Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa
File:                     3138362e37322e302e302f31342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          xOJu6pvJB0n/zW+sPKdgJx+7OAwdz3F9NRA6Axew/Og=
Subject key identifier:   5A:33:32:F6:38:C2:9A:E6:6C:BB:C3:9C:9B:AB:C9:31:78:68:F2:0A
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       3CF080C54CF8B879A5DA7F8C601A65B465543B50
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa
Signing time:             Tue 05 Mar 2024 17:42:13 +0000
ROA not before:           Tue 05 Mar 2024 17:37:13 +0000
ROA not after:            Tue 04 Mar 2025 17:42:13 +0000
asID:                     11556
IP address blocks:        186.72.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f0:80:c5:4c:f8:b8:79:a5:da:7f:8c:60:1a:65:b4:65:54:3b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Mar  5 17:37:13 2024 GMT
            Not After : Mar  4 17:42:13 2025 GMT
        Subject: CN=5A3332F638C29AE66CBBC39C9BABC9317868F20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:2f:b2:a8:a7:5d:85:12:12:80:ad:a9:4d:
                    7a:6d:a2:54:9e:89:3e:95:d6:bb:24:76:68:c4:d1:
                    4d:22:1a:11:ec:12:35:71:6b:3e:5f:de:15:5a:cf:
                    9b:c0:ca:25:92:43:31:c0:6b:a6:5f:bd:e5:c2:31:
                    cb:96:e3:af:ef:a9:d5:be:df:c9:f3:1c:1c:c4:eb:
                    38:b3:e5:81:f6:ec:93:be:e7:1e:7c:71:df:6f:f8:
                    65:36:3b:ee:93:e3:88:f1:05:e7:8f:0c:94:9c:2f:
                    b2:0b:49:ad:96:9e:76:f6:af:05:85:e5:7f:6a:f5:
                    bd:90:24:31:30:22:c4:19:21:29:c5:87:ab:8a:6f:
                    95:55:26:b2:5e:41:f1:4d:af:42:32:e8:29:d7:02:
                    63:a2:00:f4:c4:fb:55:2d:fb:cb:98:b6:54:5c:40:
                    87:6b:8a:87:49:83:2e:da:9a:3d:a1:51:5a:dd:f0:
                    2c:b5:ec:84:f3:e6:2e:bf:7d:7a:b8:6f:2e:e0:26:
                    3e:6c:2f:6d:5c:cc:41:a6:5b:08:03:5a:78:d2:8e:
                    66:80:3d:d2:b0:de:f6:cc:8d:b6:5a:a2:d2:86:7b:
                    18:54:a4:56:e3:fc:7a:1e:05:e2:10:fe:d1:b9:2c:
                    e9:e4:ba:8a:d7:a8:2c:93:b1:a3:33:82:ee:45:18:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:33:32:F6:38:C2:9A:E6:6C:BB:C3:9C:9B:AB:C9:31:78:68:F2:0A
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3138362e37322e302e302f31342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.72.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         77:37:6e:16:69:e5:f6:a5:b0:f6:66:14:5f:8f:89:cf:39:df:
         d5:5d:60:75:75:90:79:38:41:0c:d8:4e:c0:57:db:0b:af:d4:
         ee:33:d1:db:93:38:56:fa:65:17:80:fd:06:67:c2:76:20:32:
         86:94:3b:b6:99:62:37:ee:b7:3f:d3:ed:35:6c:bf:9f:db:75:
         be:fc:44:44:ad:2c:0d:b5:ff:23:ef:2f:3d:10:bf:2d:3c:96:
         63:6f:97:4d:f2:e0:f2:70:36:24:bb:97:ba:49:e6:fc:b1:06:
         33:cd:d0:89:96:b7:29:80:e1:8e:8b:b8:50:b0:49:49:96:43:
         2c:32:86:2d:17:6a:9f:2e:24:54:c9:3d:77:71:e0:a9:91:0a:
         2a:37:0f:9e:a2:56:2b:a5:d3:71:59:03:94:dc:34:0d:cc:e4:
         35:22:2a:ae:88:d9:f3:dd:87:ed:00:8b:17:3b:8c:ba:02:8a:
         01:d4:8c:02:05:f9:c9:f6:d6:91:2a:35:ab:17:1c:d7:27:4b:
         96:3e:43:78:d2:2f:fe:24:9a:96:56:2a:7b:2c:c6:42:c9:cf:
         5d:ae:39:af:50:98:a5:19:60:32:d6:92:cc:86:9a:91:33:6c:
         d8:bc:c4:60:34:f2:74:23:49:53:07:59:df:fa:44:58:cb:88:
         81:89:8b:c7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUPPCAxUz4uHml2n+MYBpltGVUO1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3NUE4OEJGMjIxMzc3MkEzNjM3QjhCRDFGNzc1RUM5
OEYyMjc1RjAeFw0yNDAzMDUxNzM3MTNaFw0yNTAzMDQxNzQyMTNaMDMxMTAvBgNV
BAMTKDVBMzMzMkY2MzhDMjlBRTY2Q0JCQzM5QzlCQUJDOTMxNzg2OEYyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7C+yqKddhRISgK2pTXptolSe
iT6V1rskdmjE0U0iGhHsEjVxaz5f3hVaz5vAyiWSQzHAa6ZfveXCMcuW46/vqdW+
38nzHBzE6ziz5YH27JO+5x58cd9v+GU2O+6T44jxBeePDJScL7ILSa2Wnnb2rwWF
5X9q9b2QJDEwIsQZISnFh6uKb5VVJrJeQfFNr0Iy6CnXAmOiAPTE+1Ut+8uYtlRc
QIdriodJgy7amj2hUVrd8Cy17ITz5i6/fXq4by7gJj5sL21czEGmWwgDWnjSjmaA
PdKw3vbMjbZaotKGexhUpFbj/HoeBeIQ/tG5LOnkuorXqCyTsaMzgu5FGH4tAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUWjMy9jjCmuZsu8Ocm6vJMXho8gowHwYDVR0j
BBgwFoAUeHWoi/IhN3KjY3uL0fd17JjyJ18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUZDOUU1MURFMjY5RDI4RENERTBCQjIyODM4NzFGMjZE
Nzc4QjgwNDUxMzMzMjc2N0YyRjBBRTM5MUZBOUJELzAvNzg3NUE4OEJGMjIxMzc3
MkEzNjM3QjhCRDFGNzc1RUM5OEYyMjc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc1QTg4QkYyMjEzNzcyQTM2
MzdCOEJEMUY3NzVFQzk4RjIyNzVGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVGQzlFNTFERTI2OUQyOERDREUwQkIyMjgzODcxRjI2RDc3OEI4MDQ1
MTMzMzI3NjdGMkYwQUUzOTFGQTlCRC8wLzMxMzgzNjJlMzczMjJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCukgwDQYJKoZI
hvcNAQELBQADggEBAHc3bhZp5falsPZmFF+Pic8539VdYHV1kHk4QQzYTsBX2wuv
1O4z0duTOFb6ZReA/QZnwnYgMoaUO7aZYjfutz/T7TVsv5/bdb78REStLA21/yPv
Lz0Qvy08lmNvl03y4PJwNiS7l7pJ5vyxBjPN0ImWtymA4Y6LuFCwSUmWQywyhi0X
ap8uJFTJPXdx4KmRCio3D56iViul03FZA5TcNA3M5DUiKq6I2fPdh+0Aixc7jLoC
igHUjAIF+cn21pEqNasXHNcnS5Y+Q3jSL/4kmpZWKnssxkLJz12uOa9QmKUZYDLW
ksyGmpEzbNi8xGA08nQjSVMHWd/6RFjLiIGJi8c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org