Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa
File:                     3138312e33392e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          IPdZpwL6VndwNr5MTMUuWGK+hUYnn1qR2ojG01u6Ytk=
Subject key identifier:   45:2D:FF:3A:94:39:D7:E5:18:C4:F4:FA:89:87:21:7B:0E:5D:C9:FD
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       36C8B1B5207F93A71E207ABD19A11B403A11EDDD
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:22 +0000
ROA not before:           Tue 05 Mar 2024 18:05:22 +0000
ROA not after:            Tue 04 Mar 2025 18:10:22 +0000
asID:                     19169
IP address blocks:        181.39.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:b1:b5:20:7f:93:a7:1e:20:7a:bd:19:a1:1b:40:3a:11:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:22 2024 GMT
            Not After : Mar  4 18:10:22 2025 GMT
        Subject: CN=452DFF3A9439D7E518C4F4FA8987217B0E5DC9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:cb:66:49:2d:71:52:f6:9e:d4:b1:e0:28:
                    db:08:a5:ed:8f:18:a6:4a:65:27:d2:e4:6a:1a:1b:
                    91:93:40:71:f2:a4:7d:78:10:67:30:43:46:4c:72:
                    5c:b4:f3:4e:b1:62:9b:61:60:96:ac:e9:82:25:d6:
                    29:19:2b:4a:2d:fb:e0:1e:3f:89:11:31:46:03:35:
                    3b:ba:a4:ce:94:49:77:58:32:1c:b7:11:b5:18:e8:
                    28:8c:35:cc:0b:a1:ae:b4:74:63:1f:10:ca:6c:73:
                    4d:0d:99:5a:07:0d:f2:11:00:a5:9d:26:ab:98:33:
                    fa:53:ad:e1:98:28:a9:a5:18:ba:1f:4c:b8:8e:2e:
                    a5:2a:f3:65:23:7f:da:e8:b8:3c:da:22:8c:22:55:
                    ac:9d:87:b8:25:db:e2:a4:ac:c7:7f:53:a9:d6:de:
                    11:5b:66:26:49:43:87:88:ac:e9:17:11:68:14:f9:
                    80:2d:cd:24:86:0c:a9:28:5d:f1:59:4b:6b:32:67:
                    52:30:43:32:a8:da:ed:59:b9:e0:c3:dc:df:ab:2e:
                    df:60:82:2a:a6:de:34:e6:b0:0f:9a:72:52:94:8b:
                    91:05:85:d4:11:b5:64:d5:b7:04:e0:9b:d1:90:b4:
                    d2:7f:42:8b:a4:9e:ca:dc:62:32:58:89:84:48:9f:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:FF:3A:94:39:D7:E5:18:C4:F4:FA:89:87:21:7B:0E:5D:C9:FD
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:39:6c:8c:78:de:73:43:7c:27:3b:45:9e:87:0b:84:41:0e:
         bf:a0:6a:5f:63:13:5b:e3:7f:d0:62:ba:5e:73:35:dd:50:06:
         01:eb:a6:89:e6:32:54:19:48:39:5a:81:7a:e7:f6:99:a5:47:
         27:dc:67:bf:4d:1d:49:11:9b:db:f1:e9:c3:31:13:2f:3b:08:
         32:98:d4:ff:c6:ae:8c:2d:25:30:c8:3c:a9:f7:46:1c:e6:6b:
         2c:20:7d:d9:b2:54:71:39:7e:63:a5:9d:35:b8:c9:25:f7:b8:
         96:fb:89:5b:82:c6:f2:ca:75:45:24:41:46:51:fd:a3:3c:59:
         1e:18:f5:c6:e1:50:d9:28:b9:fd:80:5e:0a:81:ad:18:28:d7:
         a7:e6:6f:2d:80:30:ee:81:4e:1b:ea:5d:a0:a8:48:c7:96:bc:
         25:1b:fc:be:e3:15:30:3f:42:4b:60:34:e0:a3:5c:65:78:e5:
         f7:65:eb:c0:3f:ea:9c:e1:40:67:fb:3f:b1:fc:52:91:d4:4b:
         66:c3:85:be:40:33:f4:72:40:d2:c1:35:52:e4:a3:c2:50:49:
         1d:2d:03:cd:ec:0a:44:6c:ae:ce:5c:4f:75:e8:cb:42:8a:76:
         6b:2d:a3:32:4e:fc:a1:d6:ff:81:40:c2:41:1f:27:92:3a:d7:
         fb:99:9e:86
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNsixtSB/k6ceIHq9GaEbQDoR7d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MjJaFw0yNTAzMDQxODEwMjJaMDMxMTAvBgNV
BAMTKDQ1MkRGRjNBOTQzOUQ3RTUxOEM0RjRGQTg5ODcyMTdCMEU1REM5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHe8tmSS1xUvae1LHgKNsIpe2P
GKZKZSfS5GoaG5GTQHHypH14EGcwQ0ZMcly0806xYpthYJas6YIl1ikZK0ot++Ae
P4kRMUYDNTu6pM6USXdYMhy3EbUY6CiMNcwLoa60dGMfEMpsc00NmVoHDfIRAKWd
JquYM/pTreGYKKmlGLofTLiOLqUq82Ujf9rouDzaIowiVaydh7gl2+KkrMd/U6nW
3hFbZiZJQ4eIrOkXEWgU+YAtzSSGDKkoXfFZS2syZ1IwQzKo2u1ZueDD3N+rLt9g
giqm3jTmsA+aclKUi5EFhdQRtWTVtwTgm9GQtNJ/QouknsrcYjJYiYRIn6B3AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQURS3/OpQ51+UYxPT6iYchew5dyf0wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzMTJlMzMzOTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMTM5MzEzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtScwDQYJKoZI
hvcNAQELBQADggEBAEU5bIx43nNDfCc7RZ6HC4RBDr+gal9jE1vjf9Biul5zNd1Q
BgHrponmMlQZSDlagXrn9pmlRyfcZ79NHUkRm9vx6cMxEy87CDKY1P/GrowtJTDI
PKn3RhzmaywgfdmyVHE5fmOlnTW4ySX3uJb7iVuCxvLKdUUkQUZR/aM8WR4Y9cbh
UNkouf2AXgqBrRgo16fmby2AMO6BThvqXaCoSMeWvCUb/L7jFTA/QktgNOCjXGV4
5fdl68A/6pzhQGf7P7H8UpHUS2bDhb5AM/RyQNLBNVLko8JQSR0tA83sCkRsrs5c
T3Xoy0KKdmstozJO/KHW/4FAwkEfJ5I61/uZnoY=
-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org