Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa
File:                     3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa (raw, json)
Hash identifier:          /lbw3RhRM5e1f/qA3uXlHj8S9rwnl7DEaQrgtHXzZ0A=
Subject key identifier:   D6:0B:1A:BE:15:42:90:65:2D:5B:31:00:52:C6:E0:44:EA:E8:0C:D8
Certificate issuer:       /CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
Certificate serial:       7342308C45FF1CF308166D385237DEB2B290E132
Authority key identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa
Signing time:             Tue 05 Mar 2024 18:16:40 +0000
ROA not before:           Tue 05 Mar 2024 18:11:40 +0000
ROA not after:            Tue 04 Mar 2025 18:16:40 +0000
asID:                     263691
IP address blocks:        198.49.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:42:30:8c:45:ff:1c:f3:08:16:6d:38:52:37:de:b2:b2:90:e1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF
        Validity
            Not Before: Mar  5 18:11:40 2024 GMT
            Not After : Mar  4 18:16:40 2025 GMT
        Subject: CN=D60B1ABE154290652D5B310052C6E044EAE80CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:6f:66:ca:d4:00:9a:75:97:45:a2:a0:3f:
                    76:11:e6:3b:fa:85:22:de:de:8c:52:0e:6b:0e:34:
                    11:28:17:1e:63:c1:f2:e9:c9:dd:c8:a9:04:53:9d:
                    98:84:ed:87:46:0e:c4:1c:33:97:20:42:71:19:14:
                    16:16:c9:5d:bc:0b:1b:68:e3:c0:28:86:02:45:48:
                    ab:f1:15:89:d5:80:7f:07:2a:ca:87:7e:de:f8:47:
                    8d:c7:06:23:1f:6a:ac:7e:ba:b4:c6:e9:a4:33:b8:
                    c2:94:de:e0:d9:3f:87:c2:4b:85:95:56:b0:03:e3:
                    d6:db:d2:31:21:f1:ba:80:ff:f2:7b:e6:16:7c:c5:
                    27:62:09:4d:e4:80:77:c2:4b:b2:d3:96:a4:5e:82:
                    1b:f0:9c:bb:e9:bb:77:a8:1f:3b:dc:df:3b:6b:c8:
                    44:78:b3:2a:8e:a7:69:f1:d9:d8:6f:85:9b:5e:d6:
                    21:c7:03:71:94:10:22:87:6b:8b:9e:dc:8c:3c:fa:
                    56:db:6d:36:fc:ec:bc:93:90:b0:b6:b3:e3:68:7d:
                    b6:50:21:b1:93:43:94:2a:33:2f:e7:46:07:43:7f:
                    e0:8e:2d:86:06:83:27:f2:b9:cb:62:2c:80:4b:90:
                    0a:a8:bf:1b:b5:ee:c4:4a:b1:54:fb:f9:d3:7d:42:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:1A:BE:15:42:90:65:2D:5B:31:00:52:C6:E0:44:EA:E8:0C:D8
            X509v3 Authority Key Identifier:
                keyid:DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/3139382e34392e3132382e302f32322d3234203d3e20323633363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:28:5a:e1:99:5b:37:d8:91:c3:59:52:61:79:04:63:ba:66:
         89:f7:11:54:41:33:ac:e3:a3:16:93:a8:bc:6f:e8:f1:2c:6b:
         2c:f8:b0:9a:34:a3:a9:37:0b:a5:ea:4d:7c:fe:19:34:e9:cc:
         72:26:86:8c:8d:7d:9f:a1:f4:6f:ba:35:62:91:0a:10:e9:c7:
         b3:f8:79:fc:c4:dc:bf:f9:9f:d0:14:a1:3a:4d:26:c9:6f:29:
         cc:ea:a0:d6:6e:92:f2:db:30:2f:29:cf:d9:82:6a:45:a7:95:
         40:41:27:e6:84:01:01:fc:20:25:7f:ad:72:9e:14:65:98:54:
         18:78:36:96:53:c3:70:a2:a4:3c:38:31:dd:82:d6:22:22:87:
         02:a4:28:b1:64:65:8e:d7:b1:ff:ed:61:eb:39:60:1c:4e:7f:
         d9:28:60:19:c0:09:a2:8b:23:f1:90:a3:fd:51:70:1c:17:26:
         51:a5:83:75:da:92:62:04:d8:f4:dd:57:70:18:c4:6a:2f:6b:
         74:86:7a:9d:d0:2a:eb:67:28:83:03:8e:e0:40:40:53:f6:6d:
         5a:fc:80:08:ce:ed:b6:80:61:4e:1b:60:30:9b:15:d5:50:1f:
         d4:7c:34:7f:15:a4:d2:c3:f3:27:b5:84:9d:da:32:86:74:5b:
         94:cc:bf:45
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc0IwjEX/HPMIFm04UjfesrKQ4TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERGMTJBNTc4MTZGNkUxODJBRkIwM0ZERkE4NzcyMzI2
OEFDMUNBRjAeFw0yNDAzMDUxODExNDBaFw0yNTAzMDQxODE2NDBaMDMxMTAvBgNV
BAMTKEQ2MEIxQUJFMTU0MjkwNjUyRDVCMzEwMDUyQzZFMDQ0RUFFODBDRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWG9mytQAmnWXRaKgP3YR5jv6
hSLe3oxSDmsONBEoFx5jwfLpyd3IqQRTnZiE7YdGDsQcM5cgQnEZFBYWyV28Cxto
48AohgJFSKvxFYnVgH8HKsqHft74R43HBiMfaqx+urTG6aQzuMKU3uDZP4fCS4WV
VrAD49bb0jEh8bqA//J75hZ8xSdiCU3kgHfCS7LTlqReghvwnLvpu3eoHzvc3ztr
yER4syqOp2nx2dhvhZte1iHHA3GUECKHa4ue3Iw8+lbbbTb87LyTkLC2s+NofbZQ
IbGTQ5QqMy/nRgdDf+COLYYGgyfyuctiLIBLkAqovxu17sRKsVT7+dN9QrohAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1gsavhVCkGUtWzEAUsbgROroDNgwHwYDVR0j
BBgwFoAU3fEqV4Fvbhgq+wP9+odyMmisHK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMUE3MTE2QTZGQjlFMURCREIzQjkyN0RFNTQ5MzIxNTIw
OTFFNzQxMzgxNjk0RjAzNUI2QjUxMTc2Mjg4QUMzLzAvRERGMTJBNTc4MTZGNkUx
ODJBRkIwM0ZERkE4NzcyMzI2OEFDMUNBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREYxMkE1NzgxNkY2RTE4MkFG
QjAzRkRGQTg3NzIzMjY4QUMxQ0FGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjFBNzExNkE2RkI5RTFEQkRCM0I5MjdERTU0OTMyMTUyMDkxRTc0MTM4
MTY5NEYwMzVCNkI1MTE3NjI4OEFDMy8wLzMxMzkzODJlMzQzOTJlMzEzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjGA
MA0GCSqGSIb3DQEBCwUAA4IBAQBYKFrhmVs32JHDWVJheQRjumaJ9xFUQTOs46MW
k6i8b+jxLGss+LCaNKOpNwul6k18/hk06cxyJoaMjX2fofRvujVikQoQ6cez+Hn8
xNy/+Z/QFKE6TSbJbynM6qDWbpLy2zAvKc/ZgmpFp5VAQSfmhAEB/CAlf61ynhRl
mFQYeDaWU8NwoqQ8ODHdgtYiIocCpCixZGWO17H/7WHrOWAcTn/ZKGAZwAmiiyPx
kKP9UXAcFyZRpYN12pJiBNj03VdwGMRqL2t0hnqd0CrrZyiDA47gQEBT9m1a/IAI
zu22gGFOG2AwmxXVUB/UfDR/FaTSw/MntYSd2jKGdFuUzL9F
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org