Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/3136382e3138312e3132302e302f32322d3234203d3e20323634383437.roa
File:                     3136382e3138312e3132302e302f32322d3234203d3e20323634383437.roa (raw, json)
Hash identifier:          BqUnTbS68Y02RE3iVkH92p4EtCbvqkMWIEJjYVmwuhw=
Subject key identifier:   7D:60:2F:66:F4:18:CF:4A:03:EB:33:8E:CD:04:DF:6C:D6:E6:04:EB
Certificate issuer:       /CN=A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A
Certificate serial:       25B8CD868226AB27ECCC7CBE8D6E6119FDEE2B4C
Authority key identifier: A4:BC:D2:E8:CA:8A:74:AF:56:27:B1:06:DF:D6:C0:BB:2D:A0:3D:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/3136382e3138312e3132302e302f32322d3234203d3e20323634383437.roa
Signing time:             Tue 05 Mar 2024 18:12:01 +0000
ROA not before:           Tue 05 Mar 2024 18:07:01 +0000
ROA not after:            Tue 04 Mar 2025 18:12:01 +0000
asID:                     264847
IP address blocks:        168.181.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:cd:86:82:26:ab:27:ec:cc:7c:be:8d:6e:61:19:fd:ee:2b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A
        Validity
            Not Before: Mar  5 18:07:01 2024 GMT
            Not After : Mar  4 18:12:01 2025 GMT
        Subject: CN=7D602F66F418CF4A03EB338ECD04DF6CD6E604EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:ea:21:86:01:20:3e:a4:bd:cd:72:72:2a:
                    94:fb:3d:01:8a:13:e7:f4:33:41:b5:8d:cd:dd:bd:
                    13:72:dd:c0:61:5b:b5:7a:f6:98:f3:f7:7e:c7:ff:
                    95:a8:ac:98:0e:59:bc:30:ba:a3:98:17:f6:65:3c:
                    b0:1b:c9:f3:57:80:a3:b8:ef:3e:cb:67:36:bb:ea:
                    40:ef:72:10:ad:f7:e5:71:84:3d:2c:19:c6:e9:d3:
                    8f:1c:30:9a:21:80:1b:b0:4c:ac:19:8a:9f:9b:27:
                    6d:ed:e8:3a:68:9a:a6:3b:65:40:98:50:ff:11:a3:
                    65:b6:90:5b:e2:25:43:5e:39:cc:2e:98:64:48:2a:
                    8c:aa:9e:a2:68:29:ff:9e:da:fa:64:92:19:22:45:
                    d3:ba:8b:37:3c:fe:13:ae:da:8f:62:0a:5c:af:d4:
                    f2:31:02:cc:c4:10:dd:33:4e:91:eb:dd:fc:62:91:
                    cd:9b:b8:c0:5f:79:5b:ca:c0:af:e6:dd:e7:00:64:
                    8c:39:5a:97:0d:c9:a1:d7:4e:0c:02:b0:3a:ad:2d:
                    38:3a:7a:68:2e:81:c7:15:5f:3f:69:94:30:14:aa:
                    cd:a9:6d:94:0b:d6:22:39:1e:41:b9:09:46:10:aa:
                    df:f2:e2:cd:ee:7d:98:b4:29:a0:3c:65:42:2f:8f:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:2F:66:F4:18:CF:4A:03:EB:33:8E:CD:04:DF:6C:D6:E6:04:EB
            X509v3 Authority Key Identifier:
                keyid:A4:BC:D2:E8:CA:8A:74:AF:56:27:B1:06:DF:D6:C0:BB:2D:A0:3D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4BCD2E8CA8A74AF5627B106DFD6C0BB2DA03D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D82461940D6C2A48DBE16DD278C5B0DFF29C5169DCF3A2C5DDB454FE1163C9F4/0/3136382e3138312e3132302e302f32322d3234203d3e20323634383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:4f:94:6c:3b:76:08:33:90:6b:e0:30:e6:5c:2e:4c:55:
         8d:23:53:fd:33:99:88:6c:61:18:a6:34:51:fd:d6:fd:b7:f9:
         94:89:5c:78:8b:ac:60:26:fb:8b:93:a4:a2:ce:b4:fd:f1:c4:
         5c:e5:6e:e7:93:92:cb:d5:0c:37:8a:64:06:03:40:0a:99:da:
         63:c6:0f:09:6e:0c:f0:48:1f:99:9f:7c:66:ac:1b:68:e5:cc:
         eb:6b:18:b9:d2:62:cb:63:e4:bc:14:27:c0:08:9b:49:93:e7:
         f6:ad:63:b4:92:e1:d9:56:8c:11:ae:10:71:a0:27:21:60:8d:
         fa:c3:81:55:f4:6a:d5:9c:98:92:8e:6f:03:8e:13:de:59:ec:
         32:6d:3c:63:86:c6:85:a8:60:6a:34:3c:2a:ba:ec:c9:71:0e:
         15:53:43:8b:e6:1b:70:81:c2:0e:02:e6:17:f2:0f:a5:98:17:
         c5:10:e8:70:6f:e3:81:11:9d:b5:48:8a:a9:a5:cf:c4:08:35:
         cf:e3:20:16:e5:4c:a0:dd:0f:b6:0c:86:32:3d:c1:f8:57:e6:
         43:e1:83:bc:98:e0:ac:8c:e0:26:f5:f1:9a:64:e3:51:35:26:
         5c:7a:71:a9:85:dd:f1:af:f4:f5:50:0b:08:40:28:02:91:36:
         a8:f9:c2:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJbjNhoImqyfszHy+jW5hGf3uK0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCQ0QyRThDQThBNzRBRjU2MjdCMTA2REZENkMwQkIy
REEwM0Q5QTAeFw0yNDAzMDUxODA3MDFaFw0yNTAzMDQxODEyMDFaMDMxMTAvBgNV
BAMTKDdENjAyRjY2RjQxOENGNEEwM0VCMzM4RUNEMDRERjZDRDZFNjA0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqhOohhgEgPqS9zXJyKpT7PQGK
E+f0M0G1jc3dvRNy3cBhW7V69pjz937H/5WorJgOWbwwuqOYF/ZlPLAbyfNXgKO4
7z7LZza76kDvchCt9+VxhD0sGcbp048cMJohgBuwTKwZip+bJ23t6DpomqY7ZUCY
UP8Ro2W2kFviJUNeOcwumGRIKoyqnqJoKf+e2vpkkhkiRdO6izc8/hOu2o9iClyv
1PIxAszEEN0zTpHr3fxikc2buMBfeVvKwK/m3ecAZIw5WpcNyaHXTgwCsDqtLTg6
emgugccVXz9plDAUqs2pbZQL1iI5HkG5CUYQqt/y4s3ufZi0KaA8ZUIvjytDAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfWAvZvQYz0oD6zOOzQTfbNbmBOswHwYDVR0j
BBgwFoAUpLzS6MqKdK9WJ7EG39bAuy2gPZowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODI0NjE5NDBENkMyQTQ4REJFMTZERDI3OEM1QjBERkYy
OUM1MTY5RENGM0EyQzVEREI0NTRGRTExNjNDOUY0LzAvQTRCQ0QyRThDQThBNzRB
RjU2MjdCMTA2REZENkMwQkIyREEwM0Q5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEJDRDJFOENBOEE3NEFGNTYy
N0IxMDZERkQ2QzBCQjJEQTAzRDlBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDgyNDYxOTQwRDZDMkE0OERCRTE2REQyNzhDNUIwREZGMjlDNTE2OURD
RjNBMkM1RERCNDU0RkUxMTYzQzlGNC8wLzMxMzYzODJlMzEzODMxMmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzODM0Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
tXgwDQYJKoZIhvcNAQELBQADggEBAFHQT5RsO3YIM5Br4DDmXC5MVY0jU/0zmYhs
YRimNFH91v23+ZSJXHiLrGAm+4uTpKLOtP3xxFzlbueTksvVDDeKZAYDQAqZ2mPG
DwluDPBIH5mffGasG2jlzOtrGLnSYstj5LwUJ8AIm0mT5/atY7SS4dlWjBGuEHGg
JyFgjfrDgVX0atWcmJKObwOOE95Z7DJtPGOGxoWoYGo0PCq67MlxDhVTQ4vmG3CB
wg4C5hfyD6WYF8UQ6HBv44ERnbVIiqmlz8QINc/jIBblTKDdD7YMhjI9wfhX5kPh
g7yY4KyM4Cb18Zpk41E1Jlx6camF3fGv9PVQCwhAKAKRNqj5woQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:55 2024 by rpki-client on console-fra.rpki-client.org