Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32322d3232203d3e20323635363939.roa
File:                     3136322e31322e3139362e302f32322d3232203d3e20323635363939.roa (raw, json)
Hash identifier:          s3SjHAshLMdiJVSIM6Rn5KP0w6YtSWbU9h0dHvoeiIE=
Subject key identifier:   7D:A5:DA:0B:C5:DE:A5:E9:A0:EB:5B:A0:92:F3:00:D0:7D:38:D3:C5
Certificate issuer:       /CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
Certificate serial:       44535FD67CF33DB915EDB60094B26614B0C9D5B0
Authority key identifier: 16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32322d3232203d3e20323635363939.roa
Signing time:             Tue 05 Mar 2024 18:20:48 +0000
ROA not before:           Tue 05 Mar 2024 18:15:48 +0000
ROA not after:            Tue 04 Mar 2025 18:20:48 +0000
asID:                     265699
IP address blocks:        162.12.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:53:5f:d6:7c:f3:3d:b9:15:ed:b6:00:94:b2:66:14:b0:c9:d5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
        Validity
            Not Before: Mar  5 18:15:48 2024 GMT
            Not After : Mar  4 18:20:48 2025 GMT
        Subject: CN=7DA5DA0BC5DEA5E9A0EB5BA092F300D07D38D3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:96:0e:ee:e6:d3:fd:12:f1:61:bc:a7:c9:
                    41:93:e2:8c:62:07:cc:06:ac:77:d0:1d:0f:07:af:
                    cb:61:4a:8a:c9:1c:bd:10:8e:6f:9d:4a:83:7b:22:
                    ff:4d:7b:02:80:46:6c:43:8d:77:73:ce:f3:d6:aa:
                    f5:b7:eb:06:b4:8a:ce:6f:18:e2:c3:ad:53:48:e8:
                    2c:95:32:30:33:3b:96:5b:f5:c2:06:21:2b:0a:bd:
                    84:cc:fc:8b:60:8e:72:11:64:e4:99:38:d3:c0:ee:
                    29:b7:68:74:b5:ee:f5:36:64:82:6c:ee:60:2b:b9:
                    d5:22:1d:17:35:d1:b9:51:71:7d:cc:fe:b5:06:83:
                    4f:7d:cd:0c:58:94:08:50:c1:f4:80:61:ad:6a:d7:
                    d8:8f:e9:fd:1f:e5:ee:23:ae:86:60:09:22:1c:29:
                    6f:7d:80:65:65:52:c7:39:13:b0:35:09:17:3c:da:
                    a8:d2:91:a5:d0:1a:55:40:9d:a3:98:d7:de:73:69:
                    1f:95:37:66:9e:32:b1:40:7e:16:63:c7:b3:44:16:
                    51:1d:a6:f7:1a:17:08:4e:c0:cd:7c:ef:ee:3c:f1:
                    cf:e6:73:ed:2d:52:44:61:a6:24:93:ce:43:d6:dc:
                    c8:1d:9d:dc:fc:79:31:a0:c0:88:c2:2d:48:a3:1d:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:DA:0B:C5:DE:A5:E9:A0:EB:5B:A0:92:F3:00:D0:7D:38:D3:C5
            X509v3 Authority Key Identifier:
                keyid:16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139362e302f32322d3232203d3e20323635363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:27:ad:fa:94:d1:88:1f:15:6b:b0:27:1f:8f:8a:91:2a:
         44:b4:12:52:a5:2d:ae:7b:9b:a7:a6:49:35:bd:9a:ff:d6:72:
         81:7b:c0:5d:91:04:7e:89:d7:43:a3:16:13:88:3b:fa:77:d2:
         3e:bf:51:8e:f2:91:99:3d:4c:70:8f:a6:b3:56:27:7a:72:d5:
         7d:b9:06:75:5b:00:7a:a5:e6:26:b4:a4:19:ae:75:d0:89:63:
         6d:e1:f9:50:f9:6e:2f:3c:6e:68:ee:b2:61:32:bc:72:4e:e3:
         8c:c9:61:b8:75:f2:db:0c:4f:04:ad:a8:c5:12:8d:ae:67:76:
         4e:98:93:39:a6:7f:1e:92:e1:ea:d1:e6:03:03:bf:da:2f:d7:
         c7:8d:51:00:20:9d:c0:ec:a5:90:25:05:f5:9f:37:cd:63:2c:
         71:05:95:87:16:80:1c:68:43:70:b5:b5:62:23:a7:2a:f8:4a:
         87:b9:4a:c5:95:ba:7d:24:da:57:42:39:ed:57:5c:1f:d9:e5:
         d8:b2:cc:40:a9:f7:40:b8:d2:a2:f2:bc:c2:93:e2:5f:2b:a1:
         ad:d7:df:61:cc:48:3d:11:37:4a:79:54:62:17:4e:92:91:5c:
         8b:56:94:3f:14:2e:ec:1a:ef:eb:2d:d5:a7:5f:10:56:4d:54:
         0d:a5:2f:f9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURFNf1nzzPbkV7bYAlLJmFLDJ1bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMjhENkU5MUY1MjNFMURDQTkzRjk2MjZBRjdGRkND
RTg0NkJDQjAeFw0yNDAzMDUxODE1NDhaFw0yNTAzMDQxODIwNDhaMDMxMTAvBgNV
BAMTKDdEQTVEQTBCQzVERUE1RTlBMEVCNUJBMDkyRjMwMEQwN0QzOEQzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fJYO7ubT/RLxYbynyUGT4oxi
B8wGrHfQHQ8Hr8thSorJHL0Qjm+dSoN7Iv9NewKARmxDjXdzzvPWqvW36wa0is5v
GOLDrVNI6CyVMjAzO5Zb9cIGISsKvYTM/ItgjnIRZOSZONPA7im3aHS17vU2ZIJs
7mArudUiHRc10blRcX3M/rUGg099zQxYlAhQwfSAYa1q19iP6f0f5e4jroZgCSIc
KW99gGVlUsc5E7A1CRc82qjSkaXQGlVAnaOY195zaR+VN2aeMrFAfhZjx7NEFlEd
pvcaFwhOwM187+488c/mc+0tUkRhpiSTzkPW3Mgdndz8eTGgwIjCLUijHfLbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfaXaC8Xepemg61ugkvMA0H0408UwHwYDVR0j
BBgwFoAUFuKNbpH1I+HcqT+WJq9//M6Ea8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRURGODIxNTNBNTc4NkE2MEUyQ0YzNjcxQUNEQ0YwQjk4
MDZDQjg4MUMwMTk3REQwNDUxQkEzNkJBQzZDQzQwLzAvMTZFMjhENkU5MUY1MjNF
MURDQTkzRjk2MjZBRjdGRkNDRTg0NkJDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNkUyOEQ2RTkxRjUyM0UxRENB
OTNGOTYyNkFGN0ZGQ0NFODQ2QkNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0VERjgyMTUzQTU3ODZBNjBFMkNGMzY3MUFDRENGMEI5ODA2Q0I4ODFD
MDE5N0REMDQ1MUJBMzZCQUM2Q0M0MC8wLzMxMzYzMjJlMzEzMjJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCogzE
MA0GCSqGSIb3DQEBCwUAA4IBAQBAjSet+pTRiB8Va7AnH4+KkSpEtBJSpS2ue5un
pkk1vZr/1nKBe8BdkQR+iddDoxYTiDv6d9I+v1GO8pGZPUxwj6azVid6ctV9uQZ1
WwB6peYmtKQZrnXQiWNt4flQ+W4vPG5o7rJhMrxyTuOMyWG4dfLbDE8ErajFEo2u
Z3ZOmJM5pn8ekuHq0eYDA7/aL9fHjVEAIJ3A7KWQJQX1nzfNYyxxBZWHFoAcaENw
tbViI6cq+EqHuUrFlbp9JNpXQjntV1wf2eXYssxAqfdAuNKi8rzCk+JfK6Gt199h
zEg9ETdKeVRiF06SkVyLVpQ/FC7sGu/rLdWnXxBWTVQNpS/5
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org