Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa
File:                     3138312e33392e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          1EObe0JJe4m23Hkx359GgKWrNGUzsGUJFS3dBQY0f4A=
Subject key identifier:   8D:DC:56:B4:6A:D7:69:4A:92:A4:7C:73:A8:C8:C8:A9:00:8C:5B:9C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2CF5DB2C103DEC836A71712B5709C4DC8CE6287D
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:32 +0000
ROA not before:           Tue 05 Mar 2024 18:05:32 +0000
ROA not after:            Tue 04 Mar 2025 18:10:32 +0000
asID:                     27947
IP address blocks:        181.39.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f5:db:2c:10:3d:ec:83:6a:71:71:2b:57:09:c4:dc:8c:e6:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:32 2024 GMT
            Not After : Mar  4 18:10:32 2025 GMT
        Subject: CN=8DDC56B46AD7694A92A47C73A8C8C8A9008C5B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:0e:d3:71:f5:1f:c3:2a:19:16:a6:70:86:
                    89:3b:bb:d8:42:0c:81:f4:5d:3f:e7:fd:af:ad:27:
                    7d:26:ce:cf:61:07:87:19:3d:e7:96:ac:22:c9:8b:
                    c3:83:c9:c7:fc:03:81:54:5e:25:01:41:eb:2d:1e:
                    7a:8c:cd:66:81:29:b4:2e:3d:75:b5:84:0b:4a:0c:
                    ef:98:a1:02:56:d1:79:d7:02:ce:3b:aa:a2:37:45:
                    de:20:1d:a0:41:5a:9c:25:16:3c:a5:97:52:cc:af:
                    0b:8c:fe:61:dd:8c:0b:94:00:13:32:1a:db:ac:ca:
                    dd:4c:e3:25:ca:4f:73:47:1d:1f:69:b4:0b:31:f5:
                    c2:ad:44:a7:bf:65:34:98:a0:2c:da:8f:c9:e4:26:
                    ae:70:9b:9c:00:ef:cb:65:cc:dc:9d:33:c5:d0:ab:
                    d9:eb:42:3d:e2:1c:38:46:98:08:7d:8e:11:ad:74:
                    66:49:27:07:da:c4:36:d4:91:d4:64:52:51:04:b8:
                    23:47:28:b5:32:eb:81:3c:b3:90:73:df:12:64:64:
                    2f:a1:55:b3:f6:cb:e8:eb:78:31:c1:06:8b:11:15:
                    d6:60:9a:1c:64:7f:d2:1c:b2:52:8b:8e:b8:72:40:
                    bd:f9:6e:cd:02:ad:de:78:7e:10:b8:a8:f8:30:64:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:56:B4:6A:D7:69:4A:92:A4:7C:73:A8:C8:C8:A9:00:8C:5B:9C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:78:16:51:6c:58:e9:8d:2a:88:1e:ac:03:93:2d:02:e2:41:
         0c:6b:31:59:c9:e1:52:20:f5:77:3d:80:de:cf:ee:12:4d:1e:
         0a:87:fe:be:45:cf:d3:ca:22:e4:d0:11:4e:a8:57:98:1c:d6:
         d1:e5:82:4e:e1:9c:a2:75:13:18:02:88:aa:65:12:a7:f6:cc:
         97:f7:84:1a:d5:4b:09:6b:4b:ed:4c:56:e3:1a:a0:59:95:65:
         f3:ec:d9:52:d2:dd:e8:b5:59:31:87:df:32:4a:5e:d6:3f:4c:
         80:50:4d:c1:64:d6:16:12:4a:6a:7b:a8:0a:d6:6f:65:b1:d4:
         60:7a:25:68:e9:50:e7:9b:e2:aa:3d:a1:ff:6d:7e:01:40:b7:
         58:b6:d0:69:c4:ad:9c:82:f9:fa:6d:2c:f8:f8:73:c4:6e:a6:
         f7:58:ba:81:bf:87:97:e5:b2:a9:17:db:08:57:3a:59:a5:61:
         e1:bd:23:67:cf:fc:9e:46:52:2c:dc:f7:f9:28:c9:4f:c1:40:
         99:3c:6f:d2:75:f0:50:91:72:98:6b:c4:a1:59:dc:25:c4:9e:
         6d:a6:12:06:ac:be:1c:3c:23:5c:09:96:7b:9b:12:44:07:0e:
         c2:2a:30:9e:dc:20:b6:90:94:71:2b:67:69:c5:05:90:e0:ae:
         a7:1b:0c:f9
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIULPXbLBA97INqcXErVwnE3IzmKH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MzJaFw0yNTAzMDQxODEwMzJaMDMxMTAvBgNV
BAMTKDhEREM1NkI0NkFENzY5NEE5MkE0N0M3M0E4QzhDOEE5MDA4QzVCOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1A7TcfUfwyoZFqZwhok7u9hC
DIH0XT/n/a+tJ30mzs9hB4cZPeeWrCLJi8ODycf8A4FUXiUBQestHnqMzWaBKbQu
PXW1hAtKDO+YoQJW0XnXAs47qqI3Rd4gHaBBWpwlFjyll1LMrwuM/mHdjAuUABMy
Gtusyt1M4yXKT3NHHR9ptAsx9cKtRKe/ZTSYoCzaj8nkJq5wm5wA78tlzNydM8XQ
q9nrQj3iHDhGmAh9jhGtdGZJJwfaxDbUkdRkUlEEuCNHKLUy64E8s5Bz3xJkZC+h
VbP2y+jreDHBBosRFdZgmhxkf9IcslKLjrhyQL35bs0Crd54fhC4qPgwZGe7AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUjdxWtGrXaUqSpHxzqMjIqQCMW5wwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzMTJlMzMzOTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtScwDQYJKoZI
hvcNAQELBQADggEBAFN4FlFsWOmNKogerAOTLQLiQQxrMVnJ4VIg9Xc9gN7P7hJN
HgqH/r5Fz9PKIuTQEU6oV5gc1tHlgk7hnKJ1ExgCiKplEqf2zJf3hBrVSwlrS+1M
VuMaoFmVZfPs2VLS3ei1WTGH3zJKXtY/TIBQTcFk1hYSSmp7qArWb2Wx1GB6JWjp
UOeb4qo9of9tfgFAt1i20GnErZyC+fptLPj4c8RupvdYuoG/h5flsqkX2whXOlml
YeG9I2fP/J5GUizc9/koyU/BQJk8b9J18FCRcphrxKFZ3CXEnm2mEgasvhw8I1wJ
lnubEkQHDsIqMJ7cILaQlHErZ2nFBZDgrqcbDPk=
-----END CERTIFICATE-----
Generated at Sun May 5 17:20:21 2024 by rpki-client on console-fra.rpki-client.org