Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3232203d3e203532343339.roa
File:                     3136302e31392e3230302e302f32322d3232203d3e203532343339.roa (raw, json)
Hash identifier:          bq9QbdgJp7O40CgOJYAQdVTVxRS6j4xkw0UqcjJzZDM=
Subject key identifier:   B6:5D:C2:A4:5C:24:B3:12:43:17:9E:51:BC:EA:51:48:B6:74:B1:7A
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       538C9451F4AB93B84F88DC69A315CB1714D04515
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3232203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 17:50:50 +0000
ROA not before:           Tue 05 Mar 2024 17:45:50 +0000
ROA not after:            Tue 04 Mar 2025 17:50:50 +0000
asID:                     52439
IP address blocks:        160.19.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8c:94:51:f4:ab:93:b8:4f:88:dc:69:a3:15:cb:17:14:d0:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Mar  5 17:45:50 2024 GMT
            Not After : Mar  4 17:50:50 2025 GMT
        Subject: CN=B65DC2A45C24B31243179E51BCEA5148B674B17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:5e:09:4b:3e:90:8e:e6:55:2e:ec:a1:0e:
                    80:a3:b0:21:11:1e:f9:c7:44:ad:dc:14:d7:e3:89:
                    ea:0e:4a:e4:b7:21:c7:66:bd:e2:3d:e2:fd:00:5f:
                    74:f3:d5:e4:05:6c:27:7e:13:29:95:e3:af:95:2a:
                    f7:46:4e:e3:5f:fe:59:9d:5d:52:00:ef:31:e5:42:
                    60:31:37:bc:95:9d:3f:5f:e9:2c:49:12:63:d4:61:
                    3a:a6:f4:64:75:14:93:51:bc:de:3b:8c:e8:47:f2:
                    07:7d:00:02:9a:7d:11:f6:8c:f3:7c:e6:8f:e1:02:
                    42:4f:2c:7c:ba:3d:30:83:00:c7:92:ad:91:bb:fa:
                    ce:cb:cb:34:05:2a:d0:f0:b8:61:38:b2:e3:5d:4b:
                    56:e9:b2:31:12:4d:46:ab:f5:33:f3:a4:8d:a3:f2:
                    a4:fc:81:63:e2:c8:43:dd:51:cb:18:f4:a0:75:64:
                    d4:3a:a8:3e:31:9a:cd:ae:3a:0a:81:f3:f1:f5:5c:
                    94:23:12:d7:dd:75:38:66:82:4e:89:f0:ec:8d:05:
                    2f:42:f9:37:1a:d2:e1:1b:92:1c:9e:34:0d:42:23:
                    07:97:62:89:df:a8:c9:5d:61:22:6f:94:39:71:ae:
                    a1:73:18:02:19:ee:60:df:60:4a:47:b1:c4:c5:ca:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:C2:A4:5C:24:B3:12:43:17:9E:51:BC:EA:51:48:B6:74:B1:7A
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230302e302f32322d3232203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:26:84:bd:b1:2f:ab:76:71:3f:65:fb:5f:85:ed:15:41:
         28:23:e3:27:c1:8e:6d:b6:c4:2f:9f:83:2b:ef:95:44:e5:aa:
         96:08:aa:08:da:25:0b:67:cc:f5:87:e6:85:70:ee:22:7c:14:
         00:68:fb:00:d1:68:a2:10:ca:8a:c9:b6:83:5d:0b:cc:64:49:
         ba:c2:01:9c:b6:6c:72:62:3c:de:13:75:77:87:4b:e3:d3:95:
         bd:bf:53:da:76:78:87:21:ef:c1:cb:37:a7:7a:78:df:79:84:
         d7:e3:91:e3:9d:22:d3:9d:fd:63:88:a4:92:cc:9e:46:33:0c:
         c5:b7:49:d0:ea:5a:1f:84:96:02:da:a0:82:17:e8:79:69:03:
         6e:06:4c:91:a1:36:ba:89:7a:0d:8b:ae:d9:5a:87:10:7c:4f:
         5a:e9:0a:77:b7:66:2f:b3:fa:cb:cf:bb:e7:b1:57:f2:6f:64:
         46:26:df:49:f1:88:4d:6d:9a:d5:42:9e:21:5c:82:65:23:7c:
         64:62:1b:08:fe:79:47:7b:40:3c:d2:64:41:14:85:ea:f3:47:
         49:fa:7a:e9:bc:b8:ea:3f:e5:2a:41:25:4d:ff:c6:e0:ff:f4:
         5f:f5:6a:d3:a8:fa:e4:e2:ae:f1:95:c4:2a:2c:74:ed:4b:ee:
         e6:5f:47:71
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU4yUUfSrk7hPiNxpoxXLFxTQRRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyNDI3NEU1QzhFOTIzNDJFMTAxRDA3MUZGREZBNDVF
QjczNDY0RDAeFw0yNDAzMDUxNzQ1NTBaFw0yNTAzMDQxNzUwNTBaMDMxMTAvBgNV
BAMTKEI2NURDMkE0NUMyNEIzMTI0MzE3OUU1MUJDRUE1MTQ4QjY3NEIxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSV4JSz6QjuZVLuyhDoCjsCER
HvnHRK3cFNfjieoOSuS3IcdmveI94v0AX3Tz1eQFbCd+EymV46+VKvdGTuNf/lmd
XVIA7zHlQmAxN7yVnT9f6SxJEmPUYTqm9GR1FJNRvN47jOhH8gd9AAKafRH2jPN8
5o/hAkJPLHy6PTCDAMeSrZG7+s7LyzQFKtDwuGE4suNdS1bpsjESTUar9TPzpI2j
8qT8gWPiyEPdUcsY9KB1ZNQ6qD4xms2uOgqB8/H1XJQjEtfddThmgk6J8OyNBS9C
+Tca0uEbkhyeNA1CIweXYonfqMldYSJvlDlxrqFzGAIZ7mDfYEpHscTFyr+/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtl3CpFwksxJDF55RvOpRSLZ0sXowHwYDVR0j
BBgwFoAU3CQnTlyOkjQuEB0HH/36RetzRk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U1MTUyQjQwQ0YzOTQxMjJGQUFCQzcwNzYwMUM0MjY4
MTlDNzE4M0Q1RTQyNUI0RTkyRTkyODM4OEU5NTJBLzAvREMyNDI3NEU1QzhFOTIz
NDJFMTAxRDA3MUZGREZBNDVFQjczNDY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzI0Mjc0RTVDOEU5MjM0MkUx
MDFEMDcxRkZERkE0NUVCNzM0NjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFNTE1MkI0MENGMzk0MTIyRkFBQkM3MDc2MDFDNDI2ODE5QzcxODNE
NUU0MjVCNEU5MkU5MjgzODhFOTUyQS8wLzMxMzYzMDJlMzEzOTJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM0MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqATyDAN
BgkqhkiG9w0BAQsFAAOCAQEAX70mhL2xL6t2cT9l+1+F7RVBKCPjJ8GObbbEL5+D
K++VROWqlgiqCNolC2fM9YfmhXDuInwUAGj7ANFoohDKism2g10LzGRJusIBnLZs
cmI83hN1d4dL49OVvb9T2nZ4hyHvwcs3p3p433mE1+OR450i0539Y4ikksyeRjMM
xbdJ0OpaH4SWAtqgghfoeWkDbgZMkaE2uol6DYuu2VqHEHxPWukKd7dmL7P6y8+7
57FX8m9kRibfSfGITW2a1UKeIVyCZSN8ZGIbCP55R3tAPNJkQRSF6vNHSfp66by4
6j/lKkElTf/G4P/0X/Vq06j65OKu8ZXEKix07Uvu5l9HcQ==
-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org