Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3137312e302f32342d3234203d3e20323632313435.roa
File:                     3134332e3230382e3137312e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          BBjqehhKmPcJNZEvDCWFPX7ENTOmHfdmt1wEitAKEgo=
Subject key identifier:   5F:8B:08:88:0A:AB:F8:5B:2D:DE:B4:0A:F3:86:B1:56:DD:CB:B2:3F
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       5DAC795A0C6692C68D8FBDD105F3933BBBB796A2
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3137312e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     262145
IP address blocks:        143.208.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:79:5a:0c:66:92:c6:8d:8f:bd:d1:05:f3:93:3b:bb:b7:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=5F8B08880AABF85B2DDEB40AF386B156DDCBB23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:13:91:20:00:a5:d1:ca:d5:42:06:42:ec:
                    4c:60:e2:6a:6f:f6:de:83:d6:80:ef:df:43:69:c4:
                    bc:c2:51:ea:cc:40:d0:e1:94:bf:37:c0:c4:ed:10:
                    6e:c6:b8:30:01:41:59:0c:43:3b:f7:f5:99:ae:e5:
                    b7:62:ef:df:80:73:17:ed:80:08:9f:06:45:46:1c:
                    b2:93:94:56:62:02:7b:d9:a6:31:f9:0e:97:a3:06:
                    0c:f4:d6:d7:bc:e3:5d:4c:c9:b5:fd:19:d5:cf:83:
                    54:cc:14:2d:2b:6f:16:aa:15:05:64:a2:83:60:16:
                    38:40:69:d6:07:ad:a0:d3:05:18:65:3d:f0:6b:52:
                    3d:55:3b:d1:49:a1:0a:9d:93:e4:5c:3f:26:d3:54:
                    45:df:d7:1e:29:21:83:38:7a:c4:26:d7:54:ba:0d:
                    f5:65:3a:6e:f7:11:7b:e9:20:d2:a1:12:0d:7a:74:
                    6c:fe:c9:f6:13:57:3d:9f:a7:01:4a:28:46:c2:c2:
                    13:f0:4e:52:96:4d:f7:1d:46:61:59:3e:dc:f7:91:
                    1d:f8:80:8f:0e:08:19:3e:97:36:94:e1:62:d7:db:
                    c1:d1:cc:e4:32:a4:7b:07:39:86:9b:0e:89:54:8c:
                    a0:b8:7c:6c:43:97:28:95:4a:43:82:78:03:d7:35:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:08:88:0A:AB:F8:5B:2D:DE:B4:0A:F3:86:B1:56:DD:CB:B2:3F
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3137312e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:51:2b:bf:17:18:a3:97:a5:72:38:43:57:e7:47:8f:fb:
         a6:cd:43:d1:0d:f9:20:d7:15:88:5e:68:1c:b7:d4:8a:9b:53:
         ce:13:18:c8:13:c4:3f:49:f4:d1:c6:ee:03:ae:e7:b0:02:63:
         f3:c2:a3:d8:a0:d7:c2:19:db:84:e4:b4:bb:9f:04:c9:42:10:
         0a:ed:93:d5:ce:be:18:d8:40:04:2f:95:98:0a:89:67:3f:eb:
         70:71:8a:8b:73:de:a9:b8:70:6f:be:32:9b:fd:02:43:56:98:
         c5:cd:2d:ea:3c:ba:6a:2f:40:c2:33:5f:70:89:50:d7:24:f4:
         d3:af:8a:7b:ed:4f:ab:19:72:54:ad:48:94:ef:e5:c3:3b:9e:
         87:fb:b9:23:11:ef:45:2e:69:de:b3:45:80:1f:62:2b:65:2a:
         c3:d4:13:77:41:48:a3:c9:85:cc:2b:bb:df:4e:93:68:10:0d:
         66:c4:2a:20:ca:62:6e:f8:6f:31:db:d9:01:21:c2:12:10:19:
         c2:71:82:58:54:6c:05:ec:bb:80:eb:5b:06:3f:9b:8f:6b:c7:
         6a:a1:ac:41:96:26:31:a9:f2:cb:47:2c:8c:57:c8:b0:66:fc:
         90:76:73:0b:8b:d8:6c:7a:0a:26:f0:67:67:71:1a:89:51:4b:
         64:73:8a:fe
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXax5WgxmksaNj73RBfOTO7u3lqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNDAzMDUxNzQyMTZaFw0yNTAzMDQxNzQ3MTZaMDMxMTAvBgNV
BAMTKDVGOEIwODg4MEFBQkY4NUIyRERFQjQwQUYzODZCMTU2RERDQkIyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhRORIACl0crVQgZC7Exg4mpv
9t6D1oDv30NpxLzCUerMQNDhlL83wMTtEG7GuDABQVkMQzv39Zmu5bdi79+Acxft
gAifBkVGHLKTlFZiAnvZpjH5DpejBgz01te8411MybX9GdXPg1TMFC0rbxaqFQVk
ooNgFjhAadYHraDTBRhlPfBrUj1VO9FJoQqdk+RcPybTVEXf1x4pIYM4esQm11S6
DfVlOm73EXvpINKhEg16dGz+yfYTVz2fpwFKKEbCwhPwTlKWTfcdRmFZPtz3kR34
gI8OCBk+lzaU4WLX28HRzOQypHsHOYabDolUjKC4fGxDlyiVSkOCeAPXNcYrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUX4sIiAqr+Fst3rQK84axVt3Lsj8wHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzQzMzJlMzIzMDM4MmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACP
0KswDQYJKoZIhvcNAQELBQADggEBADybUSu/Fxijl6VyOENX50eP+6bNQ9EN+SDX
FYheaBy31IqbU84TGMgTxD9J9NHG7gOu57ACY/PCo9ig18IZ24TktLufBMlCEArt
k9XOvhjYQAQvlZgKiWc/63Bxiotz3qm4cG++Mpv9AkNWmMXNLeo8umovQMIzX3CJ
UNck9NOvinvtT6sZclStSJTv5cM7nof7uSMR70Uuad6zRYAfYitlKsPUE3dBSKPJ
hcwru99Ok2gQDWbEKiDKYm74bzHb2QEhwhIQGcJxglhUbAXsu4DrWwY/m49rx2qh
rEGWJjGp8stHLIxXyLBm/JB2cwuL2Gx6CibwZ2dxGolRS2Rziv4=
-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org