Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138372e302f32342d3234203d3e20323635373238.roa
File:                     3136302e3233382e3138372e302f32342d3234203d3e20323635373238.roa (raw, json)
Hash identifier:          RGUuvp+G1ED/haAyfhxyPW3MiNBFYqQsEdYn7PfOIlc=
Subject key identifier:   BB:85:70:0A:2E:BF:57:13:BA:E5:09:D5:59:97:3B:7A:F0:9F:E9:2D
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       06C457BDFA406D531FA0325FE577E6E62CD7816C
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138372e302f32342d3234203d3e20323635373238.roa
Signing time:             Fri 31 May 2024 20:45:01 +0000
ROA not before:           Fri 31 May 2024 20:40:01 +0000
ROA not after:            Fri 30 May 2025 20:45:01 +0000
asID:                     265728
IP address blocks:        160.238.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c4:57:bd:fa:40:6d:53:1f:a0:32:5f:e5:77:e6:e6:2c:d7:81:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May 31 20:40:01 2024 GMT
            Not After : May 30 20:45:01 2025 GMT
        Subject: CN=BB85700A2EBF5713BAE509D559973B7AF09FE92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:5a:28:da:71:45:0f:05:73:ac:3e:d5:2d:
                    30:74:ec:6b:d8:00:c4:f4:23:de:0d:20:89:22:43:
                    01:34:3c:99:c1:48:02:27:03:2b:c5:06:f2:ca:80:
                    db:dd:d0:c1:16:84:15:8f:8a:ef:2c:b0:28:b6:d7:
                    0d:8b:94:13:fd:e5:7d:57:d6:0b:97:1f:8d:4a:e5:
                    51:52:f7:88:d1:41:79:22:6b:de:00:f4:98:8b:fc:
                    2f:97:24:25:07:8f:6b:dd:07:b9:47:bc:02:43:5c:
                    f4:f2:33:4f:93:fb:cd:d1:51:97:d9:ae:a0:05:8d:
                    91:80:d4:72:3b:b0:04:1e:66:a5:a9:02:ee:43:9e:
                    7b:1c:25:bc:e8:37:e2:81:2c:02:1d:4b:fc:d4:61:
                    17:73:82:d8:fc:2e:07:0e:b0:19:2b:55:2a:70:c5:
                    5b:12:bc:ea:ec:d2:c0:e1:2c:2b:88:3e:08:dc:60:
                    81:23:b6:c2:f0:56:83:f9:5a:fe:ca:9d:6c:5a:a8:
                    df:46:04:a8:ad:de:d3:06:4c:e9:86:80:fa:6e:4b:
                    e5:10:94:0a:95:df:5e:67:46:bb:db:c3:c6:ae:ce:
                    6a:a2:6b:b5:0e:ac:35:b7:96:ea:fb:7a:41:4f:c1:
                    0d:78:80:23:8d:18:21:68:85:70:d9:25:85:b9:7b:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:70:0A:2E:BF:57:13:BA:E5:09:D5:59:97:3B:7A:F0:9F:E9:2D
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138372e302f32342d3234203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:15:03:3b:16:1a:e7:ec:68:0e:3d:66:56:dd:d2:18:f0:b5:
         69:c1:29:c5:78:a5:81:c2:48:9f:f9:f4:55:86:f2:49:17:ef:
         cb:0c:df:4c:a1:75:82:00:da:cd:2c:b2:50:fd:38:26:65:57:
         95:37:c4:7b:f3:ad:20:18:ea:0e:e2:8b:c2:af:36:39:43:00:
         e7:e4:56:c9:a1:f1:76:9b:ac:d9:6e:7e:0c:7a:6c:a3:b9:98:
         fe:2f:c4:d9:c0:2c:e1:53:6d:16:97:24:35:d9:c1:48:36:89:
         d4:51:c0:60:2e:32:36:cf:26:64:fd:b6:81:a6:68:eb:65:0f:
         f4:dc:2e:ad:6c:ec:53:6d:85:b4:cb:f3:02:e2:24:75:6e:ce:
         7d:cc:27:9f:3c:2d:41:f5:23:ce:9c:f6:84:38:1b:bd:e5:ad:
         65:b9:9c:1a:08:50:e3:46:d2:5f:2e:19:4e:27:f5:9b:41:c3:
         85:ac:10:92:6f:65:1e:3a:12:24:4a:90:1d:2c:b8:a6:e3:eb:
         cf:06:fa:b7:e3:1d:4f:a0:96:a4:21:3a:4d:cd:e8:9c:69:7a:
         83:fb:f3:89:82:a2:5d:e9:ad:90:26:9a:c5:0f:da:2b:36:b8:
         90:09:46:27:f9:b8:72:b4:ea:ab:16:e2:bc:dc:65:b4:8c:c6:
         4b:4f:75:d9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBsRXvfpAbVMfoDJf5Xfm5izXgWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFMUFCRUMwMTBBQkI5QUY0NjNCRjIyQjE2QzU2MUI1
QzJDNDQ0NDAeFw0yNDA1MzEyMDQwMDFaFw0yNTA1MzAyMDQ1MDFaMDMxMTAvBgNV
BAMTKEJCODU3MDBBMkVCRjU3MTNCQUU1MDlENTU5OTczQjdBRjA5RkU5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6Foo2nFFDwVzrD7VLTB07GvY
AMT0I94NIIkiQwE0PJnBSAInAyvFBvLKgNvd0MEWhBWPiu8ssCi21w2LlBP95X1X
1guXH41K5VFS94jRQXkia94A9JiL/C+XJCUHj2vdB7lHvAJDXPTyM0+T+83RUZfZ
rqAFjZGA1HI7sAQeZqWpAu5DnnscJbzoN+KBLAIdS/zUYRdzgtj8LgcOsBkrVSpw
xVsSvOrs0sDhLCuIPgjcYIEjtsLwVoP5Wv7KnWxaqN9GBKit3tMGTOmGgPpuS+UQ
lAqV315nRrvbw8auzmqia7UOrDW3lur7ekFPwQ14gCONGCFohXDZJYW5e5ORAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUu4VwCi6/VxO65QnVWZc7evCf6S0wHwYDVR0j
BBgwFoAUt+Gr7AEKu5r0Y78isWxWG1wsREQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTUxMUQ2ODFFNzJGOUQ4MTRGN0JEOEZDMzlEMUZFRDdF
QTNGOTRBQjcwNEY2ODhDOEMzOEYxQTUxNzMyQkRDLzAvQjdFMUFCRUMwMTBBQkI5
QUY0NjNCRjIyQjE2QzU2MUI1QzJDNDQ0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0UxQUJFQzAxMEFCQjlBRjQ2
M0JGMjJCMTZDNTYxQjVDMkM0NDQ0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1MTFENjgxRTcyRjlEODE0RjdCRDhGQzM5RDFGRUQ3RUEzRjk0QUI3
MDRGNjg4QzhDMzhGMUE1MTczMkJEQy8wLzMxMzYzMDJlMzIzMzM4MmUzMTM4Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzMyMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg
7rswDQYJKoZIhvcNAQELBQADggEBADkVAzsWGufsaA49Zlbd0hjwtWnBKcV4pYHC
SJ/59FWG8kkX78sM30yhdYIA2s0sslD9OCZlV5U3xHvzrSAY6g7ii8KvNjlDAOfk
Vsmh8XabrNlufgx6bKO5mP4vxNnALOFTbRaXJDXZwUg2idRRwGAuMjbPJmT9toGm
aOtlD/TcLq1s7FNthbTL8wLiJHVuzn3MJ588LUH1I86c9oQ4G73lrWW5nBoIUONG
0l8uGU4n9ZtBw4WsEJJvZR46EiRKkB0suKbj688G+rfjHU+glqQhOk3N6JxpeoP7
84mCol3prZAmmsUP2is2uJAJRif5uHK06qsW4rzcZbSMxktPddk=
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org