Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134332e302f32342d3234203d3e20323634373534.roa
File:                     3136382e3139342e3134332e302f32342d3234203d3e20323634373534.roa (raw, json)
Hash identifier:          Ghl0LOYUDRxBpfVOoGm4n28Wuslo0a64K3X8NbMB3Gc=
Subject key identifier:   ED:92:9B:7C:26:39:3D:88:98:77:32:39:4F:AD:EF:A1:9C:DD:74:F3
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       44F8B9680F9611C7A3BDA0675C7AD484FE95C88D
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134332e302f32342d3234203d3e20323634373534.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     264754
IP address blocks:        168.194.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:b9:68:0f:96:11:c7:a3:bd:a0:67:5c:7a:d4:84:fe:95:c8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=ED929B7C26393D88987732394FADEFA19CDD74F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:50:07:61:f3:d0:37:0d:e7:e7:f4:a6:2f:05:
                    85:b1:89:08:c7:99:b0:11:af:f7:b6:d8:50:e1:9c:
                    98:97:fa:e6:9b:93:0b:78:36:4f:1e:72:f0:46:f0:
                    48:1a:37:06:e8:14:79:fe:56:98:ef:7d:d6:cd:c8:
                    2a:8c:75:e2:d0:06:fa:27:3f:79:88:fb:47:bd:12:
                    10:0b:b3:5a:c7:d2:ed:4a:31:0d:7b:6b:a3:da:e4:
                    07:58:d5:2b:af:61:ba:29:5a:fb:3f:56:d4:64:47:
                    25:ae:a9:4b:f7:ff:6e:12:d7:d0:18:b2:8f:92:60:
                    a2:39:e6:27:54:42:af:d4:41:e2:65:e6:6e:e6:bd:
                    e8:ef:a7:37:43:78:c0:27:a8:4f:92:22:26:2f:86:
                    16:e2:d4:74:78:92:2a:a0:d1:a0:f0:36:8e:2c:29:
                    6f:d8:93:f4:75:31:b3:76:a1:d0:e3:55:51:82:a8:
                    53:2d:1c:e6:09:20:6f:39:91:92:5e:e2:d3:ec:a5:
                    e0:5e:29:22:bf:89:ba:b3:5d:de:d0:68:1b:b6:df:
                    47:df:f4:6e:b7:6f:60:0f:ee:c4:a6:31:e6:c5:63:
                    4c:f3:89:fb:ab:42:0a:46:4e:41:60:5e:87:49:29:
                    16:c3:8b:12:0d:cc:16:dd:9f:ab:9b:6f:b5:c5:a2:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:9B:7C:26:39:3D:88:98:77:32:39:4F:AD:EF:A1:9C:DD:74:F3
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134332e302f32342d3234203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:19:cc:05:98:2f:0d:f9:bd:34:59:e7:7c:9f:7a:0d:a7:
         e9:66:1d:41:2d:5b:8b:25:57:cb:34:9d:ad:4a:68:01:b8:21:
         db:dd:9b:a1:81:5f:3a:a1:39:64:b7:27:22:cc:89:fa:fe:ef:
         1e:c0:f0:c4:d6:a5:30:f0:ff:23:a6:3e:d9:83:49:11:a1:68:
         35:95:af:df:e1:fd:8c:63:45:d5:9c:51:11:63:51:0f:15:cb:
         52:5f:3a:ef:f1:84:6a:e1:90:66:91:81:c9:7b:ae:84:d6:fe:
         0f:bf:9c:f5:f2:98:58:20:a5:80:ea:0a:e3:bd:d5:ca:d7:0c:
         e7:25:3c:9e:de:ca:ca:6e:05:18:ad:3d:6f:8e:64:93:b5:9e:
         ff:87:f8:99:08:e5:93:67:3f:9e:e0:0d:4b:0d:65:cf:d2:b7:
         ba:fc:c5:8a:3a:03:72:ce:d5:0c:1d:f3:37:84:76:27:e4:42:
         46:4c:00:51:d5:c8:dc:a1:35:71:e6:1e:ea:e5:4f:3d:06:b2:
         f2:5d:11:93:68:f2:46:24:82:7d:e0:e5:d8:73:3e:6c:48:91:
         a2:ef:33:e5:63:95:64:3b:eb:20:3f:70:01:df:31:7c:8e:68:
         e0:5a:3e:93:f9:04:fb:af:42:91:ca:0d:20:1c:6e:73:78:b0:
         87:11:1c:a0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURPi5aA+WEcejvaBnXHrUhP6VyI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3QjhCQTNEMDVFMjExQ0Y3Njk3REMzOERCQjc1OTFG
Q0QzMDc1QTAeFw0yNDAzMDUxNzM3MTlaFw0yNTAzMDQxNzQyMTlaMDMxMTAvBgNV
BAMTKEVEOTI5QjdDMjYzOTNEODg5ODc3MzIzOTRGQURFRkExOUNERDc0RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8UAdh89A3Defn9KYvBYWxiQjH
mbARr/e22FDhnJiX+uabkwt4Nk8ecvBG8EgaNwboFHn+VpjvfdbNyCqMdeLQBvon
P3mI+0e9EhALs1rH0u1KMQ17a6Pa5AdY1SuvYbopWvs/VtRkRyWuqUv3/24S19AY
so+SYKI55idUQq/UQeJl5m7mvejvpzdDeMAnqE+SIiYvhhbi1HR4kiqg0aDwNo4s
KW/Yk/R1MbN2odDjVVGCqFMtHOYJIG85kZJe4tPspeBeKSK/ibqzXd7QaBu230ff
9G63b2AP7sSmMebFY0zzifurQgpGTkFgXodJKRbDixINzBbdn6ubb7XFolTTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7ZKbfCY5PYiYdzI5T63voZzddPMwHwYDVR0j
BBgwFoAUrHuLo9BeIRz3aX3Djbt1kfzTB1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMENFOUFBMEJDMjk3NjBBMTNGMUMxRkJBREJDQUE1NjRE
MDk0MzEyRTcwMDI5REZFNkUwRDBBRkRDODg0MDVGLzAvQUM3QjhCQTNEMDVFMjEx
Q0Y3Njk3REMzOERCQjc1OTFGQ0QzMDc1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzdCOEJBM0QwNUUyMTFDRjc2
OTdEQzM4REJCNzU5MUZDRDMwNzVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBDRTlBQTBCQzI5NzYwQTEzRjFDMUZCQURCQ0FBNTY0RDA5NDMxMkU3
MDAyOURGRTZFMEQwQUZEQzg4NDA1Ri8wLzMxMzYzODJlMzEzOTM0MmUzMTM0MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wo8wDQYJKoZIhvcNAQELBQADggEBAKLaGcwFmC8N+b00Wed8n3oNp+lmHUEtW4sl
V8s0na1KaAG4Idvdm6GBXzqhOWS3JyLMifr+7x7A8MTWpTDw/yOmPtmDSRGhaDWV
r9/h/YxjRdWcURFjUQ8Vy1JfOu/xhGrhkGaRgcl7roTW/g+/nPXymFggpYDqCuO9
1crXDOclPJ7eyspuBRitPW+OZJO1nv+H+JkI5ZNnP57gDUsNZc/St7r8xYo6A3LO
1Qwd8zeEdifkQkZMAFHVyNyhNXHmHurlTz0GsvJdEZNo8kYkgn3g5dhzPmxIkaLv
M+VjlWQ76yA/cAHfMXyOaOBaPpP5BPuvQpHKDSAcbnN4sIcRHKA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org