Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa
File:                     3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa (raw, json)
Hash identifier:          YnR/7ecyFk1FFqSXNz7TzymLqhrhwhSNeM+YAGTxJ5w=
Subject key identifier:   E7:A4:82:AF:6A:15:62:31:2E:5E:36:5D:12:06:DB:21:D6:D2:D1:81
Certificate issuer:       /CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
Certificate serial:       2F880532FC8C5A1C0F8CFE04BFDF6C4B122FA00A
Authority key identifier: 71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa
Signing time:             Tue 05 Mar 2024 17:54:00 +0000
ROA not before:           Tue 05 Mar 2024 17:49:00 +0000
ROA not after:            Tue 04 Mar 2025 17:54:00 +0000
asID:                     271794
IP address blocks:        164.163.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:05:32:fc:8c:5a:1c:0f:8c:fe:04:bf:df:6c:4b:12:2f:a0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
        Validity
            Not Before: Mar  5 17:49:00 2024 GMT
            Not After : Mar  4 17:54:00 2025 GMT
        Subject: CN=E7A482AF6A1562312E5E365D1206DB21D6D2D181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:06:0b:48:37:c5:c3:87:17:3e:09:e6:b3:
                    a7:25:d5:8f:bc:d2:41:22:07:21:1c:ab:f6:c7:88:
                    70:ed:65:e5:51:1a:8c:bc:ee:70:83:a4:08:99:54:
                    ad:9f:fd:72:e2:45:5b:10:f3:80:e6:24:1b:cd:cc:
                    f1:ef:7c:2e:a5:3e:4e:1f:74:67:90:ba:f1:f4:4d:
                    95:58:f0:92:f7:68:d9:89:34:03:9b:28:a6:99:92:
                    3b:47:c2:90:e7:35:ae:c8:b5:7e:60:c1:09:b2:09:
                    3a:40:6b:1c:e2:86:81:c6:af:c3:2d:1d:9b:7a:e0:
                    fb:8c:cf:0e:36:e7:25:ce:15:f1:ae:41:68:06:d2:
                    e8:68:87:a4:ae:b1:c4:30:ed:61:0d:24:02:d4:ff:
                    5e:8d:ce:27:d1:fd:98:81:29:5a:13:fc:5b:88:68:
                    b2:c1:44:e8:59:b6:28:ae:e3:2c:2e:8d:ea:0b:f5:
                    e2:69:47:41:3a:f7:70:a3:93:00:cd:50:15:14:92:
                    63:da:9f:7d:2e:4b:54:d9:bb:04:27:72:dd:de:42:
                    66:86:ab:23:39:a8:85:4c:3a:bd:95:92:66:d3:35:
                    39:c7:fd:39:b7:fa:2e:8a:a9:ce:cd:a5:14:71:f5:
                    58:c1:dd:13:91:cc:86:3d:84:d6:19:7d:ee:f2:9c:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:82:AF:6A:15:62:31:2E:5E:36:5D:12:06:DB:21:D6:D2:D1:81
            X509v3 Authority Key Identifier:
                keyid:71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:aa:54:7b:05:b5:66:8b:ef:da:dd:d9:a0:89:e4:98:f0:51:
         3b:c6:27:bc:0c:3c:09:9e:05:65:3d:52:ae:e7:57:26:05:15:
         46:fd:5d:3e:df:b5:9e:05:ce:82:1f:17:c8:3d:fc:2d:35:ff:
         9d:18:38:6e:0e:55:4e:2e:82:0d:50:d1:3f:30:c4:ac:04:80:
         2a:ff:71:f5:35:70:dd:34:05:13:b2:b6:eb:f5:e4:8b:ab:4d:
         1b:b7:7a:38:62:98:52:cc:4e:fa:3a:f8:b0:bf:0e:81:21:70:
         6f:56:12:a2:6a:fa:6c:bd:08:de:ac:f5:39:72:5c:9a:f9:29:
         14:02:57:82:69:4c:8b:9b:c1:e0:f9:60:fd:7d:27:68:8c:99:
         30:be:73:d2:a6:34:ea:be:0d:b1:b7:04:05:28:0b:12:7e:3b:
         7a:6d:68:4a:d3:02:c5:1e:c5:93:b6:fd:f7:d7:39:86:1f:7f:
         85:15:11:d1:0a:c7:b8:73:15:4f:79:51:b5:00:20:37:ea:67:
         f0:f4:78:4b:0d:b8:0c:31:d1:7e:e8:76:a1:88:24:fd:ea:f9:
         b3:b8:69:25:b5:08:4f:da:35:73:6f:00:4b:0f:e5:c1:1e:48:
         41:bd:06:6b:08:38:61:13:ce:98:87:3d:a8:9b:62:51:40:02:
         92:28:46:cf
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUL4gFMvyMWhwPjP4Ev99sSxIvoAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEwNENERDkzQjM5QThDMDFEN0M4Mjg5Njc3RjExNTBF
MDU3RTRBNTAeFw0yNDAzMDUxNzQ5MDBaFw0yNTAzMDQxNzU0MDBaMDMxMTAvBgNV
BAMTKEU3QTQ4MkFGNkExNTYyMzEyRTVFMzY1RDEyMDZEQjIxRDZEMkQxODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6wYLSDfFw4cXPgnms6cl1Y+8
0kEiByEcq/bHiHDtZeVRGoy87nCDpAiZVK2f/XLiRVsQ84DmJBvNzPHvfC6lPk4f
dGeQuvH0TZVY8JL3aNmJNAObKKaZkjtHwpDnNa7ItX5gwQmyCTpAaxzihoHGr8Mt
HZt64PuMzw425yXOFfGuQWgG0uhoh6SuscQw7WENJALU/16NzifR/ZiBKVoT/FuI
aLLBROhZtiiu4ywujeoL9eJpR0E693CjkwDNUBUUkmPan30uS1TZuwQnct3eQmaG
qyM5qIVMOr2VkmbTNTnH/Tm3+i6Kqc7NpRRx9VjB3RORzIY9hNYZfe7ynAd3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU56SCr2oVYjEuXjZdEgbbIdbS0YEwHwYDVR0j
BBgwFoAUcQTN2Ts5qMAdfIKJZ38RUOBX5KUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzdCMTYyRjBGRkY0RTk2NTBBOTM3QThCMTNFQkQ2RUJD
N0U5QjdEMEVEMzZFODU2RTIyRDUxMzQ5NzUzM0JCLzAvNzEwNENERDkzQjM5QThD
MDFEN0M4Mjg5Njc3RjExNTBFMDU3RTRBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MTA0Q0REOTNCMzlBOEMwMUQ3
QzgyODk2NzdGMTE1MEUwNTdFNEE1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc3QjE2MkYwRkZGNEU5NjUwQTkzN0E4QjEzRUJENkVCQzdFOUI3RDBF
RDM2RTg1NkUyMkQ1MTM0OTc1MzNCQi8wLzMxMzYzNDJlMzEzNjMzMmUzMTM4MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzEzNzM5MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGk
o7owDQYJKoZIhvcNAQELBQADggEBAOKqVHsFtWaL79rd2aCJ5JjwUTvGJ7wMPAme
BWU9Uq7nVyYFFUb9XT7ftZ4FzoIfF8g9/C01/50YOG4OVU4ugg1Q0T8wxKwEgCr/
cfU1cN00BROytuv15IurTRu3ejhimFLMTvo6+LC/DoEhcG9WEqJq+my9CN6s9Tly
XJr5KRQCV4JpTIubweD5YP19J2iMmTC+c9KmNOq+DbG3BAUoCxJ+O3ptaErTAsUe
xZO2/ffXOYYff4UVEdEKx7hzFU95UbUAIDfqZ/D0eEsNuAwx0X7odqGIJP3q+bO4
aSW1CE/aNXNvAEsP5cEeSEG9BmsIOGETzpiHPaibYlFAApIoRs8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org