Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
File:                     3139322e3138382e35332e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          h+WCuIwkwr762IXhrd5fV8sGuIxqnI7fbtO4fkJKMls=
Subject key identifier:   27:4E:F9:D6:81:5F:6C:C0:BA:53:4D:47:06:82:5A:36:95:DD:81:2A
Certificate issuer:       /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial:       531B3BA64C8691EDF43631DF688353164AB60CAC
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:22:34 +0000
ROA not before:           Tue 05 Mar 2024 18:17:34 +0000
ROA not after:            Tue 04 Mar 2025 18:22:34 +0000
asID:                     23487
IP address blocks:        192.188.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1b:3b:a6:4c:86:91:ed:f4:36:31:df:68:83:53:16:4a:b6:0c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
        Validity
            Not Before: Mar  5 18:17:34 2024 GMT
            Not After : Mar  4 18:22:34 2025 GMT
        Subject: CN=274EF9D6815F6CC0BA534D4706825A3695DD812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a1:72:94:86:a9:04:31:d3:5e:63:c7:f1:36:
                    62:a6:7c:77:77:8a:2f:b5:68:0a:2e:f8:b2:1a:b1:
                    da:ae:43:9b:80:e9:17:8e:0d:e1:47:e0:19:c7:6b:
                    4c:75:d9:fc:27:f2:a7:d1:8b:98:20:6d:c7:11:91:
                    fe:51:c8:22:c2:f5:89:24:25:ad:80:7c:0a:31:e3:
                    97:24:0e:26:df:a3:3e:b2:60:dc:65:23:89:de:1b:
                    86:38:a3:79:bf:ac:dd:06:14:d3:5b:31:28:80:2e:
                    78:76:a5:34:c1:cd:53:bd:8d:e0:43:03:6d:1a:06:
                    5b:0c:c0:29:65:79:83:2c:ed:86:43:3c:bd:9a:5b:
                    12:b5:9b:97:ec:56:af:91:c8:2c:a6:32:b6:90:09:
                    4e:8e:5a:0b:5c:65:c1:fa:ae:3f:2c:93:cc:32:aa:
                    57:8f:3c:32:34:56:3a:ba:a4:b4:34:b8:fe:3d:23:
                    07:c7:da:bd:8d:85:08:a5:46:e7:34:ed:e8:93:55:
                    5a:b2:47:a1:d7:58:b1:7d:1f:b6:79:d1:3d:04:32:
                    c9:24:d2:3b:9f:aa:b4:fc:1a:5f:63:2c:45:07:8b:
                    db:d0:7e:92:b1:f1:d6:37:fe:79:d7:ab:e4:31:41:
                    9b:58:58:0c:16:3d:a8:f0:c8:44:19:75:1f:a2:f6:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:F9:D6:81:5F:6C:C0:BA:53:4D:47:06:82:5A:36:95:DD:81:2A
            X509v3 Authority Key Identifier:
                keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:cd:d4:98:a6:fd:56:0a:fe:20:3f:18:5f:d8:f4:ff:45:
         d5:3a:b3:9f:b2:87:c0:d8:8b:b5:d6:42:d9:4f:10:9a:37:5f:
         82:cd:9b:e5:46:7b:28:78:07:9a:f4:67:ea:33:f2:bf:59:7f:
         60:72:5e:63:22:51:5b:71:b7:05:83:73:4c:04:f5:cb:7d:8f:
         d2:b3:45:f1:12:93:6a:d1:f7:2d:d3:a7:67:45:bf:88:65:1e:
         25:2d:06:18:dd:f4:69:4e:c5:40:3a:a6:09:c8:f7:ce:c1:b3:
         44:bc:b6:ee:d0:0b:84:40:80:b2:16:42:62:e0:2d:57:55:81:
         d7:2e:6c:78:20:23:ff:cc:bc:ff:2e:85:67:b6:10:5f:ca:64:
         d5:49:04:76:0b:a5:f6:1a:80:5e:af:84:b0:dd:29:1b:35:3c:
         92:bc:aa:04:20:30:03:62:01:25:e2:c6:df:87:28:95:8b:3f:
         3a:27:56:d9:c9:23:af:ec:2c:da:1d:02:a5:f9:86:c4:22:39:
         ff:8a:cd:2d:aa:75:1f:04:28:29:63:30:19:dc:b5:9d:7c:c7:
         77:fe:58:7b:79:07:4f:b0:3b:26:b8:df:0e:a6:ae:92:be:4e:
         b8:a5:17:e7:ff:b4:ce:65:fd:e1:50:22:45:d9:79:c4:1f:f3:
         12:eb:7c:9d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUxs7pkyGke30NjHfaINTFkq2DKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczODcxNDQ4QTE5M0Y0QjM1MTI1N0Q1QTJBOUFBMjJG
Q0ZFQ0JCNDAeFw0yNDAzMDUxODE3MzRaFw0yNTAzMDQxODIyMzRaMDMxMTAvBgNV
BAMTKDI3NEVGOUQ2ODE1RjZDQzBCQTUzNEQ0NzA2ODI1QTM2OTVERDgxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuoXKUhqkEMdNeY8fxNmKmfHd3
ii+1aAou+LIasdquQ5uA6ReODeFH4BnHa0x12fwn8qfRi5ggbccRkf5RyCLC9Ykk
Ja2AfAox45ckDibfoz6yYNxlI4neG4Y4o3m/rN0GFNNbMSiALnh2pTTBzVO9jeBD
A20aBlsMwClleYMs7YZDPL2aWxK1m5fsVq+RyCymMraQCU6OWgtcZcH6rj8sk8wy
qlePPDI0Vjq6pLQ0uP49IwfH2r2NhQilRuc07eiTVVqyR6HXWLF9H7Z50T0EMskk
0jufqrT8Gl9jLEUHi9vQfpKx8dY3/nnXq+QxQZtYWAwWPajwyEQZdR+i9jqNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJ0751oFfbMC6U01HBoJaNpXdgSowHwYDVR0j
BBgwFoAU1zhxRIoZP0s1ElfVoqmqIvz+y7QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CREVBNjNDOTYwQjJGQ0E4MzFENDg0MzIyNThBMTRDNUVG
MkI0QUQ2NDZFRTk0NTJENjM1N0Y0QzdCQkYwRDU0LzAvRDczODcxNDQ4QTE5M0Y0
QjM1MTI1N0Q1QTJBOUFBMjJGQ0ZFQ0JCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzM4NzE0NDhBMTkzRjRCMzUx
MjU3RDVBMkE5QUEyMkZDRkVDQkI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkRFQTYzQzk2MEIyRkNBODMxRDQ4NDMyMjU4QTE0QzVFRjJCNEFENjQ2
RUU5NDUyRDYzNTdGNEM3QkJGMEQ1NC8wLzMxMzkzMjJlMzEzODM4MmUzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM0MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8NTAN
BgkqhkiG9w0BAQsFAAOCAQEAke/N1Jim/VYK/iA/GF/Y9P9F1Tqzn7KHwNiLtdZC
2U8Qmjdfgs2b5UZ7KHgHmvRn6jPyv1l/YHJeYyJRW3G3BYNzTAT1y32P0rNF8RKT
atH3LdOnZ0W/iGUeJS0GGN30aU7FQDqmCcj3zsGzRLy27tALhECAshZCYuAtV1WB
1y5seCAj/8y8/y6FZ7YQX8pk1UkEdgul9hqAXq+EsN0pGzU8kryqBCAwA2IBJeLG
34colYs/OidW2ckjr+ws2h0CpfmGxCI5/4rNLap1HwQoKWMwGdy1nXzHd/5Ye3kH
T7A7JrjfDqaukr5OuKUX5/+0zmX94VAiRdl5xB/zEut8nQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org