Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
File:                     3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa (raw, json)
Hash identifier:          YJcNyehOxjcKjgA7GQWGR+RPZeWbFybHOuFpG4BLeRA=
Subject key identifier:   E6:5B:3D:39:5E:73:AB:0A:DA:70:BF:58:1D:3C:AA:F4:E5:87:71:7B
Certificate issuer:       /CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
Certificate serial:       43D2F813806764E0ED037154F0605D58B09F6FC9
Authority key identifier: 16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
Signing time:             Tue 05 Mar 2024 18:11:50 +0000
ROA not before:           Tue 05 Mar 2024 18:06:50 +0000
ROA not after:            Tue 04 Mar 2025 18:11:50 +0000
asID:                     272024
IP address blocks:        181.189.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d2:f8:13:80:67:64:e0:ed:03:71:54:f0:60:5d:58:b0:9f:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
        Validity
            Not Before: Mar  5 18:06:50 2024 GMT
            Not After : Mar  4 18:11:50 2025 GMT
        Subject: CN=E65B3D395E73AB0ADA70BF581D3CAAF4E587717B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:71:c0:e2:fd:73:62:20:11:84:ec:ef:20:
                    51:43:41:5c:bb:ac:1a:3e:8b:19:ed:9b:a7:e6:d1:
                    0c:70:60:c8:12:61:8b:d7:59:65:4f:bf:68:6d:89:
                    36:55:a0:69:b7:ea:a5:b8:5c:6d:37:d0:e8:3f:61:
                    85:b3:83:76:05:e0:b0:f4:ad:f2:6a:b4:0b:e2:1a:
                    06:08:1a:e5:48:0c:f6:7e:e0:7d:5c:88:8d:bb:9f:
                    32:a7:77:a5:5c:f2:19:39:fd:e7:ba:7c:d8:cb:cb:
                    3e:5b:96:c1:57:d8:21:f5:c2:09:14:8e:37:e8:2e:
                    69:e6:1d:ea:27:26:b2:ed:9f:d4:17:84:99:45:b8:
                    98:ae:0f:18:81:d9:21:9d:1c:6d:e2:62:97:c0:77:
                    7a:10:77:23:98:97:0f:a4:2a:2a:bc:81:7a:18:1b:
                    27:0a:ed:45:1b:c4:41:29:7e:a7:60:af:db:85:1d:
                    13:e7:86:80:c4:05:e3:fc:f8:ec:ec:a9:0a:51:f2:
                    a1:0d:38:da:cc:4e:d6:d4:eb:77:4c:8d:7e:0a:03:
                    3b:05:98:63:77:56:89:de:9a:22:46:3c:2f:83:a6:
                    a6:6b:63:2c:23:60:d0:94:a0:e8:e8:77:8f:3f:e3:
                    07:8e:3d:69:33:a7:9b:d6:7a:e2:81:6e:49:b7:97:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5B:3D:39:5E:73:AB:0A:DA:70:BF:58:1D:3C:AA:F4:E5:87:71:7B
            X509v3 Authority Key Identifier:
                keyid:16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:e8:87:a6:64:e7:82:36:27:16:1f:1c:d6:72:6b:91:5b:ef:
         02:ce:c1:c9:b8:92:5b:a9:e5:c8:84:49:56:f7:24:b2:9a:85:
         be:ec:59:4b:39:c0:20:26:64:e2:48:c1:74:16:fc:14:ee:6b:
         13:67:6c:da:1f:ca:7e:04:7a:e9:fa:8b:32:b9:27:98:d7:19:
         51:02:7b:f9:79:f6:ea:d1:98:55:52:4d:0d:d0:a5:9c:ad:25:
         48:c8:59:f8:37:03:05:e3:62:ad:9d:ed:31:28:6a:7e:15:42:
         3a:c3:dc:62:2f:bb:eb:36:a4:e2:93:5d:c3:7e:8f:1d:26:d9:
         0c:a0:5a:2b:ee:50:93:ef:c3:50:d8:0f:f3:ba:b1:81:3b:c1:
         86:e2:43:3f:9d:17:09:4b:69:97:b1:c7:11:31:98:a6:7a:2e:
         d2:28:43:a2:fd:df:36:66:1c:0b:c8:24:9b:f2:e2:2a:f0:dc:
         27:dc:69:72:2f:09:0d:50:05:2c:0b:a2:ad:58:57:a2:00:43:
         7a:a3:9d:e1:3e:8e:04:1a:b4:54:61:ed:6e:83:4d:fe:3f:7b:
         75:7b:8c:b3:ac:da:f6:47:69:8d:bd:ef:5f:f9:ed:78:90:65:
         12:77:e6:e9:48:07:aa:a8:ed:02:ce:b7:02:9d:9b:6c:6c:35:
         be:13:02:c0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ9L4E4BnZODtA3FU8GBdWLCfb8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZBMUNDQkRDRUQ0NkZERDhENTg2OTBCRkVEOUE4NDkw
QUE2N0MwQTAeFw0yNDAzMDUxODA2NTBaFw0yNTAzMDQxODExNTBaMDMxMTAvBgNV
BAMTKEU2NUIzRDM5NUU3M0FCMEFEQTcwQkY1ODFEM0NBQUY0RTU4NzcxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5XHA4v1zYiARhOzvIFFDQVy7
rBo+ixntm6fm0QxwYMgSYYvXWWVPv2htiTZVoGm36qW4XG030Og/YYWzg3YF4LD0
rfJqtAviGgYIGuVIDPZ+4H1ciI27nzKnd6Vc8hk5/ee6fNjLyz5blsFX2CH1wgkU
jjfoLmnmHeonJrLtn9QXhJlFuJiuDxiB2SGdHG3iYpfAd3oQdyOYlw+kKiq8gXoY
GycK7UUbxEEpfqdgr9uFHRPnhoDEBeP8+OzsqQpR8qENONrMTtbU63dMjX4KAzsF
mGN3VonemiJGPC+DpqZrYywjYNCUoOjod48/4weOPWkzp5vWeuKBbkm3l+1NAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5ls9OV5zqwracL9YHTyq9OWHcXswHwYDVR0j
BBgwFoAUFqHMvc7Ub92NWGkL/tmoSQqmfAowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkY3Q0VGMkU1RDNFNjE3NEZCRjc1ODY1QzBGQjZBODc2
QTZEQUU5OTlGMUEzMDZDMjM2RjI2M0U0MkU1MDdFLzAvMTZBMUNDQkRDRUQ0NkZE
RDhENTg2OTBCRkVEOUE4NDkwQUE2N0MwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNkExQ0NCRENFRDQ2RkREOEQ1
ODY5MEJGRUQ5QTg0OTBBQTY3QzBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJGN0NFRjJFNUQzRTYxNzRGQkY3NTg2NUMwRkI2QTg3NkE2REFFOTk5
RjFBMzA2QzIzNkYyNjNFNDJFNTA3RS8wLzMxMzgzMTJlMzEzODM5MmUzMjM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtb0Y
MA0GCSqGSIb3DQEBCwUAA4IBAQAP6IemZOeCNicWHxzWcmuRW+8CzsHJuJJbqeXI
hElW9ySymoW+7FlLOcAgJmTiSMF0FvwU7msTZ2zaH8p+BHrp+osyuSeY1xlRAnv5
efbq0ZhVUk0N0KWcrSVIyFn4NwMF42Ktne0xKGp+FUI6w9xiL7vrNqTik13Dfo8d
JtkMoFor7lCT78NQ2A/zurGBO8GG4kM/nRcJS2mXsccRMZimei7SKEOi/d82ZhwL
yCSb8uIq8Nwn3GlyLwkNUAUsC6KtWFeiAEN6o53hPo4EGrRUYe1ug03+P3t1e4yz
rNr2R2mNve9f+e14kGUSd+bpSAeqqO0CzrcCnZtsbDW+EwLA
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org