Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3130382e302e302f31362d3234203d3e2036303537.roa
File:                     3136372e3130382e302e302f31362d3234203d3e2036303537.roa (raw, json)
Hash identifier:          n+f7IwSA236UYWyJbecUuUPBdVD9GOQxewnaFj0WWbc=
Subject key identifier:   C3:36:D3:5B:B6:F3:FC:15:E5:C4:57:F4:06:16:93:5F:89:AB:16:B1
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       294476AA3985E8238636C9362A538F81D5B53D3B
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3130382e302e302f31362d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:02 +0000
ROA not before:           Tue 05 Mar 2024 18:15:02 +0000
ROA not after:            Tue 04 Mar 2025 18:20:02 +0000
asID:                     6057
IP address blocks:        167.108.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:44:76:aa:39:85:e8:23:86:36:c9:36:2a:53:8f:81:d5:b5:3d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:02 2024 GMT
            Not After : Mar  4 18:20:02 2025 GMT
        Subject: CN=C336D35BB6F3FC15E5C457F40616935F89AB16B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:32:ac:ae:55:eb:05:47:17:12:71:f8:bf:
                    ab:41:52:3c:fe:f3:42:0a:da:bf:e8:f1:7a:c1:c1:
                    67:b6:1c:1f:04:52:65:45:e1:4a:13:8c:59:76:80:
                    b1:6a:71:86:85:5a:dd:db:83:79:4c:95:53:98:18:
                    fd:4d:00:ea:92:7e:04:bc:75:aa:9d:1a:fe:94:83:
                    81:fa:60:39:d3:e7:56:67:fa:b1:7b:6b:3d:6c:15:
                    52:e0:38:d9:41:20:02:d1:de:06:70:9a:d1:f7:0c:
                    21:12:f3:29:65:68:a6:f3:d5:c9:66:c4:48:d6:12:
                    df:d0:b9:21:bd:d0:5e:b2:13:2d:a6:25:8c:5f:3e:
                    13:ff:15:94:ab:5d:4b:6f:f1:ae:83:af:82:14:fa:
                    4d:a2:b0:9e:ac:5e:ec:cf:33:e4:4d:3c:62:c5:8a:
                    ef:2f:12:2d:76:af:6d:27:d8:9a:75:71:b8:db:be:
                    05:63:b2:7a:4c:77:b6:01:f6:5e:b1:9b:54:bd:67:
                    f7:cb:e3:ff:6e:64:ea:96:74:c2:25:28:f5:62:52:
                    d4:16:3e:ff:58:c1:9e:7f:0e:8d:42:e2:56:78:72:
                    65:96:8b:94:8c:dd:dc:db:6d:06:81:61:a9:2a:dc:
                    78:86:25:79:d2:2c:8f:0a:09:e3:7b:ff:5f:46:8d:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:36:D3:5B:B6:F3:FC:15:E5:C4:57:F4:06:16:93:5F:89:AB:16:B1
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3130382e302e302f31362d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:80:be:ce:2e:24:d4:a9:f1:92:d9:bf:53:15:a5:4c:18:
         d5:15:2b:98:be:bf:96:e5:f2:68:ff:ba:c2:b3:bf:e0:61:fd:
         93:91:77:ac:88:36:ff:f6:8f:03:8a:4b:82:81:51:37:c6:b9:
         c3:68:1e:b7:36:f7:c7:da:1e:b3:48:6b:55:9a:2c:10:42:bf:
         5e:2e:e9:0d:27:b4:6f:9e:91:30:cd:be:f3:17:d8:d2:33:c1:
         64:08:3c:ce:ac:f5:cf:76:8d:47:ad:c6:02:eb:8b:8e:1c:a4:
         e0:28:c3:4f:4e:1d:8a:3b:ff:dc:0b:6b:06:ad:02:35:a8:c6:
         94:64:b1:16:05:32:ba:3f:c4:83:c8:d2:10:89:bc:f0:6f:39:
         1a:dc:fb:81:8f:5f:dd:3e:90:68:2d:72:4a:f0:96:70:a3:6d:
         41:bf:08:84:f8:7f:8e:a5:d0:0a:60:ce:c6:90:ce:03:16:9d:
         93:fb:42:b2:42:cb:23:da:0a:25:37:ee:99:62:d7:fd:82:cf:
         dd:52:a1:c4:86:15:37:a4:82:09:a4:37:0f:bd:65:89:1c:5a:
         0c:5c:b5:87:be:4a:e1:44:71:f9:87:24:10:38:48:72:c3:9f:
         4e:94:e1:15:d7:92:15:f0:1b:7f:78:0c:2c:3d:2e:d3:2b:f9:
         00:50:11:e4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUKUR2qjmF6COGNsk2KlOPgdW1PTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3QTEzRDVEQkYyM0FERjE1ODg5MTgwNkE0MTREMTJB
MkJDN0FDRDAeFw0yNDAzMDUxODE1MDJaFw0yNTAzMDQxODIwMDJaMDMxMTAvBgNV
BAMTKEMzMzZEMzVCQjZGM0ZDMTVFNUM0NTdGNDA2MTY5MzVGODlBQjE2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRjKsrlXrBUcXEnH4v6tBUjz+
80IK2r/o8XrBwWe2HB8EUmVF4UoTjFl2gLFqcYaFWt3bg3lMlVOYGP1NAOqSfgS8
daqdGv6Ug4H6YDnT51Zn+rF7az1sFVLgONlBIALR3gZwmtH3DCES8yllaKbz1clm
xEjWEt/QuSG90F6yEy2mJYxfPhP/FZSrXUtv8a6Dr4IU+k2isJ6sXuzPM+RNPGLF
iu8vEi12r20n2Jp1cbjbvgVjsnpMd7YB9l6xm1S9Z/fL4/9uZOqWdMIlKPViUtQW
Pv9YwZ5/Do1C4lZ4cmWWi5SM3dzbbQaBYakq3HiGJXnSLI8KCeN7/19GjfQZAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUwzbTW7bz/BXlxFf0BhaTX4mrFrEwHwYDVR0j
BBgwFoAUcnoT1dvyOt8ViJGAakFNEqK8es0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0Q1MkRFOUQyQThBNzc0QUQ0NDA2QkQ1NkQ0MTQ2MTM5
NTM3N0RCRUYzMjk2QTc1Nzk1ODJDNjE2QjA2NDhDLzAvNzI3QTEzRDVEQkYyM0FE
RjE1ODg5MTgwNkE0MTREMTJBMkJDN0FDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjdBMTNENURCRjIzQURGMTU4
ODkxODA2QTQxNEQxMkEyQkM3QUNELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNENTJERTlEMkE4QTc3NEFENDQwNkJENTZENDE0NjEzOTUzNzdEQkVG
MzI5NkE3NTc5NTgyQzYxNkIwNjQ4Qy8wLzMxMzYzNzJlMzEzMDM4MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzAzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp2wwDQYJKoZI
hvcNAQELBQADggEBAJQ7gL7OLiTUqfGS2b9TFaVMGNUVK5i+v5bl8mj/usKzv+Bh
/ZORd6yINv/2jwOKS4KBUTfGucNoHrc298faHrNIa1WaLBBCv14u6Q0ntG+ekTDN
vvMX2NIzwWQIPM6s9c92jUetxgLri44cpOAow09OHYo7/9wLawatAjWoxpRksRYF
Mro/xIPI0hCJvPBvORrc+4GPX90+kGgtckrwlnCjbUG/CIT4f46l0ApgzsaQzgMW
nZP7QrJCyyPaCiU37pli1/2Cz91SocSGFTekggmkNw+9ZYkcWgxctYe+SuFEcfmH
JBA4SHLDn06U4RXXkhXwG394DCw9LtMr+QBQEeQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org