Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          9tVWD6zslRhCDpIu18cGOi+HXX6ybMEKOUKp06IL39w=
Subject key identifier:   43:2C:A0:2C:A3:6A:D2:B9:B9:7A:76:35:DF:E2:D4:AC:21:49:84:69
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       309536DD27D53AD391E40F6446E19350C0E53653
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa
Signing time:             Fri 12 Apr 2024 04:35:00 +0000
ROA not before:           Fri 12 Apr 2024 04:30:00 +0000
ROA not after:            Fri 11 Apr 2025 04:35:00 +0000
asID:                     264731
IP address blocks:        186.167.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:95:36:dd:27:d5:3a:d3:91:e4:0f:64:46:e1:93:50:c0:e5:36:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Apr 12 04:30:00 2024 GMT
            Not After : Apr 11 04:35:00 2025 GMT
        Subject: CN=432CA02CA36AD2B9B97A7635DFE2D4AC21498469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:a7:ac:88:e9:29:f8:fa:94:2f:c3:30:d5:
                    fa:d5:85:97:3f:1d:0a:c4:ea:26:a3:86:18:a5:b8:
                    64:de:21:32:66:b6:7c:a4:ef:77:96:53:4c:27:5c:
                    d6:cf:94:5b:d7:c8:52:60:d1:83:de:e3:ef:ef:18:
                    7e:7b:7d:19:c4:51:ea:e2:b3:0f:3c:e8:8c:b6:9b:
                    aa:29:3d:1c:04:ef:4d:7e:1f:e0:f8:fe:f0:4a:a2:
                    7d:cc:d7:ed:e8:c6:66:87:57:87:6c:67:71:4c:0b:
                    fa:77:b1:11:90:36:ae:94:28:4a:5c:fa:51:4f:57:
                    92:15:2d:96:56:b8:1c:25:2f:d9:8b:d3:27:f2:7d:
                    f3:35:cc:5e:a4:ad:c3:6d:b4:0c:86:3b:76:18:61:
                    01:ff:29:b0:16:cd:11:21:6a:54:fa:7d:f8:85:64:
                    5c:7e:5e:ab:82:3e:f5:8d:f7:4c:6a:3b:4e:e0:84:
                    ba:b9:65:9f:41:ec:c4:64:7e:ae:5a:2d:80:a0:67:
                    c8:9b:47:c8:7e:d2:8d:12:9f:cb:1f:f7:bf:c4:1b:
                    2a:eb:91:fd:49:19:5c:e6:52:d0:1a:9c:e0:6d:5b:
                    44:70:36:10:14:38:f8:8f:8a:d9:15:da:8e:b9:1c:
                    95:38:17:65:08:90:d0:b8:6b:9f:3c:75:02:65:23:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:A0:2C:A3:6A:D2:B9:B9:7A:76:35:DF:E2:D4:AC:21:49:84:69
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3136302e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:03:62:ba:73:fa:6f:b0:cc:be:ef:ea:72:81:6b:9c:c8:
         c7:cb:b5:0a:e5:21:17:93:7f:1b:0f:0e:cb:1f:72:e2:bf:07:
         4f:cb:8a:6b:13:0f:b7:58:a6:16:cb:5b:bf:82:d8:19:e9:b9:
         54:e9:bf:20:46:b1:0f:d1:28:99:8a:34:4a:07:e1:6f:df:ee:
         6d:ff:66:8b:e2:02:27:a0:e2:4e:60:97:11:e3:01:36:25:de:
         04:e9:33:2c:f5:ce:30:ab:86:92:e6:e3:64:4d:22:13:00:24:
         b0:78:51:24:7c:f5:2d:ed:47:c1:7c:d0:a1:43:ee:74:7b:3c:
         9e:88:04:72:2c:b4:21:03:5b:48:9a:36:24:d3:67:f2:df:c2:
         98:3a:e4:a7:6b:2e:40:60:a3:9c:17:54:f5:08:d0:b3:e3:78:
         ab:91:ab:6a:d6:8f:7b:70:bd:63:39:2d:c5:e4:90:8a:7b:65:
         09:56:12:2d:74:58:f0:29:27:79:16:cb:95:d9:cd:40:c1:a0:
         06:0e:66:45:00:33:5d:65:58:cd:56:c8:c2:ff:2f:8f:3e:f3:
         5a:69:ce:05:85:52:f4:bc:af:6e:21:af:63:e6:1f:95:97:bf:
         b8:f6:66:a5:00:df:a9:90:18:80:04:2d:7e:40:9c:c7:51:60:
         a4:92:51:2a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMJU23SfVOtOR5A9kRuGTUMDlNlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1MkExNkQzQUM1OTcyNjhFNzgyRjQ5MzAxMDFFOTBE
NjY4QTAxMjAeFw0yNDA0MTIwNDMwMDBaFw0yNTA0MTEwNDM1MDBaMDMxMTAvBgNV
BAMTKDQzMkNBMDJDQTM2QUQyQjlCOTdBNzYzNURGRTJENEFDMjE0OTg0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VaesiOkp+PqUL8Mw1frVhZc/
HQrE6iajhhiluGTeITJmtnyk73eWU0wnXNbPlFvXyFJg0YPe4+/vGH57fRnEUeri
sw886Iy2m6opPRwE701+H+D4/vBKon3M1+3oxmaHV4dsZ3FMC/p3sRGQNq6UKEpc
+lFPV5IVLZZWuBwlL9mL0yfyffM1zF6krcNttAyGO3YYYQH/KbAWzREhalT6ffiF
ZFx+XquCPvWN90xqO07ghLq5ZZ9B7MRkfq5aLYCgZ8ibR8h+0o0Sn8sf97/EGyrr
kf1JGVzmUtAanOBtW0RwNhAUOPiPitkV2o65HJU4F2UIkNC4a588dQJlIz27AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUQyygLKNq0rm5enY13+LUrCFJhGkwHwYDVR0j
BBgwFoAUSVKhbTrFlyaOeC9JMBAekNZooBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjYxNTExMEFBMDRFMzQzRjVDOEI1RTJFMjNERjE1MERE
MjlGRjUyNjY2MTAwNUJBM0E4NDkzNkIxOTVERjRBLzAvNDk1MkExNkQzQUM1OTcy
NjhFNzgyRjQ5MzAxMDFFOTBENjY4QTAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTUyQTE2RDNBQzU5NzI2OEU3
ODJGNDkzMDEwMUU5MEQ2NjhBMDEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI2MTUxMTBBQTA0RTM0M0Y1QzhCNUUyRTIzREYxNTBERDI5RkY1MjY2
NjEwMDVCQTNBODQ5MzZCMTk1REY0QS8wLzMxMzgzNjJlMzEzNjM3MmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6
p6AwDQYJKoZIhvcNAQELBQADggEBAAlKA2K6c/pvsMy+7+pygWucyMfLtQrlIReT
fxsPDssfcuK/B0/LimsTD7dYphbLW7+C2BnpuVTpvyBGsQ/RKJmKNEoH4W/f7m3/
ZoviAieg4k5glxHjATYl3gTpMyz1zjCrhpLm42RNIhMAJLB4USR89S3tR8F80KFD
7nR7PJ6IBHIstCEDW0iaNiTTZ/Lfwpg65KdrLkBgo5wXVPUI0LPjeKuRq2rWj3tw
vWM5LcXkkIp7ZQlWEi10WPApJ3kWy5XZzUDBoAYOZkUAM11lWM1WyML/L48+81pp
zgWFUvS8r24hr2PmH5WXv7j2ZqUA36mQGIAELX5AnMdRYKSSUSo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org