Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa
File:                     3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa (raw, json)
Hash identifier:          8ram5Gy+ef1zujTy/55BCcMfz49pl4EwpJmt16z/Ch4=
Subject key identifier:   99:09:B4:A2:B7:65:8E:03:51:EC:EE:8B:19:C0:E4:54:DB:F1:07:90
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       61A7A95B8A8D46662AF86541431561E7A7CC07FC
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:28 +0000
ROA not before:           Tue 05 Mar 2024 17:49:28 +0000
ROA not after:            Tue 04 Mar 2025 17:54:28 +0000
asID:                     6503
IP address blocks:        143.202.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a7:a9:5b:8a:8d:46:66:2a:f8:65:41:43:15:61:e7:a7:cc:07:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:28 2024 GMT
            Not After : Mar  4 17:54:28 2025 GMT
        Subject: CN=9909B4A2B7658E0351ECEE8B19C0E454DBF10790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:93:39:ae:b7:ec:9a:5e:7a:95:3e:74:cd:
                    be:ee:5b:34:80:af:59:0e:e9:78:84:4c:ce:fd:09:
                    62:75:7c:05:40:10:4e:11:fd:fe:42:b7:5a:89:5f:
                    51:87:db:e7:74:56:65:1e:e8:30:e6:95:54:9d:d7:
                    ac:17:31:18:be:11:54:51:d6:dc:39:fd:1f:34:d3:
                    35:c8:32:d1:16:b3:f0:69:ae:19:db:42:57:17:5d:
                    74:3c:35:cf:b8:69:54:8e:14:f4:c1:ad:91:ef:95:
                    59:8f:d7:7a:f7:a7:42:03:8a:83:dd:1f:c5:92:d8:
                    7f:10:8a:22:9d:fb:a3:2f:b2:4c:73:9d:9b:dd:90:
                    db:82:bf:b4:1d:08:a2:f1:70:33:e4:a4:1c:0a:09:
                    fa:2a:dc:a9:a6:80:9a:56:e8:a2:f4:8e:8b:98:94:
                    1f:0b:5e:8f:83:2a:7b:9b:5d:52:1a:eb:70:bf:91:
                    bb:ab:55:b7:80:79:ac:97:3c:98:7f:96:5f:f6:ae:
                    96:4d:25:10:7a:9a:66:0e:dd:37:0f:4c:33:79:a7:
                    f3:fb:5c:4c:29:dc:8c:a4:b0:56:1e:2d:c6:4e:67:
                    9e:f1:ba:21:ef:c7:76:39:65:49:b4:14:f9:c0:77:
                    20:a8:cc:c1:7d:c3:27:9c:64:2a:46:2b:3a:3d:52:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:B4:A2:B7:65:8E:03:51:EC:EE:8B:19:C0:E4:54:DB:F1:07:90
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:e0:7d:f6:9e:14:14:d6:7b:96:a5:a8:72:8d:d3:ee:33:
         46:02:9b:4e:26:da:18:22:d2:85:e6:8f:60:a6:14:40:ad:c4:
         3c:e4:38:ab:a6:3b:16:1f:4b:8c:c1:49:ad:e6:bf:32:bd:32:
         14:08:d7:12:77:88:a4:69:42:32:28:c7:73:0d:fa:df:8a:78:
         00:a4:50:7a:f9:b9:9b:9e:ab:53:53:40:24:c9:8f:4f:9f:94:
         82:66:cc:94:a5:48:9a:3b:ab:44:6f:41:40:00:48:a0:51:7b:
         4a:e3:80:86:8f:d8:49:8c:3d:a7:05:92:3c:7e:d2:1e:dd:f2:
         2c:39:6a:0f:3a:dc:35:44:57:11:de:f7:f6:02:3e:72:d6:c1:
         b9:81:88:62:a0:d5:05:98:88:4a:56:d1:9e:66:a4:1f:90:0d:
         c5:16:fd:33:bf:7b:ee:14:f0:b8:53:2a:a5:72:46:a8:23:dd:
         20:6a:c5:4a:f8:10:f2:1b:6a:42:2e:b3:52:d4:5b:80:45:53:
         ad:40:48:05:63:c9:60:80:0c:69:03:37:65:46:23:62:62:dc:
         f9:eb:de:d0:be:8a:c9:a6:69:e4:b8:44:99:3c:e1:dd:9f:62:
         9a:2c:19:d4:2d:3b:b8:47:cd:76:94:c8:40:47:f0:c3:3c:9f:
         eb:74:51:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYaepW4qNRmYq+GVBQxVh56fMB/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNDAzMDUxNzQ5MjhaFw0yNTAzMDQxNzU0MjhaMDMxMTAvBgNV
BAMTKDk5MDlCNEEyQjc2NThFMDM1MUVDRUU4QjE5QzBFNDU0REJGMTA3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76JM5rrfsml56lT50zb7uWzSA
r1kO6XiETM79CWJ1fAVAEE4R/f5Ct1qJX1GH2+d0VmUe6DDmlVSd16wXMRi+EVRR
1tw5/R800zXIMtEWs/BprhnbQlcXXXQ8Nc+4aVSOFPTBrZHvlVmP13r3p0IDioPd
H8WS2H8QiiKd+6MvskxznZvdkNuCv7QdCKLxcDPkpBwKCfoq3KmmgJpW6KL0jouY
lB8LXo+DKnubXVIa63C/kburVbeAeayXPJh/ll/2rpZNJRB6mmYO3TcPTDN5p/P7
XEwp3IyksFYeLcZOZ57xuiHvx3Y5ZUm0FPnAdyCozMF9wyecZCpGKzo9UniJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmQm0ordljgNR7O6LGcDkVNvxB5AwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMxMzQzMzJlMzIzMDMyMmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KnDAN
BgkqhkiG9w0BAQsFAAOCAQEAbFTgffaeFBTWe5alqHKN0+4zRgKbTibaGCLSheaP
YKYUQK3EPOQ4q6Y7Fh9LjMFJrea/Mr0yFAjXEneIpGlCMijHcw3634p4AKRQevm5
m56rU1NAJMmPT5+UgmbMlKVImjurRG9BQABIoFF7SuOAho/YSYw9pwWSPH7SHt3y
LDlqDzrcNURXEd739gI+ctbBuYGIYqDVBZiISlbRnmakH5ANxRb9M7977hTwuFMq
pXJGqCPdIGrFSvgQ8htqQi6zUtRbgEVTrUBIBWPJYIAMaQM3ZUYjYmLc+eve0L6K
yaZp5LhEmTzh3Z9imiwZ1C07uEfNdpTIQEfwwzyf63RREw==
-----END CERTIFICATE-----
Generated at Sun May 19 02:39:09 2024 by rpki-client on console-fra.rpki-client.org