Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136332e302f32342d3234203d3e20323632313638.roa
File:                     3133382e3131372e3136332e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          qG9ptSfJD0Ehb1FFBoMFsjoVL3P0zfJjoJzJy+Kbn08=
Subject key identifier:   D3:44:F2:95:44:71:58:9B:18:25:29:87:FE:F0:30:04:24:A4:5C:11
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       15DA4500D222514A5DB57B6955950C36C48CCD1A
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136332e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:27 +0000
ROA not before:           Tue 05 Mar 2024 17:55:27 +0000
ROA not after:            Tue 04 Mar 2025 18:00:27 +0000
asID:                     262168
IP address blocks:        138.117.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:da:45:00:d2:22:51:4a:5d:b5:7b:69:55:95:0c:36:c4:8c:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:27 2024 GMT
            Not After : Mar  4 18:00:27 2025 GMT
        Subject: CN=D344F2954471589B18252987FEF0300424A45C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:17:02:05:68:b4:50:cb:fe:4a:b2:2d:bf:
                    20:dc:5d:e9:5e:b9:b1:1b:13:ff:a1:46:8e:24:27:
                    07:c6:cc:61:39:23:8d:7e:4a:6e:82:50:38:42:7b:
                    5d:09:a9:24:26:66:ed:1c:80:d6:70:ad:71:6e:d4:
                    f2:a8:b1:84:ce:d5:d5:de:05:3f:8b:1f:c2:bd:47:
                    13:10:fe:c6:42:82:d9:9a:1f:fd:ac:c7:a7:1e:fe:
                    a7:07:93:50:ae:f8:82:85:6d:a2:f6:7a:bf:5c:b3:
                    85:f1:74:5e:df:05:f1:e9:17:3c:cf:50:93:c0:3f:
                    8b:30:29:81:4e:8e:30:c3:03:68:23:a3:80:fd:35:
                    2e:3c:5f:f2:8f:b2:9e:91:5d:ce:f3:d6:2d:d8:42:
                    b7:e0:63:9e:2e:32:11:05:ba:f9:a7:23:ba:2f:61:
                    c6:b3:83:34:ac:72:50:f1:90:74:5a:09:39:16:8f:
                    36:07:18:c5:de:54:c5:87:88:f1:15:54:28:cf:5b:
                    f6:46:84:a2:34:6a:e5:92:28:37:10:3a:df:b8:9f:
                    6d:a5:58:3d:8a:32:b7:7b:2d:5e:85:02:04:b2:c9:
                    59:5b:d8:88:0d:da:7d:35:32:92:ca:b2:c4:ae:e3:
                    02:d7:cd:fd:3e:f2:50:f7:b0:e2:b5:fb:6a:dd:d0:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:F2:95:44:71:58:9B:18:25:29:87:FE:F0:30:04:24:A4:5C:11
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136332e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:80:da:d8:86:1e:ed:40:eb:ca:75:36:10:cd:eb:05:fb:ef:
         11:84:09:33:8a:b3:2e:cb:6f:fd:cd:e2:85:b8:7e:25:11:f8:
         29:6f:62:a6:8f:18:1f:49:c7:42:48:34:53:d1:80:ad:34:77:
         3d:3e:bf:ad:97:d7:d1:b8:f5:96:d0:92:58:bb:28:9c:12:77:
         ef:61:9e:bc:97:28:15:79:ed:8e:8f:bb:4b:80:44:6c:71:6c:
         78:7e:10:31:d5:b7:0e:00:7f:7a:21:8f:df:1b:66:89:28:69:
         ba:ea:5a:a3:ae:42:03:92:e0:c4:e3:cb:20:06:e8:71:a4:ef:
         66:98:34:66:45:24:84:4f:31:98:31:f2:55:06:ca:70:08:d9:
         e7:51:c1:24:5c:1f:ac:8e:ef:a1:ca:fb:97:7d:aa:4e:d0:bd:
         73:2f:7a:51:bb:c6:af:a1:42:d2:a9:ba:ed:bd:ca:57:24:12:
         5a:2d:5c:8d:5f:92:1a:f7:c5:7e:b5:1c:0a:6b:f0:db:49:2a:
         98:96:b8:a2:7c:61:e1:0e:73:a7:8c:bb:c9:fa:ba:1c:de:d0:
         c7:2c:13:ae:a0:93:eb:f6:68:fa:97:93:81:85:78:d9:d8:73:
         77:6b:bb:15:c8:5c:93:c5:96:31:2a:41:74:ee:0b:23:39:7c:
         cf:c2:5d:ac
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFdpFANIiUUpdtXtpVZUMNsSMzRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUzN0Y2MDE2RDU5QjA5NkNCNEE2OTM1NTNCNEEwODg1
MDdGNTEyQTAeFw0yNDAzMDUxNzU1MjdaFw0yNTAzMDQxODAwMjdaMDMxMTAvBgNV
BAMTKEQzNDRGMjk1NDQ3MTU4OUIxODI1Mjk4N0ZFRjAzMDA0MjRBNDVDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPBcCBWi0UMv+SrItvyDcXele
ubEbE/+hRo4kJwfGzGE5I41+Sm6CUDhCe10JqSQmZu0cgNZwrXFu1PKosYTO1dXe
BT+LH8K9RxMQ/sZCgtmaH/2sx6ce/qcHk1Cu+IKFbaL2er9cs4XxdF7fBfHpFzzP
UJPAP4swKYFOjjDDA2gjo4D9NS48X/KPsp6RXc7z1i3YQrfgY54uMhEFuvmnI7ov
YcazgzSsclDxkHRaCTkWjzYHGMXeVMWHiPEVVCjPW/ZGhKI0auWSKDcQOt+4n22l
WD2KMrd7LV6FAgSyyVlb2IgN2n01MpLKssSu4wLXzf0+8lD3sOK1+2rd0EqJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU00TylURxWJsYJSmH/vAwBCSkXBEwHwYDVR0j
BBgwFoAUdTf2AW1ZsJbLSmk1U7SgiFB/USowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNTUzMzdCNzQxMUUzNkExRkE1NUFEMjMyRUI5NjMxMzE1
RDU1NzM5NEQ5QURCNjQyQTZDODM1QjY1RUREREE5LzAvNzUzN0Y2MDE2RDU5QjA5
NkNCNEE2OTM1NTNCNEEwODg1MDdGNTEyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTM3RjYwMTZENTlCMDk2Q0I0
QTY5MzU1M0I0QTA4ODUwN0Y1MTJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjU1MzM3Qjc0MTFFMzZBMUZBNTVBRDIzMkVCOTYzMTMxNUQ1NTczOTRE
OUFEQjY0MkE2QzgzNUI2NUVERERBOS8wLzMxMzMzODJlMzEzMTM3MmUzMTM2MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
daMwDQYJKoZIhvcNAQELBQADggEBAJiA2tiGHu1A68p1NhDN6wX77xGECTOKsy7L
b/3N4oW4fiUR+ClvYqaPGB9Jx0JINFPRgK00dz0+v62X19G49ZbQkli7KJwSd+9h
nryXKBV57Y6Pu0uARGxxbHh+EDHVtw4Af3ohj98bZokoabrqWqOuQgOS4MTjyyAG
6HGk72aYNGZFJIRPMZgx8lUGynAI2edRwSRcH6yO76HK+5d9qk7QvXMvelG7xq+h
QtKpuu29ylckElotXI1fkhr3xX61HApr8NtJKpiWuKJ8YeEOc6eMu8n6uhze0Mcs
E66gk+v2aPqXk4GFeNnYc3druxXIXJPFljEqQXTuCyM5fM/CXaw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org