Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa
File:                     3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (raw, json)
Hash identifier:          Swm4+O2Q3POOIgN6GGTkvjwa7IOlQSeib9zvatvFjoI=
Subject key identifier:   3B:77:3A:9D:82:83:37:D0:71:77:1D:4F:63:A7:CC:37:CC:4E:72:5A
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       34A8B5B99ACD49F4B55E3FAF502B833E7E2B3227
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa
Signing time:             Tue 05 Mar 2024 17:45:02 +0000
ROA not before:           Tue 05 Mar 2024 17:40:02 +0000
ROA not after:            Tue 04 Mar 2025 17:45:02 +0000
asID:                     265794
IP address blocks:        192.141.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a8:b5:b9:9a:cd:49:f4:b5:5e:3f:af:50:2b:83:3e:7e:2b:32:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Mar  5 17:40:02 2024 GMT
            Not After : Mar  4 17:45:02 2025 GMT
        Subject: CN=3B773A9D828337D071771D4F63A7CC37CC4E725A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:1e:3c:96:bd:10:ef:10:0e:95:4a:0a:c1:
                    c4:f3:84:28:eb:3b:9d:1f:cc:3c:19:1f:9c:fa:cf:
                    15:9d:c7:3a:82:18:bf:76:94:57:d5:84:a4:e5:9d:
                    af:b7:94:85:54:51:81:30:81:70:3e:f6:e6:a8:39:
                    b3:45:cb:51:3b:fa:49:9b:91:52:47:2c:41:36:d0:
                    d4:cf:d3:7f:a3:a2:b6:3b:41:7d:1f:67:37:d5:a1:
                    1e:f2:51:1f:68:5c:70:47:76:36:a1:a4:cd:7f:d0:
                    d8:d0:47:39:86:69:e5:6c:b1:d9:07:33:6e:21:60:
                    ea:ce:5b:4c:36:06:b7:54:81:38:90:75:1a:96:e1:
                    59:19:84:ac:d3:0f:4f:76:f6:12:3c:2a:f3:9d:70:
                    14:1a:54:49:60:c1:4d:3b:09:0f:3d:62:f1:d3:9a:
                    34:fc:7b:29:c8:d1:60:f7:f2:13:c6:5a:3f:04:4e:
                    a6:a3:6d:35:e2:52:18:76:5d:dc:a8:40:9b:de:49:
                    7d:44:05:09:99:75:84:21:a6:4d:70:a2:d3:2f:fe:
                    cc:75:24:25:ea:a1:0c:4d:93:3b:35:99:06:59:70:
                    72:e1:f6:e5:2c:cb:79:a7:3f:2f:b7:b0:ec:19:e4:
                    c8:18:c3:3d:bb:28:74:41:f5:79:8e:6a:87:90:78:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:3A:9D:82:83:37:D0:71:77:1D:4F:63:A7:CC:37:CC:4E:72:5A
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:dc:c2:d9:18:13:01:f1:f2:2b:3d:5a:94:10:55:a4:d5:
         c8:dc:85:8f:cf:5c:ec:44:2e:c0:d6:56:ac:03:34:7a:92:f0:
         e5:21:9e:33:ab:23:f2:33:21:4d:a9:3f:9e:d1:f7:b6:d2:4f:
         43:b6:ab:4d:c3:f4:45:43:9e:23:38:a8:3b:41:87:4a:1f:c9:
         18:ab:61:04:54:4c:f1:17:1e:47:aa:01:15:97:a4:1d:85:27:
         6e:34:58:65:0e:5b:78:ab:ef:89:fe:2d:de:89:67:28:32:fe:
         c3:d1:c4:30:8c:9d:29:04:46:44:79:1b:76:fe:d5:c5:e2:29:
         7d:fd:97:6f:10:28:42:e8:8b:92:98:14:af:a7:44:15:b6:7d:
         30:db:87:31:0e:e8:1d:75:2d:3c:01:46:d1:aa:d5:75:86:e2:
         f4:e1:1e:75:54:45:5c:08:f4:9b:19:c2:23:95:d5:5e:ce:f4:
         0b:a8:7e:cd:04:00:34:d4:48:8e:e5:a3:6e:f7:95:7b:81:0d:
         9d:a7:64:ab:16:52:25:c4:1e:e1:ef:b3:eb:fd:a3:26:0d:ad:
         64:40:ce:77:8b:d0:80:6e:d8:e0:9f:ab:3a:ba:28:ca:d3:29:
         3b:3b:19:89:80:3f:ea:9c:c9:bc:af:75:1f:59:4f:c1:f3:d3:
         a7:57:0a:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNKi1uZrNSfS1Xj+vUCuDPn4rMicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy
MTlGNTlCNTAeFw0yNDAzMDUxNzQwMDJaFw0yNTAzMDQxNzQ1MDJaMDMxMTAvBgNV
BAMTKDNCNzczQTlEODI4MzM3RDA3MTc3MUQ0RjYzQTdDQzM3Q0M0RTcyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61R48lr0Q7xAOlUoKwcTzhCjr
O50fzDwZH5z6zxWdxzqCGL92lFfVhKTlna+3lIVUUYEwgXA+9uaoObNFy1E7+kmb
kVJHLEE20NTP03+jorY7QX0fZzfVoR7yUR9oXHBHdjahpM1/0NjQRzmGaeVssdkH
M24hYOrOW0w2BrdUgTiQdRqW4VkZhKzTD0929hI8KvOdcBQaVElgwU07CQ89YvHT
mjT8eynI0WD38hPGWj8ETqajbTXiUhh2XdyoQJveSX1EBQmZdYQhpk1wotMv/sx1
JCXqoQxNkzs1mQZZcHLh9uUsy3mnPy+3sOwZ5MgYwz27KHRB9XmOaoeQeN4VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUO3c6nYKDN9Bxdx1PY6fMN8xOclowHwYDVR0j
BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD
MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB
MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE
QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz
RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzMxMzkzMjJlMzEzNDMxMmUzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwI0q
MA0GCSqGSIb3DQEBCwUAA4IBAQALI9zC2RgTAfHyKz1alBBVpNXI3IWPz1zsRC7A
1lasAzR6kvDlIZ4zqyPyMyFNqT+e0fe20k9DtqtNw/RFQ54jOKg7QYdKH8kYq2EE
VEzxFx5HqgEVl6QdhSduNFhlDlt4q++J/i3eiWcoMv7D0cQwjJ0pBEZEeRt2/tXF
4il9/ZdvEChC6IuSmBSvp0QVtn0w24cxDugddS08AUbRqtV1huL04R51VEVcCPSb
GcIjldVezvQLqH7NBAA01EiO5aNu95V7gQ2dp2SrFlIlxB7h77Pr/aMmDa1kQM53
i9CAbtjgn6s6uijK0yk7OxmJgD/qnMm8r3UfWU/B89OnVwp6
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org