Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32342d3234203d3e20323635363735.roa
File:                     3134332e3235352e3130362e302f32342d3234203d3e20323635363735.roa (raw, json)
Hash identifier:          tTFIexmTILNsgeH5iiH5aDhIHIMV9SnS6Mg+pFf5uqE=
Subject key identifier:   10:57:35:7F:0A:C9:0E:68:5E:E2:62:01:B9:C6:D1:7E:83:11:4D:74
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       56E31B10CB228C0098A3919B864CF18298AF01B9
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32342d3234203d3e20323635363735.roa
Signing time:             Tue 05 Mar 2024 18:00:15 +0000
ROA not before:           Tue 05 Mar 2024 17:55:15 +0000
ROA not after:            Tue 04 Mar 2025 18:00:15 +0000
asID:                     265675
IP address blocks:        143.255.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:1b:10:cb:22:8c:00:98:a3:91:9b:86:4c:f1:82:98:af:01:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Mar  5 17:55:15 2024 GMT
            Not After : Mar  4 18:00:15 2025 GMT
        Subject: CN=1057357F0AC90E685EE26201B9C6D17E83114D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:6f:24:b6:dd:2b:e0:72:21:2f:59:34:da:
                    05:00:bb:7b:d2:7c:71:84:28:b7:98:a2:e8:36:eb:
                    02:42:36:60:17:63:c6:3a:36:91:b8:0a:91:9b:1d:
                    58:aa:33:c8:29:78:56:b5:9c:ea:a4:51:07:46:ea:
                    87:a6:a4:3d:63:8e:82:0f:2c:eb:f8:e9:12:fe:b1:
                    47:33:31:09:09:c0:3d:fe:af:fe:28:57:7d:e3:32:
                    78:d5:07:67:ca:8e:19:37:47:79:02:20:7e:8a:89:
                    74:93:56:73:61:dc:1b:ed:59:22:f4:1c:79:0a:a6:
                    05:9c:3d:08:3f:03:4e:87:62:76:b7:8c:88:36:b9:
                    b9:7a:d7:f0:e2:ef:b4:2d:4a:4a:1e:7c:36:67:99:
                    24:28:86:a0:2d:c5:14:2d:c3:67:88:c3:e8:11:73:
                    ff:51:70:10:a1:be:1d:23:11:40:80:77:03:30:07:
                    15:d7:58:b7:48:b6:6b:09:f2:a6:00:4a:42:8a:aa:
                    22:62:19:3c:0e:08:31:c1:6e:dc:dd:22:b6:da:26:
                    45:d1:ed:0a:e2:f8:84:46:7e:f9:ef:36:66:e5:ee:
                    22:6d:44:ee:89:37:37:29:db:95:a1:be:b1:e1:a6:
                    21:09:81:40:a8:cc:55:ff:66:38:d4:7c:e2:f2:50:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:35:7F:0A:C9:0E:68:5E:E2:62:01:B9:C6:D1:7E:83:11:4D:74
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32342d3234203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:c4:98:5d:5d:3b:88:8a:8b:03:3c:09:68:1f:8e:a8:6f:
         d6:48:76:f8:64:9e:fb:c1:11:ba:93:8f:64:a3:d1:62:93:97:
         52:05:ce:57:6e:38:14:1c:01:1d:1c:53:0a:85:0f:1a:57:63:
         5d:4c:02:e8:b1:2e:91:5f:2d:e9:3f:a2:7a:68:24:cd:2d:9e:
         22:26:43:d9:f7:06:32:c8:33:dc:ca:e7:1e:b6:de:f1:af:2d:
         27:72:e3:89:02:66:82:fa:25:ec:57:bf:eb:04:5a:16:8f:ac:
         05:af:38:3c:18:fa:3f:6e:57:f0:0f:fc:09:94:9f:19:d2:9d:
         90:14:5f:d6:f2:61:5a:17:8a:f7:67:e3:fc:a1:bb:ca:09:8c:
         59:33:8d:9e:81:7b:1a:40:24:b5:02:ab:28:1b:ec:aa:2b:99:
         9a:1f:af:76:78:b4:28:53:8f:cf:19:c0:82:b9:2b:fe:c9:f7:
         bc:d3:e5:ab:c6:16:99:6b:f0:ba:52:ee:6a:03:99:4b:c4:4a:
         e1:09:da:42:6a:f8:26:c2:53:77:e5:ed:e1:0b:ce:37:e4:7b:
         ba:90:f3:5b:c5:6f:f2:27:44:78:64:b8:ff:61:87:49:fd:95:
         c8:f4:7a:3c:3b:6f:cd:2b:54:ed:c6:65:cd:6e:f7:56:87:89:
         65:55:83:54
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVuMbEMsijACYo5GbhkzxgpivAbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBQ0I0NUJFNzA2ODlDNUJEQ0QyRDlCRkNGRjAwMjAz
ODdGOTIxQzAeFw0yNDAzMDUxNzU1MTVaFw0yNTAzMDQxODAwMTVaMDMxMTAvBgNV
BAMTKDEwNTczNTdGMEFDOTBFNjg1RUUyNjIwMUI5QzZEMTdFODMxMTRENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tW8ktt0r4HIhL1k02gUAu3vS
fHGEKLeYoug26wJCNmAXY8Y6NpG4CpGbHViqM8gpeFa1nOqkUQdG6oempD1jjoIP
LOv46RL+sUczMQkJwD3+r/4oV33jMnjVB2fKjhk3R3kCIH6KiXSTVnNh3BvtWSL0
HHkKpgWcPQg/A06HYna3jIg2ubl61/Di77QtSkoefDZnmSQohqAtxRQtw2eIw+gR
c/9RcBChvh0jEUCAdwMwBxXXWLdItmsJ8qYASkKKqiJiGTwOCDHBbtzdIrbaJkXR
7Qri+IRGfvnvNmbl7iJtRO6JNzcp25WhvrHhpiEJgUCozFX/ZjjUfOLyUH/lAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUEFc1fwrJDmhe4mIBucbRfoMRTXQwHwYDVR0j
BBgwFoAU6ay0W+cGicW9zS2b/P8AIDh/khwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMjU2NDEzNTJEQURDNzNGNTQ4MzNDMUNEODYyMjZFNkQy
MjcxMzc4MkQ3QjA0NjY2Qzk3RDk0QjlENkNBOUE2LzAvRTlBQ0I0NUJFNzA2ODlD
NUJEQ0QyRDlCRkNGRjAwMjAzODdGOTIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOUFDQjQ1QkU3MDY4OUM1QkRD
RDJEOUJGQ0ZGMDAyMDM4N0Y5MjFDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjI1NjQxMzUyREFEQzczRjU0ODMzQzFDRDg2MjI2RTZEMjI3MTM3ODJE
N0IwNDY2NkM5N0Q5NEI5RDZDQTlBNi8wLzMxMzQzMzJlMzIzNTM1MmUzMTMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACP
/2owDQYJKoZIhvcNAQELBQADggEBAIDVxJhdXTuIiosDPAloH46ob9ZIdvhknvvB
EbqTj2Sj0WKTl1IFzlduOBQcAR0cUwqFDxpXY11MAuixLpFfLek/onpoJM0tniIm
Q9n3BjLIM9zK5x623vGvLSdy44kCZoL6JexXv+sEWhaPrAWvODwY+j9uV/AP/AmU
nxnSnZAUX9byYVoXivdn4/yhu8oJjFkzjZ6BexpAJLUCqygb7KormZofr3Z4tChT
j88ZwIK5K/7J97zT5avGFplr8LpS7moDmUvESuEJ2kJq+CbCU3fl7eELzjfke7qQ
81vFb/InRHhkuP9hh0n9lcj0ejw7b80rVO3GZc1u91aHiWVVg1Q=
-----END CERTIFICATE-----
Generated at Sat May 11 17:54:48 2024 by rpki-client on console-ams.rpki-client.org