Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/3134332e302e39322e302f32322d3234203d3e20323633383336.roa
File:                     3134332e302e39322e302f32322d3234203d3e20323633383336.roa (raw, json)
Hash identifier:          z/Pqbm7T46JOoxaI4JxPJmYu8Nw8v+3d63Rme7D8Rrw=
Subject key identifier:   06:83:5D:6A:43:AA:5B:11:7F:52:E4:F9:6A:90:14:C3:16:6F:E1:BE
Certificate issuer:       /CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
Certificate serial:       2C4D94DE666D0B3358F2A129E3AB53D804D3C16D
Authority key identifier: B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/3134332e302e39322e302f32322d3234203d3e20323633383336.roa
Signing time:             Tue 05 Mar 2024 17:49:22 +0000
ROA not before:           Tue 05 Mar 2024 17:44:22 +0000
ROA not after:            Tue 04 Mar 2025 17:49:22 +0000
asID:                     263836
IP address blocks:        143.0.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:94:de:66:6d:0b:33:58:f2:a1:29:e3:ab:53:d8:04:d3:c1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
        Validity
            Not Before: Mar  5 17:44:22 2024 GMT
            Not After : Mar  4 17:49:22 2025 GMT
        Subject: CN=06835D6A43AA5B117F52E4F96A9014C3166FE1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:1c:33:d2:98:b5:36:de:45:6a:8d:6c:55:
                    0f:63:32:4e:da:d3:c6:f7:54:02:8f:6a:b7:1a:b3:
                    f5:9b:f0:e6:b2:3f:8d:2c:4b:ae:ff:8f:05:bd:fc:
                    8f:75:ba:c4:5d:a8:3b:5b:f5:34:e2:c6:8f:ae:28:
                    ee:05:b5:74:f2:94:9f:ab:31:e5:23:26:35:20:70:
                    5c:b9:2e:c7:ae:f7:47:c3:ca:fd:b2:ad:9f:c1:40:
                    51:8e:b4:31:ac:96:13:8e:e5:d5:e8:6e:f0:28:e6:
                    09:c2:7c:ec:04:91:74:01:19:44:b0:6e:9a:90:35:
                    76:36:e0:9a:cf:62:17:ef:1a:da:3f:26:b6:4f:df:
                    1a:40:0d:90:2f:79:f9:44:b6:c7:5b:ca:1f:23:19:
                    66:1c:a9:a5:c0:63:ef:be:64:af:ee:2e:80:65:ef:
                    65:70:8b:5b:af:2d:00:65:58:2c:72:c8:8d:a6:93:
                    62:87:e8:f9:3a:ef:52:bb:7f:7c:51:5a:ac:a1:c6:
                    12:43:a8:7d:9b:9a:f8:f7:eb:60:99:13:7c:2b:83:
                    5c:be:51:a4:40:84:72:d6:cb:c0:e7:48:f6:b9:af:
                    95:3c:34:e2:1c:ce:92:9f:31:27:8f:9f:a3:e6:2d:
                    a3:72:b9:34:9f:0a:b9:47:01:bd:22:01:68:93:d4:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:5D:6A:43:AA:5B:11:7F:52:E4:F9:6A:90:14:C3:16:6F:E1:BE
            X509v3 Authority Key Identifier:
                keyid:B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/3134332e302e39322e302f32322d3234203d3e20323633383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:05:f6:86:45:db:5f:9b:9a:79:17:45:c4:8e:8f:f2:0e:e9:
         94:6e:92:3b:83:9b:4c:8b:3a:35:19:a9:bb:6a:03:af:fd:49:
         77:13:a5:0e:74:7b:ba:7f:c4:e0:ac:d9:85:be:81:36:7e:ff:
         20:2e:bf:e6:55:99:47:45:ce:ec:32:d7:72:4c:2a:0b:4e:4b:
         a7:7b:4c:6e:f5:dc:f3:2d:3e:a9:89:7a:9e:2e:6e:21:4e:de:
         8f:41:bb:24:6e:b4:0b:4f:d5:0d:64:6c:79:8f:60:dc:fb:80:
         ac:12:34:e7:d1:24:94:5d:b8:ef:c6:36:d9:40:df:25:99:11:
         fd:0b:8b:0e:fe:9a:6f:ba:a4:3e:2c:a8:59:56:1b:d1:f8:a7:
         e6:24:77:0f:9d:64:9e:4b:07:8b:02:da:21:f7:19:df:6a:07:
         1b:d8:86:5e:74:eb:84:e3:5a:14:b9:b7:8b:52:3e:ca:78:5f:
         9b:4f:33:ea:83:a0:6b:dc:2a:42:8b:52:b2:25:8c:19:e5:24:
         3f:9b:2b:a4:22:a2:10:a4:95:c4:96:10:08:1c:a3:13:51:41:
         e0:d8:1b:e1:29:c7:4c:e0:dd:aa:ee:6f:96:ff:96:18:f4:df:
         bd:6e:15:77:e6:9b:3e:48:97:6a:e4:90:6c:00:5d:35:c3:50:
         58:02:20:30
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULE2U3mZtCzNY8qEp46tT2ATTwW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFNTc4Q0E4NDQ5OTU0REJCQzIzNTg0RjJBRkU3REEy
Qjc2NzZGQjAeFw0yNDAzMDUxNzQ0MjJaFw0yNTAzMDQxNzQ5MjJaMDMxMTAvBgNV
BAMTKDA2ODM1RDZBNDNBQTVCMTE3RjUyRTRGOTZBOTAxNEMzMTY2RkUxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86Rwz0pi1Nt5Fao1sVQ9jMk7a
08b3VAKParcas/Wb8OayP40sS67/jwW9/I91usRdqDtb9TTixo+uKO4FtXTylJ+r
MeUjJjUgcFy5Lseu90fDyv2yrZ/BQFGOtDGslhOO5dXobvAo5gnCfOwEkXQBGUSw
bpqQNXY24JrPYhfvGto/JrZP3xpADZAveflEtsdbyh8jGWYcqaXAY+++ZK/uLoBl
72Vwi1uvLQBlWCxyyI2mk2KH6Pk671K7f3xRWqyhxhJDqH2bmvj362CZE3wrg1y+
UaRAhHLWy8DnSPa5r5U8NOIczpKfMSePn6PmLaNyuTSfCrlHAb0iAWiT1GbpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBoNdakOqWxF/UuT5apAUwxZv4b4wHwYDVR0j
BBgwFoAUtuV4yoRJlU27wjWE8q/n2it2dvswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMjk1RjE5Q0U5MjlDQ0MxQzMzRTVDRTNDQjhERDE3QkNC
NkZCNzk1OTY1REEzN0FCODlCRjI3RjE2M0VDNUQ0LzAvQjZFNTc4Q0E4NDQ5OTU0
REJCQzIzNTg0RjJBRkU3REEyQjc2NzZGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkU1NzhDQTg0NDk5NTREQkJD
MjM1ODRGMkFGRTdEQTJCNzY3NkZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTI5NUYxOUNFOTI5Q0NDMUMzM0U1Q0UzQ0I4REQxN0JDQjZGQjc5NTk2
NURBMzdBQjg5QkYyN0YxNjNFQzVENC8wLzMxMzQzMzJlMzAyZTM5MzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzODMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKPAFwwDQYJ
KoZIhvcNAQELBQADggEBAHYF9oZF21+bmnkXRcSOj/IO6ZRukjuDm0yLOjUZqbtq
A6/9SXcTpQ50e7p/xOCs2YW+gTZ+/yAuv+ZVmUdFzuwy13JMKgtOS6d7TG713PMt
PqmJep4ubiFO3o9BuyRutAtP1Q1kbHmPYNz7gKwSNOfRJJRduO/GNtlA3yWZEf0L
iw7+mm+6pD4sqFlWG9H4p+Ykdw+dZJ5LB4sC2iH3Gd9qBxvYhl5064TjWhS5t4tS
Psp4X5tPM+qDoGvcKkKLUrIljBnlJD+bK6QiohCklcSWEAgcoxNRQeDYG+Epx0zg
3arub5b/lhj0371uFXfmmz5Il2rkkGwAXTXDUFgCIDA=
-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:37 2024 by rpki-client on console-fra.rpki-client.org