Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32322d3232203d3e203238343039.roa
File:                     3136382e3132312e36302e302f32322d3232203d3e203238343039.roa (raw, json)
Hash identifier:          8g2lNDh0D7DUByAWIDKp575hjSRODbfkEdMIHxz9uZQ=
Subject key identifier:   B3:01:E5:47:AC:88:44:3C:4A:AD:AB:98:AD:AF:E8:7F:56:2B:B1:0A
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       0BCE505E235EEB2E07EE1A345FE138E4F6F27CC7
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32322d3232203d3e203238343039.roa
Signing time:             Tue 05 Mar 2024 18:19:00 +0000
ROA not before:           Tue 05 Mar 2024 18:14:00 +0000
ROA not after:            Tue 04 Mar 2025 18:19:00 +0000
asID:                     28409
IP address blocks:        168.121.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ce:50:5e:23:5e:eb:2e:07:ee:1a:34:5f:e1:38:e4:f6:f2:7c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Mar  5 18:14:00 2024 GMT
            Not After : Mar  4 18:19:00 2025 GMT
        Subject: CN=B301E547AC88443C4AADAB98ADAFE87F562BB10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:04:1d:93:eb:09:84:8a:72:f7:1c:98:bd:
                    3a:85:f0:f2:c8:2e:b0:fb:a6:9c:24:a1:eb:0b:b6:
                    43:f9:61:b5:bd:f4:52:12:68:f0:e3:8f:89:43:5e:
                    f1:6b:ec:42:e8:40:de:e1:25:9a:13:e0:47:7d:05:
                    c6:5f:08:74:cd:ed:a7:03:98:02:f8:82:ee:c1:df:
                    7d:4e:e9:bb:9e:2f:96:67:19:57:70:db:50:d2:f4:
                    7c:5c:75:83:c2:7c:1d:63:38:5c:86:c9:a3:b3:9f:
                    42:47:7d:25:9a:75:3b:61:c8:c0:44:e5:53:70:3a:
                    de:e1:5e:d9:4c:1b:c7:d3:87:b5:28:10:77:ab:c7:
                    2c:9c:27:a8:51:0c:74:ac:6d:6d:3b:d5:a3:aa:9a:
                    f5:5e:c2:23:a3:62:92:1e:d4:a5:42:4b:d2:d6:7f:
                    56:2a:4d:4b:4a:21:bb:dd:72:63:3a:3a:59:88:87:
                    f6:4b:44:8a:19:f3:c1:5a:34:0f:e1:31:90:73:75:
                    8d:fa:6a:49:8e:76:91:f9:76:f8:f0:03:df:6a:c0:
                    cb:07:4b:53:7f:4e:34:b4:87:17:3f:a7:86:b8:34:
                    63:29:4b:f4:4b:ae:55:bb:ec:89:ef:29:3b:a6:ed:
                    a2:ba:a3:46:b2:f7:fd:99:61:64:49:77:9f:52:ca:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:01:E5:47:AC:88:44:3C:4A:AD:AB:98:AD:AF:E8:7F:56:2B:B1:0A
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32322d3232203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:63:07:37:e0:79:7f:a8:2b:9a:75:cf:6c:95:17:36:85:
         7a:c4:66:c9:88:b5:d1:af:6f:02:17:b5:2f:ec:11:73:7b:9a:
         af:7e:74:a0:3c:e4:30:fd:c3:ee:00:bb:4e:24:69:ab:dc:ab:
         46:73:99:cb:f9:fc:da:c5:83:97:ac:33:98:4f:ae:a2:7f:e3:
         73:1e:33:60:a5:e9:79:48:5d:75:98:7b:ca:02:b0:e0:49:39:
         fd:83:d7:8c:f7:29:bd:94:d2:5b:83:4b:a8:fa:28:8c:c2:18:
         d5:b1:9d:56:0f:ec:5b:1b:5b:8d:25:b6:3f:12:46:1f:c4:4b:
         6e:74:3f:ac:a0:a1:f5:6b:7e:7f:b0:8b:38:44:7d:d5:ad:40:
         b1:09:78:7a:0e:d2:26:4a:0a:8e:ff:53:0a:2e:80:79:65:32:
         85:26:01:48:87:aa:fa:b5:80:27:a0:39:f7:df:89:c8:c3:e8:
         64:ff:21:b4:71:3a:59:7e:9a:0b:73:9e:30:fc:8c:a3:c7:4b:
         28:89:d0:07:84:c0:7b:15:bc:e4:7a:cb:ee:1a:06:13:ac:5c:
         bb:e5:73:ff:28:03:44:6e:88:db:8d:52:78:57:9d:c2:ed:a7:
         80:f1:26:4d:80:c6:99:7e:1c:64:bf:2a:af:66:0f:4b:c8:e1:
         8b:4a:23:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC85QXiNe6y4H7ho0X+E45PbyfMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzQzYwMDIwNUY3NzhCQ0VBREU1M0YzMUZEM0Q2NUE0
NkQ1MzQ2NzAeFw0yNDAzMDUxODE0MDBaFw0yNTAzMDQxODE5MDBaMDMxMTAvBgNV
BAMTKEIzMDFFNTQ3QUM4ODQ0M0M0QUFEQUI5OEFEQUZFODdGNTYyQkIxMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnwQdk+sJhIpy9xyYvTqF8PLI
LrD7ppwkoesLtkP5YbW99FISaPDjj4lDXvFr7ELoQN7hJZoT4Ed9BcZfCHTN7acD
mAL4gu7B331O6bueL5ZnGVdw21DS9HxcdYPCfB1jOFyGyaOzn0JHfSWadTthyMBE
5VNwOt7hXtlMG8fTh7UoEHerxyycJ6hRDHSsbW071aOqmvVewiOjYpIe1KVCS9LW
f1YqTUtKIbvdcmM6OlmIh/ZLRIoZ88FaNA/hMZBzdY36akmOdpH5dvjwA99qwMsH
S1N/TjS0hxc/p4a4NGMpS/RLrlW77InvKTum7aK6o0ay9/2ZYWRJd59Sym+HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUswHlR6yIRDxKrauYra/of1YrsQowHwYDVR0j
BBgwFoAUkTxgAgX3eLzq3lPzH9PWWkbVNGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMUVDQjExMEI5MTg2MEEwOTEzQ0YxNzBGNUNGQjcwOURF
OThERjdEMDM5MUI4RjNERUM1NTMxRjY0MzM3Njc1LzAvOTEzQzYwMDIwNUY3NzhC
Q0VBREU1M0YzMUZEM0Q2NUE0NkQ1MzQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MTNDNjAwMjA1Rjc3OEJDRUFE
RTUzRjMxRkQzRDY1QTQ2RDUzNDY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTFFQ0IxMTBCOTE4NjBBMDkxM0NGMTcwRjVDRkI3MDlERTk4REY3RDAz
OTFCOEYzREVDNTUzMUY2NDMzNzY3NS8wLzMxMzYzODJlMzEzMjMxMmUzNjMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODM0MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5PDAN
BgkqhkiG9w0BAQsFAAOCAQEAGOdjBzfgeX+oK5p1z2yVFzaFesRmyYi10a9vAhe1
L+wRc3uar350oDzkMP3D7gC7TiRpq9yrRnOZy/n82sWDl6wzmE+uon/jcx4zYKXp
eUhddZh7ygKw4Ek5/YPXjPcpvZTSW4NLqPoojMIY1bGdVg/sWxtbjSW2PxJGH8RL
bnQ/rKCh9Wt+f7CLOER91a1AsQl4eg7SJkoKjv9TCi6AeWUyhSYBSIeq+rWAJ6A5
99+JyMPoZP8htHE6WX6aC3OeMPyMo8dLKInQB4TAexW85HrL7hoGE6xcu+Vz/ygD
RG6I241SeFedwu2ngPEmTYDGmX4cZL8qr2YPS8jhi0ojbw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:47 2024 by rpki-client on console-ams.rpki-client.org