Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/3138372e3130322e3234302e302f32322d3234203d3e20323730303035.roa
File:                     3138372e3130322e3234302e302f32322d3234203d3e20323730303035.roa (raw, json)
Hash identifier:          0mj0BR+t4UrtKKNsl1Tvw9TnVGpBJ393D3e8UF4O888=
Subject key identifier:   51:40:63:F6:4F:9F:B2:63:19:0C:87:A0:14:84:3B:5D:B5:C6:68:09
Certificate issuer:       /CN=B7CB5849700405B09C30533A718BDE30CBF21CEC
Certificate serial:       7894B29C80632DC09B8B0EC0191702CC717ED7C8
Authority key identifier: B7:CB:58:49:70:04:05:B0:9C:30:53:3A:71:8B:DE:30:CB:F2:1C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/3138372e3130322e3234302e302f32322d3234203d3e20323730303035.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     270005
IP address blocks:        187.102.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:94:b2:9c:80:63:2d:c0:9b:8b:0e:c0:19:17:02:cc:71:7e:d7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5849700405B09C30533A718BDE30CBF21CEC
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=514063F64F9FB263190C87A014843B5DB5C66809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:af:fc:86:9d:fe:0c:e0:ef:48:9f:42:72:
                    bc:6d:30:69:2a:d3:28:71:e7:d7:2a:89:98:d6:ed:
                    de:4d:6c:bd:79:41:14:e2:e9:0d:03:34:23:5f:66:
                    26:ac:76:04:03:56:9a:96:6e:b2:e5:90:e6:3f:28:
                    42:22:d8:83:6e:74:dd:bd:d2:58:59:4c:39:56:1d:
                    df:ae:ed:70:04:9b:53:8a:9f:d8:dc:d7:51:bf:f5:
                    a3:03:ea:60:50:87:ce:d1:1d:15:ed:ea:61:ba:75:
                    d5:86:22:01:ec:3c:5a:cd:d7:a0:07:ba:ee:b5:94:
                    16:b3:bc:5e:20:07:ca:1e:d2:2a:67:95:b8:06:ed:
                    72:31:85:ea:d3:df:bd:90:a1:d8:f8:6f:b4:ef:95:
                    18:3d:8f:8a:a4:c4:94:f7:41:65:f8:d2:19:a8:db:
                    b8:d8:99:01:0e:52:87:c6:16:66:d6:a1:bf:e4:29:
                    6e:9e:8b:86:e6:d9:aa:73:c1:9f:dd:c1:26:7f:9b:
                    05:ad:45:79:ae:d1:70:02:19:d1:5c:18:72:68:65:
                    0a:48:ec:fe:8c:0f:62:c9:fa:cd:02:24:6c:e4:d8:
                    7c:00:46:15:cf:5d:8a:73:ce:13:14:87:c2:e5:55:
                    3d:ec:ce:89:a9:dc:88:b8:b7:f9:83:9d:4a:80:db:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:40:63:F6:4F:9F:B2:63:19:0C:87:A0:14:84:3B:5D:B5:C6:68:09
            X509v3 Authority Key Identifier:
                keyid:B7:CB:58:49:70:04:05:B0:9C:30:53:3A:71:8B:DE:30:CB:F2:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7CB5849700405B09C30533A718BDE30CBF21CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAB483BBB5D7E483016246968FBA4C04DE9AA608906AD47DB357D9825A595338/0/3138372e3130322e3234302e302f32322d3234203d3e20323730303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:3a:c2:0c:0b:2f:db:24:d6:0b:83:a4:b3:fd:ad:46:19:
         a8:08:b0:22:bf:0f:b4:2b:b0:75:11:c1:6d:9e:cc:c4:46:37:
         d8:be:90:ab:eb:f3:02:4b:20:ab:a4:76:60:4b:ab:09:27:40:
         a3:32:6f:79:0a:63:28:64:94:59:6c:b5:eb:18:1a:a7:d3:69:
         8d:8e:e1:cd:75:8e:10:4e:92:8c:f2:71:d5:e1:4a:4d:aa:77:
         a3:52:ea:7e:86:8d:c5:a4:d3:c3:e8:36:66:f5:f0:f3:40:07:
         10:4a:bd:55:1f:f8:c8:43:95:26:de:10:a1:6c:97:89:e1:27:
         fa:04:5e:cf:13:d8:cd:4d:4a:0b:fb:34:ce:a9:6c:67:ea:43:
         3c:c3:74:b7:2d:73:c2:f8:95:29:ce:56:f1:b3:58:da:20:07:
         b3:de:d4:71:8e:3a:ce:75:60:d9:56:27:e0:44:11:0a:7d:59:
         8a:9d:80:44:99:5d:8b:ee:1d:f1:41:6f:35:f0:b1:8c:0c:a5:
         ef:74:b8:87:fd:79:7b:f7:31:02:93:d6:ed:40:c0:04:fc:69:
         0e:c7:9b:fe:2f:26:12:56:0b:a2:00:7b:0b:7e:b5:6c:58:03:
         1d:11:f4:60:1f:1f:4c:59:b6:e2:ce:6c:f9:86:1e:42:7a:99:
         5f:9a:3c:2f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUeJSynIBjLcCbiw7AGRcCzHF+18gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdDQjU4NDk3MDA0MDVCMDlDMzA1MzNBNzE4QkRFMzBD
QkYyMUNFQzAeFw0yNDAzMDUxNzM1MTRaFw0yNTAzMDQxNzQwMTRaMDMxMTAvBgNV
BAMTKDUxNDA2M0Y2NEY5RkIyNjMxOTBDODdBMDE0ODQzQjVEQjVDNjY4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHa/8hp3+DODvSJ9CcrxtMGkq
0yhx59cqiZjW7d5NbL15QRTi6Q0DNCNfZiasdgQDVpqWbrLlkOY/KEIi2INudN29
0lhZTDlWHd+u7XAEm1OKn9jc11G/9aMD6mBQh87RHRXt6mG6ddWGIgHsPFrN16AH
uu61lBazvF4gB8oe0ipnlbgG7XIxherT372Qodj4b7TvlRg9j4qkxJT3QWX40hmo
27jYmQEOUofGFmbWob/kKW6ei4bm2apzwZ/dwSZ/mwWtRXmu0XACGdFcGHJoZQpI
7P6MD2LJ+s0CJGzk2HwARhXPXYpzzhMUh8LlVT3szomp3Ii4t/mDnUqA22TvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUUUBj9k+fsmMZDIegFIQ7XbXGaAkwHwYDVR0j
BBgwFoAUt8tYSXAEBbCcMFM6cYveMMvyHOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQUI0ODNCQkI1RDdFNDgzMDE2MjQ2OTY4RkJBNEMwNERF
OUFBNjA4OTA2QUQ0N0RCMzU3RDk4MjVBNTk1MzM4LzAvQjdDQjU4NDk3MDA0MDVC
MDlDMzA1MzNBNzE4QkRFMzBDQkYyMUNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0NCNTg0OTcwMDQwNUIwOUMz
MDUzM0E3MThCREUzMENCRjIxQ0VDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkFCNDgzQkJCNUQ3RTQ4MzAxNjI0Njk2OEZCQTRDMDRERTlBQTYwODkw
NkFENDdEQjM1N0Q5ODI1QTU5NTMzOC8wLzMxMzgzNzJlMzEzMDMyMmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMwMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK7
ZvAwDQYJKoZIhvcNAQELBQADggEBABAbOsIMCy/bJNYLg6Sz/a1GGagIsCK/D7Qr
sHURwW2ezMRGN9i+kKvr8wJLIKukdmBLqwknQKMyb3kKYyhklFlstesYGqfTaY2O
4c11jhBOkozycdXhSk2qd6NS6n6GjcWk08PoNmb18PNABxBKvVUf+MhDlSbeEKFs
l4nhJ/oEXs8T2M1NSgv7NM6pbGfqQzzDdLctc8L4lSnOVvGzWNogB7Pe1HGOOs51
YNlWJ+BEEQp9WYqdgESZXYvuHfFBbzXwsYwMpe90uIf9eXv3MQKT1u1AwAT8aQ7H
m/4vJhJWC6IAewt+tWxYAx0R9GAfH0xZtuLObPmGHkJ6mV+aPC8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org