Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          AL4g7jeBMe6PUvkDW2vfONWe+pwv7Gf2cH/M/5p0sTg=
Subject key identifier:   14:64:4C:A6:83:62:68:90:EC:8C:4E:CF:A1:CE:70:6E:E7:CF:5E:91
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       1E5A1F420BB16C0881023DFAD4C085ABD1E7AC13
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa
Signing time:             Mon 15 Jul 2024 22:15:00 +0000
ROA not before:           Mon 15 Jul 2024 22:10:00 +0000
ROA not after:            Mon 14 Jul 2025 22:15:00 +0000
asID:                     263758
IP address blocks:        161.238.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:1f:42:0b:b1:6c:08:81:02:3d:fa:d4:c0:85:ab:d1:e7:ac:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: Jul 15 22:10:00 2024 GMT
            Not After : Jul 14 22:15:00 2025 GMT
        Subject: CN=14644CA683626890EC8C4ECFA1CE706EE7CF5E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:6a:66:40:0e:c0:53:11:cf:49:b7:ee:30:
                    dd:68:92:bd:ef:d3:cb:44:0a:27:3e:e4:39:98:57:
                    1c:6c:7b:b4:e5:ea:d4:45:61:b4:48:de:54:f3:a3:
                    96:43:de:0c:8b:db:90:77:7f:0e:cb:fd:12:6a:7d:
                    05:8a:df:a0:1b:7d:cd:08:16:7a:d1:3d:26:c8:b3:
                    76:e8:5d:0a:37:df:55:62:83:0d:95:ff:4d:b2:62:
                    28:32:02:77:1e:00:ca:e7:e8:42:9f:79:78:03:03:
                    43:cf:cb:a9:7a:d1:db:fb:fb:c8:94:2c:18:9f:59:
                    89:c5:f3:c8:12:14:34:aa:5f:0e:cf:69:58:63:5c:
                    5e:35:22:84:87:e8:b3:83:85:0a:51:81:3f:f3:22:
                    98:5d:8f:ad:6f:d7:26:72:b6:f6:9d:47:8c:ab:4a:
                    bc:3d:19:e7:62:35:40:ff:75:63:ab:81:ce:ab:86:
                    84:1d:db:9a:d5:34:16:80:a9:b1:00:1e:70:47:fb:
                    c8:3d:8b:25:ee:5e:84:a1:0d:41:be:e5:0d:33:8c:
                    d6:9a:8b:11:9a:ef:cd:b2:47:46:2b:e0:1d:b2:0c:
                    4d:7c:78:ad:c1:2a:d8:95:01:60:07:aa:6a:6f:64:
                    83:96:7b:4e:27:dd:97:10:62:2e:9b:72:b4:06:41:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:4C:A6:83:62:68:90:EC:8C:4E:CF:A1:CE:70:6E:E7:CF:5E:91
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233352e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:c9:9a:50:be:dc:d4:af:69:00:a9:7c:69:cc:63:1f:c9:
         cf:71:92:fe:2a:62:bc:c8:52:80:c5:c3:1a:b5:d8:ad:c0:37:
         f0:eb:9f:c8:01:36:ad:35:74:85:87:3f:32:63:5b:a1:6f:88:
         45:1d:d9:84:b4:b8:37:17:07:ff:5c:5c:ab:8b:69:7c:42:a3:
         f9:71:d6:21:3c:45:75:34:09:3d:ea:c6:55:69:af:dd:06:86:
         a3:d6:02:5a:a7:df:0c:c4:eb:23:95:ee:ee:7d:d9:10:4b:17:
         71:81:31:b3:5d:90:c0:57:c2:59:19:86:38:de:38:16:9d:b3:
         65:21:de:9a:46:28:fc:49:e7:fe:86:97:86:32:ca:29:76:ce:
         c0:f3:3a:21:04:86:b5:cc:d8:b6:11:5f:a5:8d:04:7b:46:d1:
         27:07:d9:5b:11:24:a0:87:8a:15:21:c4:98:4d:92:12:c8:60:
         82:83:9a:dc:e4:51:42:99:11:dd:fc:73:ce:39:5e:d2:49:e2:
         47:ee:d0:89:56:97:29:dd:d1:82:2c:e9:52:4a:c4:a6:21:e4:
         19:3f:7d:c5:1e:54:08:fb:92:69:6c:c9:b6:a0:31:06:62:8a:
         b4:b7:ba:f0:11:9f:1d:6e:b7:24:85:da:e2:0c:74:ce:76:a6:
         97:29:50:3e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHlofQguxbAiBAj361MCFq9HnrBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGMjIxMEVDNzk4QTRERDQ0RDFBOEE3RjU1RDEzNUNE
MTM0ODNFNTAeFw0yNDA3MTUyMjEwMDBaFw0yNTA3MTQyMjE1MDBaMDMxMTAvBgNV
BAMTKDE0NjQ0Q0E2ODM2MjY4OTBFQzhDNEVDRkExQ0U3MDZFRTdDRjVFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFGpmQA7AUxHPSbfuMN1okr3v
08tECic+5DmYVxxse7Tl6tRFYbRI3lTzo5ZD3gyL25B3fw7L/RJqfQWK36Abfc0I
FnrRPSbIs3boXQo331Vigw2V/02yYigyAnceAMrn6EKfeXgDA0PPy6l60dv7+8iU
LBifWYnF88gSFDSqXw7PaVhjXF41IoSH6LODhQpRgT/zIphdj61v1yZytvadR4yr
Srw9GediNUD/dWOrgc6rhoQd25rVNBaAqbEAHnBH+8g9iyXuXoShDUG+5Q0zjNaa
ixGa782yR0Yr4B2yDE18eK3BKtiVAWAHqmpvZIOWe04n3ZcQYi6bcrQGQe0ZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUFGRMpoNiaJDsjE7Poc5wbufPXpEwHwYDVR0j
BBgwFoAUavIhDseYpN1E0ain9V0TXNE0g+UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODg4RjA2MzVCRkNEODkwRTY5NTM4QzRGNDQ4MDkzM0Iw
NDk0MUIyMUUxRDg1QjE1NkFGMEI1Q0Q2ODVDRkUxLzAvNkFGMjIxMEVDNzk4QTRE
RDQ0RDFBOEE3RjU1RDEzNUNEMTM0ODNFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QUYyMjEwRUM3OThBNERENDRE
MUE4QTdGNTVEMTM1Q0QxMzQ4M0U1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg4OEYwNjM1QkZDRDg5MEU2OTUzOEM0RjQ0ODA5MzNCMDQ5NDFCMjFF
MUQ4NUIxNTZBRjBCNUNENjg1Q0ZFMS8wLzMxMzYzMTJlMzIzMzM4MmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACh
7uswDQYJKoZIhvcNAQELBQADggEBAIphyZpQvtzUr2kAqXxpzGMfyc9xkv4qYrzI
UoDFwxq12K3AN/Drn8gBNq01dIWHPzJjW6FviEUd2YS0uDcXB/9cXKuLaXxCo/lx
1iE8RXU0CT3qxlVpr90GhqPWAlqn3wzE6yOV7u592RBLF3GBMbNdkMBXwlkZhjje
OBads2Uh3ppGKPxJ5/6Gl4Yyyil2zsDzOiEEhrXM2LYRX6WNBHtG0ScH2VsRJKCH
ihUhxJhNkhLIYIKDmtzkUUKZEd38c845XtJJ4kfu0IlWlynd0YIs6VJKxKYh5Bk/
fcUeVAj7kmlsybagMQZiirS3uvARnx1utySF2uIMdM52ppcpUD4=
-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:43 2024 by rpki-client on console-fra.rpki-client.org