Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa
File:                     3138362e36342e3132342e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier:          /3kPb/HSzEXKr3BkSM6V7Kx249thMNdsmxFlfQBLm1I=
Subject key identifier:   7A:12:42:03:63:3B:8B:D2:82:5C:75:55:B8:AE:D9:DE:FD:75:EA:E6
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       21C49F3727BF14280C9128A08C6B941B601887CB
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa
Signing time:             Tue 05 Mar 2024 18:06:28 +0000
ROA not before:           Tue 05 Mar 2024 18:01:28 +0000
ROA not after:            Tue 04 Mar 2025 18:06:28 +0000
asID:                     32034
IP address blocks:        186.64.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c4:9f:37:27:bf:14:28:0c:91:28:a0:8c:6b:94:1b:60:18:87:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Mar  5 18:01:28 2024 GMT
            Not After : Mar  4 18:06:28 2025 GMT
        Subject: CN=7A124203633B8BD2825C7555B8AED9DEFD75EAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:c2:3e:5f:96:0f:c9:09:f8:a8:47:e9:2b:
                    1f:05:ed:40:7e:04:0b:bc:14:de:ee:4d:8a:14:20:
                    1f:5a:65:04:bc:fc:cd:a2:a8:8f:38:ed:04:88:03:
                    0f:43:9c:07:38:10:52:29:d7:dd:41:a8:9f:96:07:
                    86:02:9a:49:fc:37:df:15:b5:7a:33:d4:cf:17:d7:
                    d9:be:7d:e6:3e:01:4e:9d:5b:2d:4b:e1:84:64:dd:
                    70:e6:87:37:14:18:7f:ab:c0:b5:da:d0:5e:68:8d:
                    1f:c8:d9:b7:b6:6c:3f:80:66:69:f1:75:ea:13:df:
                    81:0b:7b:3c:31:ab:13:a5:21:9c:c5:cb:98:6d:c8:
                    08:d9:b9:89:89:1d:a4:e5:06:ca:e1:43:44:87:a5:
                    35:5d:b0:00:e5:65:c1:eb:ba:1b:48:d4:bc:7e:ed:
                    f5:7f:05:94:7a:2b:6e:28:f1:d6:c2:60:99:68:f6:
                    87:c5:ad:96:42:00:40:57:78:7d:50:f2:dc:26:9f:
                    2e:53:4f:d8:87:26:74:a7:aa:b9:cc:d3:ff:04:f8:
                    8e:1e:f9:8f:1a:33:a5:9e:be:e6:18:77:b9:38:ae:
                    23:42:d2:ca:d9:e5:2b:51:d1:62:72:7e:72:d2:40:
                    9c:ae:a3:f2:11:e6:2b:99:72:79:9b:9a:1a:b5:12:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:42:03:63:3B:8B:D2:82:5C:75:55:B8:AE:D9:DE:FD:75:EA:E6
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:25:73:8d:0f:03:14:db:b8:26:0c:da:4e:99:51:12:67:ab:
         64:61:92:af:3e:be:74:ed:ad:d0:50:dd:d0:73:a2:f4:3c:ae:
         d6:e7:b0:1a:72:9e:99:23:f7:27:7c:d3:24:d9:36:92:cc:0e:
         59:fb:e5:1c:c6:e1:79:15:82:f8:34:cd:f4:3e:ac:48:25:c1:
         8d:c2:39:3c:ae:65:0a:19:2f:74:a7:75:aa:25:16:ae:87:89:
         98:89:09:89:8e:8d:d9:29:5b:9e:2b:b6:dd:5d:73:5b:a5:3f:
         ab:b7:05:12:57:12:9f:9e:83:a3:a9:4a:fc:e9:41:98:ca:8e:
         85:0c:7e:a0:c8:67:d9:ff:38:4d:c4:69:44:34:80:d5:98:dd:
         33:19:a2:f9:fe:6a:54:73:3f:50:69:d9:f1:1d:44:0b:4d:f0:
         df:e1:42:76:d5:a5:32:0d:4d:45:81:a5:a6:8e:36:bc:a3:73:
         1e:71:a3:4e:12:a8:2e:9a:01:4b:c6:31:f4:80:62:e6:10:d6:
         57:13:c0:02:da:97:bd:8a:71:14:c8:65:14:0e:ad:43:54:f1:
         6d:8f:12:b8:62:9d:91:56:26:8e:c5:46:30:8e:d7:c6:11:2a:
         c6:4e:16:dc:87:e9:e7:00:ff:4f:b8:f7:70:39:da:a9:32:40:
         49:87:bf:d1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIcSfNye/FCgMkSigjGuUG2AYh8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM1NTNCRDA1QjMzNTQ4QzM0MjU2ODU2NjI5MUU3MTlC
NEZBNzNCOTAeFw0yNDAzMDUxODAxMjhaFw0yNTAzMDQxODA2MjhaMDMxMTAvBgNV
BAMTKDdBMTI0MjAzNjMzQjhCRDI4MjVDNzU1NUI4QUVEOURFRkQ3NUVBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdycI+X5YPyQn4qEfpKx8F7UB+
BAu8FN7uTYoUIB9aZQS8/M2iqI847QSIAw9DnAc4EFIp191BqJ+WB4YCmkn8N98V
tXoz1M8X19m+feY+AU6dWy1L4YRk3XDmhzcUGH+rwLXa0F5ojR/I2be2bD+AZmnx
deoT34ELezwxqxOlIZzFy5htyAjZuYmJHaTlBsrhQ0SHpTVdsADlZcHruhtI1Lx+
7fV/BZR6K24o8dbCYJlo9ofFrZZCAEBXeH1Q8twmny5TT9iHJnSnqrnM0/8E+I4e
+Y8aM6WevuYYd7k4riNC0srZ5StR0WJyfnLSQJyuo/IR5iuZcnmbmhq1EndBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUehJCA2M7i9KCXHVVuK7Z3v116uYwHwYDVR0j
BBgwFoAU3FU70FszVIw0JWhWYpHnGbT6c7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQUMyQkM3NTRCRkRENDUzNUQ0OUY5OUQwNjcxNzQzQzND
MDgyNUE2QjZENTdCNDhFNzM1MDQ1MUJBODdFOUVGLzAvREM1NTNCRDA1QjMzNTQ4
QzM0MjU2ODU2NjI5MUU3MTlCNEZBNzNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzU1M0JEMDVCMzM1NDhDMzQy
NTY4NTY2MjkxRTcxOUI0RkE3M0I5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFDMkJDNzU0QkZERDQ1MzVENDlGOTlEMDY3MTc0M0MzQzA4MjVBNkI2
RDU3QjQ4RTczNTA0NTFCQTg3RTlFRi8wLzMxMzgzNjJlMzYzNDJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzMjMwMzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArpAfDAN
BgkqhkiG9w0BAQsFAAOCAQEAWCVzjQ8DFNu4JgzaTplREmerZGGSrz6+dO2t0FDd
0HOi9Dyu1uewGnKemSP3J3zTJNk2kswOWfvlHMbheRWC+DTN9D6sSCXBjcI5PK5l
ChkvdKd1qiUWroeJmIkJiY6N2Slbniu23V1zW6U/q7cFElcSn56Do6lK/OlBmMqO
hQx+oMhn2f84TcRpRDSA1ZjdMxmi+f5qVHM/UGnZ8R1EC03w3+FCdtWlMg1NRYGl
po42vKNzHnGjThKoLpoBS8Yx9IBi5hDWVxPAAtqXvYpxFMhlFA6tQ1TxbY8SuGKd
kVYmjsVGMI7XxhEqxk4W3Ifp5wD/T7j3cDnaqTJASYe/0Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org