Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa
File:                     3138312e34322e352e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          QudC68IwaHBI19eD9YbbuRjSffwcF052ejiraS4qpW4=
Subject key identifier:   F1:09:61:8A:94:17:E5:F5:3F:B9:65:EC:04:4C:5C:D1:82:E9:33:31
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       6D7950814C1F63297ED70335292AE230CC6F2B13
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 05 Mar 2024 18:17:40 +0000
ROA not before:           Tue 05 Mar 2024 18:12:40 +0000
ROA not after:            Tue 04 Mar 2025 18:17:40 +0000
asID:                     27986
IP address blocks:        181.42.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:79:50:81:4c:1f:63:29:7e:d7:03:35:29:2a:e2:30:cc:6f:2b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:40 2024 GMT
            Not After : Mar  4 18:17:40 2025 GMT
        Subject: CN=F109618A9417E5F53FB965EC044C5CD182E93331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:6a:2b:88:6f:ed:ce:c8:16:18:d5:6e:09:
                    1e:eb:d8:75:bd:e9:48:85:37:2a:48:6c:2f:1c:e4:
                    d8:42:fd:64:08:3c:2f:1b:ad:a8:1c:56:44:67:78:
                    c2:34:28:50:5c:bb:4d:62:9c:69:98:5c:d4:92:b2:
                    f5:fb:ef:8a:84:11:21:93:2e:6e:9a:4b:cd:75:a8:
                    8c:aa:65:82:0a:32:8d:ca:81:4d:65:10:90:f6:2d:
                    5d:05:5d:ff:eb:b8:da:07:c7:da:c1:01:6e:ca:a6:
                    2d:59:c6:20:8a:66:e1:3e:72:ca:e8:d5:c3:91:ef:
                    da:ce:88:6f:8c:41:23:3e:21:93:82:1c:77:78:85:
                    d3:f0:09:f9:24:eb:9a:96:c6:58:7a:6f:d0:b9:fe:
                    f3:b8:2e:19:38:1d:2b:c2:87:ed:48:c1:ad:19:1f:
                    02:6a:22:df:ea:38:28:40:15:31:d4:15:b5:38:92:
                    10:17:f2:9b:7c:00:90:fc:d1:fb:e4:d8:2c:e4:12:
                    04:4d:75:f5:aa:21:fb:60:b0:97:e5:c9:0b:fa:2d:
                    d0:bf:fd:19:cc:f8:fc:d6:be:6a:90:0a:33:45:f4:
                    86:bf:7e:9b:8d:14:f6:03:ff:85:d9:03:dc:16:4c:
                    a2:ad:7c:41:bb:48:d2:4b:97:c3:44:75:15:a4:c7:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:61:8A:94:17:E5:F5:3F:B9:65:EC:04:4C:5C:D1:82:E9:33:31
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e352e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:66:16:7a:dc:b7:b9:6f:1b:cd:d5:7d:ca:d2:8c:f4:ea:af:
         8f:eb:53:a2:a1:46:5a:12:65:e4:a1:b8:bd:0f:a6:64:a0:35:
         76:26:ab:cf:28:a1:ce:4e:e3:ac:58:2f:eb:06:7b:b9:03:d5:
         39:6e:58:02:b6:05:a2:01:21:79:61:9b:95:19:6a:9a:e9:b6:
         40:32:de:f3:ed:e9:29:00:52:f7:58:a6:de:20:bd:a2:92:95:
         e6:37:35:a9:4d:8d:a3:bb:61:b6:1a:b7:f7:4f:31:d3:c5:25:
         f3:39:3f:08:61:b4:64:3d:5d:09:2e:90:f2:4d:48:d7:48:94:
         4f:c7:2c:96:e5:42:0e:d9:fa:df:b8:81:24:90:4b:2a:94:fb:
         9f:0c:23:d2:91:e4:ae:ff:d6:f7:2e:da:81:6e:e5:7f:c7:76:
         01:f9:b7:86:b0:06:81:76:08:71:68:13:e0:9a:7d:14:f2:81:
         e9:87:7e:20:9a:69:e5:ea:3b:41:2d:cc:f4:72:5a:77:29:4c:
         c6:1b:82:21:6a:d8:13:39:e8:24:e9:a6:cf:36:2d:6a:ec:ea:
         89:05:ca:57:82:28:7f:60:7b:35:12:e5:ce:80:6f:fb:06:5f:
         8b:0e:77:43:02:70:69:27:d9:c3:c2:f5:17:af:6c:c9:e0:9b:
         63:8e:8a:03
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbXlQgUwfYyl+1wM1KSriMMxvKxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNDAzMDUxODEyNDBaFw0yNTAzMDQxODE3NDBaMDMxMTAvBgNV
BAMTKEYxMDk2MThBOTQxN0U1RjUzRkI5NjVFQzA0NEM1Q0QxODJFOTMzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG2oriG/tzsgWGNVuCR7r2HW9
6UiFNypIbC8c5NhC/WQIPC8bragcVkRneMI0KFBcu01inGmYXNSSsvX774qEESGT
Lm6aS811qIyqZYIKMo3KgU1lEJD2LV0FXf/ruNoHx9rBAW7Kpi1ZxiCKZuE+csro
1cOR79rOiG+MQSM+IZOCHHd4hdPwCfkk65qWxlh6b9C5/vO4Lhk4HSvCh+1Iwa0Z
HwJqIt/qOChAFTHUFbU4khAX8pt8AJD80fvk2CzkEgRNdfWqIftgsJflyQv6LdC/
/RnM+PzWvmqQCjNF9Ia/fpuNFPYD/4XZA9wWTKKtfEG7SNJLl8NEdRWkx5i3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU8QlhipQX5fU/uWXsBExc0YLpMzEwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzgzMTJlMzQzMjJlMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtSoFMA0GCSqG
SIb3DQEBCwUAA4IBAQBJZhZ63Le5bxvN1X3K0oz06q+P61OioUZaEmXkobi9D6Zk
oDV2JqvPKKHOTuOsWC/rBnu5A9U5blgCtgWiASF5YZuVGWqa6bZAMt7z7ekpAFL3
WKbeIL2ikpXmNzWpTY2ju2G2Grf3TzHTxSXzOT8IYbRkPV0JLpDyTUjXSJRPxyyW
5UIO2frfuIEkkEsqlPufDCPSkeSu/9b3LtqBbuV/x3YB+beGsAaBdghxaBPgmn0U
8oHph34gmmnl6jtBLcz0clp3KUzGG4IhatgTOegk6abPNi1q7OqJBcpXgih/YHs1
EuXOgG/7Bl+LDndDAnBpJ9nDwvUXr2zJ4JtjjooD
-----END CERTIFICATE-----
Generated at Wed May 15 13:36:20 2024 by rpki-client on console-ams.rpki-client.org