Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa
File:                     3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa (raw, json)
Hash identifier:          EQEW+TLPIBHBaTI9Zm0/d8m1Xjsomvst1j8eC7PyN0o=
Subject key identifier:   66:72:4D:9F:84:2F:F2:18:49:69:80:0F:13:DC:7D:6A:DC:67:E5:01
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       196E9E421030F8961B16FE2E0574D23A4A00DD84
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     262931
IP address blocks:        191.102.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:9e:42:10:30:f8:96:1b:16:fe:2e:05:74:d2:3a:4a:00:dd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=66724D9F842FF2184969800F13DC7D6ADC67E501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:91:f4:1a:28:84:2b:3f:1f:7b:8b:b6:ea:97:
                    3a:a9:1c:d4:a4:7e:2c:85:6e:01:72:25:31:04:6c:
                    14:be:a5:53:86:25:b5:55:f6:ad:0a:4a:f7:24:4c:
                    09:5b:e6:d3:44:2b:3e:db:a5:56:0a:e6:4a:7a:82:
                    b8:49:63:3f:6d:fb:42:bb:ed:d9:fc:e5:0e:2d:84:
                    3d:3a:0f:b6:12:63:65:ab:6a:2b:ab:01:23:16:a7:
                    9b:77:bd:a8:db:32:9a:79:e5:46:87:e7:c3:a5:68:
                    63:0f:48:27:b6:21:17:46:40:0b:31:f5:5d:6f:ab:
                    87:13:55:b2:80:e3:ec:f0:41:f4:13:4a:c5:12:51:
                    26:2d:4e:c0:2f:44:aa:76:43:16:49:69:96:4a:b2:
                    13:d7:4a:45:30:93:7c:05:a3:83:e6:8a:d9:dd:c6:
                    86:d7:4a:12:be:77:f6:5e:fc:21:9d:87:f6:91:c4:
                    20:a9:53:f6:bd:ec:3e:32:7f:ea:27:d2:60:dc:5b:
                    5d:f4:17:d4:bc:38:0c:1f:94:fc:dc:27:71:df:b9:
                    a8:f0:ad:fd:dc:69:a2:93:57:8b:35:94:3c:71:cf:
                    fd:9f:21:52:c3:2d:b8:a3:55:9d:ef:37:4a:c4:c1:
                    ee:c8:63:ad:03:e9:24:f1:b7:0f:df:11:65:bd:eb:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:4D:9F:84:2F:F2:18:49:69:80:0F:13:DC:7D:6A:DC:67:E5:01
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234302e302f32322d3232203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:6e:82:0f:9a:af:42:bd:5e:ea:fa:e3:5f:1e:3f:a8:27:
         90:c2:a4:f7:51:25:56:08:f4:d7:37:fa:17:ec:4d:e4:54:3d:
         9c:6c:d6:3f:9a:91:01:de:85:60:e3:5b:8a:ee:31:78:26:ec:
         cc:db:b5:9b:a0:b1:90:a7:53:23:d8:b8:94:de:6f:61:4d:c6:
         ff:ad:a2:d0:63:36:91:3d:91:82:42:d2:1d:a6:43:bd:bc:a2:
         f0:57:2f:6e:ae:3b:45:48:9d:bc:0c:bd:e4:70:21:c6:6b:20:
         ca:ca:0d:6e:41:ee:15:25:db:4f:5c:31:3c:ae:51:1c:98:6a:
         11:fb:56:13:53:2b:0a:d0:af:0f:49:61:aa:38:d8:19:14:04:
         89:09:4e:21:84:83:e2:39:85:9c:41:3a:fe:05:6a:44:83:81:
         bf:e3:ec:5e:88:6e:18:b4:68:a6:56:ea:9b:b6:bd:09:aa:bf:
         51:0d:ee:d6:f0:10:a4:bc:44:14:5e:07:e4:86:1d:fd:74:bd:
         d3:38:17:ec:10:5e:c2:6f:26:c7:cd:27:24:db:ae:c8:76:9a:
         63:10:ed:fc:40:88:55:3b:99:ac:1a:54:22:02:42:bd:48:76:
         d8:4a:ab:91:bb:1c:2f:33:d7:37:5e:68:d6:df:22:73:c1:74:
         7a:8f:7d:db
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGW6eQhAw+JYbFv4uBXTSOkoA3YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4NzY1QUQwODk2N0E2QTlBNTE2NTg1ODIyMERDMzMz
QUVFQkY4RDAeFw0yNDAzMDUxODE1NThaFw0yNTAzMDQxODIwNThaMDMxMTAvBgNV
BAMTKDY2NzI0RDlGODQyRkYyMTg0OTY5ODAwRjEzREM3RDZBREM2N0U1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1kfQaKIQrPx97i7bqlzqpHNSk
fiyFbgFyJTEEbBS+pVOGJbVV9q0KSvckTAlb5tNEKz7bpVYK5kp6grhJYz9t+0K7
7dn85Q4thD06D7YSY2WraiurASMWp5t3vajbMpp55UaH58OlaGMPSCe2IRdGQAsx
9V1vq4cTVbKA4+zwQfQTSsUSUSYtTsAvRKp2QxZJaZZKshPXSkUwk3wFo4Pmitnd
xobXShK+d/Ze/CGdh/aRxCCpU/a97D4yf+on0mDcW130F9S8OAwflPzcJ3Hfuajw
rf3caaKTV4s1lDxxz/2fIVLDLbijVZ3vN0rEwe7IY60D6STxtw/fEWW963Y/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUZnJNn4Qv8hhJaYAPE9x9atxn5QEwHwYDVR0j
BBgwFoAUp4dlrQiWemqaUWWFgiDcMzruv40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTU2ODk4REM4N0ZEQjU0RUQ1Q0YwRjIwNEY1MkY3NDgx
Njk0QjMwMEI5QUM2Q0IwRTk2ODdFRjk0MENFN0FFLzAvQTc4NzY1QUQwODk2N0E2
QTlBNTE2NTg1ODIyMERDMzMzQUVFQkY4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzg3NjVBRDA4OTY3QTZBOUE1
MTY1ODU4MjIwREMzMzNBRUVCRjhELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU1Njg5OERDODdGREI1NEVENUNGMEYyMDRGNTJGNzQ4MTY5NEIzMDBC
OUFDNkNCMEU5Njg3RUY5NDBDRTdBRS8wLzMxMzkzMTJlMzEzMDMyMmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzOTMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK/
ZvAwDQYJKoZIhvcNAQELBQADggEBAAPDboIPmq9CvV7q+uNfHj+oJ5DCpPdRJVYI
9Nc3+hfsTeRUPZxs1j+akQHehWDjW4ruMXgm7MzbtZugsZCnUyPYuJTeb2FNxv+t
otBjNpE9kYJC0h2mQ728ovBXL26uO0VInbwMveRwIcZrIMrKDW5B7hUl209cMTyu
URyYahH7VhNTKwrQrw9JYao42BkUBIkJTiGEg+I5hZxBOv4FakSDgb/j7F6Ibhi0
aKZW6pu2vQmqv1EN7tbwEKS8RBReB+SGHf10vdM4F+wQXsJvJsfNJyTbrsh2mmMQ
7fxAiFU7mawaVCICQr1IdthKq5G7HC8z1zdeaNbfInPBdHqPfds=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org