Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa
File:                     3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier:          O9oBbnmxL9OZ2ySHauJReDbGV9wXwqYgKxX99ZBp0PY=
Subject key identifier:   65:F3:47:26:E1:50:36:47:27:39:01:6D:0A:F4:5B:4D:8D:E1:5B:50
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       0E2B7B576B8D18F54F5244161A7A5E9E2CD8638B
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:56:49 +0000
ROA not before:           Tue 05 Mar 2024 17:51:49 +0000
ROA not after:            Tue 04 Mar 2025 17:56:49 +0000
asID:                     52423
IP address blocks:        160.223.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 05:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2b:7b:57:6b:8d:18:f5:4f:52:44:16:1a:7a:5e:9e:2c:d8:63:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Mar  5 17:51:49 2024 GMT
            Not After : Mar  4 17:56:49 2025 GMT
        Subject: CN=65F34726E15036472739016D0AF45B4D8DE15B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:bd:b3:64:84:98:78:28:ea:09:4c:45:9c:
                    5f:79:ae:91:1a:3b:bf:85:36:de:15:db:95:38:52:
                    81:4f:5d:b1:4e:6c:07:d2:da:53:25:44:58:33:b4:
                    7e:fe:eb:7d:e2:13:c5:49:9f:4b:06:09:cf:f6:b5:
                    3f:64:16:a8:74:27:4c:06:a7:f3:b4:7f:30:80:3b:
                    77:37:b5:a5:02:70:7a:88:b5:b6:92:e0:64:68:0f:
                    2b:ed:68:06:f1:2d:3b:40:a3:06:69:c5:24:6f:68:
                    91:0c:5e:bc:dd:b1:d3:a2:e9:85:34:20:83:93:73:
                    d3:2a:a1:eb:48:b1:7a:19:1c:1c:69:69:ca:5f:19:
                    03:19:02:87:0a:35:30:11:16:a7:72:28:ed:9f:b1:
                    57:56:1f:46:e8:6e:d6:ca:b0:c5:9d:f3:81:1f:54:
                    24:21:ee:e1:2a:e9:2c:2a:cc:71:2c:9d:a4:94:0f:
                    bd:7e:03:cb:ea:6f:d5:11:e8:8d:81:82:a4:3a:74:
                    95:c6:5c:76:2f:30:c5:f1:ad:3d:0f:77:3d:b0:5f:
                    18:bd:d0:6e:9b:38:ba:7a:74:c6:90:ee:5a:fb:e6:
                    1a:f5:53:fd:b4:5a:27:74:37:b0:0c:92:81:9d:62:
                    2b:11:61:83:89:99:ce:92:7b:d5:8e:40:68:a5:0b:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:47:26:E1:50:36:47:27:39:01:6D:0A:F4:5B:4D:8D:E1:5B:50
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136302e3232332e3230332e302f32342d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:24:58:dc:75:5b:25:dc:63:d8:84:85:02:69:49:e0:bf:70:
         ee:0f:de:d4:b6:83:67:ce:12:14:c4:3d:16:7c:bb:d0:6a:43:
         93:d8:09:76:ec:d2:88:e7:84:c8:32:0b:29:fe:a3:83:16:48:
         42:92:23:48:d4:7a:ba:fc:9f:3b:89:85:3c:8d:be:94:2c:fa:
         1e:fe:70:00:9e:29:f6:2f:aa:6a:8a:78:50:5b:60:cc:58:c6:
         49:95:b2:7e:bb:90:24:f8:ad:fe:d3:dc:49:5c:dc:66:70:91:
         d3:80:80:dd:09:fc:69:bc:07:5c:99:f7:9f:f4:bb:41:e5:d9:
         8d:94:a3:64:75:a2:5c:61:cc:e4:5b:fc:b7:3b:1a:30:14:54:
         2f:78:62:d2:bc:ee:23:70:27:64:37:66:0f:db:a7:c8:74:8f:
         d7:58:d2:42:4f:55:af:da:99:82:51:e4:02:54:56:ef:ca:68:
         04:a8:1d:a9:d3:f3:2d:29:30:a9:51:e3:76:3e:d9:d8:86:88:
         6c:34:18:94:89:ba:08:68:9e:01:4e:02:76:a5:92:8a:f8:d9:
         b9:71:f4:24:46:34:61:96:42:b4:38:2f:2b:ed:49:6c:89:c8:
         2d:26:2b:87:07:e4:15:6f:81:55:23:e5:24:80:4b:f4:b6:e9:
         53:b3:f5:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDit7V2uNGPVPUkQWGnpenizYY4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ0MzI4QjU4OEQ3RTZBQjRGMDQ5RDI2RjlFNkZEQkIy
RkI1MTk3MDAeFw0yNDAzMDUxNzUxNDlaFw0yNTAzMDQxNzU2NDlaMDMxMTAvBgNV
BAMTKDY1RjM0NzI2RTE1MDM2NDcyNzM5MDE2RDBBRjQ1QjREOERFMTVCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEb2zZISYeCjqCUxFnF95rpEa
O7+FNt4V25U4UoFPXbFObAfS2lMlRFgztH7+633iE8VJn0sGCc/2tT9kFqh0J0wG
p/O0fzCAO3c3taUCcHqItbaS4GRoDyvtaAbxLTtAowZpxSRvaJEMXrzdsdOi6YU0
IIOTc9MqoetIsXoZHBxpacpfGQMZAocKNTARFqdyKO2fsVdWH0bobtbKsMWd84Ef
VCQh7uEq6SwqzHEsnaSUD71+A8vqb9UR6I2BgqQ6dJXGXHYvMMXxrT0Pdz2wXxi9
0G6bOLp6dMaQ7lr75hr1U/20Wid0N7AMkoGdYisRYYOJmc6Se9WOQGilCzepAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZfNHJuFQNkcnOQFtCvRbTY3hW1AwHwYDVR0j
BBgwFoAUBEMotYjX5qtPBJ0m+eb9uy+1GXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjAwQzBBMzI0NDg0QTBFNTMyMTg5RUU2OEI0MjZBQTIy
MDMzMTQzNUJBNDUwQ0ZGQ0YzODE2QkYxMDMxOTg5LzAvMDQ0MzI4QjU4OEQ3RTZB
QjRGMDQ5RDI2RjlFNkZEQkIyRkI1MTk3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNDQzMjhCNTg4RDdFNkFCNEYw
NDlEMjZGOUU2RkRCQjJGQjUxOTcwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYwMEMwQTMyNDQ4NEEwRTUzMjE4OUVFNjhCNDI2QUEyMjAzMzE0MzVC
QTQ1MENGRkNGMzgxNkJGMTAzMTk4OS8wLzMxMzYzMDJlMzIzMjMzMmUzMjMwMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/L
MA0GCSqGSIb3DQEBCwUAA4IBAQCWJFjcdVsl3GPYhIUCaUngv3DuD97UtoNnzhIU
xD0WfLvQakOT2Al27NKI54TIMgsp/qODFkhCkiNI1Hq6/J87iYU8jb6ULPoe/nAA
nin2L6pqinhQW2DMWMZJlbJ+u5Ak+K3+09xJXNxmcJHTgIDdCfxpvAdcmfef9LtB
5dmNlKNkdaJcYczkW/y3OxowFFQveGLSvO4jcCdkN2YP26fIdI/XWNJCT1Wv2pmC
UeQCVFbvymgEqB2p0/MtKTCpUeN2PtnYhohsNBiUiboIaJ4BTgJ2pZKK+Nm5cfQk
RjRhlkK0OC8r7UlsicgtJiuHB+QVb4FVI+UkgEv0tulTs/X3
-----END CERTIFICATE-----
Generated at Wed May 1 16:08:44 2024 by rpki-client on console-fra.rpki-client.org