Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa
File:                     3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa (raw, json)
Hash identifier:          xazapyenWW6eB0mMTnkNzAXRH3EX2ICBdN+dRSWh6TY=
Subject key identifier:   46:CD:82:2B:65:45:26:33:63:68:2C:ED:FB:3F:BF:C5:0D:02:26:DC
Certificate issuer:       /CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
Certificate serial:       4C8D0AC7C60BEC739843FEB823F57FCFBF5BF83F
Authority key identifier: 15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa
Signing time:             Tue 05 Mar 2024 18:07:28 +0000
ROA not before:           Tue 05 Mar 2024 18:02:28 +0000
ROA not after:            Tue 04 Mar 2025 18:07:28 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8d:0a:c7:c6:0b:ec:73:98:43:fe:b8:23:f5:7f:cf:bf:5b:f8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
        Validity
            Not Before: Mar  5 18:02:28 2024 GMT
            Not After : Mar  4 18:07:28 2025 GMT
        Subject: CN=46CD822B6545263363682CEDFB3FBFC50D0226DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:c2:f5:14:e3:64:9e:fe:e1:a1:a1:cd:71:
                    a1:74:cc:cf:35:f0:c0:be:31:c0:fd:c5:79:e0:0f:
                    82:b5:cf:88:aa:cd:ad:1a:a8:57:b2:f0:43:5f:4f:
                    10:40:c7:38:55:12:26:4c:56:40:38:0d:dd:05:c1:
                    04:5f:a7:a8:38:af:5e:bb:12:0e:d9:a7:78:e4:96:
                    64:70:b6:c6:8f:4f:9e:08:98:53:97:7b:5a:c8:24:
                    98:7d:19:db:ff:be:1b:eb:8e:18:eb:b8:cc:1e:a1:
                    7f:db:a3:68:5c:92:24:4e:a7:09:a9:ba:b7:73:7d:
                    87:84:7b:fb:53:42:00:da:dd:e7:c5:81:4e:65:5b:
                    03:4c:c2:01:d7:5a:84:67:15:10:dc:a4:35:14:1d:
                    25:d6:b0:1c:f6:69:22:0c:73:3b:e7:b8:ea:68:ea:
                    97:c7:fd:81:dd:f1:77:f6:42:ee:45:d6:c6:c9:e1:
                    f6:b1:09:85:21:58:88:04:6d:18:e8:04:59:4a:5b:
                    42:e4:39:73:c2:f9:f8:26:f8:8c:d2:65:24:88:8c:
                    95:dc:91:0d:38:43:35:f3:1c:00:d6:ad:47:d9:36:
                    7d:80:d7:88:d9:ec:37:68:3f:01:a2:71:55:96:26:
                    04:79:cc:a1:ba:e2:72:cb:4f:b0:ea:e2:18:29:88:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:82:2B:65:45:26:33:63:68:2C:ED:FB:3F:BF:C5:0D:02:26:DC
            X509v3 Authority Key Identifier:
                keyid:15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:44:13:74:ca:e4:44:1e:3a:07:7c:46:73:6b:7d:2a:0d:c1:
         39:a4:07:ed:d9:64:73:80:a5:e0:d9:ed:33:c5:a7:48:2d:b6:
         cd:5f:0b:67:10:a9:05:74:40:33:64:d8:f6:01:63:1a:4d:91:
         70:9f:4f:b5:ab:10:11:54:aa:56:8f:02:29:d1:21:e2:36:9b:
         ca:c7:27:04:05:30:46:a9:23:a9:72:bf:cd:3f:9f:05:cd:4d:
         cb:8e:2c:43:63:7a:83:28:55:01:7d:6c:f9:6f:8c:bf:e1:1a:
         57:ca:76:ef:a0:58:e8:bd:78:0f:ca:fe:03:3c:e6:8d:fb:dd:
         ef:38:3f:ef:d5:3e:09:fa:6c:47:3a:a9:b3:cd:f4:f9:ee:7d:
         a0:08:aa:9f:47:8b:76:0b:e9:f7:e9:03:f8:82:b2:8e:78:4e:
         54:73:75:69:a0:f3:4c:cf:21:7d:b2:e9:67:76:c7:1f:77:78:
         c7:87:0a:33:45:bc:61:29:69:45:b5:4a:c7:3b:09:81:ec:ae:
         fc:d7:15:2a:d7:58:22:f2:ba:e5:73:83:04:57:d4:45:79:3d:
         39:3d:15:a3:ff:f5:39:05:42:76:87:c0:d6:42:4c:a7:47:d6:
         64:69:7e:88:46:32:b2:c4:ee:23:e3:18:40:62:3c:94:5b:a0:
         51:fd:3a:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTI0Kx8YL7HOYQ/64I/V/z79b+D8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBNTg4QkYxRDY3RTVEQ0IzMUYyNDRFRTI1MkYyRUM5
QjlBRTc1RjAeFw0yNDAzMDUxODAyMjhaFw0yNTAzMDQxODA3MjhaMDMxMTAvBgNV
BAMTKDQ2Q0Q4MjJCNjU0NTI2MzM2MzY4MkNFREZCM0ZCRkM1MEQwMjI2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzsL1FONknv7hoaHNcaF0zM81
8MC+McD9xXngD4K1z4iqza0aqFey8ENfTxBAxzhVEiZMVkA4Dd0FwQRfp6g4r167
Eg7Zp3jklmRwtsaPT54ImFOXe1rIJJh9Gdv/vhvrjhjruMweoX/bo2hckiROpwmp
urdzfYeEe/tTQgDa3efFgU5lWwNMwgHXWoRnFRDcpDUUHSXWsBz2aSIMczvnuOpo
6pfH/YHd8Xf2Qu5F1sbJ4faxCYUhWIgEbRjoBFlKW0LkOXPC+fgm+IzSZSSIjJXc
kQ04QzXzHADWrUfZNn2A14jZ7DdoPwGicVWWJgR5zKG64nLLT7Dq4hgpiEPXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURs2CK2VFJjNjaCzt+z+/xQ0CJtwwHwYDVR0j
BBgwFoAUFaWIvx1n5dyzHyRO4lLy7Jua518wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMzN0JFNzdBQTAyRDFGOEI5QkY1NzIwRDUwMDBFOEVE
QjVBRkVGQjUxNTE2RUUwNjgwQzdFOTAwM0I1NTAxLzAvMTVBNTg4QkYxRDY3RTVE
Q0IzMUYyNDRFRTI1MkYyRUM5QjlBRTc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUE1ODhCRjFENjdFNURDQjMx
RjI0NEVFMjUyRjJFQzlCOUFFNzVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMzdCRTc3QUEwMkQxRjhCOUJGNTcyMEQ1MDAwRThFREI1QUZFRkI1
MTUxNkVFMDY4MEM3RTkwMDNCNTUwMS8wLzMxMzYzODJlMzkzMDJlMzIzNTMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFr8
MA0GCSqGSIb3DQEBCwUAA4IBAQAHRBN0yuREHjoHfEZza30qDcE5pAft2WRzgKXg
2e0zxadILbbNXwtnEKkFdEAzZNj2AWMaTZFwn0+1qxARVKpWjwIp0SHiNpvKxycE
BTBGqSOpcr/NP58FzU3LjixDY3qDKFUBfWz5b4y/4RpXynbvoFjovXgPyv4DPOaN
+93vOD/v1T4J+mxHOqmzzfT57n2gCKqfR4t2C+n36QP4grKOeE5Uc3VpoPNMzyF9
sulndscfd3jHhwozRbxhKWlFtUrHOwmB7K781xUq11gi8rrlc4MEV9RFeT05PRWj
//U5BUJ2h8DWQkynR9ZkaX6IRjKyxO4j4xhAYjyUW6BR/TpG
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org