Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
File:                     3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa (raw, json)
Hash identifier:          Wvrbjo6UaZH47zV2hA/JxjvOK9Lf0hLW0etHAyZgts4=
Subject key identifier:   9A:A6:7F:3D:8D:3B:5E:4B:0B:D1:77:F6:DB:22:CC:48:20:47:C8:F2
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6FF165B98709B08A9E7C359914AA2993B66C132A
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     28000
IP address blocks:        168.121.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f1:65:b9:87:09:b0:8a:9e:7c:35:99:14:aa:29:93:b6:6c:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=9AA67F3D8D3B5E4B0BD177F6DB22CC482047C8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:f4:20:4a:3a:ce:5e:4e:94:e4:fa:0c:d2:
                    93:a2:b3:04:24:ef:82:93:1e:52:be:6d:48:d6:dd:
                    a1:46:27:32:b9:0e:47:f2:4f:00:c9:37:46:11:c1:
                    13:20:2a:fe:3b:3e:9d:64:e4:17:ac:3c:95:21:ee:
                    3c:ff:32:f8:cf:61:3f:fc:6b:73:78:95:71:8a:a8:
                    ce:20:ed:62:cb:6b:a5:16:2d:c1:c4:1a:db:0b:65:
                    89:b3:51:4b:5e:b7:6d:11:b8:0e:41:92:e7:8a:89:
                    cd:4b:9f:42:33:17:8a:60:82:18:cf:96:e8:69:ad:
                    cf:73:62:0f:56:df:a0:10:59:e9:78:2e:9a:d0:d0:
                    5e:a3:0c:01:73:1f:cd:e5:bd:1a:5a:5e:33:b2:a7:
                    06:69:ff:a2:7a:91:6b:9a:4a:b2:ef:fc:f6:ec:8b:
                    40:b2:b6:59:40:50:f8:8f:72:f4:0e:35:63:86:67:
                    81:f1:40:9c:3f:27:74:5b:66:2d:43:41:93:d1:f7:
                    28:b7:4b:b7:8a:5d:b0:1b:e8:90:bd:fb:17:71:c5:
                    ea:32:a9:fd:ee:cf:bd:8d:75:66:ab:e8:19:fe:30:
                    c4:9e:92:9d:21:a2:90:10:16:d2:c5:08:fe:ca:dd:
                    80:f9:21:b4:44:21:2e:23:aa:c0:e2:4f:f8:24:e8:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:7F:3D:8D:3B:5E:4B:0B:D1:77:F6:DB:22:CC:48:20:47:C8:F2
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:ad:ef:22:3f:ad:20:b5:4d:64:d2:eb:a4:d6:b7:0b:67:
         86:5e:2c:e8:ad:95:a3:6d:94:42:26:09:1f:9b:39:fa:d7:f9:
         ec:6d:e0:91:0f:02:a4:c0:93:74:45:4f:d5:6a:18:46:bf:2d:
         fe:f6:a5:a9:0b:15:88:5b:da:8a:b6:1f:81:4f:d8:2f:2a:3d:
         c2:0f:ce:d6:91:41:24:26:85:64:84:48:46:63:7e:95:e8:7e:
         af:d7:d0:4c:d2:92:54:fe:ea:ad:83:68:54:b5:30:37:d0:2d:
         ce:a8:72:ff:33:d2:e1:85:78:d7:b1:22:b5:a0:9c:c9:9c:e6:
         69:64:fc:1e:e4:92:cb:66:b2:df:9b:f9:3e:d2:d8:8e:26:83:
         7c:07:7c:b9:22:c1:78:67:45:ff:9b:b9:12:2b:ea:d0:fe:8a:
         fe:96:2f:66:d3:65:5f:6b:29:da:e9:fd:0d:a1:45:f4:5b:47:
         7d:0b:16:0a:37:b3:47:1b:9b:d1:c1:bc:1f:17:7f:43:0c:89:
         5a:48:4d:55:94:54:59:24:41:8e:7f:01:ab:d5:d6:e3:42:ba:
         02:bb:3d:ed:ce:42:be:c1:09:35:93:49:97:44:01:d0:ea:95:
         51:8d:6c:1f:a7:dd:2b:8d:d1:d6:47:b7:13:17:31:ee:16:36:
         a7:7a:0d:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb/FluYcJsIqefDWZFKopk7ZsEyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTBaFw0yNTAzMDQxNzM5NTBaMDMxMTAvBgNV
BAMTKDlBQTY3RjNEOEQzQjVFNEIwQkQxNzdGNkRCMjJDQzQ4MjA0N0M4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOvQgSjrOXk6U5PoM0pOiswQk
74KTHlK+bUjW3aFGJzK5DkfyTwDJN0YRwRMgKv47Pp1k5BesPJUh7jz/MvjPYT/8
a3N4lXGKqM4g7WLLa6UWLcHEGtsLZYmzUUtet20RuA5BkueKic1Ln0IzF4pgghjP
luhprc9zYg9W36AQWel4LprQ0F6jDAFzH83lvRpaXjOypwZp/6J6kWuaSrLv/Pbs
i0CytllAUPiPcvQONWOGZ4HxQJw/J3RbZi1DQZPR9yi3S7eKXbAb6JC9+xdxxeoy
qf3uz72NdWar6Bn+MMSekp0hopAQFtLFCP7K3YD5IbREIS4jqsDiT/gk6L9XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmqZ/PY07XksL0Xf22yLMSCBHyPIwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMxMzYzODJlMzEzMjMxMmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzAzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqHm4
MA0GCSqGSIb3DQEBCwUAA4IBAQCry63vIj+tILVNZNLrpNa3C2eGXizorZWjbZRC
Jgkfmzn61/nsbeCRDwKkwJN0RU/VahhGvy3+9qWpCxWIW9qKth+BT9gvKj3CD87W
kUEkJoVkhEhGY36V6H6v19BM0pJU/uqtg2hUtTA30C3OqHL/M9LhhXjXsSK1oJzJ
nOZpZPwe5JLLZrLfm/k+0tiOJoN8B3y5IsF4Z0X/m7kSK+rQ/or+li9m02Vfayna
6f0NoUX0W0d9CxYKN7NHG5vRwbwfF39DDIlaSE1VlFRZJEGOfwGr1dbjQroCuz3t
zkK+wQk1k0mXRAHQ6pVRjWwfp90rjdHWR7cTFzHuFjaneg2R
-----END CERTIFICATE-----
Generated at Fri May 10 03:52:20 2024 by rpki-client on console-ams.rpki-client.org