Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa
File:                     3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          MqH42Le/ed4yNYsE6a77hPHZefxUhkuA5XftVC1HJoA=
Subject key identifier:   1F:A3:63:92:17:5F:DD:35:3A:3C:CA:5F:74:D5:17:F0:F9:3F:97:EB
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       76E941E4AA1568C8D3C9A298D900380571313432
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa
Signing time:             Mon 14 Oct 2024 18:55:00 +0000
ROA not before:           Mon 14 Oct 2024 18:50:00 +0000
ROA not after:            Mon 13 Oct 2025 18:55:00 +0000
asID:                     3356
IP address blocks:        143.255.140.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e9:41:e4:aa:15:68:c8:d3:c9:a2:98:d9:00:38:05:71:31:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Oct 14 18:50:00 2024 GMT
            Not After : Oct 13 18:55:00 2025 GMT
        Subject: CN=1FA36392175FDD353A3CCA5F74D517F0F93F97EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:8a:50:63:ba:0f:e8:9d:b3:7f:f5:48:2a:
                    ea:a0:cd:2f:63:cc:1f:2f:e1:f8:16:4a:f8:1e:ee:
                    94:25:dc:8b:e8:b6:04:2a:ea:38:0b:97:48:46:32:
                    7a:33:c8:c8:51:17:ce:81:15:2a:76:ef:f2:cc:97:
                    ff:51:cb:d4:75:03:3b:57:ea:4c:ca:ad:4c:b5:87:
                    c7:70:0d:1f:15:fc:7c:53:ac:9d:b1:a3:fa:ab:e7:
                    98:f7:35:fb:86:a1:c1:59:eb:c7:7b:76:76:08:c8:
                    fe:87:28:5b:75:46:c5:c3:42:b8:90:a4:9a:d5:a2:
                    20:25:be:be:06:85:7b:2d:27:1e:4f:1a:e6:14:6d:
                    d1:1c:f8:51:3a:4d:b3:b1:d5:5c:ce:5e:de:14:6e:
                    6a:35:18:a8:dc:fd:4f:5c:91:36:bd:be:5d:70:cc:
                    b5:aa:c1:76:91:3f:74:6f:20:09:72:a7:6c:75:1c:
                    e4:8e:e0:33:ff:d2:15:b9:e7:97:67:9b:c0:2e:69:
                    e7:4f:0e:f7:15:27:79:67:1b:9b:1a:27:e1:cc:ab:
                    db:04:f5:8f:30:c6:f5:42:4e:df:ef:56:cb:66:a0:
                    54:75:c0:73:54:61:eb:d1:5f:d3:93:11:8d:2a:25:
                    10:d8:1b:b4:ab:7c:92:19:65:cc:79:85:f8:68:07:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:63:92:17:5F:DD:35:3A:3C:CA:5F:74:D5:17:F0:F9:3F:97:EB
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:46:05:fa:8f:d7:a7:c5:72:aa:29:3d:10:e3:89:bd:7f:95:
         18:4f:fc:ea:f8:08:93:c6:8b:0f:4b:a8:67:5c:b2:09:58:01:
         4b:e7:5f:de:e5:61:3f:1e:b3:8d:94:75:32:20:29:97:8a:dd:
         5a:0e:97:7d:88:98:00:43:96:89:a7:6a:aa:7d:7d:ee:2b:53:
         52:23:28:dd:4f:25:25:49:15:0d:10:fd:be:ee:ef:5d:07:d0:
         ef:31:b7:99:86:a9:ef:d9:41:f3:a6:fe:39:3a:fd:29:4d:df:
         a2:75:29:a0:1e:a8:d2:8d:23:df:1a:96:0f:70:27:e7:57:64:
         88:a8:cb:ff:8f:da:b8:34:cb:c7:20:45:ff:e3:61:66:a0:e8:
         07:8d:57:b3:35:f7:c0:f1:36:7d:e4:27:3f:0b:0b:6a:91:40:
         80:b8:c7:70:0a:fd:aa:31:02:1c:ae:66:fe:4b:0d:4e:e0:73:
         36:2e:e9:fb:3c:aa:13:52:a7:08:3f:56:1f:08:21:c4:6a:42:
         f7:b0:51:53:8b:1b:c2:62:82:c6:49:60:24:31:b5:17:5d:35:
         d2:d7:8e:1d:9e:96:35:64:7d:45:ed:a8:f2:ea:6e:da:82:cd:
         bf:d7:12:7b:68:82:23:8b:f2:64:5e:57:0e:89:7c:ed:e2:b4:
         0c:de:cc:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdulB5KoVaMjTyaKY2QA4BXExNDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCRjM4RkE0MzhGNEY4NzI0NThFRDM2NDIzRDFBQTdG
ODVEQjUyQTAeFw0yNDEwMTQxODUwMDBaFw0yNTEwMTMxODU1MDBaMDMxMTAvBgNV
BAMTKDFGQTM2MzkyMTc1RkREMzUzQTNDQ0E1Rjc0RDUxN0YwRjkzRjk3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsopQY7oP6J2zf/VIKuqgzS9j
zB8v4fgWSvge7pQl3IvotgQq6jgLl0hGMnozyMhRF86BFSp27/LMl/9Ry9R1AztX
6kzKrUy1h8dwDR8V/HxTrJ2xo/qr55j3NfuGocFZ68d7dnYIyP6HKFt1RsXDQriQ
pJrVoiAlvr4GhXstJx5PGuYUbdEc+FE6TbOx1VzOXt4Ubmo1GKjc/U9ckTa9vl1w
zLWqwXaRP3RvIAlyp2x1HOSO4DP/0hW555dnm8AuaedPDvcVJ3lnG5saJ+HMq9sE
9Y8wxvVCTt/vVstmoFR1wHNUYevRX9OTEY0qJRDYG7SrfJIZZcx5hfhoB43HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUH6Njkhdf3TU6PMpfdNUX8Pk/l+swHwYDVR0j
BBgwFoAUhb84+kOPT4ckWO02Qj0ap/hdtSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTlGQjJCRDBDRDk3ODdBNTYzOTY1MUU4QUM0MjExNjBC
NTFGMzEyRkJCNkZEMUE1QTAxRDBEQkM2MEUxOUU5LzAvODVCRjM4RkE0MzhGNEY4
NzI0NThFRDM2NDIzRDFBQTdGODVEQjUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUJGMzhGQTQzOEY0Rjg3MjQ1
OEVEMzY0MjNEMUFBN0Y4NURCNTJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE5RkIyQkQwQ0Q5Nzg3QTU2Mzk2NTFFOEFDNDIxMTYwQjUxRjMxMkZC
QjZGRDFBNUEwMUQwREJDNjBFMTlFOS8wLzMxMzQzMzJlMzIzNTM1MmUzMTM0MzAy
ZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//jDAN
BgkqhkiG9w0BAQsFAAOCAQEAgUYF+o/Xp8Vyqik9EOOJvX+VGE/86vgIk8aLD0uo
Z1yyCVgBS+df3uVhPx6zjZR1MiApl4rdWg6XfYiYAEOWiadqqn197itTUiMo3U8l
JUkVDRD9vu7vXQfQ7zG3mYap79lB86b+OTr9KU3fonUpoB6o0o0j3xqWD3An51dk
iKjL/4/auDTLxyBF/+NhZqDoB41XszX3wPE2feQnPwsLapFAgLjHcAr9qjECHK5m
/ksNTuBzNi7p+zyqE1KnCD9WHwghxGpC97BRU4sbwmKCxklgJDG1F1010teOHZ6W
NWR9Re2o8upu2oLNv9cSe2iCI4vyZF5XDol87eK0DN7Maw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org