Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233372e302f32342d3234203d3e203237383233.roa
File:                     3133382e33362e3233372e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          xpl0XQD8c/wcTL8CLjaUA+B6KU/980gt6681ecw4tyg=
Subject key identifier:   AA:29:9D:E4:A5:83:65:62:BC:48:6A:AD:26:C8:C0:E6:30:1A:F0:15
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       362ACCA73181E0EBDA37AA24D35654257797EC78
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233372e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:19 +0000
ROA not before:           Tue 05 Mar 2024 17:35:19 +0000
ROA not after:            Tue 04 Mar 2025 17:40:19 +0000
asID:                     27823
IP address blocks:        138.36.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2a:cc:a7:31:81:e0:eb:da:37:aa:24:d3:56:54:25:77:97:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:19 2024 GMT
            Not After : Mar  4 17:40:19 2025 GMT
        Subject: CN=AA299DE4A5836562BC486AAD26C8C0E6301AF015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:c4:1a:89:68:e2:70:5c:81:16:49:f3:de:
                    19:32:f5:fb:85:3b:df:7c:42:99:0e:59:5c:bf:1c:
                    e4:f5:bc:bd:9f:64:d6:0c:7b:5c:f5:bb:59:82:d3:
                    e4:c3:e5:a5:4e:2b:88:09:31:0e:57:8f:fa:f7:d5:
                    9b:9d:84:2a:af:9b:99:8f:a6:a9:5b:3b:62:7d:9b:
                    21:6c:ee:8c:14:76:65:66:04:f8:5c:c1:b0:75:dd:
                    c1:e3:cd:03:9f:d1:7b:29:a3:2a:a7:c7:f5:60:c6:
                    1e:60:24:a8:fe:09:f4:10:e0:e8:74:bc:94:2e:97:
                    08:7d:39:45:3a:27:93:27:99:a6:8b:d0:16:69:8f:
                    83:d4:3a:ca:37:a8:1d:ae:3a:5f:1e:a8:8b:88:70:
                    f3:17:d0:34:5b:b9:c3:2b:16:50:52:b7:b5:29:30:
                    54:1f:71:b8:d8:14:f0:26:f1:d2:b7:e3:8e:b3:5e:
                    15:43:7b:3c:a8:c6:b6:75:9c:cc:9a:b3:75:7f:98:
                    0e:ea:6c:3a:3d:c4:6d:a0:ff:71:dc:a5:a6:70:ca:
                    62:c4:fe:b0:3b:fd:69:fb:6d:af:e4:ba:cb:46:ce:
                    13:6e:a8:01:d1:f0:5d:cc:92:f1:8c:9f:fa:4b:6c:
                    88:77:cc:98:b8:e1:63:78:fa:0f:47:95:b8:40:e0:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:9D:E4:A5:83:65:62:BC:48:6A:AD:26:C8:C0:E6:30:1A:F0:15
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233372e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:8c:71:4b:da:0f:fe:57:f6:ec:f5:bf:f8:ca:f4:33:5c:
         77:9e:e0:65:10:5e:9f:31:db:09:a0:01:2f:35:c9:05:94:51:
         6d:3d:3d:b5:90:a7:c0:43:a4:8c:1e:61:94:c4:71:73:8a:53:
         ec:82:d0:37:0e:9f:82:cc:b7:8e:d6:3c:fb:1e:4c:1d:af:94:
         66:56:30:c1:3c:4b:3c:8f:65:3a:28:f2:10:38:b2:92:a2:f4:
         67:d7:0c:af:ef:45:5f:12:d1:dc:fa:57:d6:88:e7:11:56:cb:
         d0:f1:01:6e:e1:72:db:14:a9:36:d3:b9:bf:a2:34:a6:87:93:
         15:1f:d8:4e:e5:e3:6d:72:7f:32:f7:ac:d3:28:c6:b4:d5:63:
         73:72:c9:44:6e:21:62:4b:61:23:19:8e:8a:ac:9e:e0:33:56:
         b0:dd:22:79:d5:ea:5d:e2:de:35:7f:e3:2a:11:ab:65:06:6e:
         49:e9:f0:ab:87:dd:6e:1a:5b:61:be:7d:52:2c:e3:c3:7b:dd:
         cc:06:51:6a:47:13:e6:15:c9:86:43:e3:cf:a5:a2:67:2f:cd:
         fd:15:4f:14:06:df:fe:71:3a:3c:e1:d1:08:9a:2a:de:ce:97:
         d6:a0:0a:01:5c:f3:86:76:87:70:c9:8d:6b:15:fe:b8:5e:3f:
         88:51:49:97
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNirMpzGB4OvaN6ok01ZUJXeX7HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNDAzMDUxNzM1MTlaFw0yNTAzMDQxNzQwMTlaMDMxMTAvBgNV
BAMTKEFBMjk5REU0QTU4MzY1NjJCQzQ4NkFBRDI2QzhDMEU2MzAxQUYwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1usQaiWjicFyBFknz3hky9fuF
O998QpkOWVy/HOT1vL2fZNYMe1z1u1mC0+TD5aVOK4gJMQ5Xj/r31ZudhCqvm5mP
pqlbO2J9myFs7owUdmVmBPhcwbB13cHjzQOf0Xspoyqnx/Vgxh5gJKj+CfQQ4Oh0
vJQulwh9OUU6J5MnmaaL0BZpj4PUOso3qB2uOl8eqIuIcPMX0DRbucMrFlBSt7Up
MFQfcbjYFPAm8dK3446zXhVDezyoxrZ1nMyas3V/mA7qbDo9xG2g/3HcpaZwymLE
/rA7/Wn7ba/kustGzhNuqAHR8F3MkvGMn/pLbIh3zJi44WN4+g9HlbhA4HFjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqimd5KWDZWK8SGqtJsjA5jAa8BUwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzMzODJlMzMzNjJlMzIzMzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIok7TAN
BgkqhkiG9w0BAQsFAAOCAQEAhbWMcUvaD/5X9uz1v/jK9DNcd57gZRBenzHbCaAB
LzXJBZRRbT09tZCnwEOkjB5hlMRxc4pT7ILQNw6fgsy3jtY8+x5MHa+UZlYwwTxL
PI9lOijyEDiykqL0Z9cMr+9FXxLR3PpX1ojnEVbL0PEBbuFy2xSpNtO5v6I0poeT
FR/YTuXjbXJ/Mves0yjGtNVjc3LJRG4hYkthIxmOiqye4DNWsN0iedXqXeLeNX/j
KhGrZQZuSenwq4fdbhpbYb59Uizjw3vdzAZRakcT5hXJhkPjz6WiZy/N/RVPFAbf
/nE6POHRCJoq3s6X1qAKAVzzhnaHcMmNaxX+uF4/iFFJlw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org