Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133382e3131372e3230302e302f32322d3234203d3e20323633363939.roa
File:                     3133382e3131372e3230302e302f32322d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          Y5c1kZ1Rp8HTACRlaAU+MtGOTwIsxph/ItJN1pIt9iM=
Subject key identifier:   CF:E5:16:32:E0:2E:79:CD:EA:BD:49:49:01:A6:49:28:44:30:D0:0A
Certificate issuer:       /CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
Certificate serial:       137314BFAD491B950F3EEDB3B57B47F58E97F304
Authority key identifier: 5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133382e3131372e3230302e302f32322d3234203d3e20323633363939.roa
Signing time:             Tue 05 Mar 2024 17:55:40 +0000
ROA not before:           Tue 05 Mar 2024 17:50:40 +0000
ROA not after:            Tue 04 Mar 2025 17:55:40 +0000
asID:                     263699
IP address blocks:        138.117.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:73:14:bf:ad:49:1b:95:0f:3e:ed:b3:b5:7b:47:f5:8e:97:f3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
        Validity
            Not Before: Mar  5 17:50:40 2024 GMT
            Not After : Mar  4 17:55:40 2025 GMT
        Subject: CN=CFE51632E02E79CDEABD494901A649284430D00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:eb:f1:36:88:e9:54:a5:77:11:20:90:d9:
                    14:80:f4:ff:c3:a1:64:c9:c5:08:86:04:fa:02:31:
                    51:a0:7f:01:e9:29:d3:8d:84:38:50:4f:a1:4e:8b:
                    3c:9f:e1:18:4c:81:0f:45:2f:6d:5f:4d:7a:e5:25:
                    c8:4b:f3:73:50:49:46:96:03:54:7c:2f:52:98:54:
                    04:cf:51:dc:b1:97:6c:98:54:39:9d:5e:48:02:cd:
                    18:fd:5c:35:dd:e7:28:54:19:58:74:c8:41:cc:31:
                    22:ce:f3:da:47:40:c9:14:ff:1c:5e:9e:ca:34:ab:
                    6c:e9:44:79:65:1e:d3:98:1f:14:36:ff:2f:e7:d1:
                    7c:63:e9:99:c6:d2:64:ce:a2:a3:51:7a:fd:4b:31:
                    7d:ad:c4:41:64:4a:5b:58:64:d4:e0:ed:98:34:45:
                    6e:4f:73:81:a8:ac:e6:21:4b:09:6e:1d:83:4d:b8:
                    bd:af:61:11:cc:4b:8d:f7:13:85:ad:a4:8d:8d:c9:
                    c2:b6:b6:e2:76:dc:f1:0f:c7:f7:83:8d:46:c8:54:
                    9a:27:d9:3a:a1:b2:f2:1a:44:e5:3b:7f:ed:33:a8:
                    dd:46:8a:4c:6f:b4:b1:62:dd:a6:31:48:f8:cd:54:
                    c9:60:c5:9c:24:dc:3c:f6:ed:99:c5:56:9f:ef:96:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E5:16:32:E0:2E:79:CD:EA:BD:49:49:01:A6:49:28:44:30:D0:0A
            X509v3 Authority Key Identifier:
                keyid:5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133382e3131372e3230302e302f32322d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:25:28:49:f2:32:6c:65:a1:e6:3f:75:17:28:7c:c0:f3:
         73:92:fd:83:44:cd:ee:78:54:15:1d:bf:ac:ee:45:92:f1:2f:
         0a:ca:3b:a9:69:cd:5d:41:8d:cd:2d:f6:d3:e2:7e:95:f7:d7:
         49:ec:1f:ac:26:81:41:53:ef:62:12:23:e0:94:70:71:6f:0e:
         06:c0:d2:c0:46:0c:27:1d:54:20:a8:c9:61:02:31:10:67:4a:
         86:fc:73:31:6c:1f:29:d8:ee:6c:12:45:a9:ab:95:0b:83:81:
         9a:d3:71:5f:2f:69:29:ab:1c:a5:34:57:30:11:bf:ea:06:1e:
         b0:c8:0b:61:18:0c:4c:05:24:30:83:5d:78:a1:f6:47:5e:19:
         0c:2a:37:ea:fb:e3:a5:cd:87:0d:94:96:d3:b2:a8:f7:b2:42:
         00:2f:86:43:c0:ff:9d:77:21:12:fe:34:a1:89:d3:9a:a8:21:
         fe:a5:a5:bd:65:9b:49:c2:38:0b:21:17:ee:0e:23:f1:2b:8f:
         2f:14:3b:55:4e:a0:8c:59:8a:9f:11:f2:a1:82:2a:5c:64:d7:
         1b:63:22:33:2e:3d:58:4a:8e:22:02:d8:c7:73:d3:bf:f1:ad:
         7b:48:07:1b:8c:91:7a:88:0d:d0:66:be:d1:0d:11:b4:d1:0d:
         6e:87:b3:2a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUE3MUv61JG5UPPu2ztXtH9Y6X8wQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU0MEY1MDlEOEVDMzQ2MkY4QjhEMUUyMkQ1MEZGRUUw
ODQ4QTQxRjAeFw0yNDAzMDUxNzUwNDBaFw0yNTAzMDQxNzU1NDBaMDMxMTAvBgNV
BAMTKENGRTUxNjMyRTAyRTc5Q0RFQUJENDk0OTAxQTY0OTI4NDQzMEQwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckOvxNojpVKV3ESCQ2RSA9P/D
oWTJxQiGBPoCMVGgfwHpKdONhDhQT6FOizyf4RhMgQ9FL21fTXrlJchL83NQSUaW
A1R8L1KYVATPUdyxl2yYVDmdXkgCzRj9XDXd5yhUGVh0yEHMMSLO89pHQMkU/xxe
nso0q2zpRHllHtOYHxQ2/y/n0Xxj6ZnG0mTOoqNRev1LMX2txEFkSltYZNTg7Zg0
RW5Pc4GorOYhSwluHYNNuL2vYRHMS433E4WtpI2NycK2tuJ23PEPx/eDjUbIVJon
2TqhsvIaROU7f+0zqN1GikxvtLFi3aYxSPjNVMlgxZwk3Dz27ZnFVp/vljBrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUz+UWMuAuec3qvUlJAaZJKEQw0AowHwYDVR0j
BBgwFoAUXkD1CdjsNGL4uNHiLVD/7ghIpB8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURGNkYyNjM1NzgyQzk1RUE2NkY4REQ1REIwRTgyRTFB
RkEwMjFGN0JGRDVGOTNBNDlCOTkwMjc4RjM1MEE1LzAvNUU0MEY1MDlEOEVDMzQ2
MkY4QjhEMUUyMkQ1MEZGRUUwODQ4QTQxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTQwRjUwOUQ4RUMzNDYyRjhC
OEQxRTIyRDUwRkZFRTA4NDhBNDFGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERjZGMjYzNTc4MkM5NUVBNjZGOERENURCMEU4MkUxQUZBMDIxRjdC
RkQ1RjkzQTQ5Qjk5MDI3OEYzNTBBNS8wLzMxMzMzODJlMzEzMTM3MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNjM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
dcgwDQYJKoZIhvcNAQELBQADggEBAHqiJShJ8jJsZaHmP3UXKHzA83OS/YNEze54
VBUdv6zuRZLxLwrKO6lpzV1Bjc0t9tPifpX310nsH6wmgUFT72ISI+CUcHFvDgbA
0sBGDCcdVCCoyWECMRBnSob8czFsHynY7mwSRamrlQuDgZrTcV8vaSmrHKU0VzAR
v+oGHrDIC2EYDEwFJDCDXXih9kdeGQwqN+r746XNhw2UltOyqPeyQgAvhkPA/513
IRL+NKGJ05qoIf6lpb1lm0nCOAshF+4OI/Erjy8UO1VOoIxZip8R8qGCKlxk1xtj
IjMuPVhKjiIC2Mdz07/xrXtIBxuMkXqIDdBmvtENEbTRDW6Hsyo=
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org