Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e203136363239.roa
File:                     3138312e3136302e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier:          71RGB8Cqa7bj8mepD9MMcvTe4+VpzxDwIdXovx3WRpU=
Subject key identifier:   FF:09:BB:67:BC:AC:BD:CB:59:B8:EB:0E:5D:59:F3:2B:FC:99:E0:52
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       62063199979222E49853C46D40BB3A5016DA3140
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:24 +0000
ROA not before:           Tue 05 Mar 2024 17:47:24 +0000
ROA not after:            Tue 04 Mar 2025 17:52:24 +0000
asID:                     16629
IP address blocks:        181.160.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:06:31:99:97:92:22:e4:98:53:c4:6d:40:bb:3a:50:16:da:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:24 2024 GMT
            Not After : Mar  4 17:52:24 2025 GMT
        Subject: CN=FF09BB67BCACBDCB59B8EB0E5D59F32BFC99E052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:2f:cd:87:2c:62:af:01:c9:c1:49:67:2e:
                    4a:a7:81:85:5b:4b:cc:27:9a:76:85:10:ea:2a:87:
                    87:98:dd:47:81:4b:71:04:3d:ce:15:62:c5:bb:62:
                    4c:6d:79:55:ac:be:63:16:8d:83:fc:a6:04:1d:cf:
                    09:61:0d:47:7f:9f:14:d0:fd:9f:49:98:15:31:7b:
                    e1:47:d0:9b:e3:a3:c7:f7:b3:9b:d8:3d:bb:36:2f:
                    e4:1d:44:33:83:3f:79:97:a7:8a:ff:0e:38:dc:01:
                    c0:43:7e:f8:16:dd:19:21:04:53:eb:60:8a:4b:70:
                    3b:52:d4:ba:f1:2f:21:99:54:ca:26:e0:1d:42:96:
                    d0:0b:d8:5f:07:44:8c:f4:4b:20:87:de:6e:cc:3d:
                    dd:63:59:f1:62:9f:19:c7:ca:f6:d9:a1:4b:b8:a5:
                    96:98:a6:0e:1b:98:5e:35:03:99:13:e2:70:06:2c:
                    d7:82:59:8e:5b:3b:43:34:b0:87:4d:f3:ec:2c:df:
                    0d:47:14:33:f5:e5:95:ac:3c:9e:05:22:2f:3e:3a:
                    5b:80:dc:c3:34:98:c9:82:c5:85:33:53:92:63:26:
                    3a:4e:e7:4e:72:5e:76:cc:83:cd:2f:af:d7:64:db:
                    ee:3e:53:59:00:62:d7:aa:2f:21:12:28:be:bc:38:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:09:BB:67:BC:AC:BD:CB:59:B8:EB:0E:5D:59:F3:2B:FC:99:E0:52
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:ea:50:be:f7:11:0c:67:61:19:65:fe:a3:c9:e1:72:b2:
         e2:60:53:73:97:fe:d6:25:ad:96:28:7c:2d:f9:bc:24:16:0c:
         1a:be:b6:dd:dd:23:fc:0c:bf:de:6f:9d:52:d3:ce:2c:15:76:
         e5:9a:9b:4e:1c:36:d9:5e:bc:f3:47:c0:6d:c8:de:aa:a2:b4:
         f8:4b:8a:fe:41:22:64:72:4e:01:02:39:15:3c:0d:f8:46:dd:
         94:33:10:93:98:c8:99:ab:2f:71:0e:3e:fa:a8:21:09:b5:ad:
         89:4b:3e:07:7b:50:eb:5f:05:55:48:a1:ac:41:9d:6f:b7:20:
         eb:32:16:cf:bd:ff:a3:22:3c:62:8e:8e:92:e2:09:8e:fb:9f:
         84:86:15:ca:0f:06:4f:5e:a0:34:d2:4b:9a:ab:4c:81:47:79:
         6a:23:3f:bd:33:92:53:14:7a:bd:84:ce:5c:39:23:35:d5:8c:
         b1:bc:87:dd:18:d1:8e:6e:ec:1d:45:70:8b:b7:da:3a:e5:0c:
         33:40:16:8c:4d:58:3b:1a:d2:b2:6a:9a:90:a4:0d:36:f8:70:
         63:e7:16:8c:d4:d9:ee:80:8a:7c:23:60:95:1b:8a:fd:28:5d:
         6c:b6:52:33:02:fc:b6:52:a5:0b:97:1e:08:da:05:4e:e9:c3:
         12:27:3e:d9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYgYxmZeSIuSYU8RtQLs6UBbaMUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MjRaFw0yNTAzMDQxNzUyMjRaMDMxMTAvBgNV
BAMTKEZGMDlCQjY3QkNBQ0JEQ0I1OUI4RUIwRTVENTlGMzJCRkM5OUUwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcji/NhyxirwHJwUlnLkqngYVb
S8wnmnaFEOoqh4eY3UeBS3EEPc4VYsW7YkxteVWsvmMWjYP8pgQdzwlhDUd/nxTQ
/Z9JmBUxe+FH0Jvjo8f3s5vYPbs2L+QdRDODP3mXp4r/DjjcAcBDfvgW3RkhBFPr
YIpLcDtS1LrxLyGZVMom4B1CltAL2F8HRIz0SyCH3m7MPd1jWfFinxnHyvbZoUu4
pZaYpg4bmF41A5kT4nAGLNeCWY5bO0M0sIdN8+ws3w1HFDP15ZWsPJ4FIi8+OluA
3MM0mMmCxYUzU5JjJjpO505yXnbMg80vr9dk2+4+U1kAYteqLyESKL68OPN3AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU/wm7Z7ysvctZuOsOXVnzK/yZ4FIwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzgzMTJlMzEzNjMwMmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG1oDANBgkq
hkiG9w0BAQsFAAOCAQEAeuTqUL73EQxnYRll/qPJ4XKy4mBTc5f+1iWtlih8Lfm8
JBYMGr623d0j/Ay/3m+dUtPOLBV25ZqbThw22V6880fAbcjeqqK0+EuK/kEiZHJO
AQI5FTwN+EbdlDMQk5jImasvcQ4++qghCbWtiUs+B3tQ618FVUihrEGdb7cg6zIW
z73/oyI8Yo6OkuIJjvufhIYVyg8GT16gNNJLmqtMgUd5aiM/vTOSUxR6vYTOXDkj
NdWMsbyH3RjRjm7sHUVwi7faOuUMM0AWjE1YOxrSsmqakKQNNvhwY+cWjNTZ7oCK
fCNglRuK/ShdbLZSMwL8tlKlC5ceCNoFTunDEic+2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:06 2024 by rpki-client on console-fra.rpki-client.org