Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
File:                     3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa (raw, json)
Hash identifier:          dz64I5eyOwb11iNyLrUEsPzX063Kx3rAf3ryqeDznmQ=
Subject key identifier:   05:B6:28:B8:16:50:AA:A2:2F:59:98:02:D4:59:AF:D1:17:1F:8E:09
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       010F01058CBD0A48B7D4D0530D73295B0BDB1DDF
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:10 +0000
ROA not before:           Tue 05 Mar 2024 17:53:10 +0000
ROA not after:            Tue 04 Mar 2025 17:58:10 +0000
asID:                     28114
IP address blocks:        168.195.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0f:01:05:8c:bd:0a:48:b7:d4:d0:53:0d:73:29:5b:0b:db:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:10 2024 GMT
            Not After : Mar  4 17:58:10 2025 GMT
        Subject: CN=05B628B81650AAA22F599802D459AFD1171F8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:26:aa:c6:0b:f6:bb:7d:b1:31:35:ed:99:
                    65:8d:6d:27:3f:a6:73:54:1c:93:55:db:4c:69:a7:
                    9b:7a:68:f9:53:a2:82:7f:c3:67:5a:a3:66:71:3b:
                    70:61:8c:08:55:a8:e2:5d:9e:5d:12:00:41:9b:e6:
                    c2:b3:d7:63:67:45:d2:ce:67:52:38:15:ef:41:37:
                    f1:0f:50:f2:32:21:1a:cf:16:e1:f9:d2:ee:6d:a9:
                    16:4b:96:ec:ec:61:ce:f2:cf:fc:69:10:90:48:fe:
                    eb:5c:6c:89:6a:f0:46:b3:bc:06:63:45:a0:7d:25:
                    62:d2:24:a6:2f:1b:14:00:15:4c:7b:86:53:7b:cb:
                    fe:83:c7:f6:01:c9:0e:86:53:fa:da:ff:32:e1:cd:
                    58:6d:cb:b4:c0:ba:bb:f6:01:81:e0:da:7e:0f:6c:
                    02:40:39:93:89:e4:74:6b:b1:39:d4:60:49:24:55:
                    5d:c5:63:f1:79:5e:6c:56:7c:18:ad:eb:d4:38:09:
                    71:fe:81:d4:5a:ef:a2:2f:4b:ae:5a:a8:e4:59:ad:
                    5f:a7:54:8f:fe:aa:df:0f:8c:1f:02:57:75:f8:47:
                    2b:5d:ec:76:87:c0:53:30:bb:52:ed:78:bc:65:3c:
                    54:b2:54:06:f8:48:d5:b9:45:9a:ac:fe:0e:e9:90:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:28:B8:16:50:AA:A2:2F:59:98:02:D4:59:AF:D1:17:1F:8E:09
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3232203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:79:e1:62:8a:dd:73:ab:70:51:1a:a9:11:c6:6a:b2:10:
         61:fa:66:13:32:b2:95:71:83:62:13:35:a2:68:2b:6b:dd:1f:
         57:10:79:1a:6c:7d:c4:81:82:bc:0b:1b:0a:37:8d:c9:66:d5:
         b7:52:2c:64:e6:3e:f0:34:a9:e1:47:ee:e0:07:c7:d3:fd:79:
         b0:4f:7e:74:a1:f1:01:b1:cb:92:e5:21:27:2a:03:f5:86:36:
         f7:78:86:5e:f7:29:ff:db:68:29:55:a5:73:96:26:5c:ff:6e:
         7d:53:2a:77:52:e3:aa:2f:c0:cc:e1:db:5e:de:1f:ba:fa:4f:
         ce:de:b7:82:13:07:d4:6d:d6:18:8e:80:96:11:fe:40:e8:37:
         57:c3:93:0a:22:44:e6:ec:9c:6c:c8:9f:90:ea:d7:9e:d3:48:
         9f:0b:95:00:1c:5a:f6:94:33:c4:7c:98:8c:0d:9b:02:d8:7b:
         39:33:95:c5:83:49:48:af:2f:ba:0f:09:8d:0f:3e:6d:7b:98:
         ec:f9:f4:0d:61:07:c5:cc:ba:9e:43:9a:23:5b:1e:20:68:60:
         48:7f:0d:1a:00:5b:0a:83:79:3e:f1:dd:d7:63:28:49:83:8b:
         12:cd:c0:7e:bd:27:6b:4d:4e:06:ce:b3:72:c5:c5:bf:19:05:
         cc:6a:12:bd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAQ8BBYy9Cki31NBTDXMpWwvbHd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTBaFw0yNTAzMDQxNzU4MTBaMDMxMTAvBgNV
BAMTKDA1QjYyOEI4MTY1MEFBQTIyRjU5OTgwMkQ0NTlBRkQxMTcxRjhFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLCaqxgv2u32xMTXtmWWNbSc/
pnNUHJNV20xpp5t6aPlTooJ/w2dao2ZxO3BhjAhVqOJdnl0SAEGb5sKz12NnRdLO
Z1I4Fe9BN/EPUPIyIRrPFuH50u5tqRZLluzsYc7yz/xpEJBI/utcbIlq8EazvAZj
RaB9JWLSJKYvGxQAFUx7hlN7y/6Dx/YByQ6GU/ra/zLhzVhty7TAurv2AYHg2n4P
bAJAOZOJ5HRrsTnUYEkkVV3FY/F5XmxWfBit69Q4CXH+gdRa76IvS65aqORZrV+n
VI/+qt8PjB8CV3X4Rytd7HaHwFMwu1LteLxlPFSyVAb4SNW5RZqs/g7pkJXRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBbYouBZQqqIvWZgC1Fmv0RcfjgkwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzYzODJlMzEzOTM1MmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqMNs
MA0GCSqGSIb3DQEBCwUAA4IBAQBVPHnhYordc6twURqpEcZqshBh+mYTMrKVcYNi
EzWiaCtr3R9XEHkabH3EgYK8CxsKN43JZtW3Uixk5j7wNKnhR+7gB8fT/XmwT350
ofEBscuS5SEnKgP1hjb3eIZe9yn/22gpVaVzliZc/259Uyp3UuOqL8DM4dte3h+6
+k/O3reCEwfUbdYYjoCWEf5A6DdXw5MKIkTm7JxsyJ+Q6tee00ifC5UAHFr2lDPE
fJiMDZsC2Hs5M5XFg0lIry+6DwmNDz5te5js+fQNYQfFzLqeQ5ojWx4gaGBIfw0a
AFsKg3k+8d3XYyhJg4sSzcB+vSdrTU4GzrNyxcW/GQXMahK9
-----END CERTIFICATE-----
Generated at Thu May 2 04:19:23 2024 by rpki-client on console-ams.rpki-client.org