Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
File:                     3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          nFOhE3aqSGkevVzywg1CEMLyr3h+27zmDTnTeq5trkg=
Subject key identifier:   42:C3:5E:C1:58:1F:71:DF:43:C2:38:A5:A5:7D:18:6C:3A:59:35:8B
Certificate issuer:       /CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
Certificate serial:       1889B335885C3D6224A6BB87ED8DEF146CBF4860
Authority key identifier: C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 17:47:48 +0000
ROA not before:           Tue 05 Mar 2024 17:42:48 +0000
ROA not after:            Tue 04 Mar 2025 17:47:48 +0000
asID:                     52444
IP address blocks:        131.161.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:89:b3:35:88:5c:3d:62:24:a6:bb:87:ed:8d:ef:14:6c:bf:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
        Validity
            Not Before: Mar  5 17:42:48 2024 GMT
            Not After : Mar  4 17:47:48 2025 GMT
        Subject: CN=42C35EC1581F71DF43C238A5A57D186C3A59358B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:11:a9:14:45:b1:ad:b2:0d:d3:57:3d:d3:
                    41:06:09:f1:00:14:02:51:54:c3:5c:ce:00:30:47:
                    b0:24:bc:ac:af:e1:4a:85:88:ea:af:c1:b7:cd:ea:
                    5f:c7:b1:b2:a5:39:1a:71:38:52:2b:4e:32:61:c9:
                    c0:78:b4:6f:73:c3:0b:69:c6:94:2f:a9:ea:af:57:
                    da:18:f7:18:85:ce:15:1d:f1:f7:69:71:75:80:f9:
                    5e:94:aa:77:b7:53:87:19:96:ca:88:4a:e5:ab:7b:
                    e7:27:1b:d1:42:65:f2:5b:69:fb:70:1f:10:f5:b2:
                    ed:58:0e:fd:0d:ba:6c:2a:5e:68:cb:7a:04:f7:f7:
                    52:30:37:61:fe:c0:e9:00:38:63:d8:78:ea:98:04:
                    99:4f:64:cd:23:ea:49:f1:fd:3e:55:50:e6:c2:12:
                    03:a7:04:7f:dc:73:a6:b1:47:a3:45:f0:82:1c:eb:
                    ed:ee:a7:a6:e0:a8:f0:5a:c9:48:c0:47:50:de:3e:
                    c0:52:68:58:a5:e8:c4:5c:bc:94:4a:e8:00:a3:05:
                    05:ec:7d:d8:89:3a:67:55:9a:2b:e7:73:1f:f7:b6:
                    5f:f1:b9:dd:a0:2c:92:bf:1d:80:0c:cc:64:bb:ee:
                    97:8c:ea:6e:ec:a3:97:5e:c8:b9:17:7c:de:0f:f8:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C3:5E:C1:58:1F:71:DF:43:C2:38:A5:A5:7D:18:6C:3A:59:35:8B
            X509v3 Authority Key Identifier:
                keyid:C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:ce:59:ed:89:17:4a:31:a7:2c:08:0e:7b:18:b7:e0:54:
         60:ab:90:50:0e:df:bb:ed:ff:e1:47:38:31:ef:e0:5b:08:c5:
         49:be:f7:03:7c:6d:cc:fd:08:44:09:57:c9:a8:12:5e:96:3a:
         29:30:17:92:06:cc:3a:29:ec:65:9b:16:a8:f7:f8:3b:a8:73:
         6b:53:88:34:24:71:12:f0:9d:91:00:03:fe:ae:9f:84:85:31:
         62:45:aa:4c:d2:d3:9f:6e:37:fc:55:c2:d8:75:2a:1b:df:95:
         0f:60:6d:9f:7a:5c:f1:f5:55:13:a1:9f:9c:c8:4b:92:e0:6a:
         be:75:11:18:bf:c1:b8:a6:d4:09:b0:8b:8f:7b:82:d7:de:cb:
         37:c0:cf:62:6d:2b:bf:08:d1:e2:34:0a:82:d9:02:73:b6:97:
         2b:22:38:74:dc:0f:12:23:e6:da:a8:83:bd:95:13:f4:23:88:
         d7:79:33:54:42:80:08:c4:30:02:8e:c8:7a:ba:e9:61:9c:3c:
         84:b9:d1:3c:d7:18:e3:1e:a5:9a:59:d4:f5:75:86:af:7a:60:
         80:ce:b9:64:a6:b9:d6:ab:52:fb:cc:b0:c6:d3:1e:ce:29:4e:
         9f:35:9f:26:01:08:8b:4d:bc:d9:26:f3:6e:bb:cb:2d:09:00:
         2e:f7:50:3e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGImzNYhcPWIkpruH7Y3vFGy/SGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5NTRCNkE3MTBFMDZDMzI3NTA1QjVCMEYxRjM4MEI3
RkU3QjBCNDAeFw0yNDAzMDUxNzQyNDhaFw0yNTAzMDQxNzQ3NDhaMDMxMTAvBgNV
BAMTKDQyQzM1RUMxNTgxRjcxREY0M0MyMzhBNUE1N0QxODZDM0E1OTM1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3BGpFEWxrbIN01c900EGCfEA
FAJRVMNczgAwR7AkvKyv4UqFiOqvwbfN6l/HsbKlORpxOFIrTjJhycB4tG9zwwtp
xpQvqeqvV9oY9xiFzhUd8fdpcXWA+V6Uqne3U4cZlsqISuWre+cnG9FCZfJbaftw
HxD1su1YDv0NumwqXmjLegT391IwN2H+wOkAOGPYeOqYBJlPZM0j6knx/T5VUObC
EgOnBH/cc6axR6NF8IIc6+3up6bgqPBayUjAR1DePsBSaFil6MRcvJRK6ACjBQXs
fdiJOmdVmivncx/3tl/xud2gLJK/HYAMzGS77peM6m7so5deyLkXfN4P+Ap7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQsNewVgfcd9DwjilpX0YbDpZNYswHwYDVR0j
BBgwFoAUxpVLanEOBsMnUFtbDx84C3/nsLQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzhENDdEM0FEQjFDNUQ0NjhBNEYwODMyQkU1RTBBRjAx
MEY4RTMxRTM5MDQ4RTk5NzlFOTQwN0NCRUE4NjVELzAvQzY5NTRCNkE3MTBFMDZD
MzI3NTA1QjVCMEYxRjM4MEI3RkU3QjBCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjk1NEI2QTcxMEUwNkMzMjc1
MDVCNUIwRjFGMzgwQjdGRTdCMEI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM4RDQ3RDNBREIxQzVENDY4QTRGMDgzMkJFNUUwQUYwMTBGOEUzMUUz
OTA0OEU5OTc5RTk0MDdDQkVBODY1RC8wLzMxMzMzMTJlMzEzNjMxMmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg6G4
MA0GCSqGSIb3DQEBCwUAA4IBAQApG85Z7YkXSjGnLAgOexi34FRgq5BQDt+77f/h
Rzgx7+BbCMVJvvcDfG3M/QhECVfJqBJeljopMBeSBsw6Kexlmxao9/g7qHNrU4g0
JHES8J2RAAP+rp+EhTFiRapM0tOfbjf8VcLYdSob35UPYG2felzx9VUToZ+cyEuS
4Gq+dREYv8G4ptQJsIuPe4LX3ss3wM9ibSu/CNHiNAqC2QJztpcrIjh03A8SI+ba
qIO9lRP0I4jXeTNUQoAIxDACjsh6uulhnDyEudE81xjjHqWaWdT1dYavemCAzrlk
prnWq1L7zLDG0x7OKU6fNZ8mAQiLTbzZJvNuu8stCQAu91A+
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:47 2024 by rpki-client on console-fra.rpki-client.org