Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa
File:                     3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa (raw, json)
Hash identifier:          RZBDA6Ytx0J0Oe0E/QwT2uZzgocGdTt5k4FTqXiKTZ4=
Subject key identifier:   B2:C8:92:E9:27:72:20:6B:06:95:DD:6E:BA:0B:3C:EA:86:CA:1C:A1
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       21695E46FD566C32A6F132C17BC772700D547096
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa
Signing time:             Tue 09 Apr 2024 21:25:00 +0000
ROA not before:           Tue 09 Apr 2024 21:20:00 +0000
ROA not after:            Tue 08 Apr 2025 21:25:00 +0000
asID:                     273000
IP address blocks:        138.204.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:69:5e:46:fd:56:6c:32:a6:f1:32:c1:7b:c7:72:70:0d:54:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Apr  9 21:20:00 2024 GMT
            Not After : Apr  8 21:25:00 2025 GMT
        Subject: CN=B2C892E92772206B0695DD6EBA0B3CEA86CA1CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:83:21:64:66:08:cf:f7:02:6b:9f:5d:d6:
                    0a:93:37:95:0b:50:0b:b7:6f:1e:85:2d:05:c9:10:
                    5d:e3:78:27:7a:72:de:3f:79:2b:94:d1:ba:be:cb:
                    13:70:67:2d:77:59:ff:14:05:92:1f:9b:43:cf:ee:
                    60:b2:86:5f:07:a9:ef:7e:01:1b:0e:1c:35:ef:be:
                    81:1a:84:fe:ba:1e:ec:a0:38:30:ac:cb:a4:4a:4e:
                    77:52:09:fb:34:c7:ac:22:7d:78:5d:76:ba:68:c7:
                    30:ac:7b:4c:6b:f2:fa:c9:a0:6f:4d:6c:39:b8:24:
                    74:f1:c0:bf:a6:1d:48:b6:e8:35:5b:71:71:28:27:
                    72:41:50:92:ad:8f:7b:70:df:52:9d:6e:0f:02:f9:
                    08:d7:b1:f1:68:0c:82:3c:17:a2:73:86:13:e4:a2:
                    3f:30:51:39:6f:32:e3:fa:34:ce:87:ee:5e:0f:f5:
                    ca:c8:bb:d2:37:22:bd:21:fa:54:61:c6:d7:bd:30:
                    6c:6a:b0:3a:ae:a9:08:4b:be:2e:39:21:8e:d3:5a:
                    3c:be:db:21:18:d4:fa:9c:0c:a3:6d:23:48:f5:a8:
                    26:b6:64:3c:79:3b:d6:ff:a2:a3:c0:a1:b3:b1:c3:
                    bb:34:07:7b:c9:14:ce:a0:de:49:ab:41:f4:30:54:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:92:E9:27:72:20:6B:06:95:DD:6E:BA:0B:3C:EA:86:CA:1C:A1
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:f1:72:97:5a:a4:d0:04:ce:4d:ed:19:e0:40:da:6c:7a:
         40:00:d1:9a:45:44:10:28:9d:2f:e9:1d:81:89:78:6c:c3:7a:
         c8:4f:c3:44:50:a3:da:d8:37:1f:4e:e7:e1:2e:5e:84:25:bf:
         63:b8:0e:76:61:58:15:84:41:a6:83:a5:bc:ed:11:48:bb:b0:
         02:c5:d4:15:60:1c:8f:94:c5:f4:eb:18:89:06:af:67:aa:6b:
         75:2f:d1:73:d8:5a:96:69:e6:51:50:de:19:1e:3e:56:ea:4d:
         d8:cd:69:04:18:e8:52:dc:59:2b:0e:46:aa:c7:1f:da:23:34:
         85:93:d4:a3:89:e4:4d:36:71:bb:0e:cd:48:61:b0:cc:b0:84:
         50:7a:76:5b:9a:68:ec:7d:48:5a:65:ae:48:91:c4:0a:c4:6a:
         d7:19:7a:fb:86:ce:09:57:e0:5e:b9:d0:8f:9a:85:43:d8:ed:
         1e:7a:66:aa:c6:00:20:e1:e1:42:4e:8a:d1:bd:39:95:d0:d8:
         2d:83:15:c8:a0:30:ae:dd:1c:ca:c7:86:7d:f0:e6:e1:7f:74:
         3c:e7:fa:05:d9:75:37:74:f9:d7:e4:38:f2:ca:60:4b:21:87:
         f9:8f:d0:19:2b:c2:b7:6e:60:22:ab:a2:2f:c5:31:77:1c:8f:
         24:3f:e5:16
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIWleRv1WbDKm8TLBe8dycA1UcJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG
MkQzNTVDNjAeFw0yNDA0MDkyMTIwMDBaFw0yNTA0MDgyMTI1MDBaMDMxMTAvBgNV
BAMTKEIyQzg5MkU5Mjc3MjIwNkIwNjk1REQ2RUJBMEIzQ0VBODZDQTFDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBc4MhZGYIz/cCa59d1gqTN5UL
UAu3bx6FLQXJEF3jeCd6ct4/eSuU0bq+yxNwZy13Wf8UBZIfm0PP7mCyhl8Hqe9+
ARsOHDXvvoEahP66HuygODCsy6RKTndSCfs0x6wifXhddrpoxzCse0xr8vrJoG9N
bDm4JHTxwL+mHUi26DVbcXEoJ3JBUJKtj3tw31Kdbg8C+QjXsfFoDII8F6JzhhPk
oj8wUTlvMuP6NM6H7l4P9crIu9I3Ir0h+lRhxte9MGxqsDquqQhLvi45IY7TWjy+
2yEY1PqcDKNtI0j1qCa2ZDx5O9b/oqPAobOxw7s0B3vJFM6g3kmrQfQwVHEpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUssiS6SdyIGsGld1uugs86obKHKEwHwYDVR0j
BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD
NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1
QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4
NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4
REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzMxMzMzODJlMzIzMDM0MmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiswM
MA0GCSqGSIb3DQEBCwUAA4IBAQB/BfFyl1qk0ATOTe0Z4EDabHpAANGaRUQQKJ0v
6R2BiXhsw3rIT8NEUKPa2DcfTufhLl6EJb9juA52YVgVhEGmg6W87RFIu7ACxdQV
YByPlMX06xiJBq9nqmt1L9Fz2FqWaeZRUN4ZHj5W6k3YzWkEGOhS3FkrDkaqxx/a
IzSFk9SjieRNNnG7Ds1IYbDMsIRQenZbmmjsfUhaZa5IkcQKxGrXGXr7hs4JV+Be
udCPmoVD2O0eemaqxgAg4eFCTorRvTmV0NgtgxXIoDCu3RzKx4Z98Obhf3Q85/oF
2XU3dPnX5DjyymBLIYf5j9AZK8K3bmAiq6IvxTF3HI8kP+UW
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org