Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa
File:                     3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa (raw, json)
Hash identifier:          spa87BiTzMMuRoFXmktD38IuU1AL+9T1x6r18/4Ya30=
Subject key identifier:   FC:58:B3:E9:27:E8:34:CD:96:4C:6F:5A:3E:CE:A5:19:C2:D2:30:C8
Certificate issuer:       /CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
Certificate serial:       66B8B11059620DE59F869D02F8D11184824A243C
Authority key identifier: 5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa
Signing time:             Tue 05 Mar 2024 17:55:27 +0000
ROA not before:           Tue 05 Mar 2024 17:50:27 +0000
ROA not after:            Tue 04 Mar 2025 17:55:27 +0000
asID:                     265633
IP address blocks:        181.189.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b8:b1:10:59:62:0d:e5:9f:86:9d:02:f8:d1:11:84:82:4a:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
        Validity
            Not Before: Mar  5 17:50:27 2024 GMT
            Not After : Mar  4 17:55:27 2025 GMT
        Subject: CN=FC58B3E927E834CD964C6F5A3ECEA519C2D230C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:2b:0a:83:59:58:30:27:fe:ea:b1:0f:b1:
                    e7:7e:28:3f:c6:ef:a5:71:dd:3e:07:a3:17:df:d7:
                    13:23:7b:ea:fd:c9:cc:8e:fc:4d:e9:7c:07:f6:1a:
                    e4:41:7e:0b:9d:dc:3c:12:31:ca:f7:62:96:35:7d:
                    d9:b1:96:ea:ac:ce:d4:e0:0a:78:02:37:c0:6a:3c:
                    6f:da:38:d9:9a:99:e4:ab:7a:dc:8a:59:fc:7d:ab:
                    4e:25:49:7e:df:26:9d:b4:e2:37:8b:52:07:d2:a9:
                    43:6f:4e:26:a2:da:3c:cb:5b:31:43:ff:3b:75:00:
                    7c:3d:22:c1:82:3f:95:48:a9:71:09:42:36:a2:3b:
                    34:ca:bd:2e:e4:96:96:12:83:c3:49:7f:1a:4e:ce:
                    99:6b:8f:d5:d3:fd:21:b0:49:fa:2f:10:06:d0:9e:
                    91:9a:61:fc:ae:e6:c3:c6:b4:4f:41:1b:2b:b0:0f:
                    e3:ca:47:a2:fa:25:82:52:6b:a7:75:89:9b:2d:1c:
                    b4:b0:ce:95:44:4f:05:c9:cc:e2:18:72:bc:97:53:
                    b1:8e:cb:66:62:7a:2b:4f:ea:0a:69:f4:37:80:46:
                    71:cd:9b:c4:5f:c0:f0:25:4a:e1:e5:be:cc:8a:f6:
                    ca:ab:2d:24:05:5e:5d:20:3c:c5:b4:b2:da:c5:b4:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:58:B3:E9:27:E8:34:CD:96:4C:6F:5A:3E:CE:A5:19:C2:D2:30:C8
            X509v3 Authority Key Identifier:
                keyid:5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:1b:ab:81:a8:81:46:f5:50:f5:4b:ba:f4:0d:b0:96:9c:
         e5:14:83:ba:ab:72:71:29:10:d8:b2:e2:be:75:64:99:4b:74:
         0d:21:4d:9e:6b:b1:9b:15:20:ba:40:1b:18:9e:3f:ec:a9:ce:
         9e:64:da:1c:49:b0:94:4e:29:fb:56:10:8f:a9:99:ac:1d:9e:
         fc:a7:d8:e0:a1:57:57:35:6c:4a:4d:f0:65:b3:c8:11:c1:8c:
         bb:ea:5f:ca:15:d8:3b:c9:46:a4:d7:38:4c:08:c0:27:18:ad:
         47:c3:6a:c9:99:e3:80:ec:43:39:ea:b0:38:af:8c:3f:ae:b8:
         6f:a0:ca:23:39:08:5a:39:8e:0a:64:8d:60:55:e8:0f:a6:ae:
         f9:88:cb:71:25:f7:33:ce:aa:2f:a7:8a:a2:c9:ac:a4:44:3f:
         11:62:46:b4:fc:91:e7:4c:c3:17:f3:17:a6:d6:d7:13:30:50:
         19:70:44:41:b7:1b:82:ec:49:77:ed:e4:78:ea:19:97:0f:17:
         0a:51:6a:77:c6:b2:fc:84:81:f7:10:be:4a:06:f8:78:eb:1c:
         62:89:34:e9:d3:4d:3d:ec:eb:31:81:8d:25:a2:70:07:e2:df:
         49:6c:d7:0f:f7:cd:d7:ae:ed:b9:b3:3a:a9:a2:db:6a:25:62:
         05:78:75:8a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZrixEFliDeWfhp0C+NERhIJKJDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUzQjUxOTlFQURBNzMyOUEzOTJFRjE3NDRFQzdEQzhC
MTlCOUFDRjAeFw0yNDAzMDUxNzUwMjdaFw0yNTAzMDQxNzU1MjdaMDMxMTAvBgNV
BAMTKEZDNThCM0U5MjdFODM0Q0Q5NjRDNkY1QTNFQ0VBNTE5QzJEMjMwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQHysKg1lYMCf+6rEPsed+KD/G
76Vx3T4Hoxff1xMje+r9ycyO/E3pfAf2GuRBfgud3DwSMcr3YpY1fdmxluqsztTg
CngCN8BqPG/aONmameSretyKWfx9q04lSX7fJp204jeLUgfSqUNvTiai2jzLWzFD
/zt1AHw9IsGCP5VIqXEJQjaiOzTKvS7klpYSg8NJfxpOzplrj9XT/SGwSfovEAbQ
npGaYfyu5sPGtE9BGyuwD+PKR6L6JYJSa6d1iZstHLSwzpVETwXJzOIYcryXU7GO
y2ZieitP6gpp9DeARnHNm8RfwPAlSuHlvsyK9sqrLSQFXl0gPMW0strFtKvJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/Fiz6SfoNM2WTG9aPs6lGcLSMMgwHwYDVR0j
BBgwFoAUXjtRmeracymjku8XROx9yLGbms8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjhCMkY2NzNENjYyQjY1QUQyRThBNDU5RkZENTE1MjIy
NDIwQzNBNzRENjEwNjI0M0ExNzEzM0IxNzVFMjI0LzAvNUUzQjUxOTlFQURBNzMy
OUEzOTJFRjE3NDRFQzdEQzhCMTlCOUFDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTNCNTE5OUVBREE3MzI5QTM5
MkVGMTc0NEVDN0RDOEIxOUI5QUNGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI4QjJGNjczRDY2MkI2NUFEMkU4QTQ1OUZGRDUxNTIyMjQyMEMzQTc0
RDYxMDYyNDNBMTcxMzNCMTc1RTIyNC8wLzMxMzgzMTJlMzEzODM5MmUzNTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtb06
MA0GCSqGSIb3DQEBCwUAA4IBAQA7QRurgaiBRvVQ9Uu69A2wlpzlFIO6q3JxKRDY
suK+dWSZS3QNIU2ea7GbFSC6QBsYnj/sqc6eZNocSbCUTin7VhCPqZmsHZ78p9jg
oVdXNWxKTfBls8gRwYy76l/KFdg7yUak1zhMCMAnGK1Hw2rJmeOA7EM56rA4r4w/
rrhvoMojOQhaOY4KZI1gVegPpq75iMtxJfczzqovp4qiyaykRD8RYka0/JHnTMMX
8xem1tcTMFAZcERBtxuC7El37eR46hmXDxcKUWp3xrL8hIH3EL5KBvh46xxiiTTp
00097OsxgY0lonAH4t9JbNcP983Xru25szqpottqJWIFeHWK
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org