMxMzkzMjJlMzEzNDMxMmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjM0MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCNqDAN
BgkqhkiG9w0BAQsFAAOCAQEAUFLBTiwCI1oAoRf+o1ILFsGd0TeDbXSRxKq1mFdj
R7r4kW65CKWqS7SnQLmdN1TTaYKQSR1MBjtZydZs6noxMJaAw9Xy2ykBXSTuE35n
uUb4/e6OpHi4oHTObEahTIvYpop2UU1vGgST18fMRzmIlq1c4VMRfvJD9LU9KlV2
vLXlAJ82HHc08agdJbpm6iCJGh3OJrK1sHMUbOa5m8gNx+WUi/VgHNxhxKW4pTD5
owqowNTZh1WiOBpzcicEnEJWiW6L1h3QXMhhYpzrTOvBdpNvakAB/0POaDN/u4Ay
rNXynOTMInOz22QgRumaakG0jtqPbGdBErd0zHhqbfQlJQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:48 2024 by rpki-client on console-ams.rpki-client.org