Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e35312e302f32342d3234203d3e20323632313435.roa
File:                     3136382e3232382e35312e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          JD9sbpljRqrvjDW/u0cYHBOR9ltGkSvcnBSBLsQDCKs=
Subject key identifier:   82:00:C7:17:45:24:97:67:5F:CE:03:66:93:56:D3:75:14:B7:B7:12
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       5ED95F053130E692EC486DDE5A0FEEA5EE929B22
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e35312e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:09 +0000
ROA not before:           Tue 05 Mar 2024 17:42:09 +0000
ROA not after:            Tue 04 Mar 2025 17:47:09 +0000
asID:                     262145
IP address blocks:        168.228.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d9:5f:05:31:30:e6:92:ec:48:6d:de:5a:0f:ee:a5:ee:92:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:09 2024 GMT
            Not After : Mar  4 17:47:09 2025 GMT
        Subject: CN=8200C717452497675FCE03669356D37514B7B712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:24:bd:21:84:2c:f0:bb:fa:8a:4c:a7:61:
                    a4:c7:d7:db:7b:ea:87:42:e2:ba:f3:01:d7:e8:9e:
                    df:33:ab:ec:91:82:c3:4c:e5:ff:e4:4c:03:88:7b:
                    8c:c1:be:10:3b:1d:e3:4e:60:6a:79:36:3c:54:28:
                    4f:c5:39:11:ee:8f:a2:93:dc:ad:98:f8:eb:09:c1:
                    6f:e5:69:94:7c:09:b5:35:82:05:51:f3:70:11:1c:
                    c1:52:ee:38:84:e0:52:5f:5f:0e:02:61:43:92:07:
                    04:54:04:b6:81:99:05:3e:ea:5a:a3:11:27:fc:5a:
                    b0:8f:fa:52:a2:4e:ea:56:2f:c1:e0:96:f9:c7:29:
                    07:e1:ad:38:8c:75:f0:50:cc:ad:10:6f:33:e4:b1:
                    aa:e7:89:70:32:96:6b:c8:3f:e8:cc:60:7c:76:fa:
                    c4:af:06:d4:a2:d1:61:e7:1a:82:15:b9:8d:7b:cb:
                    a7:a1:d7:f0:c2:70:3e:0b:c9:97:ea:cb:d3:99:8e:
                    92:a7:c0:08:eb:ce:53:4a:e3:58:23:ad:36:ac:26:
                    96:f7:b5:5a:07:ae:d0:4e:e7:88:73:c1:60:be:d8:
                    f6:9b:15:f8:f5:eb:02:0b:83:06:ed:d4:cf:de:08:
                    27:39:cb:c4:c3:07:9e:58:16:c0:b0:6c:71:50:b1:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:00:C7:17:45:24:97:67:5F:CE:03:66:93:56:D3:75:14:B7:B7:12
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e35312e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cf:33:5e:aa:42:80:0f:ff:9f:72:cd:bb:82:e5:38:c5:8f:
         5c:b3:32:dd:21:cd:89:5a:7f:e4:7e:b2:02:81:90:2a:77:b1:
         3b:27:5f:da:b2:bc:1a:40:1e:7c:72:66:4e:e9:4e:67:92:aa:
         29:86:3e:c5:75:c9:bb:ee:51:16:6c:4b:82:f5:59:dc:2e:86:
         e0:1b:03:1f:f7:a3:78:de:f7:02:38:5a:5e:a2:97:8a:88:97:
         2e:1e:02:53:73:7d:e8:c4:6d:db:f1:b8:ff:82:b9:2d:a5:fe:
         c3:56:9e:95:fb:6b:e5:67:66:0f:0a:d8:5d:cc:e7:9d:5e:76:
         bf:1e:c7:c7:84:f8:e5:b0:d4:f9:e0:c1:6b:53:3f:36:18:b1:
         05:d7:c0:16:18:28:5d:80:d2:06:39:bd:f3:e2:bf:89:9d:c6:
         b4:a7:e0:16:89:07:a2:3e:c1:46:fe:bf:14:24:bb:af:c8:11:
         f1:a4:cd:d2:be:41:f1:52:fe:cb:a4:38:4a:5f:d9:a2:7f:a5:
         c7:12:d7:67:98:2b:ce:97:18:bd:24:43:9d:51:6b:66:a9:17:
         7f:b6:de:c9:e2:45:26:54:ff:92:df:f7:cf:e9:84:3a:c7:9d:
         29:ad:d6:8f:3c:ab:ac:6c:04:a5:63:4e:87:fc:99:f1:d9:5e:
         62:17:47:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXtlfBTEw5pLsSG3eWg/upe6SmyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNDAzMDUxNzQyMDlaFw0yNTAzMDQxNzQ3MDlaMDMxMTAvBgNV
BAMTKDgyMDBDNzE3NDUyNDk3Njc1RkNFMDM2NjkzNTZEMzc1MTRCN0I3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZyS9IYQs8Lv6ikynYaTH19t7
6odC4rrzAdfont8zq+yRgsNM5f/kTAOIe4zBvhA7HeNOYGp5NjxUKE/FORHuj6KT
3K2Y+OsJwW/laZR8CbU1ggVR83ARHMFS7jiE4FJfXw4CYUOSBwRUBLaBmQU+6lqj
ESf8WrCP+lKiTupWL8HglvnHKQfhrTiMdfBQzK0QbzPksarniXAylmvIP+jMYHx2
+sSvBtSi0WHnGoIVuY17y6eh1/DCcD4LyZfqy9OZjpKnwAjrzlNK41gjrTasJpb3
tVoHrtBO54hzwWC+2PabFfj16wILgwbt1M/eCCc5y8TDB55YFsCwbHFQsZ1dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUggDHF0Ukl2dfzgNmk1bTdRS3txIwHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzYzODJlMzIzMjM4MmUzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOQz
MA0GCSqGSIb3DQEBCwUAA4IBAQATzzNeqkKAD/+fcs27guU4xY9cszLdIc2JWn/k
frICgZAqd7E7J1/asrwaQB58cmZO6U5nkqophj7Fdcm77lEWbEuC9VncLobgGwMf
96N43vcCOFpeopeKiJcuHgJTc33oxG3b8bj/grktpf7DVp6V+2vlZ2YPCthdzOed
Xna/HsfHhPjlsNT54MFrUz82GLEF18AWGChdgNIGOb3z4r+Jnca0p+AWiQeiPsFG
/r8UJLuvyBHxpM3SvkHxUv7LpDhKX9mif6XHEtdnmCvOlxi9JEOdUWtmqRd/tt7J
4kUmVP+S3/fP6YQ6x50prdaPPKusbASlY06H/Jnx2V5iF0cl
-----END CERTIFICATE-----
Generated at Sat May 11 08:02:22 2024 by rpki-client on console-fra.rpki-client.org