Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa
File:                     3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa (raw, json)
Hash identifier:          048MFy0Q2wbZNp5UtbnWq5Qxgf7/j3KTv7E6UiCPtd8=
Subject key identifier:   D9:99:C6:DB:78:95:87:B3:47:F1:54:F2:4F:96:96:AE:6A:D1:B5:2F
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       198230D3FE53BB0944E9990C3362D542C818F1F6
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     264754
IP address blocks:        168.194.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 13:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:82:30:d3:fe:53:bb:09:44:e9:99:0c:33:62:d5:42:c8:18:f1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=D999C6DB789587B347F154F24F9696AE6AD1B52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:10:65:a6:1a:3d:29:9a:78:d8:cb:9f:5c:
                    b0:dc:f8:ca:05:bc:0a:a9:ed:f7:26:f8:95:a4:62:
                    91:28:38:e2:35:97:57:28:54:6c:fc:e2:25:0f:e3:
                    ec:b4:6b:e7:bc:4f:a2:a9:d6:6a:90:2c:9b:4f:7e:
                    3d:ae:28:98:4c:5f:cc:1e:fc:7d:07:4b:c1:cd:a4:
                    af:88:3f:b7:3c:e6:17:fe:b6:0e:67:79:0c:06:f3:
                    23:14:8e:94:2a:a2:6d:8e:40:96:c2:0c:47:3a:c7:
                    f4:bd:62:cc:9d:cc:a4:8c:3a:08:5c:7f:31:eb:79:
                    15:c9:a3:76:6b:b5:72:1c:ba:b5:63:ec:8d:42:5a:
                    a2:d1:b8:e0:53:64:3f:54:5b:75:2e:55:05:72:35:
                    39:dd:92:03:6a:89:51:5f:76:56:77:19:68:6a:1c:
                    d9:6a:8d:8f:01:44:d6:f6:41:46:62:f5:77:21:5f:
                    83:7c:3a:92:71:4f:87:14:92:3e:0b:8b:64:75:3c:
                    c0:f2:2a:b0:1e:9b:7d:42:5a:c8:c1:62:db:62:20:
                    b8:8f:54:22:ca:0d:1d:ce:52:cb:2d:3e:59:0d:0b:
                    34:bc:11:ea:11:1b:69:70:d3:aa:32:aa:9a:08:43:
                    33:7d:20:5d:ce:3a:1e:02:df:42:94:90:6e:c6:33:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:C6:DB:78:95:87:B3:47:F1:54:F2:4F:96:96:AE:6A:D1:B5:2F
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134312e302f32342d3234203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:1c:9b:b2:41:fe:4c:8f:68:c0:d3:e2:7a:b5:9d:10:5e:38:
         08:58:5b:23:33:8b:33:b8:a6:dc:57:42:54:90:69:d8:33:d9:
         22:87:48:13:2a:b3:e4:b9:bb:04:93:56:68:06:7b:28:21:d5:
         59:ce:f8:45:50:e0:5c:ef:10:d1:d8:2b:cc:4e:04:e8:3d:ad:
         f3:b5:6b:89:e9:b1:de:74:5f:a7:77:e1:69:9b:9a:d4:08:ad:
         0d:d0:45:72:6a:28:5a:4c:64:cf:29:81:2e:a1:62:d3:7f:a6:
         27:6d:6d:42:4d:d8:d9:bc:28:a8:37:06:f6:f9:3c:75:a5:5c:
         1b:ac:c4:11:1f:da:7a:9c:82:18:f1:bc:0a:e4:4c:7a:e2:39:
         74:28:64:7c:0c:ce:3f:43:3d:1f:2a:2e:94:4b:3f:ae:4c:53:
         58:c4:58:c8:de:39:5f:71:65:4a:dc:8e:b1:f5:03:13:10:35:
         ef:2f:fb:dc:8b:92:4f:43:9d:6c:ce:ce:16:37:6f:c4:f9:75:
         33:a6:74:35:62:5c:3f:7c:57:d8:61:2b:21:0c:7b:c8:69:29:
         05:d2:33:98:4e:f1:93:34:d8:89:6a:23:86:84:91:98:01:ea:
         95:54:16:45:49:a3:9f:e1:88:4d:8e:8f:43:21:fd:d0:fa:c2:
         10:1a:71:39
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGYIw0/5TuwlE6ZkMM2LVQsgY8fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3QjhCQTNEMDVFMjExQ0Y3Njk3REMzOERCQjc1OTFG
Q0QzMDc1QTAeFw0yNDAzMDUxNzM3MTlaFw0yNTAzMDQxNzQyMTlaMDMxMTAvBgNV
BAMTKEQ5OTlDNkRCNzg5NTg3QjM0N0YxNTRGMjRGOTY5NkFFNkFEMUI1MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+RBlpho9KZp42MufXLDc+MoF
vAqp7fcm+JWkYpEoOOI1l1coVGz84iUP4+y0a+e8T6Kp1mqQLJtPfj2uKJhMX8we
/H0HS8HNpK+IP7c85hf+tg5neQwG8yMUjpQqom2OQJbCDEc6x/S9YsydzKSMOghc
fzHreRXJo3ZrtXIcurVj7I1CWqLRuOBTZD9UW3UuVQVyNTndkgNqiVFfdlZ3GWhq
HNlqjY8BRNb2QUZi9XchX4N8OpJxT4cUkj4Li2R1PMDyKrAem31CWsjBYttiILiP
VCLKDR3OUsstPlkNCzS8EeoRG2lw06oyqpoIQzN9IF3OOh4C30KUkG7GMzOlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU2ZnG23iVh7NH8VTyT5aWrmrRtS8wHwYDVR0j
BBgwFoAUrHuLo9BeIRz3aX3Djbt1kfzTB1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMENFOUFBMEJDMjk3NjBBMTNGMUMxRkJBREJDQUE1NjRE
MDk0MzEyRTcwMDI5REZFNkUwRDBBRkRDODg0MDVGLzAvQUM3QjhCQTNEMDVFMjEx
Q0Y3Njk3REMzOERCQjc1OTFGQ0QzMDc1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzdCOEJBM0QwNUUyMTFDRjc2
OTdEQzM4REJCNzU5MUZDRDMwNzVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBDRTlBQTBCQzI5NzYwQTEzRjFDMUZCQURCQ0FBNTY0RDA5NDMxMkU3
MDAyOURGRTZFMEQwQUZEQzg4NDA1Ri8wLzMxMzYzODJlMzEzOTM0MmUzMTM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wo0wDQYJKoZIhvcNAQELBQADggEBAMUcm7JB/kyPaMDT4nq1nRBeOAhYWyMzizO4
ptxXQlSQadgz2SKHSBMqs+S5uwSTVmgGeygh1VnO+EVQ4FzvENHYK8xOBOg9rfO1
a4npsd50X6d34WmbmtQIrQ3QRXJqKFpMZM8pgS6hYtN/pidtbUJN2Nm8KKg3Bvb5
PHWlXBusxBEf2nqcghjxvArkTHriOXQoZHwMzj9DPR8qLpRLP65MU1jEWMjeOV9x
ZUrcjrH1AxMQNe8v+9yLkk9DnWzOzhY3b8T5dTOmdDViXD98V9hhKyEMe8hpKQXS
M5hO8ZM02IlqI4aEkZgB6pVUFkVJo5/hiE2Oj0Mh/dD6whAacTk=
-----END CERTIFICATE-----
Generated at Thu May 9 12:29:55 2024 by rpki-client on console-ams.rpki-client.org