Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35302e302f32342d3234203d3e203237383233.roa
File:                     3136382e3139372e35302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          twiapEfLpKvnUvnqrxPtQ3bAF8W7nmjvfi04bZUOv44=
Subject key identifier:   77:77:19:45:BE:F5:50:2A:AE:95:7A:C2:56:FB:BF:34:B2:2F:98:7F
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       0C2B966E61F5F09F764041E9D8BB81256AD801AD
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35302e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:16 +0000
ROA not before:           Tue 05 Mar 2024 17:35:16 +0000
ROA not after:            Tue 04 Mar 2025 17:40:16 +0000
asID:                     27823
IP address blocks:        168.197.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2b:96:6e:61:f5:f0:9f:76:40:41:e9:d8:bb:81:25:6a:d8:01:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:16 2024 GMT
            Not After : Mar  4 17:40:16 2025 GMT
        Subject: CN=77771945BEF5502AAE957AC256FBBF34B22F987F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:8b:a4:e4:0b:da:94:a5:e7:a7:48:c8:9f:
                    a1:73:dd:6d:b0:dc:ee:7a:8e:5e:cd:69:b7:88:21:
                    14:b1:1e:fd:c3:5d:1e:61:81:37:c2:df:c2:59:78:
                    74:28:b1:07:a7:72:1b:1f:3c:92:2b:a3:55:d7:d2:
                    8d:5a:6c:ca:ae:76:c8:39:cf:96:61:73:9d:05:d7:
                    0b:03:32:44:4e:8d:4e:b2:32:dc:a9:13:31:ef:8d:
                    00:b2:92:2a:1b:ae:5f:ad:34:fb:3f:e4:0e:ec:ea:
                    ad:1f:48:83:79:93:ae:72:07:c7:5a:5d:10:ba:5a:
                    41:4b:fe:b9:ac:b6:17:cf:0d:ca:63:31:98:ba:23:
                    e4:a3:a9:01:9e:76:e2:a3:3a:f1:ac:60:16:2a:d3:
                    cd:fc:24:e4:95:68:8a:72:1f:ae:4b:ac:01:b7:6e:
                    df:ef:33:c3:97:18:5b:8d:1b:18:f9:de:b8:87:0b:
                    c3:1f:e0:f4:ac:b5:77:a3:0b:1b:58:a9:81:52:ec:
                    1b:3a:98:fb:ec:0d:51:40:74:82:22:dc:e9:ad:17:
                    a2:cf:2f:2e:13:31:9a:8b:e6:97:f1:db:cf:b1:cc:
                    36:f4:b5:53:1f:1d:cc:57:a3:80:42:af:d3:17:ae:
                    58:21:e3:b5:58:6b:5d:03:53:2c:41:16:4b:43:4b:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:77:19:45:BE:F5:50:2A:AE:95:7A:C2:56:FB:BF:34:B2:2F:98:7F
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35302e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:2d:51:a1:1e:db:29:e5:8c:fe:2e:e7:f6:d5:3c:ab:5c:
         de:e0:08:95:84:11:59:30:82:01:e8:4a:9f:78:6a:d7:7c:1d:
         c9:47:dd:a0:a2:00:da:5c:1e:85:51:4c:73:b3:27:9d:56:e5:
         14:84:42:cc:9a:bc:ab:bf:8c:8a:a1:3e:58:f7:6c:42:6f:6e:
         ee:0d:51:f2:6a:0d:6b:2e:55:a4:a8:a3:b9:7d:a5:39:4d:a9:
         50:2d:a6:eb:5d:5e:2b:96:c3:6a:e0:e6:a6:4f:40:c8:99:e4:
         a0:8f:ca:f8:36:ba:48:79:c3:b4:a8:8b:9d:2d:0f:e2:06:af:
         5f:6f:bd:90:3a:4c:10:5e:4d:03:c3:07:64:08:61:c4:f6:ba:
         33:4d:a5:c0:ee:71:d2:bc:2d:19:e5:5b:d7:e3:29:52:3c:ed:
         b4:ff:71:78:e0:b3:a9:9c:7a:b8:67:0a:9e:fa:92:1d:8c:c0:
         58:c2:0c:f0:1d:b6:db:a7:a6:fb:ea:e0:63:f4:13:84:aa:d2:
         b9:2a:79:fc:fe:b3:f0:ec:2a:ca:10:11:df:20:dd:df:1d:ea:
         cb:9b:11:69:cd:91:b6:00:34:1a:89:16:e5:d3:ac:0e:e1:6f:
         10:88:1b:04:d9:17:18:17:52:a0:49:bc:0c:dd:02:c2:bc:83:
         ca:57:b0:d1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDCuWbmH18J92QEHp2LuBJWrYAa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNDAzMDUxNzM1MTZaFw0yNTAzMDQxNzQwMTZaMDMxMTAvBgNV
BAMTKDc3NzcxOTQ1QkVGNTUwMkFBRTk1N0FDMjU2RkJCRjM0QjIyRjk4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02Yuk5AvalKXnp0jIn6Fz3W2w
3O56jl7NabeIIRSxHv3DXR5hgTfC38JZeHQosQenchsfPJIro1XX0o1abMqudsg5
z5Zhc50F1wsDMkROjU6yMtypEzHvjQCykiobrl+tNPs/5A7s6q0fSIN5k65yB8da
XRC6WkFL/rmsthfPDcpjMZi6I+SjqQGeduKjOvGsYBYq0838JOSVaIpyH65LrAG3
bt/vM8OXGFuNGxj53riHC8Mf4PSstXejCxtYqYFS7Bs6mPvsDVFAdIIi3OmtF6LP
Ly4TMZqL5pfx28+xzDb0tVMfHcxXo4BCr9MXrlgh47VYa10DUyxBFktDS/UfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUd3cZRb71UCqulXrCVvu/NLIvmH8wHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzYzODJlMzEzOTM3MmUzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFMjAN
BgkqhkiG9w0BAQsFAAOCAQEAeLgtUaEe2ynljP4u5/bVPKtc3uAIlYQRWTCCAehK
n3hq13wdyUfdoKIA2lwehVFMc7MnnVblFIRCzJq8q7+MiqE+WPdsQm9u7g1R8moN
ay5VpKijuX2lOU2pUC2m611eK5bDauDmpk9AyJnkoI/K+Da6SHnDtKiLnS0P4gav
X2+9kDpMEF5NA8MHZAhhxPa6M02lwO5x0rwtGeVb1+MpUjzttP9xeOCzqZx6uGcK
nvqSHYzAWMIM8B2226em++rgY/QThKrSuSp5/P6z8OwqyhAR3yDd3x3qy5sRac2R
tgA0GokW5dOsDuFvEIgbBNkXGBdSoEm8DN0CwryDylew0Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org