Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
File:                     3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa (raw, json)
Hash identifier:          BiOyibH7DmqXXMAWEhnbh/ujgFPjLvwQYB1r6tejQBg=
Subject key identifier:   DE:71:00:9F:60:37:78:98:2E:17:CC:03:39:A0:1B:18:B7:68:6D:99
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       512451EE2EE8831292E7DFFB0A27463B457D75F4
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
Signing time:             Tue 04 Feb 2025 18:23:43 +0000
ROA not before:           Tue 04 Feb 2025 18:18:43 +0000
ROA not after:            Tue 03 Feb 2026 18:23:43 +0000
asID:                     264685
IP address blocks:        168.227.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:51:ee:2e:e8:83:12:92:e7:df:fb:0a:27:46:3b:45:7d:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Feb  4 18:18:43 2025 GMT
            Not After : Feb  3 18:23:43 2026 GMT
        Subject: CN=DE71009F603778982E17CC0339A01B18B7686D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:9c:59:56:eb:e9:d0:93:cc:1d:3a:f3:5a:
                    9e:36:97:e6:23:44:bb:88:d5:e1:1c:e6:00:07:5c:
                    78:eb:75:b3:31:b6:f8:09:6c:59:de:e3:aa:0a:80:
                    0c:65:f7:ca:ac:45:4f:16:ba:ec:c6:ab:60:15:53:
                    ea:8f:6d:c5:33:7d:ce:3e:09:16:a0:32:9d:63:41:
                    55:6d:45:96:09:79:18:d6:77:fe:dc:01:3a:1e:b2:
                    56:fb:ef:93:9a:a9:4e:a5:da:d8:4b:18:bf:3b:b4:
                    85:a6:81:1c:34:dd:3f:17:27:c1:81:fd:0b:47:cf:
                    2e:c3:72:5c:86:d7:89:87:b8:db:81:3f:d0:e1:19:
                    02:52:80:4b:30:04:3e:09:eb:7c:91:71:28:1e:e2:
                    3e:43:f6:d9:58:c0:03:e7:b1:b7:cc:19:b6:95:3c:
                    4b:c8:5c:f5:2f:f9:22:9d:9b:14:8e:09:3c:02:03:
                    59:b2:c9:c3:ac:e8:08:5e:9f:45:c8:42:38:a4:73:
                    83:46:c0:08:42:e4:63:97:d9:37:2c:a7:78:fa:23:
                    be:cf:54:00:01:eb:ea:f2:33:be:47:b9:ce:41:c0:
                    4b:bc:fb:50:34:d6:54:bd:02:52:ed:40:63:44:75:
                    3e:71:e6:d7:fc:36:0b:1b:8d:9e:e9:fa:9a:31:ba:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:00:9F:60:37:78:98:2E:17:CC:03:39:A0:1B:18:B7:68:6D:99
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:19:82:bf:95:27:11:c1:f5:f9:4d:43:b9:6b:81:82:63:c8:
         d9:58:15:46:57:32:18:4b:8f:62:2c:37:68:b0:d5:4e:0e:5a:
         db:88:ef:ee:94:d4:d1:cc:5c:8b:b0:1a:3e:3c:4a:fd:c7:9a:
         5d:e4:6e:b4:9d:93:0d:01:a3:36:37:63:b6:25:77:ac:0c:3e:
         9e:c5:b6:c2:54:f8:32:59:60:26:5f:b6:a5:d8:9b:84:25:77:
         9f:0a:9a:ba:d1:ec:77:36:5d:89:8c:29:73:2b:e3:04:50:16:
         3c:28:59:ae:d0:13:18:87:fc:5d:d6:15:1a:3c:4c:0d:d8:6c:
         2a:27:d1:9b:c6:3b:3d:bc:84:a6:4e:e3:eb:39:8e:33:b2:3c:
         e8:f9:45:5a:45:f0:68:98:ca:02:71:cd:36:62:16:8d:75:55:
         52:ba:64:a5:cf:ad:7c:98:b7:17:e7:d5:18:d5:bd:bc:01:8f:
         96:a6:bd:22:df:b6:ce:b0:a5:ab:f0:37:8c:a0:33:f6:24:23:
         35:44:42:58:c8:aa:ee:8c:cc:7c:ef:b7:8e:96:99:66:f3:c6:
         ef:d1:3a:30:2d:3f:9f:f3:3d:2f:1c:25:69:4a:f6:d4:45:d3:
         76:6a:65:8b:27:cb:b9:cd:06:3e:a7:70:6e:70:e5:78:2f:75:
         a3:53:67:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUSRR7i7ogxKS59/7CidGO0V9dfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5NTdERTkwRDMzQjhGRTE4N0FGODc0M0U0NEVBRTky
QjlCNzUwNDAeFw0yNTAyMDQxODE4NDNaFw0yNjAyMDMxODIzNDNaMDMxMTAvBgNV
BAMTKERFNzEwMDlGNjAzNzc4OTgyRTE3Q0MwMzM5QTAxQjE4Qjc2ODZEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4pxZVuvp0JPMHTrzWp42l+Yj
RLuI1eEc5gAHXHjrdbMxtvgJbFne46oKgAxl98qsRU8WuuzGq2AVU+qPbcUzfc4+
CRagMp1jQVVtRZYJeRjWd/7cAToeslb775OaqU6l2thLGL87tIWmgRw03T8XJ8GB
/QtHzy7DclyG14mHuNuBP9DhGQJSgEswBD4J63yRcSge4j5D9tlYwAPnsbfMGbaV
PEvIXPUv+SKdmxSOCTwCA1myycOs6Ahen0XIQjikc4NGwAhC5GOX2Tcsp3j6I77P
VAAB6+ryM75Huc5BwEu8+1A01lS9AlLtQGNEdT5x5tf8NgsbjZ7p+poxujDDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3nEAn2A3eJguF8wDOaAbGLdobZkwHwYDVR0j
BBgwFoAUnpV96Q0zuP4Yevh0PkTq6SubdQQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMTY0MTlBNTQxMjM2OTNCNjgyRDZGM0FFNDhFN0I0NUZG
ODIzRkY2OUFDQ0VBN0UzNERBMTcxODc5RDg3RkEzLzAvOUU5NTdERTkwRDMzQjhG
RTE4N0FGODc0M0U0NEVBRTkyQjlCNzUwNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTk1N0RFOTBEMzNCOEZFMTg3
QUY4NzQzRTQ0RUFFOTJCOUI3NTA0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTE2NDE5QTU0MTIzNjkzQjY4MkQ2RjNBRTQ4RTdCNDVGRjgyM0ZGNjlB
Q0NFQTdFMzREQTE3MTg3OUQ4N0ZBMy8wLzMxMzYzODJlMzIzMjM3MmUzOTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqONg
MA0GCSqGSIb3DQEBCwUAA4IBAQAZGYK/lScRwfX5TUO5a4GCY8jZWBVGVzIYS49i
LDdosNVODlrbiO/ulNTRzFyLsBo+PEr9x5pd5G60nZMNAaM2N2O2JXesDD6exbbC
VPgyWWAmX7al2JuEJXefCpq60ex3Nl2JjClzK+MEUBY8KFmu0BMYh/xd1hUaPEwN
2GwqJ9Gbxjs9vISmTuPrOY4zsjzo+UVaRfBomMoCcc02YhaNdVVSumSlz618mLcX
59UY1b28AY+Wpr0i37bOsKWr8DeMoDP2JCM1REJYyKrujMx877eOlplm88bv0Tow
LT+f8z0vHCVpSvbURdN2amWLJ8u5zQY+p3BucOV4L3WjU2cw
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:30:06 2025 by rpki-client