Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
File:                     3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          4//p/OCi5uvUkE0XPD29bvfJGclu/65p5SqiNwbvXr0=
Subject key identifier:   39:D5:55:D4:12:17:4C:FC:36:76:88:25:66:0D:2F:DA:95:CF:85:C1
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       5D9685820DBA866F22943BD68BF28DA75804E997
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:38 +0000
ROA not before:           Tue 05 Mar 2024 17:49:38 +0000
ROA not after:            Tue 04 Mar 2025 17:54:38 +0000
asID:                     11172
IP address blocks:        192.207.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:96:85:82:0d:ba:86:6f:22:94:3b:d6:8b:f2:8d:a7:58:04:e9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:38 2024 GMT
            Not After : Mar  4 17:54:38 2025 GMT
        Subject: CN=39D555D412174CFC36768825660D2FDA95CF85C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:7f:3a:2a:e2:d5:64:4c:24:3e:d6:66:df:
                    03:59:15:24:49:38:b6:29:16:12:c8:b4:08:63:d9:
                    64:1e:87:ea:af:dc:e8:82:07:58:7c:9d:2b:72:c0:
                    ff:ce:1a:39:01:0b:e7:ec:77:6f:73:04:eb:fd:fd:
                    61:b1:d7:b3:91:7b:67:e6:da:cf:bc:d6:cd:d2:42:
                    37:28:b4:d0:f5:5d:0d:9b:aa:8a:35:b7:b1:27:d5:
                    0d:6b:0b:8b:c4:82:09:ee:ae:4f:1e:09:c1:81:78:
                    cd:6a:ae:96:da:5a:d0:3a:67:a6:e4:3a:8f:e5:5d:
                    71:79:33:d0:81:e0:aa:58:10:ee:7e:f2:81:c0:d0:
                    60:54:ad:c4:b5:72:f7:26:66:81:d5:90:1c:95:f5:
                    d6:6c:de:e7:4f:2c:13:ad:2a:84:f7:3a:74:19:85:
                    31:45:8c:35:81:94:3f:43:da:1d:a8:02:99:fd:21:
                    84:89:d5:77:0e:20:46:91:19:04:c2:a0:51:f2:00:
                    17:9b:02:cd:f2:d4:9e:03:b2:4d:fa:9e:64:dd:fa:
                    36:93:2c:9a:69:68:bd:3d:0c:1f:e1:5e:75:b3:63:
                    6e:05:4a:70:5d:33:34:87:be:ce:11:88:ef:98:43:
                    57:d4:2a:03:2b:86:18:25:fa:a1:25:f0:ac:b0:28:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:55:D4:12:17:4C:FC:36:76:88:25:66:0D:2F:DA:95:CF:85:C1
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:2e:4f:dd:3e:98:5b:ee:e0:33:1d:a2:35:4d:cf:53:92:
         96:8a:c3:00:3b:a0:40:63:68:30:f0:0f:65:99:26:5d:73:8c:
         d8:2d:20:78:cd:f1:b8:81:37:f4:67:7e:a6:07:df:4d:a3:31:
         11:31:cf:ac:b4:47:07:7e:cc:1d:f1:a2:0c:88:91:06:90:30:
         83:e4:69:48:d7:dc:4a:bd:27:fa:a0:ab:3d:13:ba:cb:75:5f:
         d4:f2:bb:36:46:a3:30:0b:40:93:7c:f5:28:f7:7c:c2:d3:ee:
         53:4d:16:70:40:88:79:6a:c0:73:43:2b:05:c1:ac:5c:7f:73:
         cf:12:81:8b:0f:bb:32:6e:ae:e3:46:3d:3a:6b:be:11:ed:49:
         52:f3:a0:b0:5b:d9:4c:5f:12:dd:a5:84:7f:0a:6f:68:19:a2:
         4e:2f:19:24:26:5e:ad:03:84:b0:d7:c0:ab:5d:36:ac:3d:7c:
         d8:e3:7f:f9:c7:8f:11:b1:6d:f9:8e:39:da:6c:a6:68:70:f1:
         41:3f:0d:a4:96:00:05:b0:c8:77:8d:98:2c:40:13:68:19:27:
         d4:f8:8b:45:4b:b8:52:05:33:1b:3c:44:bd:03:75:79:15:3a:
         30:e5:17:0d:56:d9:f8:20:04:61:c8:0d:17:99:64:c4:1c:43:
         5b:e7:5d:d0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXZaFgg26hm8ilDvWi/KNp1gE6ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNDAzMDUxNzQ5MzhaFw0yNTAzMDQxNzU0MzhaMDMxMTAvBgNV
BAMTKDM5RDU1NUQ0MTIxNzRDRkMzNjc2ODgyNTY2MEQyRkRBOTVDRjg1QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjH86KuLVZEwkPtZm3wNZFSRJ
OLYpFhLItAhj2WQeh+qv3OiCB1h8nStywP/OGjkBC+fsd29zBOv9/WGx17ORe2fm
2s+81s3SQjcotND1XQ2bqoo1t7En1Q1rC4vEggnurk8eCcGBeM1qrpbaWtA6Z6bk
Oo/lXXF5M9CB4KpYEO5+8oHA0GBUrcS1cvcmZoHVkByV9dZs3udPLBOtKoT3OnQZ
hTFFjDWBlD9D2h2oApn9IYSJ1XcOIEaRGQTCoFHyABebAs3y1J4Dsk36nmTd+jaT
LJppaL09DB/hXnWzY24FSnBdMzSHvs4RiO+YQ1fUKgMrhhgl+qEl8KywKM9XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOdVV1BIXTPw2doglZg0v2pXPhcEwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMxMzkzMjJlMzIzMDM3MmUzMjMwMzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMxMzEzNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwM/M
MA0GCSqGSIb3DQEBCwUAA4IBAQADpy5P3T6YW+7gMx2iNU3PU5KWisMAO6BAY2gw
8A9lmSZdc4zYLSB4zfG4gTf0Z36mB99NozERMc+stEcHfswd8aIMiJEGkDCD5GlI
19xKvSf6oKs9E7rLdV/U8rs2RqMwC0CTfPUo93zC0+5TTRZwQIh5asBzQysFwaxc
f3PPEoGLD7sybq7jRj06a74R7UlS86CwW9lMXxLdpYR/Cm9oGaJOLxkkJl6tA4Sw
18CrXTasPXzY43/5x48RsW35jjnabKZocPFBPw2klgAFsMh3jZgsQBNoGSfU+ItF
S7hSBTMbPES9A3V5FTow5RcNVtn4IARhyA0XmWTEHENb513Q
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org