Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131332e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131332e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          XUrN3K1J182Ck7QU8Pl7KbXB1i0gFpU84bMj6I8yhDg=
Subject key identifier:   22:8E:6F:7F:58:85:11:82:BB:D6:9D:A6:19:BE:7C:0A:10:F0:93:B6
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       37A4C28A835E00642BF4249F58EFCBBEFEA87474
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131332e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:06 +0000
ROA not before:           Tue 05 Mar 2024 17:35:06 +0000
ROA not after:            Tue 04 Mar 2025 17:40:06 +0000
asID:                     27823
IP address blocks:        179.43.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a4:c2:8a:83:5e:00:64:2b:f4:24:9f:58:ef:cb:be:fe:a8:74:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:06 2024 GMT
            Not After : Mar  4 17:40:06 2025 GMT
        Subject: CN=228E6F7F58851182BBD69DA619BE7C0A10F093B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:90:1f:a8:ba:b8:b8:aa:59:0a:d5:1a:6b:
                    49:0d:74:35:6c:2c:17:3d:43:ca:a8:90:ed:b8:da:
                    d5:c6:f6:00:e3:62:d4:f9:70:c5:10:34:53:3e:56:
                    20:61:b3:06:d9:bc:9b:7b:3b:43:35:b9:e6:7e:f3:
                    d3:47:c5:68:e2:cc:81:17:48:d3:e5:ce:e1:6c:38:
                    17:2e:03:3e:b2:35:6e:c1:7f:1c:e3:0a:12:bb:b7:
                    0a:01:a3:03:3d:b6:21:b5:b7:90:4c:a9:f0:92:72:
                    62:92:6a:fc:c7:de:2e:27:09:f7:4e:13:95:d1:18:
                    74:a2:2c:cf:0c:8d:fc:42:78:7d:00:0e:a3:c8:b7:
                    81:ae:4f:9f:27:f7:92:44:04:5b:a8:17:7c:3a:4e:
                    6b:3d:5c:01:fe:a7:9d:3d:11:35:4e:6c:ef:79:9e:
                    5a:69:98:8c:06:a3:77:85:9c:7b:a8:d6:1f:f0:34:
                    db:ed:19:ee:d0:4a:4f:8d:4c:89:27:79:6d:b6:f0:
                    90:a4:92:5c:e6:bf:a5:8c:1c:e2:a5:c2:d6:8d:56:
                    2c:f7:7e:c4:a5:e9:1a:9c:df:f9:09:1e:d9:01:73:
                    d9:c2:e3:27:f9:17:fa:ba:e8:9b:fc:10:e4:4c:53:
                    45:94:ac:ef:1d:6f:6d:c2:cc:a3:d0:f7:12:a9:30:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8E:6F:7F:58:85:11:82:BB:D6:9D:A6:19:BE:7C:0A:10:F0:93:B6
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131332e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:23:b7:af:be:57:23:c8:8a:c6:b4:56:b4:38:f8:7b:05:
         aa:2b:ce:15:11:81:76:49:08:b1:0d:51:35:27:7e:73:47:70:
         4f:21:5b:74:87:c6:43:48:5e:6a:85:a1:25:b8:bb:e7:b1:8e:
         80:56:9f:0d:a1:3b:ec:7f:e9:20:06:3f:34:36:90:c2:c5:92:
         06:f6:0e:3c:64:5c:2d:70:47:56:af:bf:db:3a:a4:5a:35:00:
         8d:e9:6e:28:04:29:a0:30:8b:66:aa:7f:23:b0:51:08:c9:5e:
         a7:ca:78:ba:33:3a:3f:da:d7:60:3a:be:79:67:d8:e0:dd:61:
         0c:20:63:02:0b:13:60:eb:fa:50:fb:65:d3:33:28:4b:94:82:
         ac:98:e9:84:b7:a8:c3:95:2c:e9:9b:48:48:46:b9:64:45:c7:
         df:b3:0c:f4:ad:bb:bc:03:6c:0d:4b:70:f8:ce:e8:22:f2:a5:
         a3:ee:97:c3:06:11:b5:5b:b5:06:46:48:8e:6c:36:bd:18:98:
         24:47:d4:6c:87:0f:dd:64:3b:32:fe:3a:84:54:2e:d5:3a:65:
         41:70:c2:d5:d8:9e:03:a1:20:2c:7e:1d:5c:6a:90:7f:eb:f7:
         3f:51:09:ce:0f:8b:4b:e8:dd:e6:3b:a9:ff:27:28:11:17:04:
         3a:1e:38:ba
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN6TCioNeAGQr9CSfWO/Lvv6odHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNDAzMDUxNzM1MDZaFw0yNTAzMDQxNzQwMDZaMDMxMTAvBgNV
BAMTKDIyOEU2RjdGNTg4NTExODJCQkQ2OURBNjE5QkU3QzBBMTBGMDkzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGZAfqLq4uKpZCtUaa0kNdDVs
LBc9Q8qokO242tXG9gDjYtT5cMUQNFM+ViBhswbZvJt7O0M1ueZ+89NHxWjizIEX
SNPlzuFsOBcuAz6yNW7BfxzjChK7twoBowM9tiG1t5BMqfCScmKSavzH3i4nCfdO
E5XRGHSiLM8MjfxCeH0ADqPIt4GuT58n95JEBFuoF3w6Tms9XAH+p509ETVObO95
nlppmIwGo3eFnHuo1h/wNNvtGe7QSk+NTIkneW228JCkklzmv6WMHOKlwtaNViz3
fsSl6Rqc3/kJHtkBc9nC4yf5F/q66Jv8EORMU0WUrO8db23CzKPQ9xKpMFWVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIo5vf1iFEYK71p2mGb58ChDwk7YwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzczOTJlMzQzMzJlMzEzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMrcTAN
BgkqhkiG9w0BAQsFAAOCAQEAsXojt6++VyPIisa0VrQ4+HsFqivOFRGBdkkIsQ1R
NSd+c0dwTyFbdIfGQ0heaoWhJbi757GOgFafDaE77H/pIAY/NDaQwsWSBvYOPGRc
LXBHVq+/2zqkWjUAjeluKAQpoDCLZqp/I7BRCMlep8p4ujM6P9rXYDq+eWfY4N1h
DCBjAgsTYOv6UPtl0zMoS5SCrJjphLeow5Us6ZtISEa5ZEXH37MM9K27vANsDUtw
+M7oIvKlo+6XwwYRtVu1BkZIjmw2vRiYJEfUbIcP3WQ7Mv46hFQu1TplQXDC1die
A6EgLH4dXGqQf+v3P1EJzg+LS+jd5jup/ycoERcEOh44ug==
-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org