Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa
File:                     3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa (raw, json)
Hash identifier:          erV+p51j9zmgFZbR8lSp0D03lhWmr3yPfhs/G4h0Dj4=
Subject key identifier:   8C:33:7F:59:C8:F5:F0:07:53:C2:7E:7F:70:0F:8B:93:15:BE:99:25
Certificate issuer:       /CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
Certificate serial:       4E0E5493607F572AA90E709D819FC9CD2CB5353F
Authority key identifier: E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     265779
IP address blocks:        181.191.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0e:54:93:60:7f:57:2a:a9:0e:70:9d:81:9f:c9:cd:2c:b5:35:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=8C337F59C8F5F00753C27E7F700F8B9315BE9925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:e5:eb:2c:f0:d5:88:0d:05:9d:d5:17:52:
                    39:47:5b:92:8c:28:3e:13:ac:e4:ea:6b:a9:86:88:
                    4d:0b:d7:91:26:72:b6:60:2b:77:f0:c4:41:af:9f:
                    21:cb:5a:f7:25:4f:4e:b1:0f:81:97:31:22:96:86:
                    3b:de:d0:59:36:6b:f8:00:a8:a7:4c:4a:e4:96:18:
                    dd:b2:63:ec:bc:01:59:29:c6:97:7f:f7:78:d6:b9:
                    46:3b:c7:fa:81:73:24:71:76:df:8e:54:a4:ca:3c:
                    bd:9d:43:c7:ff:e9:6b:61:68:b7:40:db:5e:28:dc:
                    c0:f5:e9:50:5b:9f:ee:f2:55:bd:df:83:73:db:d3:
                    88:76:9e:1f:41:09:2a:05:b3:a0:1c:d4:cc:d3:ac:
                    cc:b4:d3:1d:1f:46:d5:ae:c9:ec:7b:5d:cf:0d:2f:
                    32:51:66:a7:2a:a2:5f:9f:9b:b7:0f:b5:49:79:a7:
                    5e:85:61:46:eb:8b:29:0c:6d:a3:ba:ce:8e:e3:70:
                    1f:52:a3:c3:d0:14:a7:1f:f6:94:f2:d1:6c:96:4f:
                    3f:24:07:fb:de:6b:e0:e2:da:ac:2b:20:a3:f5:5f:
                    59:25:7a:df:03:1f:00:16:f4:3d:65:a9:45:d4:df:
                    88:22:cc:b2:41:bf:fc:43:ab:ce:cb:f2:39:84:0e:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:33:7F:59:C8:F5:F0:07:53:C2:7E:7F:70:0F:8B:93:15:BE:99:25
            X509v3 Authority Key Identifier:
                keyid:E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:01:b9:dd:d6:9f:36:9b:e4:48:99:2e:d2:9f:8b:39:7e:17:
         96:7a:96:31:87:a8:1b:fc:01:4a:28:7d:f9:3c:98:8d:73:54:
         d6:ee:30:b3:cf:a2:20:75:2c:70:bb:6f:ad:3e:fb:57:2a:53:
         d7:71:00:b1:26:e0:be:a9:b1:52:4a:65:74:63:3c:66:53:4b:
         84:3b:e8:e9:ca:8f:b9:13:ef:61:c3:bb:8a:e5:d2:18:01:17:
         15:43:83:d6:ef:44:2d:e7:15:43:20:5b:8a:39:de:df:e5:06:
         c7:60:0d:c8:cf:3a:86:dd:8e:e2:e9:55:1d:05:d7:f3:50:3c:
         0e:e8:4c:ce:11:f4:39:55:75:d2:1a:5b:71:9c:f6:89:61:1f:
         c0:3a:03:72:b0:be:8c:e9:8d:c6:0e:e3:64:a3:3f:1b:45:ec:
         71:67:bd:a8:ee:0a:47:18:80:75:a2:17:1a:7e:66:10:86:70:
         4f:af:7f:ee:17:0e:c9:4b:8f:63:0d:15:4d:27:73:06:24:9a:
         14:fc:a6:b8:cb:0d:8e:62:05:68:fe:7e:6d:e3:5c:21:7b:3c:
         0a:51:55:34:f0:97:d0:f2:19:eb:1e:1f:1a:5f:6d:98:be:4a:
         d3:d1:b0:ce:14:07:50:be:16:c0:8e:ff:c0:f2:78:dc:fb:46:
         b6:81:36:15
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTg5Uk2B/VyqpDnCdgZ/JzSy1NT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg1NTRGODczRjc1MDNCN0MyQzNGRDU5RTdFNTk1RkJD
OUQ2MkEzODAeFw0yNDAzMDUxNzM2MzFaFw0yNTAzMDQxNzQxMzFaMDMxMTAvBgNV
BAMTKDhDMzM3RjU5QzhGNUYwMDc1M0MyN0U3RjcwMEY4QjkzMTVCRTk5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwf+XrLPDViA0FndUXUjlHW5KM
KD4TrOTqa6mGiE0L15EmcrZgK3fwxEGvnyHLWvclT06xD4GXMSKWhjve0Fk2a/gA
qKdMSuSWGN2yY+y8AVkpxpd/93jWuUY7x/qBcyRxdt+OVKTKPL2dQ8f/6WthaLdA
214o3MD16VBbn+7yVb3fg3Pb04h2nh9BCSoFs6Ac1MzTrMy00x0fRtWuyex7Xc8N
LzJRZqcqol+fm7cPtUl5p16FYUbriykMbaO6zo7jcB9So8PQFKcf9pTy0WyWTz8k
B/vea+Di2qwrIKP1X1klet8DHwAW9D1lqUXU34gizLJBv/xDq87L8jmEDmz3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjDN/Wcj18AdTwn5/cA+LkxW+mSUwHwYDVR0j
BBgwFoAU6FVPhz91A7fCw/1Z5+WV+8nWKjgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNTE2OUJDNjgzMDA3MTZDNzUyMEIzN0U0OTRBQjQyMjAz
RUU5RUQ5QjlCRkUyQjE5QzgzQjdFRkQ0RkJDRkE2LzAvRTg1NTRGODczRjc1MDNC
N0MyQzNGRDU5RTdFNTk1RkJDOUQ2MkEzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODU1NEY4NzNGNzUwM0I3QzJD
M0ZENTlFN0U1OTVGQkM5RDYyQTM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjUxNjlCQzY4MzAwNzE2Qzc1MjBCMzdFNDk0QUI0MjIwM0VFOUVEOUI5
QkZFMkIxOUM4M0I3RUZENEZCQ0ZBNi8wLzMxMzgzMTJlMzEzOTMxMmUzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtb9E
MA0GCSqGSIb3DQEBCwUAA4IBAQBxAbnd1p82m+RImS7Sn4s5fheWepYxh6gb/AFK
KH35PJiNc1TW7jCzz6IgdSxwu2+tPvtXKlPXcQCxJuC+qbFSSmV0YzxmU0uEO+jp
yo+5E+9hw7uK5dIYARcVQ4PW70Qt5xVDIFuKOd7f5QbHYA3IzzqG3Y7i6VUdBdfz
UDwO6EzOEfQ5VXXSGltxnPaJYR/AOgNysL6M6Y3GDuNkoz8bRexxZ72o7gpHGIB1
ohcafmYQhnBPr3/uFw7JS49jDRVNJ3MGJJoU/Ka4yw2OYgVo/n5t41whezwKUVU0
8JfQ8hnrHh8aX22YvkrT0bDOFAdQvhbAjv/A8njc+0a2gTYV
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org