Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
File:                     3133382e3231392e35362e302f32322d3232203d3e203532353130.roa (raw, json)
Hash identifier:          y0sB9hOqw0By0dPJWadw5aCvQAC1E6Ci4BK/J5ov4o8=
Subject key identifier:   82:86:3E:E4:68:E8:06:9B:AD:24:A0:4F:D8:7F:0F:63:AF:AB:95:64
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       16EB699251541F13D5E8D4E34D341FBC1BD6C144
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:43 +0000
ROA not before:           Tue 05 Mar 2024 17:47:43 +0000
ROA not after:            Tue 04 Mar 2025 17:52:43 +0000
asID:                     52510
IP address blocks:        138.219.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:eb:69:92:51:54:1f:13:d5:e8:d4:e3:4d:34:1f:bc:1b:d6:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:43 2024 GMT
            Not After : Mar  4 17:52:43 2025 GMT
        Subject: CN=82863EE468E8069BAD24A04FD87F0F63AFAB9564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:02:ca:1a:9a:08:3b:52:68:85:d0:dc:a7:
                    a6:ed:ef:46:81:51:c7:13:75:13:aa:be:c5:35:78:
                    ef:19:29:33:ea:c4:cd:4c:85:77:ed:48:7f:83:73:
                    9f:18:5e:4d:5e:b8:d2:96:67:ce:4e:dd:46:a4:c4:
                    6d:87:a3:96:4c:e7:bb:a7:95:0b:87:85:0f:7a:1c:
                    4f:3e:aa:76:50:be:20:ae:aa:ac:29:07:2d:55:71:
                    4b:f5:98:cf:95:14:ae:64:85:25:83:b1:66:ba:4b:
                    50:23:92:9d:45:9b:f4:a2:1a:cc:2f:50:6f:15:13:
                    de:27:ea:b9:27:e1:6a:e6:b0:1e:4f:de:49:1f:2b:
                    f5:ce:ac:71:5f:ab:a9:cb:e4:da:59:93:8a:9a:52:
                    7a:4f:39:c5:56:a7:45:6a:58:78:1e:91:7e:6f:92:
                    43:25:af:f1:7d:2c:b6:16:ff:8d:11:5c:0e:9b:7c:
                    a0:51:fc:ef:fa:68:2d:ee:e7:1a:78:01:a7:0e:21:
                    f3:ea:82:2e:0d:76:fc:08:ea:36:8a:50:bd:85:62:
                    ce:5e:31:1f:83:dc:07:55:71:3f:95:60:31:33:8c:
                    3c:cf:ee:46:0e:f5:43:72:c8:b5:65:0f:14:56:5b:
                    ef:93:e7:8b:83:78:f0:51:c4:40:aa:c2:98:c2:41:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:3E:E4:68:E8:06:9B:AD:24:A0:4F:D8:7F:0F:63:AF:AB:95:64
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:a2:c6:07:3d:f7:8a:64:6d:92:05:8b:40:59:80:28:bc:
         9c:f5:a4:43:24:49:20:f4:23:14:ae:03:0c:3c:ba:c1:b3:23:
         92:f8:79:54:97:00:80:6c:b5:b1:0a:42:84:9b:6d:2a:a0:86:
         d9:21:ea:bd:49:55:0a:1d:f8:a4:77:0a:09:09:c7:87:73:26:
         1f:b6:e5:6d:75:2d:dc:cb:bb:5a:7d:35:0f:2e:9e:2a:f7:49:
         15:83:35:12:ec:23:2c:9b:78:5e:86:0a:25:ea:b3:d7:10:f7:
         c4:3b:c3:44:29:43:ec:18:18:0b:5e:3c:85:a1:1d:04:1d:0d:
         0e:89:d9:7d:0e:24:d4:9c:14:82:ac:be:9e:e7:72:25:7d:31:
         ed:1c:45:21:a6:86:72:f3:d7:95:25:f3:de:05:0d:5a:a6:24:
         fd:9d:a6:9c:ab:03:e1:f8:71:62:e2:83:d7:0c:56:23:bd:24:
         e1:9e:62:c5:b5:17:94:eb:99:e2:9d:39:fb:a9:80:dc:5f:6d:
         6c:67:78:6f:c6:9e:f6:72:a2:76:ab:7a:84:66:04:61:43:ab:
         77:51:4f:10:a6:10:08:be:2f:1a:b9:e3:c1:1b:2b:09:9b:a2:
         a4:c3:d6:48:05:82:2c:24:8e:b7:01:9e:d8:7c:5d:e7:b0:96:
         de:a2:9d:d5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFutpklFUHxPV6NTjTTQfvBvWwUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNDAzMDUxNzQ3NDNaFw0yNTAzMDQxNzUyNDNaMDMxMTAvBgNV
BAMTKDgyODYzRUU0NjhFODA2OUJBRDI0QTA0RkQ4N0YwRjYzQUZBQjk1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nQLKGpoIO1JohdDcp6bt70aB
UccTdROqvsU1eO8ZKTPqxM1MhXftSH+Dc58YXk1euNKWZ85O3UakxG2Ho5ZM57un
lQuHhQ96HE8+qnZQviCuqqwpBy1VcUv1mM+VFK5khSWDsWa6S1Ajkp1Fm/SiGswv
UG8VE94n6rkn4WrmsB5P3kkfK/XOrHFfq6nL5NpZk4qaUnpPOcVWp0VqWHgekX5v
kkMlr/F9LLYW/40RXA6bfKBR/O/6aC3u5xp4AacOIfPqgi4NdvwI6jaKUL2FYs5e
MR+D3AdVcT+VYDEzjDzP7kYO9UNyyLVlDxRWW++T54uDePBRxECqwpjCQRx3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgoY+5GjoBputJKBP2H8PY6+rlWQwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzMzODJlMzIzMTM5MmUzNTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbODAN
BgkqhkiG9w0BAQsFAAOCAQEANwyixgc994pkbZIFi0BZgCi8nPWkQyRJIPQjFK4D
DDy6wbMjkvh5VJcAgGy1sQpChJttKqCG2SHqvUlVCh34pHcKCQnHh3MmH7blbXUt
3Mu7Wn01Dy6eKvdJFYM1EuwjLJt4XoYKJeqz1xD3xDvDRClD7BgYC148haEdBB0N
DonZfQ4k1JwUgqy+nudyJX0x7RxFIaaGcvPXlSXz3gUNWqYk/Z2mnKsD4fhxYuKD
1wxWI70k4Z5ixbUXlOuZ4p05+6mA3F9tbGd4b8ae9nKidqt6hGYEYUOrd1FPEKYQ
CL4vGrnjwRsrCZuipMPWSAWCLCSOtwGe2Hxd57CW3qKd1Q==
-----END CERTIFICATE-----
Generated at Thu May 16 06:45:12 2024 by rpki-client on console-ams.rpki-client.org