Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32332d3234203d3e203130373738.roa
File:                     3136382e3139362e3138342e302f32332d3234203d3e203130373738.roa (raw, json)
Hash identifier:          HIAEm3YEfJRImKFSmD0TOMGfJdaQ0fSfsVcs8C9bMq4=
Subject key identifier:   F4:B5:F9:23:5D:70:80:E4:25:11:D4:50:E0:E0:FB:0B:20:E9:4D:22
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       174075C08DB9211F8AFADF8535168F8E22D14F84
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32332d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 17:44:35 +0000
ROA not before:           Tue 05 Mar 2024 17:39:35 +0000
ROA not after:            Tue 04 Mar 2025 17:44:35 +0000
asID:                     10778
IP address blocks:        168.196.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:40:75:c0:8d:b9:21:1f:8a:fa:df:85:35:16:8f:8e:22:d1:4f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Mar  5 17:39:35 2024 GMT
            Not After : Mar  4 17:44:35 2025 GMT
        Subject: CN=F4B5F9235D7080E42511D450E0E0FB0B20E94D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:61:62:a3:55:ea:9c:d8:ef:ab:c0:a2:80:
                    ba:97:d1:66:5c:fa:0b:5f:a0:7a:a7:37:31:7e:fa:
                    04:69:ce:20:ad:3f:2f:4b:5a:c7:00:d2:35:17:88:
                    d2:9b:6e:63:3d:27:a5:b3:c2:49:d6:e6:42:ff:ef:
                    b3:a2:15:57:8e:99:62:84:f4:75:6c:60:63:e9:2c:
                    9b:6b:9c:68:ea:fd:63:b0:bc:83:75:a4:a4:f6:fc:
                    f6:c3:f6:74:fe:c7:90:50:c2:5a:8e:6e:86:a2:a0:
                    08:58:c2:cd:15:14:ff:e5:de:a0:e6:c6:37:24:26:
                    29:af:a1:51:0f:5f:ec:d0:9c:33:bb:14:e0:8b:6f:
                    77:d7:ca:2e:d1:46:62:7b:7b:f7:b9:a7:42:d1:7b:
                    7e:84:77:39:51:b1:98:9a:74:de:9d:35:01:25:9b:
                    8a:a2:75:82:11:27:c0:f3:82:6b:f3:b7:44:72:d9:
                    2b:8e:78:b6:29:d0:59:c8:61:a9:ff:a6:bd:b5:70:
                    84:52:b2:e1:75:08:35:09:89:b5:ec:3d:41:dc:c6:
                    73:ad:96:2a:35:e5:bc:76:07:7d:8f:f6:2e:54:b4:
                    40:4f:e1:43:5d:2f:c6:72:c9:77:8e:b4:69:8b:ae:
                    0b:06:54:55:9b:7d:b9:61:51:0f:76:6d:62:43:2a:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:F9:23:5D:70:80:E4:25:11:D4:50:E0:E0:FB:0B:20:E9:4D:22
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32332d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:c3:5e:f5:3e:5d:c7:a9:f2:e1:b3:99:8c:91:0e:87:7a:
         4f:9c:c5:fd:b0:50:8a:31:81:fe:7f:bd:5a:81:0c:12:b8:37:
         75:55:42:29:35:77:80:01:70:65:65:59:c8:25:04:6f:d6:42:
         90:ce:c7:d3:53:3b:c6:97:36:8a:62:61:3f:d9:af:82:00:c6:
         bd:d5:95:e1:66:4c:92:b0:2e:11:db:df:d6:e5:bd:be:b5:d8:
         5b:6c:f6:6a:8f:ce:96:d0:fa:e8:ac:fe:86:32:d3:29:88:32:
         27:53:94:53:a5:e3:b8:4e:c6:d0:2d:95:1d:a4:29:e0:15:14:
         a4:67:55:5a:f8:b5:2a:02:1f:c0:58:32:84:60:0d:35:0b:1d:
         02:5f:44:ea:66:a9:9b:a7:b6:6a:8e:7e:b4:a8:79:17:d6:80:
         93:7f:7c:ca:1f:b7:64:3e:69:74:be:d6:c1:7b:e5:c9:bf:d6:
         6f:43:1e:38:41:79:30:1b:c6:ca:bc:80:50:7d:e4:56:42:24:
         fd:7e:b8:3a:cf:45:57:df:d7:fc:cc:bf:59:c7:22:16:9e:d6:
         48:8f:85:1f:33:61:57:f6:24:fd:45:49:72:0e:60:15:03:95:
         81:80:dd:fd:30:8a:f2:63:b8:89:d4:11:ba:83:85:ad:24:27:
         e3:c5:93:4e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF0B1wI25IR+K+t+FNRaPjiLRT4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGRTE5RDY4RkNEOEUyRjQ2RDc2MzJENDJFNjM3M0Mx
NDhCNDZFNDAeFw0yNDAzMDUxNzM5MzVaFw0yNTAzMDQxNzQ0MzVaMDMxMTAvBgNV
BAMTKEY0QjVGOTIzNUQ3MDgwRTQyNTExRDQ1MEUwRTBGQjBCMjBFOTREMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejGFio1XqnNjvq8CigLqX0WZc
+gtfoHqnNzF++gRpziCtPy9LWscA0jUXiNKbbmM9J6WzwknW5kL/77OiFVeOmWKE
9HVsYGPpLJtrnGjq/WOwvIN1pKT2/PbD9nT+x5BQwlqOboaioAhYws0VFP/l3qDm
xjckJimvoVEPX+zQnDO7FOCLb3fXyi7RRmJ7e/e5p0LRe36EdzlRsZiadN6dNQEl
m4qidYIRJ8Dzgmvzt0Ry2SuOeLYp0FnIYan/pr21cIRSsuF1CDUJibXsPUHcxnOt
lio15bx2B32P9i5UtEBP4UNdL8ZyyXeOtGmLrgsGVFWbfblhUQ92bWJDKtGBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9LX5I11wgOQlEdRQ4OD7CyDpTSIwHwYDVR0j
BBgwFoAU4f4Z1o/Nji9G12MtQuY3PBSLRuQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkFFM0YyNjUzODI1RUE0Q0RFNkI5MDdEQTk1RENGOTI2
MDk0QUMwNjg2MDRDMTNEMUI0M0EwODc0OENENDU1LzAvRTFGRTE5RDY4RkNEOEUy
RjQ2RDc2MzJENDJFNjM3M0MxNDhCNDZFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMUZFMTlENjhGQ0Q4RTJGNDZE
NzYzMkQ0MkU2MzczQzE0OEI0NkU0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JBRTNGMjY1MzgyNUVBNENERTZCOTA3REE5NURDRjkyNjA5NEFDMDY4
NjA0QzEzRDFCNDNBMDg3NDhDRDQ1NS8wLzMxMzYzODJlMzEzOTM2MmUzMTM4MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMwMzczNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMS4
MA0GCSqGSIb3DQEBCwUAA4IBAQB3vMNe9T5dx6ny4bOZjJEOh3pPnMX9sFCKMYH+
f71agQwSuDd1VUIpNXeAAXBlZVnIJQRv1kKQzsfTUzvGlzaKYmE/2a+CAMa91ZXh
ZkySsC4R29/W5b2+tdhbbPZqj86W0ProrP6GMtMpiDInU5RTpeO4TsbQLZUdpCng
FRSkZ1Va+LUqAh/AWDKEYA01Cx0CX0TqZqmbp7Zqjn60qHkX1oCTf3zKH7dkPml0
vtbBe+XJv9ZvQx44QXkwG8bKvIBQfeRWQiT9frg6z0VX39f8zL9ZxyIWntZIj4Uf
M2FX9iT9RUlyDmAVA5WBgN39MIryY7iJ1BG6g4WtJCfjxZNO
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org