Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
File:                     3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          y29yNVnIEGA5cvIvTFHrG/Jdd0KwDXBMpZil5EODutI=
Subject key identifier:   D5:F5:B1:C0:20:2E:B7:E7:85:90:3B:1F:71:0F:56:46:02:82:5F:4D
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       62109F9BC9E3D3611D0DDAA4BD33E351E9BE1803
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:47 +0000
ROA not before:           Tue 04 Feb 2025 18:22:47 +0000
ROA not after:            Tue 03 Feb 2026 18:27:47 +0000
asID:                     28099
IP address blocks:        168.194.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:9f:9b:c9:e3:d3:61:1d:0d:da:a4:bd:33:e3:51:e9:be:18:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:47 2025 GMT
            Not After : Feb  3 18:27:47 2026 GMT
        Subject: CN=D5F5B1C0202EB7E785903B1F710F564602825F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:1a:da:ef:c1:0d:94:02:3e:ba:40:80:a3:
                    f2:c7:75:14:c4:a7:4b:ee:9b:33:16:2d:76:85:80:
                    cf:5a:80:bd:01:ab:70:1f:f2:6e:22:f7:62:ce:a1:
                    25:c3:ba:8a:73:08:3d:4c:84:ce:e5:66:f1:2d:46:
                    10:e3:f2:4a:00:0c:ff:ad:7b:41:10:f5:6a:53:40:
                    ee:66:5e:7b:e7:42:be:24:c0:8d:e9:25:1c:58:d6:
                    62:47:65:93:16:bc:1a:48:13:99:fc:26:c9:8b:22:
                    ec:a3:c2:c3:77:75:e4:48:c8:e6:30:c5:4c:8d:ba:
                    89:cf:ba:d2:28:82:b6:41:d2:a7:6c:a5:2e:60:0b:
                    c5:7c:03:c6:80:39:cc:03:4a:a7:9a:95:62:a5:25:
                    cd:6f:b7:4a:00:91:65:70:d1:ae:1f:8e:c9:94:0c:
                    c3:b0:95:16:e2:ad:41:de:2b:81:28:42:97:76:b0:
                    98:98:e9:8b:89:e1:41:49:ba:bb:78:53:a5:88:ae:
                    51:35:01:52:bf:0f:6b:a7:91:d3:6a:c1:cf:ec:76:
                    41:83:34:a0:30:1a:7a:c1:93:f4:93:37:38:1e:eb:
                    5d:6d:04:6b:f6:dd:7f:4f:4f:8c:d4:ec:73:4f:89:
                    d5:ee:5a:49:20:cc:c4:f4:f2:49:69:94:88:15:79:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:B1:C0:20:2E:B7:E7:85:90:3B:1F:71:0F:56:46:02:82:5F:4D
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:00:4f:a0:ca:c1:57:66:f6:8f:71:fa:a2:a9:b8:d0:48:
         b7:32:b7:65:74:d9:54:a3:a7:48:9f:fc:2b:ac:4e:d4:b9:ef:
         c5:2d:10:e2:32:e9:b1:f6:8f:c1:04:f6:c4:2d:66:65:d5:9b:
         ae:89:99:e1:7f:64:bd:32:ec:b9:e9:2a:6f:d3:aa:eb:69:8f:
         3e:63:e7:5f:2a:c5:85:06:f3:71:a7:6c:30:b2:11:5a:07:b8:
         b7:38:4d:93:c7:1a:a6:cc:f2:7b:6c:b1:0c:09:93:d9:d9:1e:
         9c:24:0d:a8:f8:16:be:f8:ad:42:ff:38:2a:47:3e:37:ab:ba:
         2c:0b:21:40:1f:57:77:81:4c:7b:42:70:90:79:80:1a:d7:da:
         01:18:6e:35:7a:cb:37:89:23:27:3b:f1:ac:91:0b:45:f1:ef:
         26:20:e4:70:01:04:d7:14:e4:29:98:da:b4:e4:d4:89:8c:47:
         29:b3:6f:5f:71:bb:94:99:f8:71:28:61:cf:77:aa:fb:ce:3c:
         77:5b:06:d2:ea:12:ce:e2:67:13:5b:07:c3:e5:b4:f5:03:68:
         71:01:21:51:82:b9:ec:f1:57:dc:48:50:a9:f6:a1:dc:40:f4:
         a1:f0:3d:7e:41:f4:07:3d:90:e8:db:bc:1f:81:b4:10:50:00:
         35:1f:29:ec
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYhCfm8nj02EdDdqkvTPjUem+GAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzNzA5N0UxNEI4NjlBOTNFNDIxRkY0QkYwNzg3OEY3
RkUxREIxMjAeFw0yNTAyMDQxODIyNDdaFw0yNjAyMDMxODI3NDdaMDMxMTAvBgNV
BAMTKEQ1RjVCMUMwMjAyRUI3RTc4NTkwM0IxRjcxMEY1NjQ2MDI4MjVGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFxra78ENlAI+ukCAo/LHdRTE
p0vumzMWLXaFgM9agL0Bq3Af8m4i92LOoSXDuopzCD1MhM7lZvEtRhDj8koADP+t
e0EQ9WpTQO5mXnvnQr4kwI3pJRxY1mJHZZMWvBpIE5n8JsmLIuyjwsN3deRIyOYw
xUyNuonPutIogrZB0qdspS5gC8V8A8aAOcwDSqealWKlJc1vt0oAkWVw0a4fjsmU
DMOwlRbirUHeK4EoQpd2sJiY6YuJ4UFJurt4U6WIrlE1AVK/D2unkdNqwc/sdkGD
NKAwGnrBk/STNzge611tBGv23X9PT4zU7HNPidXuWkkgzMT08klplIgVeW3jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1fWxwCAut+eFkDsfcQ9WRgKCX00wHwYDVR0j
BBgwFoAUSTcJfhS4aak+Qh/0vweHj3/h2xIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBMkRGMzRFNEYyMzJFNEI4OUQzODZCQ0M4Mzc0MzYw
QzQyQkI5NDBFNzdEREQ4QjM1ODAwQjYzNTVDQkIzLzAvNDkzNzA5N0UxNEI4NjlB
OTNFNDIxRkY0QkYwNzg3OEY3RkUxREIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTM3MDk3RTE0Qjg2OUE5M0U0
MjFGRjRCRjA3ODc4RjdGRTFEQjEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTJERjM0RTRGMjMyRTRCODlEMzg2QkNDODM3NDM2MEM0MkJCOTQw
RTc3REREOEIzNTgwMEI2MzU1Q0JCMy8wLzMxMzYzODJlMzEzOTM0MmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMLE
MA0GCSqGSIb3DQEBCwUAA4IBAQA+RABPoMrBV2b2j3H6oqm40Ei3MrdldNlUo6dI
n/wrrE7Uue/FLRDiMumx9o/BBPbELWZl1ZuuiZnhf2S9Muy56Spv06rraY8+Y+df
KsWFBvNxp2wwshFaB7i3OE2TxxqmzPJ7bLEMCZPZ2R6cJA2o+Ba++K1C/zgqRz43
q7osCyFAH1d3gUx7QnCQeYAa19oBGG41ess3iSMnO/GskQtF8e8mIORwAQTXFOQp
mNq05NSJjEcps29fcbuUmfhxKGHPd6r7zjx3WwbS6hLO4mcTWwfD5bT1A2hxASFR
grns8VfcSFCp9qHcQPSh8D1+QfQHPZDo27wfgbQQUAA1Hyns
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:38 2025 by rpki-client