Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa
File:                     3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa (raw, json)
Hash identifier:          a2qb4PTcgzWNIrhL1FFyxvlfi6HtFnMzEZ58RP33dIQ=
Subject key identifier:   46:87:3E:05:5E:13:55:D7:CB:4B:7A:03:DA:DE:4A:26:46:96:3C:61
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       2FCD26CC1DD6C2CAD14A5EC19B10D545807076A5
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa
Signing time:             Tue 05 Mar 2024 17:42:49 +0000
ROA not before:           Tue 05 Mar 2024 17:37:49 +0000
ROA not after:            Tue 04 Mar 2025 17:42:49 +0000
asID:                     272973
IP address blocks:        181.233.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Jun 2024 02:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:26:cc:1d:d6:c2:ca:d1:4a:5e:c1:9b:10:d5:45:80:70:76:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Mar  5 17:37:49 2024 GMT
            Not After : Mar  4 17:42:49 2025 GMT
        Subject: CN=46873E055E1355D7CB4B7A03DADE4A2646963C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:79:1f:31:95:3e:9a:f6:3d:db:20:90:80:
                    34:41:ea:48:11:79:24:87:40:f4:84:e5:4a:90:4f:
                    4f:d7:b5:d0:26:8a:fc:c3:17:42:d7:d0:ef:4a:24:
                    2d:65:6b:dc:0d:64:95:cb:d9:41:0a:71:a8:69:83:
                    20:25:e9:a1:55:04:ab:9d:4f:4d:94:70:15:52:ae:
                    c0:01:9c:88:d8:18:25:c7:1d:23:a9:d3:df:7d:4c:
                    9b:64:ce:10:b1:6d:ad:5f:62:0c:0d:c2:b2:00:78:
                    7b:16:6e:14:a4:4a:d2:4e:a3:11:80:4c:e5:e3:01:
                    5f:5f:10:ae:3b:7d:28:f4:80:a7:8d:51:ed:75:bb:
                    4c:65:52:84:a2:20:a1:eb:0d:06:52:76:0e:0d:a6:
                    eb:0c:07:cc:e4:ff:f7:96:e1:08:23:87:a3:e3:de:
                    e2:71:40:45:48:9d:c5:4d:a0:68:ca:cc:ea:06:53:
                    10:2b:47:78:dc:80:10:ad:ad:3e:7d:88:55:19:23:
                    71:d2:75:e6:b8:6b:e2:02:cf:c2:0c:1d:fb:0a:d2:
                    74:2e:75:37:fd:5a:8c:1d:0e:d2:5b:ae:9b:c7:04:
                    4b:8b:b4:17:f8:7e:5e:c6:87:06:2a:50:a2:c1:00:
                    be:99:50:a0:87:6d:c7:c3:60:d3:ef:78:35:73:83:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:3E:05:5E:13:55:D7:CB:4B:7A:03:DA:DE:4A:26:46:96:3C:61
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135332e302f32342d3234203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d1:11:f9:a0:70:d5:4d:c2:3a:f0:c2:66:b2:9e:29:9e:11:
         a6:8c:92:df:76:1f:df:8e:42:4e:00:20:e4:55:74:86:23:a3:
         12:c0:65:3b:9e:dd:24:86:d3:30:e3:91:ce:93:10:b8:1a:5a:
         8b:8a:15:40:d4:80:45:65:5b:9f:b7:ab:bf:dc:fc:00:1c:26:
         06:8e:be:a0:20:80:46:25:3b:a9:5f:06:91:c1:85:e0:fb:cd:
         eb:e1:ea:df:0a:98:8f:4e:65:27:15:78:d6:7d:13:e8:ae:4f:
         ae:13:3e:3d:22:b3:66:80:95:12:4a:0f:53:f5:a9:08:e6:f5:
         e7:2d:50:a1:b5:b7:73:93:1e:8f:b5:35:83:27:9a:3d:d1:ca:
         cd:df:48:0e:31:ea:ed:ab:89:bc:48:e5:47:f9:85:c4:6a:eb:
         1b:d3:76:75:9d:44:45:c7:57:7c:5a:4f:ca:d5:d8:15:64:3a:
         47:51:24:d5:9a:fd:5d:b3:38:c1:72:a5:e2:0b:2c:81:e1:3c:
         c4:42:a4:b5:b1:28:ef:f3:c7:55:c8:5d:e8:ec:49:6c:83:3b:
         45:40:46:ec:a7:db:04:49:33:32:eb:73:9a:7e:77:f6:e4:78:
         50:43:aa:24:6a:e4:34:3a:9e:ac:7c:d4:0e:33:03:c4:ee:2d:
         05:74:9a:01
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUL80mzB3WwsrRSl7BmxDVRYBwdqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYxNzdDQjgwRTQwMEU4RjZFMUExQUY5NkQ3RTNGRUUz
NDdERDBEMDAeFw0yNDAzMDUxNzM3NDlaFw0yNTAzMDQxNzQyNDlaMDMxMTAvBgNV
BAMTKDQ2ODczRTA1NUUxMzU1RDdDQjRCN0EwM0RBREU0QTI2NDY5NjNDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqHkfMZU+mvY92yCQgDRB6kgR
eSSHQPSE5UqQT0/XtdAmivzDF0LX0O9KJC1la9wNZJXL2UEKcahpgyAl6aFVBKud
T02UcBVSrsABnIjYGCXHHSOp0999TJtkzhCxba1fYgwNwrIAeHsWbhSkStJOoxGA
TOXjAV9fEK47fSj0gKeNUe11u0xlUoSiIKHrDQZSdg4NpusMB8zk//eW4Qgjh6Pj
3uJxQEVIncVNoGjKzOoGUxArR3jcgBCtrT59iFUZI3HSdea4a+ICz8IMHfsK0nQu
dTf9WowdDtJbrpvHBEuLtBf4fl7GhwYqUKLBAL6ZUKCHbcfDYNPveDVzg2SDAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQURoc+BV4TVdfLS3oD2t5KJkaWPGEwHwYDVR0j
BBgwFoAUJhd8uA5ADo9uGhr5bX4/7jR90NAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTQ2REJCQ0NCMEQ4MThFQzcyOTE0MzhFQzRFODM3NTM1
M0RCNzc4RThFRTk4NUFBMjE4OTE0NDZBQkY3QTU2LzAvMjYxNzdDQjgwRTQwMEU4
RjZFMUExQUY5NkQ3RTNGRUUzNDdERDBEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjE3N0NCODBFNDAwRThGNkUx
QTFBRjk2RDdFM0ZFRTM0N0REMEQwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTU0NkRCQkNDQjBEODE4RUM3MjkxNDM4RUM0RTgzNzUzNTNEQjc3OEU4
RUU5ODVBQTIxODkxNDQ2QUJGN0E1Ni8wLzMxMzgzMTJlMzIzMzMzMmUzMTM1MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzOTM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
6ZkwDQYJKoZIhvcNAQELBQADggEBAIrREfmgcNVNwjrwwmaynimeEaaMkt92H9+O
Qk4AIORVdIYjoxLAZTue3SSG0zDjkc6TELgaWouKFUDUgEVlW5+3q7/c/AAcJgaO
vqAggEYlO6lfBpHBheD7zevh6t8KmI9OZScVeNZ9E+iuT64TPj0is2aAlRJKD1P1
qQjm9ectUKG1t3OTHo+1NYMnmj3Rys3fSA4x6u2ribxI5Uf5hcRq6xvTdnWdREXH
V3xaT8rV2BVkOkdRJNWa/V2zOMFypeILLIHhPMRCpLWxKO/zx1XIXejsSWyDO0VA
Ruyn2wRJMzLrc5p+d/bkeFBDqiRq5DQ6nqx81A4zA8TuLQV0mgE=
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:33:38 2024 by rpki-client on console-fra.rpki-client.org