Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
File:                     3139322e38342e31322e302f32342d3234203d3e2033363430.roa (raw, json)
Hash identifier:          ZtLffszZMXRwbJKZIpTjUoIiVIZwwDIzhFCDCequKuE=
Subject key identifier:   4C:DB:BC:86:4D:04:F4:7C:D8:CA:98:5E:EC:56:FF:FD:C5:70:65:57
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       16CF3D79BB3FACD88D4248FE995C63A1EC02BF01
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:27 +0000
ROA not before:           Tue 05 Mar 2024 18:18:27 +0000
ROA not after:            Tue 04 Mar 2025 18:23:27 +0000
asID:                     3640
IP address blocks:        192.84.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cf:3d:79:bb:3f:ac:d8:8d:42:48:fe:99:5c:63:a1:ec:02:bf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:27 2024 GMT
            Not After : Mar  4 18:23:27 2025 GMT
        Subject: CN=4CDBBC864D04F47CD8CA985EEC56FFFDC5706557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:51:eb:7f:ec:7b:67:73:6a:69:8a:5d:48:
                    51:b5:dc:9c:b2:8e:72:b8:5e:62:e0:e3:3c:24:e0:
                    fe:03:8f:99:67:e0:ea:16:8f:26:7f:61:5b:47:92:
                    84:2b:1a:d0:c2:da:10:1a:35:66:c6:90:54:2b:91:
                    05:4f:46:83:5f:23:42:ed:09:a4:83:cb:68:1e:cd:
                    aa:c1:3e:a7:b7:27:2c:23:8a:69:e4:c6:1e:54:42:
                    e8:2f:a2:f4:1e:f7:fb:17:dc:00:ad:69:a4:e3:0a:
                    f2:95:27:1f:ec:24:17:b8:e0:c0:ab:89:36:9a:f4:
                    16:0f:07:67:a9:70:d7:51:ac:12:e3:b4:ac:4f:c2:
                    7d:bb:48:84:db:7d:d8:26:de:16:78:94:6b:55:3b:
                    ec:1b:d5:7f:56:0a:6f:4f:7d:b6:74:d9:e2:f3:ca:
                    2c:5c:d1:99:6c:c3:b2:a7:9d:9e:5d:18:59:23:9b:
                    84:43:e0:4f:07:96:ab:de:88:5d:b1:88:b4:68:9d:
                    e7:0c:07:63:51:fe:40:da:a9:87:bb:20:45:18:ef:
                    d6:00:9d:01:4a:a1:55:9b:60:37:ef:1d:7d:a2:ef:
                    e2:22:d6:26:92:6f:1c:78:8e:79:34:92:ff:e3:e4:
                    5b:80:c2:7c:b6:20:15:31:59:6f:8c:9d:16:86:95:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:BC:86:4D:04:F4:7C:D8:CA:98:5E:EC:56:FF:FD:C5:70:65:57
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3139322e38342e31322e302f32342d3234203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:56:ee:9c:0e:74:c0:f0:18:bd:c8:46:d3:b4:0b:f6:ac:
         1f:b8:24:ac:71:85:8d:dc:b2:70:c5:ef:7d:48:c9:97:f3:08:
         2a:de:b0:f8:bd:7f:ad:02:fb:83:ae:ad:4e:1e:ee:72:f0:35:
         1c:6f:85:15:d9:0d:6c:af:7a:d7:94:1e:53:23:2f:7f:10:fe:
         e5:ad:91:57:b9:4c:95:1b:fc:ff:77:61:81:c4:31:7a:97:da:
         a6:8c:3c:ec:bc:76:14:b5:6f:fd:84:36:b8:98:fb:62:e7:92:
         2e:41:60:2f:87:c3:2b:42:9b:33:1d:0f:c8:07:6a:3c:61:bd:
         8b:0c:91:29:d8:5e:fe:2c:8d:a0:e7:f8:21:fe:ef:05:9b:91:
         b7:0e:01:73:b8:66:78:f2:80:86:05:32:12:be:25:4d:45:5b:
         1b:95:10:0b:a8:d1:a2:a6:48:69:c7:e2:e7:1e:e7:0e:ca:80:
         f5:bb:23:f8:cd:df:c0:63:97:5f:c8:a5:d7:72:c7:8f:0c:4e:
         09:77:8f:67:27:a5:d9:b9:ca:c0:f6:38:5b:d6:00:5b:32:c5:
         38:1f:6c:a2:f7:1f:09:df:c0:8b:9b:52:c9:64:12:28:9c:db:
         0a:c9:6c:9f:09:df:76:14:20:d4:9c:f6:14:35:ec:7d:01:a5:
         35:42:14:a2
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFs89ebs/rNiNQkj+mVxjoewCvwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzRjFCNkNDRDhFQzRDMDVENkQ5QzI5OERDRTgyMUEy
RDQ0NDQxOTAeFw0yNDAzMDUxODE4MjdaFw0yNTAzMDQxODIzMjdaMDMxMTAvBgNV
BAMTKDRDREJCQzg2NEQwNEY0N0NEOENBOTg1RUVDNTZGRkZEQzU3MDY1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSVHrf+x7Z3NqaYpdSFG13Jyy
jnK4XmLg4zwk4P4Dj5ln4OoWjyZ/YVtHkoQrGtDC2hAaNWbGkFQrkQVPRoNfI0Lt
CaSDy2gezarBPqe3Jywjimnkxh5UQugvovQe9/sX3ACtaaTjCvKVJx/sJBe44MCr
iTaa9BYPB2epcNdRrBLjtKxPwn27SITbfdgm3hZ4lGtVO+wb1X9WCm9PfbZ02eLz
yixc0Zlsw7KnnZ5dGFkjm4RD4E8HlqveiF2xiLRonecMB2NR/kDaqYe7IEUY79YA
nQFKoVWbYDfvHX2i7+Ii1iaSbxx4jnk0kv/j5FuAwny2IBUxWW+MnRaGlcznAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUTNu8hk0E9HzYyphe7Fb//cVwZVcwHwYDVR0j
BBgwFoAUpD8bbM2OxMBdbZwpjc6CGi1ERBkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDU0NzhDOUM1MTUzODVFOTRGODJFM0FCMzg1NDNBNzhC
QzQ3Q0RFQzZFNTA1QTI5MUZCQkQ2MDI0REIyMzM1LzAvQTQzRjFCNkNDRDhFQzRD
MDVENkQ5QzI5OERDRTgyMUEyRDQ0NDQxOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNGMUI2Q0NEOEVDNEMwNUQ2
RDlDMjk4RENFODIxQTJENDQ0NDE5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA1NDc4QzlDNTE1Mzg1RTk0RjgyRTNBQjM4NTQzQTc4QkM0N0NERUM2
RTUwNUEyOTFGQkJENjAyNERCMjMzNS8wLzMxMzkzMjJlMzgzNDJlMzEzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFQMMA0GCSqG
SIb3DQEBCwUAA4IBAQBJt1bunA50wPAYvchG07QL9qwfuCSscYWN3LJwxe99SMmX
8wgq3rD4vX+tAvuDrq1OHu5y8DUcb4UV2Q1sr3rXlB5TIy9/EP7lrZFXuUyVG/z/
d2GBxDF6l9qmjDzsvHYUtW/9hDa4mPti55IuQWAvh8MrQpszHQ/IB2o8Yb2LDJEp
2F7+LI2g5/gh/u8Fm5G3DgFzuGZ48oCGBTISviVNRVsblRALqNGipkhpx+LnHucO
yoD1uyP4zd/AY5dfyKXXcsePDE4Jd49nJ6XZucrA9jhb1gBbMsU4H2yi9x8J38CL
m1LJZBIonNsKyWyfCd92FCDUnPYUNex9AaU1QhSi
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org