Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139372e302f32342d3234203d3e20323635363939.roa
File:                     3136322e31322e3139372e302f32342d3234203d3e20323635363939.roa (raw, json)
Hash identifier:          hyjiWzL/3BJdzELO09nlZV2PZbOSfj+ri/62H4D/aLE=
Subject key identifier:   B9:CD:F0:EF:45:72:3E:D2:B3:1C:44:7B:DB:6F:F5:1E:93:21:D1:87
Certificate issuer:       /CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
Certificate serial:       12B5424AE1D3658C86D67C035598B5F6EE57F437
Authority key identifier: 16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139372e302f32342d3234203d3e20323635363939.roa
Signing time:             Tue 05 Mar 2024 18:20:48 +0000
ROA not before:           Tue 05 Mar 2024 18:15:48 +0000
ROA not after:            Tue 04 Mar 2025 18:20:48 +0000
asID:                     265699
IP address blocks:        162.12.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:42:4a:e1:d3:65:8c:86:d6:7c:03:55:98:b5:f6:ee:57:f4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB
        Validity
            Not Before: Mar  5 18:15:48 2024 GMT
            Not After : Mar  4 18:20:48 2025 GMT
        Subject: CN=B9CDF0EF45723ED2B31C447BDB6FF51E9321D187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:fd:88:d3:c3:26:b4:8b:bf:89:75:94:11:
                    96:53:5e:5a:30:37:1c:67:f7:61:8e:01:f6:80:8b:
                    c2:f6:44:36:3c:9f:63:19:d6:4e:8d:af:4d:56:4a:
                    e9:6b:f5:8f:12:85:f9:33:6c:03:60:74:d4:ac:bf:
                    be:9b:16:5e:50:f9:78:b6:19:f9:57:60:ee:cb:40:
                    90:0a:b3:c3:75:0d:73:bc:15:65:46:db:92:60:ad:
                    c8:ea:d6:b7:47:6c:ce:78:36:5e:0c:4a:56:ce:84:
                    ad:56:4a:48:15:37:a1:ae:c0:a6:4f:eb:53:44:a0:
                    fc:85:50:96:62:69:79:bf:6d:01:f5:5c:b2:12:8f:
                    62:18:2d:f0:31:70:af:83:0c:6e:7e:76:cc:ba:a9:
                    92:dd:4c:f8:1f:44:bf:b2:b3:35:f9:7f:a4:3a:09:
                    55:59:7c:a3:20:82:3e:4f:99:06:57:ac:ab:c7:96:
                    c0:1b:66:df:5f:eb:5d:a9:fb:ad:30:d4:d2:c8:7f:
                    62:8a:f6:c6:66:94:cd:70:fe:c5:b1:da:02:35:17:
                    9f:b4:83:7f:7b:2b:49:68:c0:f4:6b:44:94:ba:57:
                    16:41:f4:03:90:bb:0b:ac:be:a0:70:b9:19:d2:9c:
                    65:bd:c1:d6:99:c0:3d:48:80:73:3b:31:51:c0:0a:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:F0:EF:45:72:3E:D2:B3:1C:44:7B:DB:6F:F5:1E:93:21:D1:87
            X509v3 Authority Key Identifier:
                keyid:16:E2:8D:6E:91:F5:23:E1:DC:A9:3F:96:26:AF:7F:FC:CE:84:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16E28D6E91F523E1DCA93F9626AF7FFCCE846BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEDF82153A5786A60E2CF3671ACDCF0B9806CB881C0197DD0451BA36BAC6CC40/0/3136322e31322e3139372e302f32342d3234203d3e20323635363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:f6:6a:6f:1e:74:4e:f1:41:56:7b:40:b6:e9:07:43:a6:
         83:41:89:a8:0c:c5:63:ba:3f:61:9a:02:3a:46:dd:0f:70:38:
         cb:af:da:2b:0d:8a:61:20:50:dc:86:fe:af:5c:e5:06:c1:80:
         0f:2b:f4:dc:58:db:e4:96:04:1a:c2:f7:20:36:05:b0:7c:b1:
         a9:88:5e:0f:05:cb:ab:e6:73:e1:6a:5d:0e:d0:09:93:09:06:
         22:9a:bf:80:83:46:67:46:55:c6:37:9b:0b:32:91:c0:b6:a1:
         e6:ae:f6:37:d1:fa:f0:65:cb:8d:53:46:00:d2:b2:5c:23:26:
         9c:4f:8f:cc:6a:13:22:a0:9a:ae:2e:0b:53:3e:1c:6b:4b:4a:
         f4:cb:c1:46:7a:ae:c7:cf:58:ab:54:7f:55:c1:52:37:af:fc:
         dd:39:32:fa:7f:fe:b6:95:0e:39:e2:be:fd:d0:a8:0d:7d:37:
         c9:e8:45:68:b2:7c:93:5f:4e:2b:18:ab:15:c2:44:2c:11:56:
         c8:16:a8:ac:23:99:05:7a:48:96:0c:9a:38:25:49:a8:08:5c:
         4c:54:f0:0f:2b:91:38:dd:aa:84:31:84:90:27:59:f4:17:a4:
         68:fd:88:0b:1f:48:ae:0a:7a:27:bb:c5:fa:a6:65:58:85:23:
         28:8a:44:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUErVCSuHTZYyG1nwDVZi19u5X9DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMjhENkU5MUY1MjNFMURDQTkzRjk2MjZBRjdGRkND
RTg0NkJDQjAeFw0yNDAzMDUxODE1NDhaFw0yNTAzMDQxODIwNDhaMDMxMTAvBgNV
BAMTKEI5Q0RGMEVGNDU3MjNFRDJCMzFDNDQ3QkRCNkZGNTFFOTMyMUQxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYP2I08MmtIu/iXWUEZZTXlow
Nxxn92GOAfaAi8L2RDY8n2MZ1k6Nr01WSulr9Y8ShfkzbANgdNSsv76bFl5Q+Xi2
GflXYO7LQJAKs8N1DXO8FWVG25Jgrcjq1rdHbM54Nl4MSlbOhK1WSkgVN6GuwKZP
61NEoPyFUJZiaXm/bQH1XLISj2IYLfAxcK+DDG5+dsy6qZLdTPgfRL+yszX5f6Q6
CVVZfKMggj5PmQZXrKvHlsAbZt9f612p+60w1NLIf2KK9sZmlM1w/sWx2gI1F5+0
g397K0lowPRrRJS6VxZB9AOQuwusvqBwuRnSnGW9wdaZwD1IgHM7MVHACifPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuc3w70VyPtKzHER722/1HpMh0YcwHwYDVR0j
BBgwFoAUFuKNbpH1I+HcqT+WJq9//M6Ea8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRURGODIxNTNBNTc4NkE2MEUyQ0YzNjcxQUNEQ0YwQjk4
MDZDQjg4MUMwMTk3REQwNDUxQkEzNkJBQzZDQzQwLzAvMTZFMjhENkU5MUY1MjNF
MURDQTkzRjk2MjZBRjdGRkNDRTg0NkJDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNkUyOEQ2RTkxRjUyM0UxRENB
OTNGOTYyNkFGN0ZGQ0NFODQ2QkNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0VERjgyMTUzQTU3ODZBNjBFMkNGMzY3MUFDRENGMEI5ODA2Q0I4ODFD
MDE5N0REMDQ1MUJBMzZCQUM2Q0M0MC8wLzMxMzYzMjJlMzEzMjJlMzEzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAogzF
MA0GCSqGSIb3DQEBCwUAA4IBAQBOvPZqbx50TvFBVntAtukHQ6aDQYmoDMVjuj9h
mgI6Rt0PcDjLr9orDYphIFDchv6vXOUGwYAPK/TcWNvklgQawvcgNgWwfLGpiF4P
Bcur5nPhal0O0AmTCQYimr+Ag0ZnRlXGN5sLMpHAtqHmrvY30frwZcuNU0YA0rJc
IyacT4/MahMioJquLgtTPhxrS0r0y8FGeq7Hz1irVH9VwVI3r/zdOTL6f/62lQ45
4r790KgNfTfJ6EVosnyTX04rGKsVwkQsEVbIFqisI5kFekiWDJo4JUmoCFxMVPAP
K5E43aqEMYSQJ1n0F6Ro/YgLH0iuCnonu8X6pmVYhSMoikSU
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org