Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa
File:                     3136312e302e3137362e302f32312d3234203d3e20323633323231.roa (raw, json)
Hash identifier:          ExBpL4BFTANsM9zuXaNH+eQreZ3oUL3OIRi5hkn3NVU=
Subject key identifier:   48:B1:35:17:57:BD:E7:E7:50:1E:96:7C:44:A5:76:BF:7D:D7:54:28
Certificate issuer:       /CN=5D6C01932C342063BFD909811E1D18892BDD422B
Certificate serial:       7DD5F7B69EDB1C34372C30BF9797E42692E10900
Authority key identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa
Signing time:             Tue 05 Mar 2024 18:19:01 +0000
ROA not before:           Tue 05 Mar 2024 18:14:01 +0000
ROA not after:            Tue 04 Mar 2025 18:19:01 +0000
asID:                     263221
IP address blocks:        161.0.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:f7:b6:9e:db:1c:34:37:2c:30:bf:97:97:e4:26:92:e1:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6C01932C342063BFD909811E1D18892BDD422B
        Validity
            Not Before: Mar  5 18:14:01 2024 GMT
            Not After : Mar  4 18:19:01 2025 GMT
        Subject: CN=48B1351757BDE7E7501E967C44A576BF7DD75428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:1e:15:5b:96:d0:12:54:13:9b:6f:36:17:
                    79:b4:3b:21:5b:c6:6a:8d:5d:42:6f:13:f4:de:13:
                    61:4d:c2:e4:ed:58:35:29:92:e2:b5:2a:4c:be:8a:
                    f5:85:41:cf:a7:e6:0c:1a:33:d0:5e:29:8b:7f:f2:
                    43:69:09:07:d0:d4:f1:fa:6d:b0:49:f0:94:dc:45:
                    7f:9d:56:7b:62:b5:85:9c:fc:08:8e:e4:ab:2e:0f:
                    76:45:4b:8a:d2:2a:3c:0c:6c:93:74:58:5f:d9:be:
                    8a:5d:72:08:cf:9c:30:a0:79:1c:0c:99:b5:fc:e5:
                    d3:ab:b9:bd:bb:49:57:eb:b0:9c:cf:36:ca:1e:8b:
                    c9:d7:e1:89:b0:1f:95:5d:94:cc:31:ef:24:3e:fb:
                    12:d6:83:f5:94:da:65:e5:e9:5f:6e:71:64:02:8c:
                    59:6a:d8:8c:6e:56:4b:b5:00:59:02:a5:2c:f7:29:
                    96:1e:56:3f:15:11:dd:01:8c:34:62:84:3e:02:ea:
                    2c:9e:97:e4:94:32:b4:17:20:16:c5:9e:bf:2e:36:
                    2e:d9:63:b9:3f:cf:d6:12:8b:12:42:f2:72:74:0a:
                    e4:6f:26:46:43:e1:20:d5:47:aa:0f:2e:de:58:f8:
                    a2:f2:d7:81:6b:b7:f1:42:a3:23:82:b1:18:5c:c8:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:35:17:57:BD:E7:E7:50:1E:96:7C:44:A5:76:BF:7D:D7:54:28
            X509v3 Authority Key Identifier:
                keyid:5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:bd:e6:b5:b1:96:bb:35:94:9c:5e:72:e4:fb:55:90:a1:
         37:b1:5b:2a:88:45:8f:2a:b3:64:31:ce:1b:d4:58:81:fd:44:
         f1:2b:47:59:78:cf:61:99:4b:51:3c:d2:d8:13:cd:7e:a3:a8:
         ad:ec:d9:15:d2:c5:3f:7b:f0:e4:0c:f2:9c:ec:23:9f:f5:44:
         ba:26:73:0a:a6:43:0b:80:21:8c:29:b3:96:df:0a:8c:df:94:
         cd:9b:86:5e:2f:c1:02:73:ee:f6:d7:b2:d7:4e:be:d4:53:65:
         44:0a:10:b5:67:5c:c0:8d:0d:5b:d4:f3:90:79:26:26:b2:cc:
         1d:7d:89:3a:6d:ce:fa:e4:2f:d0:ec:4b:d7:0d:e2:99:e8:8b:
         bb:bf:7e:17:5a:8e:f4:eb:27:41:53:51:c4:c3:e0:d2:ee:35:
         88:de:11:e7:c1:bb:29:c7:6b:b7:f3:a9:a7:a7:e5:9e:5c:51:
         65:da:d2:69:34:e0:64:2f:75:bb:31:9c:87:57:4f:f0:ed:be:
         74:1e:a1:38:5e:5b:e7:74:a5:67:cc:3e:d9:61:7d:ed:49:2b:
         2a:b7:a0:8e:37:43:7b:1c:bb:19:03:2b:90:f7:81:8b:da:48:
         9d:b6:b3:54:d8:5e:eb:c7:16:66:b1:2a:7c:92:60:18:bd:68:
         c9:39:e0:9b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfdX3tp7bHDQ3LDC/l5fkJpLhCQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ2QzAxOTMyQzM0MjA2M0JGRDkwOTgxMUUxRDE4ODky
QkRENDIyQjAeFw0yNDAzMDUxODE0MDFaFw0yNTAzMDQxODE5MDFaMDMxMTAvBgNV
BAMTKDQ4QjEzNTE3NTdCREU3RTc1MDFFOTY3QzQ0QTU3NkJGN0RENzU0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdx4VW5bQElQTm282F3m0OyFb
xmqNXUJvE/TeE2FNwuTtWDUpkuK1Kky+ivWFQc+n5gwaM9BeKYt/8kNpCQfQ1PH6
bbBJ8JTcRX+dVntitYWc/AiO5KsuD3ZFS4rSKjwMbJN0WF/ZvopdcgjPnDCgeRwM
mbX85dOrub27SVfrsJzPNsoei8nX4YmwH5VdlMwx7yQ++xLWg/WU2mXl6V9ucWQC
jFlq2IxuVku1AFkCpSz3KZYeVj8VEd0BjDRihD4C6iyel+SUMrQXIBbFnr8uNi7Z
Y7k/z9YSixJC8nJ0CuRvJkZD4SDVR6oPLt5Y+KLy14Frt/FCoyOCsRhcyB/HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSLE1F1e95+dQHpZ8RKV2v33XVCgwHwYDVR0j
BBgwFoAUXWwBkyw0IGO/2QmBHh0YiSvdQiswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRUE4QzE3QzFEMDU0Q0JBRDU3NjJCQkFDODZBRDlGNzcw
QUVENTM5MzFDM0FBNzU3NDFFNDZDRjUyOTAxRjA0LzAvNUQ2QzAxOTMyQzM0MjA2
M0JGRDkwOTgxMUUxRDE4ODkyQkRENDIyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDZDMDE5MzJDMzQyMDYzQkZE
OTA5ODExRTFEMTg4OTJCREQ0MjJCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkVBOEMxN0MxRDA1NENCQUQ1NzYyQkJBQzg2QUQ5Rjc3MEFFRDUzOTMx
QzNBQTc1NzQxRTQ2Q0Y1MjkwMUYwNC8wLzMxMzYzMTJlMzAyZTMxMzczNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6EAsDAN
BgkqhkiG9w0BAQsFAAOCAQEAiyu95rWxlrs1lJxecuT7VZChN7FbKohFjyqzZDHO
G9RYgf1E8StHWXjPYZlLUTzS2BPNfqOorezZFdLFP3vw5AzynOwjn/VEuiZzCqZD
C4AhjCmzlt8KjN+UzZuGXi/BAnPu9tey106+1FNlRAoQtWdcwI0NW9TzkHkmJrLM
HX2JOm3O+uQv0OxL1w3imeiLu79+F1qO9OsnQVNRxMPg0u41iN4R58G7Kcdrt/Op
p6flnlxRZdrSaTTgZC91uzGch1dP8O2+dB6hOF5b53SlZ8w+2WF97UkrKregjjdD
exy7GQMrkPeBi9pInbazVNhe68cWZrEqfJJgGL1oyTngmw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:00 2024 by rpki-client on console-fra.rpki-client.org