Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35312e302f32342d3234203d3e203237383233.roa
File:                     3136382e3139372e35312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          8wj80LNpqvUJNSR1EqaBw/gzETRSIw5GsZmbaS6PxYk=
Subject key identifier:   EC:8C:92:68:C8:1E:23:75:FB:1A:AE:E1:A6:43:48:91:51:7A:D8:F1
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       420D68D2565D7D5CE1E525E3400C3128C6B3C8BA
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 04 Feb 2025 18:08:28 +0000
ROA not before:           Tue 04 Feb 2025 18:03:28 +0000
ROA not after:            Tue 03 Feb 2026 18:08:28 +0000
asID:                     27823
IP address blocks:        168.197.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 31 Mar 2025 05:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0d:68:d2:56:5d:7d:5c:e1:e5:25:e3:40:0c:31:28:c6:b3:c8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Feb  4 18:03:28 2025 GMT
            Not After : Feb  3 18:08:28 2026 GMT
        Subject: CN=EC8C9268C81E2375FB1AAEE1A6434891517AD8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:6d:51:a5:02:a2:80:b8:32:ab:4f:ff:3b:
                    ce:09:3f:02:49:18:6a:31:71:fa:16:02:7e:5a:f1:
                    8e:72:bc:59:e4:83:1d:3d:66:bd:51:0d:58:78:a8:
                    f8:56:2d:66:fc:43:30:17:f8:44:ab:7b:8d:75:ae:
                    fc:a9:56:c9:e2:5a:a1:77:c8:ba:73:fb:78:7e:8a:
                    6d:fd:b8:5c:6c:e3:3c:f9:7c:80:a9:ce:43:16:88:
                    48:0e:58:d3:fa:4d:c5:cf:63:db:94:27:1a:b2:0b:
                    0b:cf:8a:2f:65:07:b0:84:55:46:7e:3c:c3:4d:4e:
                    11:bd:2e:9b:71:5e:91:3c:7a:11:f6:dd:9f:1e:44:
                    15:c9:44:4a:29:ba:4e:74:30:14:50:f8:7b:24:8b:
                    94:34:db:d2:c0:f7:db:9f:e5:5b:f5:ce:d6:51:72:
                    4b:db:a3:de:cd:bf:b5:20:3b:94:0f:7e:82:2a:85:
                    e0:7f:82:8c:67:6a:17:d1:ff:d7:19:eb:da:b6:25:
                    f3:8f:e5:04:46:3d:e9:63:ae:1f:27:f9:60:ce:3d:
                    f1:94:ae:74:72:6c:93:98:46:ee:ed:95:1c:9f:b4:
                    9a:42:46:ba:58:f7:1b:31:0a:3f:db:4d:65:8e:29:
                    94:1f:13:3d:e1:30:9c:a5:46:4d:24:5d:cd:22:22:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8C:92:68:C8:1E:23:75:FB:1A:AE:E1:A6:43:48:91:51:7A:D8:F1
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e35312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:8d:ba:77:56:cf:fa:6b:76:be:57:56:c8:79:44:d3:c5:
         5d:bd:85:f4:33:57:8c:1d:28:4f:33:8e:71:4e:06:b0:6a:ae:
         72:0c:9e:5c:2d:30:94:d5:78:82:ad:e0:3d:0d:8f:1b:4f:64:
         6b:08:12:91:a0:d4:05:b0:2d:33:83:eb:a9:aa:57:cc:5c:b0:
         31:f8:83:81:16:f3:8f:2d:10:3d:76:76:af:e2:bc:92:26:6f:
         b7:90:9c:69:5a:b4:10:55:be:66:0a:7d:e0:49:9a:5e:ae:35:
         43:9c:70:1a:94:91:48:b9:ac:01:12:e2:6a:83:b5:a3:e3:db:
         3f:2b:97:14:d9:3c:65:2f:f8:c4:a8:75:12:ec:e2:15:93:00:
         fd:1a:94:dc:3d:53:6a:06:e4:a6:25:99:cb:35:48:b3:ea:6b:
         f5:ff:33:44:9d:3e:03:20:dc:da:b3:5d:e1:8d:f5:5a:e7:4a:
         df:81:c8:a4:35:72:03:28:c7:e3:fd:5d:53:8c:9b:11:14:8b:
         12:65:3d:c6:29:50:b7:df:44:58:fe:b5:19:4b:16:50:f3:1b:
         75:92:bb:5c:25:5f:c8:83:a0:56:a7:2b:d0:3a:68:0e:50:e1:
         83:bd:ab:62:32:1f:10:59:96:b7:0e:ed:2e:fe:4a:42:25:e3:
         a2:30:89:83
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQg1o0lZdfVzh5SXjQAwxKMazyLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNTAyMDQxODAzMjhaFw0yNjAyMDMxODA4MjhaMDMxMTAvBgNV
BAMTKEVDOEM5MjY4QzgxRTIzNzVGQjFBQUVFMUE2NDM0ODkxNTE3QUQ4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSG1RpQKigLgyq0//O84JPwJJ
GGoxcfoWAn5a8Y5yvFnkgx09Zr1RDVh4qPhWLWb8QzAX+ESre411rvypVsniWqF3
yLpz+3h+im39uFxs4zz5fICpzkMWiEgOWNP6TcXPY9uUJxqyCwvPii9lB7CEVUZ+
PMNNThG9LptxXpE8ehH23Z8eRBXJREopuk50MBRQ+Hski5Q029LA99uf5Vv1ztZR
ckvbo97Nv7UgO5QPfoIqheB/goxnahfR/9cZ69q2JfOP5QRGPeljrh8n+WDOPfGU
rnRybJOYRu7tlRyftJpCRrpY9xsxCj/bTWWOKZQfEz3hMJylRk0kXc0iItnjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7IySaMgeI3X7Gq7hpkNIkVF62PEwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzYzODJlMzEzOTM3MmUzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFMzAN
BgkqhkiG9w0BAQsFAAOCAQEAo+6NundWz/prdr5XVsh5RNPFXb2F9DNXjB0oTzOO
cU4GsGqucgyeXC0wlNV4gq3gPQ2PG09kawgSkaDUBbAtM4PrqapXzFywMfiDgRbz
jy0QPXZ2r+K8kiZvt5CcaVq0EFW+Zgp94EmaXq41Q5xwGpSRSLmsARLiaoO1o+Pb
PyuXFNk8ZS/4xKh1EuziFZMA/RqU3D1TagbkpiWZyzVIs+pr9f8zRJ0+AyDc2rNd
4Y31WudK34HIpDVyAyjH4/1dU4ybERSLEmU9xilQt99EWP61GUsWUPMbdZK7XCVf
yIOgVqcr0DpoDlDhg72rYjIfEFmWtw7tLv5KQiXjojCJgw==
-----END CERTIFICATE-----
Generated at Thu Mar 27 00:01:15 2025 by rpki-client