Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139332e302f32342d3234203d3e20323634383237.roa
File:                     3138372e3130322e3139332e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          6mjP4mVvyLHOJc6UKJfpC4riSrKQauUFiNMAx4oQEO0=
Subject key identifier:   6D:C9:EB:49:39:CF:39:36:8D:87:88:86:39:5B:D4:78:8E:99:89:3C
Certificate issuer:       /CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
Certificate serial:       7B1E800DD0739B8C96D96A0D9CEA84111B7600D7
Authority key identifier: 9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139332e302f32342d3234203d3e20323634383237.roa
Signing time:             Tue 05 Mar 2024 18:00:39 +0000
ROA not before:           Tue 05 Mar 2024 17:55:39 +0000
ROA not after:            Tue 04 Mar 2025 18:00:39 +0000
asID:                     264827
IP address blocks:        187.102.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:80:0d:d0:73:9b:8c:96:d9:6a:0d:9c:ea:84:11:1b:76:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30
        Validity
            Not Before: Mar  5 17:55:39 2024 GMT
            Not After : Mar  4 18:00:39 2025 GMT
        Subject: CN=6DC9EB4939CF39368D878886395BD4788E99893C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:52:16:e1:69:0e:49:f2:58:b6:f7:80:a4:
                    24:95:c9:ba:91:7c:6b:45:b6:71:30:47:6f:33:7a:
                    f9:28:77:2f:77:a9:a1:76:38:9c:3c:ed:cf:39:67:
                    cb:d6:b7:c5:29:32:08:72:85:e0:f8:ee:20:92:be:
                    24:84:89:35:6a:37:3f:13:b0:c1:58:f8:f2:76:f2:
                    90:6f:fc:05:b9:b7:7b:78:08:1b:93:84:ad:76:51:
                    3d:4f:4a:1f:87:9c:2e:89:b1:80:e0:a2:06:9a:e5:
                    4a:3c:fa:ce:6e:d0:c3:2c:07:c9:45:e0:1d:5e:6a:
                    4c:50:0c:1d:2c:c6:4d:2a:ec:43:6f:bf:e6:0c:3c:
                    3e:6e:8f:fc:78:ba:26:21:74:e6:b2:75:73:9c:f3:
                    3e:01:47:32:85:e8:d4:52:08:f4:c4:7e:ab:41:af:
                    62:bf:0a:5c:55:38:d1:25:31:d2:56:0b:4a:ee:d0:
                    aa:66:fe:0e:29:65:fa:c6:7f:30:a9:57:cb:f3:14:
                    1d:d4:80:71:3d:f3:a5:12:b1:5e:6c:af:10:8a:c9:
                    ff:e6:df:b9:69:78:70:70:f9:47:ea:44:8c:e4:d6:
                    33:fc:00:6c:59:1c:b8:0c:82:74:e7:6a:0b:31:7c:
                    5d:64:e2:e9:c9:ed:de:2e:85:50:c1:df:a4:7f:f6:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:EB:49:39:CF:39:36:8D:87:88:86:39:5B:D4:78:8E:99:89:3C
            X509v3 Authority Key Identifier:
                keyid:9B:36:03:72:DA:9A:D4:F2:DF:1B:92:EE:0B:52:64:26:6E:B2:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B360372DA9AD4F2DF1B92EE0B5264266EB2ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A298BFC345BC0055E2F9D4B2CC857B5C282C4AE13DF992AF3A626AF509A40E/0/3138372e3130322e3139332e302f32342d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:02:da:2e:14:8c:23:1b:19:64:f4:7f:cc:c0:55:8e:45:
         81:73:38:0d:e5:50:66:20:b1:e8:7e:03:ad:8f:18:03:e6:c4:
         62:1f:99:05:06:6a:bc:1a:ab:e6:f9:0d:69:68:c6:38:70:cf:
         07:99:29:9c:a0:37:e0:4f:28:68:7b:8a:3c:ee:38:5a:ac:7e:
         20:4e:41:41:36:79:51:82:ff:43:57:69:04:9b:33:d9:7e:99:
         c1:bc:0c:d0:e1:c1:b8:8a:6d:d0:39:d7:5f:8d:bd:94:47:e9:
         5c:c0:6d:95:a9:15:98:79:e5:d1:1e:9a:83:03:28:f1:34:82:
         79:0a:af:e5:62:f5:8a:72:c1:c0:e4:74:d3:1e:cd:2d:54:b7:
         ae:fd:f4:04:26:0b:2f:26:9d:fa:5c:88:54:50:66:98:38:7c:
         b0:17:9d:2b:30:fa:e6:83:67:97:0e:d8:93:e8:b3:f3:60:a4:
         19:5f:0a:67:ac:59:6a:af:57:12:2e:74:31:d9:2a:93:4d:f5:
         5e:a1:3a:c7:08:84:43:57:c4:9a:05:dc:63:9d:4c:3f:7c:b0:
         44:4f:d5:e0:3b:7d:2b:fb:33:70:d5:f5:f8:71:25:ed:52:dd:
         02:f8:42:f4:31:a2:0f:50:61:8c:b9:22:8a:86:af:7f:54:fb:
         09:b6:d6:fd
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUex6ADdBzm4yW2WoNnOqEERt2ANcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIzNjAzNzJEQTlBRDRGMkRGMUI5MkVFMEI1MjY0MjY2
RUIyRUQzMDAeFw0yNDAzMDUxNzU1MzlaFw0yNTAzMDQxODAwMzlaMDMxMTAvBgNV
BAMTKDZEQzlFQjQ5MzlDRjM5MzY4RDg3ODg4NjM5NUJENDc4OEU5OTg5M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnVIW4WkOSfJYtveApCSVybqR
fGtFtnEwR28zevkody93qaF2OJw87c85Z8vWt8UpMghyheD47iCSviSEiTVqNz8T
sMFY+PJ28pBv/AW5t3t4CBuThK12UT1PSh+HnC6JsYDgogaa5Uo8+s5u0MMsB8lF
4B1eakxQDB0sxk0q7ENvv+YMPD5uj/x4uiYhdOaydXOc8z4BRzKF6NRSCPTEfqtB
r2K/ClxVONElMdJWC0ru0Kpm/g4pZfrGfzCpV8vzFB3UgHE986USsV5srxCKyf/m
37lpeHBw+UfqRIzk1jP8AGxZHLgMgnTnagsxfF1k4unJ7d4uhVDB36R/9jclAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUbcnrSTnPOTaNh4iGOVvUeI6ZiTwwHwYDVR0j
BBgwFoAUmzYDctqa1PLfG5LuC1JkJm6y7TAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUEyOThCRkMzNDVCQzAwNTVFMkY5RDRCMkNDODU3QjVD
MjgyQzRBRTEzREY5OTJBRjNBNjI2QUY1MDlBNDBFLzAvOUIzNjAzNzJEQTlBRDRG
MkRGMUI5MkVFMEI1MjY0MjY2RUIyRUQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QjM2MDM3MkRBOUFENEYyREYx
QjkyRUUwQjUyNjQyNjZFQjJFRDMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFBMjk4QkZDMzQ1QkMwMDU1RTJGOUQ0QjJDQzg1N0I1QzI4MkM0QUUx
M0RGOTkyQUYzQTYyNkFGNTA5QTQwRS8wLzMxMzgzNzJlMzEzMDMyMmUzMTM5MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzODMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC7
ZsEwDQYJKoZIhvcNAQELBQADggEBAKI2AtouFIwjGxlk9H/MwFWORYFzOA3lUGYg
seh+A62PGAPmxGIfmQUGarwaq+b5DWloxjhwzweZKZygN+BPKGh7ijzuOFqsfiBO
QUE2eVGC/0NXaQSbM9l+mcG8DNDhwbiKbdA511+NvZRH6VzAbZWpFZh55dEemoMD
KPE0gnkKr+Vi9YpywcDkdNMezS1Ut6799AQmCy8mnfpciFRQZpg4fLAXnSsw+uaD
Z5cO2JPos/NgpBlfCmesWWqvVxIudDHZKpNN9V6hOscIhENXxJoF3GOdTD98sERP
1eA7fSv7M3DV9fhxJe1S3QL4QvQxog9QYYy5IoqGr39U+wm21v0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org