Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3139322e3130302e3136312e302f32342d3234203d3e2038313531.roa
File:                     3139322e3130302e3136312e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier:          RkXSDi+hKxlXnIwqOV/JesBGxvT3tyS5ItxeJAKmoRM=
Subject key identifier:   B5:DE:9D:4F:79:40:BE:D2:01:87:C1:04:B2:8D:39:DB:49:7F:AC:BC
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       1D07AA7F385EF026823BE73BDBA96946B2E7FCFD
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3139322e3130302e3136312e302f32342d3234203d3e2038313531.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     8151
IP address blocks:        192.100.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:07:aa:7f:38:5e:f0:26:82:3b:e7:3b:db:a9:69:46:b2:e7:fc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=B5DE9D4F7940BED20187C104B28D39DB497FACBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:72:d3:8e:ae:d0:1c:cb:a8:43:65:5c:60:
                    4d:bf:51:d0:09:fd:9d:66:a5:88:7d:6a:ff:b3:7c:
                    78:8e:2e:4d:0b:a5:c0:78:a5:43:98:18:ab:01:ee:
                    ba:88:b2:96:34:0d:0e:d4:f0:8e:83:ae:86:88:7e:
                    6b:69:c3:91:4b:4f:db:c5:26:d4:a5:93:81:25:a8:
                    db:92:2f:23:cd:80:7c:39:bb:8a:98:3f:fa:45:3d:
                    96:7a:97:8d:f3:d1:56:73:16:eb:2d:e7:43:48:31:
                    c6:73:eb:5b:c9:f6:38:3f:b6:ae:13:ac:82:ae:c3:
                    08:65:5a:85:2f:8e:7f:91:e1:45:3f:11:f5:d8:57:
                    51:c4:c7:52:90:f0:e4:35:9f:e6:5c:7c:e9:9b:76:
                    1f:ff:64:7b:9b:c8:fb:fb:94:9c:53:b9:16:f8:d9:
                    e5:e8:db:4e:57:62:81:4d:58:a9:af:f2:ac:3d:1a:
                    49:59:e5:d6:61:15:3e:ba:35:11:3a:78:e0:70:ce:
                    92:b9:ff:0c:a5:53:10:fa:5e:46:ca:6b:85:a4:5c:
                    61:81:35:1e:b3:8d:89:b3:f3:22:48:5a:19:28:c9:
                    fd:0c:30:1c:c3:63:41:62:85:15:20:ae:30:b7:fc:
                    b3:1f:f7:19:68:5b:11:c9:60:f0:27:5a:07:bb:06:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:9D:4F:79:40:BE:D2:01:87:C1:04:B2:8D:39:DB:49:7F:AC:BC
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3139322e3130302e3136312e302f32342d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:bd:0e:7e:60:80:ec:34:7f:c7:68:a5:60:94:a6:15:00:
         56:5c:b8:8b:2d:82:10:c7:c3:bc:8c:d5:6f:36:88:aa:19:1f:
         ad:eb:54:34:f4:fb:5b:98:0d:cf:16:04:ba:82:c7:7d:98:5c:
         08:39:ed:2f:62:b0:e5:c4:89:47:65:72:b2:ae:46:29:99:a6:
         53:59:b9:07:3c:b0:54:12:f3:e3:46:5a:a4:4e:9b:5a:97:f1:
         77:69:74:4e:67:f0:ea:6f:da:3b:9c:26:bb:64:a7:17:e2:27:
         de:e4:b5:96:7a:a1:9b:5d:4c:50:72:ee:63:18:c7:47:d4:52:
         37:10:c8:1d:b5:6c:ce:eb:ad:a6:2c:60:01:98:66:8b:7b:c0:
         ec:57:23:66:fd:15:e4:38:42:77:a0:a0:ed:ba:82:d4:47:5f:
         48:3a:53:c1:81:d6:25:ad:77:b3:4e:fc:f2:d5:35:5b:29:33:
         29:77:08:b7:ee:ff:d7:a6:9d:33:e7:12:76:8b:a6:4c:0c:20:
         03:55:a0:ea:8d:a9:e2:04:46:d8:88:d0:23:bf:a7:ad:cc:2a:
         6a:52:50:d8:a7:9c:23:56:63:7e:1e:7e:24:ce:84:da:18:c9:
         08:57:cc:dd:21:b4:20:1a:63:bd:06:fa:c6:d1:45:a5:28:25:
         a6:39:a9:d4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHQeqfzhe8CaCO+c726lpRrLn/P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEMzhDRkRDOUNGREM0MUM2MTdFRjkyQUQ3NTEyMjU5
MEQ5M0U4NzAeFw0yNDAzMDUxODAxMzFaFw0yNTAzMDQxODA2MzFaMDMxMTAvBgNV
BAMTKEI1REU5RDRGNzk0MEJFRDIwMTg3QzEwNEIyOEQzOURCNDk3RkFDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1XLTjq7QHMuoQ2VcYE2/UdAJ
/Z1mpYh9av+zfHiOLk0LpcB4pUOYGKsB7rqIspY0DQ7U8I6DroaIfmtpw5FLT9vF
JtSlk4ElqNuSLyPNgHw5u4qYP/pFPZZ6l43z0VZzFust50NIMcZz61vJ9jg/tq4T
rIKuwwhlWoUvjn+R4UU/EfXYV1HEx1KQ8OQ1n+ZcfOmbdh//ZHubyPv7lJxTuRb4
2eXo205XYoFNWKmv8qw9GklZ5dZhFT66NRE6eOBwzpK5/wylUxD6XkbKa4WkXGGB
NR6zjYmz8yJIWhkoyf0MMBzDY0FihRUgrjC3/LMf9xloWxHJYPAnWge7Bj1nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtd6dT3lAvtIBh8EEso0520l/rLwwHwYDVR0j
BBgwFoAUttOM/cnP3EHGF++SrXUSJZDZPocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDFBMDU1REJGMzZGQkIyRjhFNUFCNTFBMUUxOURGMjg2
MEY1ODAyRUYxRDRDQkRBOENFN0EyNTA2N0UxRjMzLzAvQjZEMzhDRkRDOUNGREM0
MUM2MTdFRjkyQUQ3NTEyMjU5MEQ5M0U4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkQzOENGREM5Q0ZEQzQxQzYx
N0VGOTJBRDc1MTIyNTkwRDkzRTg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQxQTA1NURCRjM2RkJCMkY4RTVBQjUxQTFFMTlERjI4NjBGNTgwMkVG
MUQ0Q0JEQThDRTdBMjUwNjdFMUYzMy8wLzMxMzkzMjJlMzEzMDMwMmUzMTM2MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMxMzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBkoTAN
BgkqhkiG9w0BAQsFAAOCAQEAh7e9Dn5ggOw0f8dopWCUphUAVly4iy2CEMfDvIzV
bzaIqhkfretUNPT7W5gNzxYEuoLHfZhcCDntL2Kw5cSJR2Vysq5GKZmmU1m5Bzyw
VBLz40ZapE6bWpfxd2l0Tmfw6m/aO5wmu2SnF+In3uS1lnqhm11MUHLuYxjHR9RS
NxDIHbVszuutpixgAZhmi3vA7FcjZv0V5DhCd6Cg7bqC1EdfSDpTwYHWJa13s078
8tU1WykzKXcIt+7/16adM+cSdoumTAwgA1Wg6o2p4gRG2IjQI7+nrcwqalJQ2Kec
I1Zjfh5+JM6E2hjJCFfM3SG0IBpjvQb6xtFFpSglpjmp1A==
-----END CERTIFICATE-----
Generated at Wed May 1 13:28:27 2024 by rpki-client on console-fra.rpki-client.org