Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
File:                     37342e3132332e34382e302f32322d3234203d3e20323639393436.roa (raw, json)
Hash identifier:          FAUNlQDna/Ow7aiQRiZxCKs060YARnbyJFHl4sCmIi4=
Subject key identifier:   91:4A:71:73:E1:DA:70:00:D8:02:46:D1:EE:2B:D8:51:40:13:82:FA
Certificate issuer:       /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial:       13267C65DB698550ECDE0A2A97F0979AB4260D45
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa
Signing time:             Tue 01 Oct 2024 19:30:00 +0000
ROA not before:           Tue 01 Oct 2024 19:25:00 +0000
ROA not after:            Tue 30 Sep 2025 19:30:00 +0000
asID:                     269946
IP address blocks:        74.123.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 07:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:26:7c:65:db:69:85:50:ec:de:0a:2a:97:f0:97:9a:b4:26:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
        Validity
            Not Before: Oct  1 19:25:00 2024 GMT
            Not After : Sep 30 19:30:00 2025 GMT
        Subject: CN=914A7173E1DA7000D80246D1EE2BD851401382FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:b0:15:ae:00:4e:f3:a2:69:39:9d:fa:6f:
                    fc:95:6b:b0:d5:db:3f:c1:86:ed:91:96:24:e3:eb:
                    b9:81:c5:2b:19:46:33:0a:3b:6b:b6:bf:e9:84:a9:
                    06:89:1e:f8:da:36:3a:1f:ac:db:47:d8:a3:53:42:
                    6b:f2:9c:04:13:fc:0b:7c:fa:da:de:be:6e:fe:88:
                    9d:47:e3:ac:61:cf:4c:d9:2b:f8:a9:05:2a:0d:1b:
                    88:cd:1c:e9:7b:9c:72:d0:49:61:84:ba:2f:0b:81:
                    a4:2f:57:b9:05:24:05:ea:33:b3:cd:29:e9:ef:fd:
                    a4:9e:0a:c2:17:2c:78:ea:b3:98:8e:73:f0:54:6e:
                    ef:b7:2f:ce:4d:6d:96:cb:8e:6d:d6:f0:fb:e5:96:
                    df:45:f7:95:14:e9:7c:c0:cf:0d:0a:e6:2b:95:56:
                    c2:4d:93:a0:11:57:77:41:c6:f1:34:fd:0f:b3:8d:
                    00:e0:e7:10:54:f1:bc:2d:b4:72:a0:ea:b6:fa:58:
                    fa:03:6f:2d:b7:ff:dc:ab:ca:a4:06:e3:ec:4a:d9:
                    af:e2:0e:dd:dd:f8:4e:94:2f:1a:8b:51:ef:4f:c5:
                    ac:a3:34:23:6a:29:a5:92:7c:46:52:21:6b:d0:9f:
                    f9:36:41:e0:a0:ab:90:cc:ce:2c:30:fd:79:3e:09:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4A:71:73:E1:DA:70:00:D8:02:46:D1:EE:2B:D8:51:40:13:82:FA
            X509v3 Authority Key Identifier:
                keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/37342e3132332e34382e302f32322d3234203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:86:f7:04:37:f2:93:23:7d:20:bc:f1:a2:da:d2:25:f2:
         9a:59:28:af:b7:fe:a2:d5:3a:7f:c8:ed:5b:34:8f:b1:d1:70:
         7b:05:a5:3d:73:9f:32:8b:5d:39:ec:8f:e3:87:54:46:40:90:
         5b:e6:a8:22:4b:c1:3a:1e:64:bd:95:49:2d:b5:c0:43:b5:dc:
         47:f3:cd:20:99:e9:69:2a:bf:74:a4:bc:0f:21:ba:c3:81:bb:
         39:d5:7c:08:1d:14:b3:a0:36:fa:7c:35:32:c6:2a:05:d4:0c:
         96:bb:ea:86:a7:c0:ae:ab:5e:bd:c2:e5:db:68:36:03:8e:91:
         47:21:1c:4e:8c:44:82:7e:1d:69:dd:79:84:d2:df:24:57:a5:
         9a:2c:bb:8c:8b:63:22:e5:40:45:af:a1:b6:77:da:bb:ab:72:
         f2:1a:00:b7:d3:d6:5c:57:ff:f8:bb:23:46:7e:db:b3:2e:1c:
         5f:47:f9:56:ef:7f:49:73:77:6c:15:37:54:e5:02:67:e1:ea:
         1e:47:0a:40:c1:c0:85:ef:20:f8:c6:4f:14:58:ca:6b:a8:13:
         9d:a0:71:15:a2:63:d1:34:24:10:c6:d3:74:d6:50:c3:df:e5:
         dc:cb:e8:8e:d1:15:bf:da:01:02:c3:53:32:7f:4e:ad:db:1c:
         a3:09:9f:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEyZ8ZdtphVDs3goql/CXmrQmDUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyN0EwOUVBOTlBREU1OEMwQ0NEODRGMThDNDk5QzQ1
RUMxMjE4NTAeFw0yNDEwMDExOTI1MDBaFw0yNTA5MzAxOTMwMDBaMDMxMTAvBgNV
BAMTKDkxNEE3MTczRTFEQTcwMDBEODAyNDZEMUVFMkJEODUxNDAxMzgyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNLAVrgBO86JpOZ36b/yVa7DV
2z/Bhu2RliTj67mBxSsZRjMKO2u2v+mEqQaJHvjaNjofrNtH2KNTQmvynAQT/At8
+trevm7+iJ1H46xhz0zZK/ipBSoNG4jNHOl7nHLQSWGEui8LgaQvV7kFJAXqM7PN
Kenv/aSeCsIXLHjqs5iOc/BUbu+3L85NbZbLjm3W8Pvllt9F95UU6XzAzw0K5iuV
VsJNk6ARV3dBxvE0/Q+zjQDg5xBU8bwttHKg6rb6WPoDby23/9yryqQG4+xK2a/i
Dt3d+E6ULxqLUe9PxayjNCNqKaWSfEZSIWvQn/k2QeCgq5DMziww/Xk+CZ97AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUkUpxc+HacADYAkbR7ivYUUATgvowHwYDVR0j
BBgwFoAUASegnqma3ljAzNhPGMSZxF7BIYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTU2OUEyQzBCQTZDNzhCNjQ3RUY0ODlDQjVFOUU0QkIx
MjFDM0FCOTdFMTA5NkQwNzVDMDgyQTVDQUJDQUMwLzAvMDEyN0EwOUVBOTlBREU1
OEMwQ0NEODRGMThDNDk5QzQ1RUMxMjE4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTI3QTA5RUE5OUFERTU4QzBD
Q0Q4NEYxOEM0OTlDNDVFQzEyMTg1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUE1NjlBMkMwQkE2Qzc4QjY0N0VGNDg5Q0I1RTlFNEJCMTIxQzNBQjk3
RTEwOTZEMDc1QzA4MkE1Q0FCQ0FDMC8wLzM3MzQyZTMxMzIzMzJlMzQzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAkp7MDAN
BgkqhkiG9w0BAQsFAAOCAQEAPeOG9wQ38pMjfSC88aLa0iXymlkor7f+otU6f8jt
WzSPsdFwewWlPXOfMotdOeyP44dURkCQW+aoIkvBOh5kvZVJLbXAQ7XcR/PNIJnp
aSq/dKS8DyG6w4G7OdV8CB0Us6A2+nw1MsYqBdQMlrvqhqfArqtevcLl22g2A46R
RyEcToxEgn4dad15hNLfJFelmiy7jItjIuVARa+htnfau6ty8hoAt9PWXFf/+Lsj
Rn7bsy4cX0f5Vu9/SXN3bBU3VOUCZ+HqHkcKQMHAhe8g+MZPFFjKa6gTnaBxFaJj
0TQkEMbTdNZQw9/l3MvojtEVv9oBAsNTMn9OrdscowmfAg==
-----END CERTIFICATE-----
Generated at Mon Oct 28 22:52:54 2024 by rpki-client on console-fra.rpki-client.org