Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa
File:                     3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa (raw, json)
Hash identifier:          V838udtN5Y8NJLLzlZRep4jg/mmgzuaq1n9cE70jKg0=
Subject key identifier:   26:38:69:F9:37:90:7D:F6:89:57:28:19:98:81:14:AB:E4:00:90:D3
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       65D14815D1B00D9437E2A27752E2D121EFBE41D3
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa
Signing time:             Tue 05 Mar 2024 18:14:40 +0000
ROA not before:           Tue 05 Mar 2024 18:09:40 +0000
ROA not after:            Tue 04 Mar 2025 18:14:40 +0000
asID:                     264685
IP address blocks:        168.227.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d1:48:15:d1:b0:0d:94:37:e2:a2:77:52:e2:d1:21:ef:be:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Mar  5 18:09:40 2024 GMT
            Not After : Mar  4 18:14:40 2025 GMT
        Subject: CN=263869F937907DF689572819988114ABE40090D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:a4:7b:4e:e3:ed:ab:75:88:59:95:67:24:
                    44:50:da:10:0b:86:6b:90:b4:14:e3:7d:33:be:9f:
                    05:dc:dd:f6:4e:a7:f5:73:38:12:3c:93:22:be:48:
                    0a:d9:89:5c:b3:71:63:d8:9b:e6:08:ff:b4:22:4d:
                    b8:99:9c:ee:aa:78:62:06:1f:3d:bd:0e:18:f3:09:
                    ef:08:75:89:20:d2:eb:17:a7:e1:28:55:c2:54:2e:
                    8c:61:c3:24:e7:07:7c:ad:fd:a3:23:59:ff:45:ac:
                    09:e6:fa:fb:98:23:bc:1e:22:ba:01:f7:51:fe:00:
                    1a:1d:ae:30:05:83:c3:ef:05:d3:bc:45:05:0a:5a:
                    69:ab:a2:5d:a6:f2:42:bc:26:34:7a:74:39:2d:4c:
                    ea:ee:87:c6:01:55:69:d6:ed:c4:ce:b1:7b:f6:d3:
                    f1:02:a2:00:5b:18:3c:00:4b:42:42:c4:94:ef:3f:
                    4b:c0:af:5d:bf:45:dc:27:ce:6e:04:4e:22:3b:0e:
                    9e:7b:a8:44:94:67:53:ed:85:e0:a0:ea:8d:48:9e:
                    d4:cd:80:77:fe:7c:5a:e4:1e:a7:d6:2c:d2:e5:27:
                    8e:75:d3:f3:9d:ec:1c:15:1f:8d:c7:b9:8a:77:31:
                    75:29:04:8a:55:d2:f9:11:ad:6b:91:5f:e0:61:fa:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:69:F9:37:90:7D:F6:89:57:28:19:98:81:14:AB:E4:00:90:D3
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:3e:34:b6:c8:91:6a:9a:ec:9a:af:5e:dc:2b:fd:b4:58:
         e4:cb:ae:20:8e:d9:a4:d9:60:d3:76:39:f8:9f:cc:bb:d4:30:
         6c:6c:48:48:fe:c2:6e:ca:71:f7:cf:81:c6:b0:e2:31:57:4a:
         9a:60:74:9e:8e:32:a2:f4:77:52:29:20:62:48:96:be:79:1f:
         51:ed:9f:ff:bd:fd:83:e3:fc:11:5f:c3:bf:f8:23:d4:4e:97:
         8c:a4:ef:ee:43:ea:bd:96:83:4d:ef:af:d0:27:ae:4f:35:90:
         b7:36:f9:b2:43:c4:75:0c:e4:f7:35:c7:63:23:db:fc:f8:64:
         fb:8c:5c:8b:4d:91:97:c5:21:99:0a:22:32:2f:da:7a:ba:50:
         e9:1b:f9:6e:c1:c8:46:d6:1f:08:79:47:97:79:7d:d5:ad:fb:
         ca:01:df:e8:1c:3d:a5:ee:42:f7:ad:ca:eb:2b:f5:1f:50:b7:
         34:e1:0c:ed:6c:71:af:e8:10:0f:5a:4e:6e:89:d4:71:f5:92:
         dd:c9:80:21:80:e5:17:c8:cc:07:2b:ba:36:a7:62:f5:c8:4f:
         23:e2:96:c4:7c:85:d9:8f:68:e7:08:f7:63:4a:4b:0f:1d:b3:
         b2:3d:1b:95:d4:48:d2:fc:97:ad:d6:08:67:6e:02:1f:b3:5b:
         0b:88:14:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZdFIFdGwDZQ34qJ3UuLRIe++QdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5NTdERTkwRDMzQjhGRTE4N0FGODc0M0U0NEVBRTky
QjlCNzUwNDAeFw0yNDAzMDUxODA5NDBaFw0yNTAzMDQxODE0NDBaMDMxMTAvBgNV
BAMTKDI2Mzg2OUY5Mzc5MDdERjY4OTU3MjgxOTk4ODExNEFCRTQwMDkwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tKR7TuPtq3WIWZVnJERQ2hAL
hmuQtBTjfTO+nwXc3fZOp/VzOBI8kyK+SArZiVyzcWPYm+YI/7QiTbiZnO6qeGIG
Hz29DhjzCe8IdYkg0usXp+EoVcJULoxhwyTnB3yt/aMjWf9FrAnm+vuYI7weIroB
91H+ABodrjAFg8PvBdO8RQUKWmmrol2m8kK8JjR6dDktTOruh8YBVWnW7cTOsXv2
0/ECogBbGDwAS0JCxJTvP0vAr12/Rdwnzm4ETiI7Dp57qESUZ1PtheCg6o1IntTN
gHf+fFrkHqfWLNLlJ4510/Od7BwVH43HuYp3MXUpBIpV0vkRrWuRX+Bh+jYzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJjhp+TeQffaJVygZmIEUq+QAkNMwHwYDVR0j
BBgwFoAUnpV96Q0zuP4Yevh0PkTq6SubdQQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMTY0MTlBNTQxMjM2OTNCNjgyRDZGM0FFNDhFN0I0NUZG
ODIzRkY2OUFDQ0VBN0UzNERBMTcxODc5RDg3RkEzLzAvOUU5NTdERTkwRDMzQjhG
RTE4N0FGODc0M0U0NEVBRTkyQjlCNzUwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTk1N0RFOTBEMzNCOEZFMTg3
QUY4NzQzRTQ0RUFFOTJCOUI3NTA0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTE2NDE5QTU0MTIzNjkzQjY4MkQ2RjNBRTQ4RTdCNDVGRjgyM0ZGNjlB
Q0NFQTdFMzREQTE3MTg3OUQ4N0ZBMy8wLzMxMzYzODJlMzIzMjM3MmUzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqONg
MA0GCSqGSIb3DQEBCwUAA4IBAQCrcj40tsiRaprsmq9e3Cv9tFjky64gjtmk2WDT
djn4n8y71DBsbEhI/sJuynH3z4HGsOIxV0qaYHSejjKi9HdSKSBiSJa+eR9R7Z//
vf2D4/wRX8O/+CPUTpeMpO/uQ+q9loNN76/QJ65PNZC3NvmyQ8R1DOT3NcdjI9v8
+GT7jFyLTZGXxSGZCiIyL9p6ulDpG/luwchG1h8IeUeXeX3VrfvKAd/oHD2l7kL3
rcrrK/UfULc04QztbHGv6BAPWk5uidRx9ZLdyYAhgOUXyMwHK7o2p2L1yE8j4pbE
fIXZj2jnCPdjSksPHbOyPRuV1EjS/Jet1ghnbgIfs1sLiBRY
-----END CERTIFICATE-----
Generated at Fri May 10 19:16:14 2024 by rpki-client on console-ams.rpki-client.org