Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138352e302f32342d3234203d3e203237383233.roa
File:                     3136382e3138312e3138352e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          qY0VjCvpidXA8LjGRXjT8VwtTE2cW5ex8htYZU0YKBE=
Subject key identifier:   6C:EC:8E:44:A1:CE:38:81:8A:AB:DE:47:D5:D6:0D:7C:09:6C:AB:70
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5D7D0AB6BD0A7896DBE3D4D9E90BD068C6AADA89
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138352e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:02 +0000
ROA not before:           Tue 05 Mar 2024 17:35:02 +0000
ROA not after:            Tue 04 Mar 2025 17:40:02 +0000
asID:                     27823
IP address blocks:        168.181.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7d:0a:b6:bd:0a:78:96:db:e3:d4:d9:e9:0b:d0:68:c6:aa:da:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:02 2024 GMT
            Not After : Mar  4 17:40:02 2025 GMT
        Subject: CN=6CEC8E44A1CE38818AABDE47D5D60D7C096CAB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:ef:e1:fe:c6:35:fa:b1:f2:2a:aa:23:54:
                    1a:2f:a7:0f:25:43:04:c1:a6:f0:46:23:0a:0a:a6:
                    de:6c:31:74:6c:d2:1a:ae:8f:26:6b:3d:d2:a9:d4:
                    f1:7d:f9:71:6d:20:c1:2f:4a:63:48:b2:ae:41:28:
                    ae:d2:00:bf:ef:5a:f7:68:0a:4d:20:d4:a8:a5:a7:
                    2e:db:f2:a0:c2:8c:da:84:2c:cd:38:3e:c4:d6:7d:
                    f6:ef:59:0f:14:b9:18:f9:ae:c9:8c:e6:ec:f5:a4:
                    0b:70:ae:45:6f:dc:26:98:90:f9:6d:92:ad:84:51:
                    42:0f:c7:00:fa:ac:24:20:30:3d:ec:ff:52:41:4b:
                    b2:7e:8c:9b:23:84:ae:73:8f:11:c4:88:03:70:5e:
                    41:65:b6:3b:12:72:82:da:a8:0a:16:da:60:37:5c:
                    6b:05:a7:f3:e1:85:ea:08:eb:70:a6:30:c1:82:58:
                    4b:85:2d:1c:95:e9:b2:49:00:ee:ea:54:4b:bc:59:
                    3b:bd:af:35:9b:bf:72:83:c4:67:b8:7f:8c:d1:92:
                    46:19:1a:82:2c:78:c5:6b:1e:7c:62:64:cb:47:83:
                    16:f2:45:5a:ae:18:1a:d0:7f:71:78:b0:f1:45:70:
                    98:3e:9f:84:e7:a8:e9:c0:94:df:93:ce:59:90:5c:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EC:8E:44:A1:CE:38:81:8A:AB:DE:47:D5:D6:0D:7C:09:6C:AB:70
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138352e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7c:29:68:d2:a4:14:de:36:d5:0a:7b:72:b7:2f:c0:08:87:
         ed:34:c9:b9:4e:d2:c1:2e:33:3c:8a:1c:4c:4d:18:a4:9f:f3:
         75:64:0e:da:b7:30:b0:b2:6e:d1:bd:5c:52:85:b7:81:71:3e:
         9f:7a:f8:f8:a1:96:3a:2b:57:f0:cb:4d:13:95:6b:f4:51:4d:
         66:5a:0f:21:0e:4b:ff:90:a0:51:dc:1b:cb:bc:4f:62:14:d2:
         6a:5b:05:1b:17:c7:5d:28:25:a5:8f:7b:1e:97:a6:e3:f8:82:
         a6:4e:96:61:bc:87:79:66:8f:1a:08:a5:3b:29:db:5a:e3:df:
         2b:30:6d:9b:30:2b:3f:48:64:53:7c:5f:6a:55:2a:50:e8:a8:
         a9:49:b8:94:7a:62:68:7b:5c:60:c4:a6:5a:75:77:7c:2f:d5:
         0f:9e:e4:e0:be:d1:be:53:c4:c6:e7:79:3a:07:8b:ad:c7:c4:
         53:3e:1a:bd:2c:71:4c:76:41:a7:4d:95:1a:9d:d1:58:a0:ec:
         9d:50:3d:d0:b1:ed:1e:c8:b2:18:4e:2f:66:8a:a5:16:ee:1f:
         f9:68:69:1d:ad:a7:3f:a0:0e:5c:b0:d5:fe:c4:d8:f5:28:06:
         42:5c:a2:e0:cd:6e:25:d6:fe:b2:7b:db:51:ef:a0:ed:cc:a5:
         43:e5:86:01
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXX0Ktr0KeJbb49TZ6QvQaMaq2okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNDAzMDUxNzM1MDJaFw0yNTAzMDQxNzQwMDJaMDMxMTAvBgNV
BAMTKDZDRUM4RTQ0QTFDRTM4ODE4QUFCREU0N0Q1RDYwRDdDMDk2Q0FCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoY+/h/sY1+rHyKqojVBovpw8l
QwTBpvBGIwoKpt5sMXRs0hqujyZrPdKp1PF9+XFtIMEvSmNIsq5BKK7SAL/vWvdo
Ck0g1Kilpy7b8qDCjNqELM04PsTWffbvWQ8UuRj5rsmM5uz1pAtwrkVv3CaYkPlt
kq2EUUIPxwD6rCQgMD3s/1JBS7J+jJsjhK5zjxHEiANwXkFltjsScoLaqAoW2mA3
XGsFp/PhheoI63CmMMGCWEuFLRyV6bJJAO7qVEu8WTu9rzWbv3KDxGe4f4zRkkYZ
GoIseMVrHnxiZMtHgxbyRVquGBrQf3F4sPFFcJg+n4TnqOnAlN+TzlmQXEU1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbOyORKHOOIGKq95H1dYNfAlsq3AwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzYzODJlMzEzODMxMmUzMTM4MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqLW5
MA0GCSqGSIb3DQEBCwUAA4IBAQCufClo0qQU3jbVCntyty/ACIftNMm5TtLBLjM8
ihxMTRikn/N1ZA7atzCwsm7RvVxShbeBcT6fevj4oZY6K1fwy00TlWv0UU1mWg8h
Dkv/kKBR3BvLvE9iFNJqWwUbF8ddKCWlj3sel6bj+IKmTpZhvId5Zo8aCKU7Kdta
498rMG2bMCs/SGRTfF9qVSpQ6KipSbiUemJoe1xgxKZadXd8L9UPnuTgvtG+U8TG
53k6B4utx8RTPhq9LHFMdkGnTZUandFYoOydUD3Qse0eyLIYTi9miqUW7h/5aGkd
rac/oA5csNX+xNj1KAZCXKLgzW4l1v6ye9tR76DtzKVD5YYB
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:58 2024 by rpki-client on console-ams.rpki-client.org