Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3233203d3e203630343538.roa
File:                     3138312e3137342e3138342e302f32312d3233203d3e203630343538.roa (raw, json)
Hash identifier:          XJ1KZ0WxFPNyqSgBq7ym7iGm9Jzj8QxK5o3FUtQROUY=
Subject key identifier:   FD:3E:3C:D2:5A:C2:9C:0F:F5:CE:29:B2:A9:71:2C:89:38:D1:6C:66
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       48135E6E115DFABEA5941546CE4FCA290ABDE8F0
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3233203d3e203630343538.roa
Signing time:             Tue 05 Mar 2024 18:01:30 +0000
ROA not before:           Tue 05 Mar 2024 17:56:30 +0000
ROA not after:            Tue 04 Mar 2025 18:01:30 +0000
asID:                     60458
IP address blocks:        181.174.184.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:13:5e:6e:11:5d:fa:be:a5:94:15:46:ce:4f:ca:29:0a:bd:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Mar  5 17:56:30 2024 GMT
            Not After : Mar  4 18:01:30 2025 GMT
        Subject: CN=FD3E3CD25AC29C0FF5CE29B2A9712C8938D16C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:1e:2f:d0:2c:0e:41:98:d1:b7:bf:01:c6:
                    70:08:43:f5:7d:e5:eb:3b:43:51:b3:d2:99:1f:c3:
                    71:46:e9:f0:99:7e:03:ad:56:4b:ec:91:fa:64:c3:
                    74:77:a8:3d:04:60:03:f1:b8:14:3e:9c:66:4c:d5:
                    dd:4e:66:10:ca:c7:bb:29:51:03:33:c2:a4:12:8d:
                    b2:de:70:c2:08:37:fa:d8:0f:3f:c9:9a:fc:7c:0b:
                    96:dc:82:db:78:16:f1:5d:6c:e0:fe:81:c2:a8:38:
                    e6:25:23:56:33:e0:f3:25:7c:b0:c6:de:e0:27:be:
                    ff:ea:92:76:fc:5e:fe:f3:3b:98:74:7e:69:9f:7e:
                    10:62:b5:fc:b3:e2:5d:c1:69:89:ca:a0:1c:1e:98:
                    3b:45:7f:da:24:2d:a4:e3:b9:92:33:38:ba:cf:a0:
                    45:2b:c0:98:dc:c1:ee:e9:92:bf:ef:8a:31:5f:dd:
                    a4:19:2b:bc:03:5e:87:7c:1a:e4:03:e7:57:4e:8d:
                    6f:eb:34:7e:d7:43:64:b2:75:94:da:e7:09:29:fa:
                    f7:6a:9c:99:b2:42:be:34:9e:d6:c3:59:2e:d5:9c:
                    2c:48:51:d1:19:01:31:13:59:dc:4f:80:48:2c:51:
                    1c:e5:22:aa:ee:b7:d2:ab:2e:f6:3d:35:ea:f9:f5:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3E:3C:D2:5A:C2:9C:0F:F5:CE:29:B2:A9:71:2C:89:38:D1:6C:66
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3233203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:06:ba:0f:27:04:b3:94:ea:bb:97:c0:53:7e:b9:90:08:
         f8:dc:54:7f:08:88:3a:30:e5:57:b0:6b:33:50:ac:d0:de:cc:
         15:4d:25:cc:d0:35:69:1b:18:ef:f6:dd:2e:90:9d:03:3e:c2:
         4b:30:6d:3d:50:d2:a8:18:ff:c7:ce:07:3f:cb:5f:5e:37:4d:
         a4:3f:bb:9c:8d:c0:9e:a2:e4:9d:85:79:7c:8b:7e:1f:4c:a6:
         21:dc:5f:a5:b6:25:ca:7d:50:9f:cc:1e:4c:3a:8e:5a:26:bb:
         72:cf:5d:59:79:43:7e:7f:7a:ec:35:c6:d2:a7:90:69:5f:17:
         fa:b3:d1:9b:77:85:95:01:49:6c:dd:b1:90:72:f9:2e:c0:2f:
         f7:83:46:2d:d0:8a:f1:7e:04:74:e5:3d:75:ff:19:cc:37:d4:
         fe:87:ed:e4:03:bf:45:13:ae:e2:78:b4:4c:1c:62:6e:00:8e:
         24:da:90:2f:2b:9f:21:e9:df:40:fa:30:04:4e:6c:35:40:ff:
         dc:4e:9f:62:2c:f8:d7:f6:be:05:b9:73:60:c3:84:88:fd:e5:
         47:fa:03:23:1d:cf:95:cb:93:a1:0d:47:8d:8d:da:f9:1e:75:
         66:b6:92:7a:c0:a9:80:e7:e8:8b:c9:98:e3:f4:92:0e:f9:1e:
         e8:67:96:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSBNebhFd+r6llBVGzk/KKQq96PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY1RjlBMkNGNDQ0QTlDNDk1NTMyRDlCQjUyOTU0NTdF
QTUzRDU1NjAeFw0yNDAzMDUxNzU2MzBaFw0yNTAzMDQxODAxMzBaMDMxMTAvBgNV
BAMTKEZEM0UzQ0QyNUFDMjlDMEZGNUNFMjlCMkE5NzEyQzg5MzhEMTZDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyx4v0CwOQZjRt78BxnAIQ/V9
5es7Q1Gz0pkfw3FG6fCZfgOtVkvskfpkw3R3qD0EYAPxuBQ+nGZM1d1OZhDKx7sp
UQMzwqQSjbLecMIIN/rYDz/Jmvx8C5bcgtt4FvFdbOD+gcKoOOYlI1Yz4PMlfLDG
3uAnvv/qknb8Xv7zO5h0fmmffhBitfyz4l3BaYnKoBwemDtFf9okLaTjuZIzOLrP
oEUrwJjcwe7pkr/vijFf3aQZK7wDXod8GuQD51dOjW/rNH7XQ2SydZTa5wkp+vdq
nJmyQr40ntbDWS7VnCxIUdEZATETWdxPgEgsURzlIqrut9KrLvY9Ner59RjlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/T480lrCnA/1zimyqXEsiTjRbGYwHwYDVR0j
BBgwFoAUD1+aLPREqcSVUy2btSlUV+pT1VYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0U2MTdFMzVBMjJDQjNFMzAyRjMzRjdFRDlDQ0VERTBC
QzIyNTc4MjA2QzhFNjdFOTMwMjk2NTJGNTFBN0RDLzAvMEY1RjlBMkNGNDQ0QTlD
NDk1NTMyRDlCQjUyOTU0NTdFQTUzRDU1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRjVGOUEyQ0Y0NDRBOUM0OTU1
MzJEOUJCNTI5NTQ1N0VBNTNENTU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNFNjE3RTM1QTIyQ0IzRTMwMkYzM0Y3RUQ5Q0NFREUwQkMyMjU3ODIw
NkM4RTY3RTkzMDI5NjUyRjUxQTdEQy8wLzMxMzgzMTJlMzEzNzM0MmUzMTM4MzQy
ZTMwMmYzMjMxMmQzMjMzMjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDta64
MA0GCSqGSIb3DQEBCwUAA4IBAQB23Aa6DycEs5Tqu5fAU365kAj43FR/CIg6MOVX
sGszUKzQ3swVTSXM0DVpGxjv9t0ukJ0DPsJLMG09UNKoGP/Hzgc/y19eN02kP7uc
jcCeouSdhXl8i34fTKYh3F+ltiXKfVCfzB5MOo5aJrtyz11ZeUN+f3rsNcbSp5Bp
Xxf6s9Gbd4WVAUls3bGQcvkuwC/3g0Yt0IrxfgR05T11/xnMN9T+h+3kA79FE67i
eLRMHGJuAI4k2pAvK58h6d9A+jAETmw1QP/cTp9iLPjX9r4FuXNgw4SI/eVH+gMj
Hc+Vy5OhDUeNjdr5HnVmtpJ6wKmA5+iLyZjj9JIO+R7oZ5bI
-----END CERTIFICATE-----
Generated at Sun May 5 09:37:01 2024 by rpki-client on console-ams.rpki-client.org