Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa
File:                     3138362e37362e302e302f31352d3234203d3e203134373534.roa (raw, json)
Hash identifier:          sBJV4kTeY5MXv12hrUy1zVcIrzyK8+GT5GSFzxAfxlY=
Subject key identifier:   73:F7:A8:15:08:15:FD:E4:38:6F:45:56:F7:4A:26:42:25:FA:26:8B
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       442C23B1AD9A9CAC2142F0ECF7EF6F4532EA1920
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:09:45 +0000
ROA not before:           Tue 05 Mar 2024 18:04:45 +0000
ROA not after:            Tue 04 Mar 2025 18:09:45 +0000
asID:                     14754
IP address blocks:        186.76.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2c:23:b1:ad:9a:9c:ac:21:42:f0:ec:f7:ef:6f:45:32:ea:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Mar  5 18:04:45 2024 GMT
            Not After : Mar  4 18:09:45 2025 GMT
        Subject: CN=73F7A8150815FDE4386F4556F74A264225FA268B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:2b:be:cf:9f:c8:2b:fa:95:cf:be:fe:df:
                    e6:ea:2a:d3:e4:bc:8c:b0:5d:73:26:30:c6:f6:31:
                    fe:b9:a9:31:53:f7:67:a3:ec:4b:b0:73:7c:93:2f:
                    2d:63:30:b8:d2:15:0c:44:9b:3d:40:a2:9d:7a:dc:
                    09:2d:f1:e9:1f:8b:76:62:46:62:07:9d:f3:93:5d:
                    44:61:c7:e0:b4:5b:7b:d4:c8:8d:2b:d0:02:f8:53:
                    03:72:e5:94:f3:62:ac:1f:33:c8:7d:8e:ef:65:d2:
                    61:be:96:8c:60:fe:15:51:53:a6:99:d0:25:55:15:
                    bb:0b:b8:f2:2a:83:c1:31:bb:aa:ad:7c:83:52:cd:
                    67:ad:8d:65:f9:22:9b:41:f6:5c:fe:90:39:b2:af:
                    05:ee:df:76:ed:0f:29:87:ff:66:5f:90:6e:f7:ca:
                    8b:c4:c6:82:9d:c9:b9:6f:55:25:98:fb:38:e7:dd:
                    6e:3f:dd:80:1b:6d:98:53:72:e2:0d:4e:1d:f8:59:
                    cb:bf:9c:7c:8a:e9:4e:13:43:5d:94:64:e7:2c:5b:
                    b7:43:6e:e9:5d:4d:e6:ae:87:0c:a8:3c:29:b0:f4:
                    f5:07:69:23:46:b7:c2:e7:b0:08:33:0e:5f:1c:2d:
                    a2:cf:74:2d:ed:d5:cd:00:29:7a:40:f2:2b:47:f3:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:A8:15:08:15:FD:E4:38:6F:45:56:F7:4A:26:42:25:FA:26:8B
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.76.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:b9:24:d3:4a:c1:55:6a:d0:eb:db:68:f1:eb:b3:f8:44:
         f0:2a:13:a7:b2:98:d8:b4:f1:29:d8:5f:be:db:7d:42:17:6e:
         ec:f1:87:b9:91:37:ac:d2:b0:94:34:73:05:8f:1e:00:86:ed:
         7d:16:e1:57:90:98:6f:90:15:44:81:d3:88:65:a8:41:87:41:
         8f:32:cd:8d:dd:e6:f9:16:d9:47:91:71:47:54:e3:b5:81:12:
         20:02:5d:2a:04:81:2f:c0:2f:57:10:62:b8:b0:54:f7:de:75:
         31:f0:79:c6:17:05:a4:8f:ab:75:0f:f3:b8:94:55:2d:0e:4d:
         aa:ae:04:3c:35:80:3b:a2:3d:12:a6:9b:2e:6f:03:46:1e:d8:
         a1:76:d3:98:20:7a:94:cd:d9:70:fa:f6:30:8f:30:19:48:75:
         d1:45:5b:63:e0:cf:83:91:fd:05:ea:2e:60:2c:a7:c1:f5:ab:
         02:d3:6c:f9:26:6e:ed:c9:b2:e5:25:ed:6e:e4:09:f2:9b:2c:
         8c:05:99:b3:a7:5b:3a:6a:8a:fa:d6:d9:2a:db:13:5b:f7:e3:
         b8:f5:69:4a:e9:42:66:66:62:08:9a:ee:78:ca:e2:8d:b4:aa:
         6e:0e:6a:98:a9:6a:fb:f9:67:59:85:54:7b:ec:a4:3d:54:15:
         c1:4a:06:71
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIURCwjsa2anKwhQvDs9+9vRTLqGSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyRkM5QTMwNjZEMkUwQzI5NEYwRTAwMUE5NEYyRjBB
RUQ3MjcwQzAeFw0yNDAzMDUxODA0NDVaFw0yNTAzMDQxODA5NDVaMDMxMTAvBgNV
BAMTKDczRjdBODE1MDgxNUZERTQzODZGNDU1NkY3NEEyNjQyMjVGQTI2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7iu+z5/IK/qVz77+3+bqKtPk
vIywXXMmMMb2Mf65qTFT92ej7Euwc3yTLy1jMLjSFQxEmz1Aop163Akt8ekfi3Zi
RmIHnfOTXURhx+C0W3vUyI0r0AL4UwNy5ZTzYqwfM8h9ju9l0mG+loxg/hVRU6aZ
0CVVFbsLuPIqg8Exu6qtfINSzWetjWX5IptB9lz+kDmyrwXu33btDymH/2ZfkG73
yovExoKdyblvVSWY+zjn3W4/3YAbbZhTcuINTh34Wcu/nHyK6U4TQ12UZOcsW7dD
buldTeauhwyoPCmw9PUHaSNGt8LnsAgzDl8cLaLPdC3t1c0AKXpA8itH8wGRAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUc/eoFQgV/eQ4b0VW90omQiX6JoswHwYDVR0j
BBgwFoAUUS/JowZtLgwpTw4AGpTy8K7XJwwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkNCNTEzMUU2RTlGNjI4NTVEQzBFQzUwNjU1Q0Q4MTBE
RDk4NUFCQkJGRkJGNEYwQzY1Mzc5NUYyMTRFRDk5LzAvNTEyRkM5QTMwNjZEMkUw
QzI5NEYwRTAwMUE5NEYyRjBBRUQ3MjcwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTJGQzlBMzA2NkQyRTBDMjk0
RjBFMDAxQTk0RjJGMEFFRDcyNzBDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZDQjUxMzFFNkU5RjYyODU1REMwRUM1MDY1NUNEODEwREQ5ODVBQkJC
RkZCRjRGMEM2NTM3OTVGMjE0RUQ5OS8wLzMxMzgzNjJlMzczNjJlMzAyZTMwMmYz
MTM1MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBukwwDQYJKoZI
hvcNAQELBQADggEBAEbBuSTTSsFVatDr22jx67P4RPAqE6eymNi08SnYX77bfUIX
buzxh7mRN6zSsJQ0cwWPHgCG7X0W4VeQmG+QFUSB04hlqEGHQY8yzY3d5vkW2UeR
cUdU47WBEiACXSoEgS/AL1cQYriwVPfedTHwecYXBaSPq3UP87iUVS0OTaquBDw1
gDuiPRKmmy5vA0Ye2KF205ggepTN2XD69jCPMBlIddFFW2Pgz4OR/QXqLmAsp8H1
qwLTbPkmbu3JsuUl7W7kCfKbLIwFmbOnWzpqivrW2SrbE1v347j1aUrpQmZmYgia
7njK4o20qm4Oapipavv5Z1mFVHvspD1UFcFKBnE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org