Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139382e302f32342d3234203d3e203238303939.roa
File:                     3136382e3139342e3139382e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          Su/36XosoKcP3/THnVXfBBuFX64fn9jIJyg1+BsqUVg=
Subject key identifier:   14:F0:FA:81:C9:27:2A:5F:73:82:2B:78:AD:3F:73:9E:B4:36:7D:E7
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       0FCB5B397E84C15F6DB57FE33AF6771BB6E46211
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139382e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:43 +0000
ROA not before:           Tue 05 Mar 2024 17:56:43 +0000
ROA not after:            Tue 04 Mar 2025 18:01:43 +0000
asID:                     28099
IP address blocks:        168.194.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cb:5b:39:7e:84:c1:5f:6d:b5:7f:e3:3a:f6:77:1b:b6:e4:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:43 2024 GMT
            Not After : Mar  4 18:01:43 2025 GMT
        Subject: CN=14F0FA81C9272A5F73822B78AD3F739EB4367DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:7e:d0:cf:57:03:1c:25:59:12:b9:90:b7:
                    c8:cb:d0:91:5a:03:ab:9c:c3:8d:be:b2:f5:55:06:
                    93:8e:ab:b9:9d:a1:31:9d:f3:e0:98:ad:67:85:a9:
                    f9:a3:4e:5d:af:44:cb:cb:18:c5:db:61:02:86:ab:
                    41:cc:7f:44:79:b8:2e:65:bd:46:8e:32:c4:c9:88:
                    1c:9c:61:fa:aa:98:bb:97:11:a5:c0:7f:25:38:39:
                    75:d6:44:7f:a1:b5:98:3d:6f:c2:95:fe:4f:0f:02:
                    2d:dd:eb:0d:5d:1a:4a:3e:bc:ed:ac:ce:aa:ea:8b:
                    5b:a2:12:c1:ff:94:29:eb:39:0e:e7:5a:79:b0:39:
                    a5:46:77:8d:18:18:bf:de:19:61:0c:3e:6a:ca:c2:
                    de:63:c4:f6:37:93:04:d6:47:fb:e5:9c:60:90:af:
                    ec:85:a1:13:03:eb:25:4e:c3:64:22:6d:0f:60:c6:
                    f5:68:f3:9b:9b:9b:fe:b3:63:55:c1:9e:2c:02:78:
                    b7:ca:da:b1:08:11:f6:43:25:35:a8:30:89:f6:22:
                    d5:80:cc:97:4a:fb:0a:bb:49:60:8d:80:be:67:29:
                    8c:09:5d:77:30:61:97:d9:8d:e4:0e:75:fa:bb:0c:
                    d5:2d:46:1e:e4:85:45:91:d1:c3:16:24:59:5e:48:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:FA:81:C9:27:2A:5F:73:82:2B:78:AD:3F:73:9E:B4:36:7D:E7
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139382e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:69:6e:dc:66:21:d4:69:74:1b:19:d5:e2:9c:53:74:e7:16:
         45:58:9d:c1:15:fe:9c:5e:b7:fc:6a:2a:80:43:ea:7d:54:5b:
         60:01:ec:df:b9:8f:c0:75:94:d0:b4:1b:0f:3a:0e:01:a6:ea:
         d4:e7:c0:c7:95:bf:66:17:9e:27:f1:1a:26:2d:ab:a3:81:3c:
         96:89:2a:7f:6d:b7:0a:96:12:2e:ed:cc:94:ef:12:4d:6c:19:
         37:8a:55:98:b5:92:6c:1d:a4:3f:fa:36:fa:15:b9:de:70:cb:
         ab:ab:3d:bd:71:64:6f:63:0d:4f:9e:33:2d:4d:57:dc:9e:9f:
         b1:dd:31:59:09:14:34:c1:aa:4d:13:17:2c:c0:10:9c:36:d1:
         44:80:51:9c:ff:6c:c4:f4:bc:91:29:f2:79:0d:78:21:79:0b:
         8a:99:a8:cd:6b:2c:ff:bd:b9:e2:40:a7:86:0d:01:24:e9:73:
         b3:50:ef:ab:71:6c:7b:5b:d5:60:b5:cf:cc:4d:8c:9e:96:05:
         00:90:19:d2:6f:07:44:03:f3:78:a8:fe:80:8e:3e:54:7f:b0:
         52:85:c9:6b:f6:8f:ec:4d:70:a5:9b:0e:46:9a:2f:03:99:64:
         d9:8e:52:81:65:12:33:0e:01:ea:da:4c:6c:31:cc:90:89:15:
         35:f2:c6:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD8tbOX6EwV9ttX/jOvZ3G7bkYhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzNzA5N0UxNEI4NjlBOTNFNDIxRkY0QkYwNzg3OEY3
RkUxREIxMjAeFw0yNDAzMDUxNzU2NDNaFw0yNTAzMDQxODAxNDNaMDMxMTAvBgNV
BAMTKDE0RjBGQTgxQzkyNzJBNUY3MzgyMkI3OEFEM0Y3MzlFQjQzNjdERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1H7Qz1cDHCVZErmQt8jL0JFa
A6ucw42+svVVBpOOq7mdoTGd8+CYrWeFqfmjTl2vRMvLGMXbYQKGq0HMf0R5uC5l
vUaOMsTJiBycYfqqmLuXEaXAfyU4OXXWRH+htZg9b8KV/k8PAi3d6w1dGko+vO2s
zqrqi1uiEsH/lCnrOQ7nWnmwOaVGd40YGL/eGWEMPmrKwt5jxPY3kwTWR/vlnGCQ
r+yFoRMD6yVOw2QibQ9gxvVo85ubm/6zY1XBniwCeLfK2rEIEfZDJTWoMIn2ItWA
zJdK+wq7SWCNgL5nKYwJXXcwYZfZjeQOdfq7DNUtRh7khUWR0cMWJFleSIwxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFPD6gcknKl9zgit4rT9znrQ2fecwHwYDVR0j
BBgwFoAUSTcJfhS4aak+Qh/0vweHj3/h2xIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBMkRGMzRFNEYyMzJFNEI4OUQzODZCQ0M4Mzc0MzYw
QzQyQkI5NDBFNzdEREQ4QjM1ODAwQjYzNTVDQkIzLzAvNDkzNzA5N0UxNEI4NjlB
OTNFNDIxRkY0QkYwNzg3OEY3RkUxREIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTM3MDk3RTE0Qjg2OUE5M0U0
MjFGRjRCRjA3ODc4RjdGRTFEQjEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTJERjM0RTRGMjMyRTRCODlEMzg2QkNDODM3NDM2MEM0MkJCOTQw
RTc3REREOEIzNTgwMEI2MzU1Q0JCMy8wLzMxMzYzODJlMzEzOTM0MmUzMTM5Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMLG
MA0GCSqGSIb3DQEBCwUAA4IBAQA0aW7cZiHUaXQbGdXinFN05xZFWJ3BFf6cXrf8
aiqAQ+p9VFtgAezfuY/AdZTQtBsPOg4BpurU58DHlb9mF54n8RomLaujgTyWiSp/
bbcKlhIu7cyU7xJNbBk3ilWYtZJsHaQ/+jb6FbnecMurqz29cWRvYw1PnjMtTVfc
np+x3TFZCRQ0wapNExcswBCcNtFEgFGc/2zE9LyRKfJ5DXgheQuKmajNayz/vbni
QKeGDQEk6XOzUO+rcWx7W9Vgtc/MTYyelgUAkBnSbwdEA/N4qP6Ajj5Uf7BShclr
9o/sTXClmw5Gmi8DmWTZjlKBZRIzDgHq2kxsMcyQiRU18sZw
-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:06 2024 by rpki-client on console-ams.rpki-client.org