Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa
File:                     3136382e3139362e33322e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          jqAGI3fEXzkoSkmdifMxUO8XZwH6Ukvc8pyjaHHUQHQ=
Subject key identifier:   06:F5:8E:D6:E4:C9:6B:69:6E:4F:34:51:00:42:85:20:F5:64:06:51
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       02A9E0A37E632AC6AACEE6EC13D92FE15805A0AA
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 05 Mar 2024 18:00:13 +0000
ROA not before:           Tue 05 Mar 2024 17:55:13 +0000
ROA not after:            Tue 04 Mar 2025 18:00:13 +0000
asID:                     52436
IP address blocks:        168.196.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a9:e0:a3:7e:63:2a:c6:aa:ce:e6:ec:13:d9:2f:e1:58:05:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Mar  5 17:55:13 2024 GMT
            Not After : Mar  4 18:00:13 2025 GMT
        Subject: CN=06F58ED6E4C96B696E4F345100428520F5640651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:90:46:fc:8a:3f:ae:30:cc:8d:a8:42:49:
                    81:3c:0c:18:e7:79:fe:6d:7a:fa:9a:38:3e:0a:3b:
                    59:46:4b:7b:f1:37:33:a7:cc:3b:e5:77:f5:6e:03:
                    2f:62:e1:e0:93:00:1a:fa:17:08:0b:26:8e:7e:0a:
                    4f:bb:19:7c:37:06:e2:72:4f:9c:0f:4f:99:3d:be:
                    30:3c:e5:fa:0c:7f:b6:90:f1:39:01:28:45:99:2d:
                    b6:cf:8b:48:2a:d2:57:7e:14:4d:b7:6b:d2:bf:2d:
                    30:32:3f:1a:95:df:2e:df:1c:c9:04:d6:5b:1f:5f:
                    07:6f:5c:ec:87:08:f6:59:2d:3a:88:a9:5c:51:d5:
                    b8:66:27:31:e5:f0:ba:bf:3d:5c:8b:56:b2:62:36:
                    4d:d0:7f:b1:04:31:97:39:58:6b:64:f1:79:12:31:
                    dc:0d:22:1b:5b:6f:c7:1c:a1:ac:6d:fb:e3:d4:19:
                    53:ec:4f:7a:19:4c:a9:5a:a6:20:5b:e0:d8:5a:22:
                    f0:a8:04:ab:62:ff:a1:e9:96:90:dd:26:b3:11:50:
                    fb:bb:8c:be:73:12:1e:b6:42:ef:05:5b:4c:f3:fe:
                    5d:90:c4:0c:2c:c9:f0:ad:60:05:76:06:16:9e:89:
                    85:f3:08:8e:ee:6a:04:21:88:5d:de:01:b2:88:a3:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:8E:D6:E4:C9:6B:69:6E:4F:34:51:00:42:85:20:F5:64:06:51
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3139362e33322e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:69:29:17:fd:10:15:72:ad:e6:47:f1:44:63:99:ca:28:23:
         07:9a:25:ac:95:4f:b5:4a:b7:27:a9:fa:15:ac:be:7c:85:e0:
         8d:55:1e:d1:05:2f:e8:22:cf:ec:1b:e5:45:6d:da:a7:bf:8f:
         52:f7:76:65:63:75:00:ed:8a:51:13:37:62:a0:70:ea:45:c2:
         1b:8c:90:ca:0a:08:c9:1e:60:f4:25:f2:03:23:b0:cf:d6:6e:
         a9:fa:51:97:0f:ca:81:81:28:99:dd:6a:93:a9:a8:f7:43:0d:
         ad:6e:a7:c9:16:f2:50:f4:f4:21:32:a0:87:47:72:d2:5b:7d:
         4c:e9:de:5f:e8:15:a7:58:5c:b9:9f:dc:c4:10:77:19:08:71:
         10:29:d5:cc:1b:d9:d6:dd:ab:c1:e1:58:25:dd:b5:1d:39:f7:
         58:51:d4:e9:3d:fe:1d:13:dc:d4:cd:96:9b:19:e3:ac:39:7c:
         54:05:c5:29:60:95:68:7c:2d:d2:84:8d:15:1e:a2:7c:05:a1:
         b7:c4:5b:96:44:ab:53:dd:a6:5a:fa:c7:03:93:28:44:80:d4:
         ea:61:54:64:3d:ae:2a:bf:f2:53:d1:8a:a0:63:e9:b1:c0:4c:
         dc:18:b2:5c:cd:c0:6a:dc:67:3b:2d:5b:b7:0c:4e:df:75:00:
         cc:ed:9b:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAqngo35jKsaqzubsE9kv4VgFoKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEREOEM4ODZFN0Q2NDFFNTUzNzAzREM1RTE5Njk1N0Yx
MzY4OTAyQzAeFw0yNDAzMDUxNzU1MTNaFw0yNTAzMDQxODAwMTNaMDMxMTAvBgNV
BAMTKDA2RjU4RUQ2RTRDOTZCNjk2RTRGMzQ1MTAwNDI4NTIwRjU2NDA2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E5BG/Io/rjDMjahCSYE8DBjn
ef5tevqaOD4KO1lGS3vxNzOnzDvld/VuAy9i4eCTABr6FwgLJo5+Ck+7GXw3BuJy
T5wPT5k9vjA85foMf7aQ8TkBKEWZLbbPi0gq0ld+FE23a9K/LTAyPxqV3y7fHMkE
1lsfXwdvXOyHCPZZLTqIqVxR1bhmJzHl8Lq/PVyLVrJiNk3Qf7EEMZc5WGtk8XkS
MdwNIhtbb8ccoaxt++PUGVPsT3oZTKlapiBb4NhaIvCoBKti/6HplpDdJrMRUPu7
jL5zEh62Qu8FW0zz/l2QxAwsyfCtYAV2BhaeiYXzCI7uagQhiF3eAbKIozANAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBvWO1uTJa2luTzRRAEKFIPVkBlEwHwYDVR0j
BBgwFoAUDdjIhufWQeVTcD3F4ZaVfxNokCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjU1NEM0NzFBNzBBQjczQjk2NUIxNTY5QUE0NTRGQTMy
MTFGRDE0MkM4MzFBRUUxRUFGODlGQTBGRDEyRUI4LzAvMEREOEM4ODZFN0Q2NDFF
NTUzNzAzREM1RTE5Njk1N0YxMzY4OTAyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREQ4Qzg4NkU3RDY0MUU1NTM3
MDNEQzVFMTk2OTU3RjEzNjg5MDJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkI1NTRDNDcxQTcwQUI3M0I5NjVCMTU2OUFBNDU0RkEzMjExRkQxNDJD
ODMxQUVFMUVBRjg5RkEwRkQxMkVCOC8wLzMxMzYzODJlMzEzOTM2MmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjEIDAN
BgkqhkiG9w0BAQsFAAOCAQEANmkpF/0QFXKt5kfxRGOZyigjB5olrJVPtUq3J6n6
Fay+fIXgjVUe0QUv6CLP7BvlRW3ap7+PUvd2ZWN1AO2KURM3YqBw6kXCG4yQygoI
yR5g9CXyAyOwz9ZuqfpRlw/KgYEomd1qk6mo90MNrW6nyRbyUPT0ITKgh0dy0lt9
TOneX+gVp1hcuZ/cxBB3GQhxECnVzBvZ1t2rweFYJd21HTn3WFHU6T3+HRPc1M2W
mxnjrDl8VAXFKWCVaHwt0oSNFR6ifAWht8RblkSrU92mWvrHA5MoRIDU6mFUZD2u
Kr/yU9GKoGPpscBM3BiyXM3AatxnOy1btwxO33UAzO2bOA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:33 2024 by rpki-client on console-fra.rpki-client.org