Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          wuUtPyq2arYPpyLqoyen2UblSMExBKeFFq98mmYRJMU=
Subject key identifier:   A8:20:6B:25:F1:68:09:D6:6F:6E:F2:09:AA:87:67:17:80:52:D5:0A
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       44C403EFE7F5E962309D4F9A1A57A09EE3174EF2
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 19 Mar 2024 21:30:00 +0000
ROA not before:           Tue 19 Mar 2024 21:25:00 +0000
ROA not after:            Tue 18 Mar 2025 21:30:00 +0000
asID:                     264696
IP address blocks:        168.232.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c4:03:ef:e7:f5:e9:62:30:9d:4f:9a:1a:57:a0:9e:e3:17:4e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Mar 19 21:25:00 2024 GMT
            Not After : Mar 18 21:30:00 2025 GMT
        Subject: CN=A8206B25F16809D66F6EF209AA8767178052D50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:74:6a:d6:ec:f5:5f:44:55:2a:d8:9e:7d:
                    70:32:86:a3:24:ae:43:4a:ac:e8:9b:57:56:27:18:
                    96:8c:d7:1a:0a:70:6e:0d:49:fd:8a:5c:ca:e7:0e:
                    8c:41:e2:2f:7f:4d:b6:a0:72:bd:b1:06:9c:01:ff:
                    32:3b:a1:0f:4b:ec:d4:83:7b:ab:3a:f4:55:5d:5d:
                    1d:52:2f:0a:b7:c3:37:6b:20:55:0b:ee:d2:4b:b3:
                    36:b5:7f:25:93:08:0d:4a:77:14:ac:f7:f5:f0:fd:
                    50:0a:35:21:37:18:4a:f3:45:5d:5c:35:b9:2f:4c:
                    75:15:7e:54:f3:b9:ad:1f:fb:e8:78:f5:49:3d:46:
                    94:f9:f3:92:16:27:d4:b1:db:9e:b0:6a:bd:48:43:
                    49:11:a7:c8:26:1c:c0:d9:d2:ff:92:de:48:8a:e9:
                    47:2e:fd:65:14:28:62:b6:d3:47:e4:c6:27:14:4f:
                    ec:5d:d2:3e:6e:e7:4c:63:b2:06:4c:8a:fb:a8:d5:
                    c4:d6:53:f5:9f:e4:79:6b:50:93:48:3e:aa:cc:75:
                    75:89:52:9e:cf:7a:c7:52:71:b9:9d:0f:e9:0e:4b:
                    f5:68:c5:fa:bf:fb:06:82:c6:a7:4b:a8:59:3b:0c:
                    c3:23:a0:51:a8:c7:b1:7e:90:0e:7e:fa:c6:c0:7a:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:6B:25:F1:68:09:D6:6F:6E:F2:09:AA:87:67:17:80:52:D5:0A
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137312e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:86:5d:9e:72:ed:77:04:65:da:2e:15:8e:11:d6:a5:8b:57:
         a7:7c:1b:2c:b1:b9:a2:74:57:33:1a:8f:4a:29:3c:32:25:00:
         af:46:19:23:56:68:47:aa:46:99:20:14:11:ec:4f:88:c0:23:
         1f:d1:36:31:8c:b3:72:36:bb:82:cc:75:f8:f2:39:87:6b:50:
         c7:58:75:72:6f:aa:a0:2e:20:1f:61:a8:44:36:8b:ad:6f:83:
         62:d8:d6:d3:57:d5:c3:51:98:a3:71:5c:de:f0:10:df:6b:83:
         3e:a8:7e:fe:a1:33:b5:43:e9:22:e2:6e:e2:b8:4f:ed:21:56:
         6d:60:e9:f5:68:55:55:cd:f1:a0:75:ff:67:04:2e:ac:89:ce:
         cf:cc:f2:12:25:81:00:ae:ce:65:e9:9d:43:20:2e:fc:08:bb:
         a0:b4:ad:5c:35:fb:cb:4f:28:4d:a7:8d:0a:e7:03:09:67:5a:
         e0:9a:a1:fd:19:a0:ab:17:f2:e4:80:b0:a7:d9:7b:aa:f9:ed:
         22:8e:ec:90:78:70:6a:ef:10:fc:e4:e3:6c:36:e0:07:23:59:
         ff:90:b6:38:61:a2:d3:1e:db:d2:3a:f8:17:72:a1:6e:ee:1e:
         48:e7:7e:91:d0:24:b4:5b:9f:91:5a:83:8b:6e:87:70:9e:a0:
         3c:95:d5:11
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURMQD7+f16WIwnU+aGlegnuMXTvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBNTMzN0ZBODc3OTc5NzFEMjMzQkUzMjc5MDczOTZE
MDgxM0Q1RTAeFw0yNDAzMTkyMTI1MDBaFw0yNTAzMTgyMTMwMDBaMDMxMTAvBgNV
BAMTKEE4MjA2QjI1RjE2ODA5RDY2RjZFRjIwOUFBODc2NzE3ODA1MkQ1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtHRq1uz1X0RVKtiefXAyhqMk
rkNKrOibV1YnGJaM1xoKcG4NSf2KXMrnDoxB4i9/Tbagcr2xBpwB/zI7oQ9L7NSD
e6s69FVdXR1SLwq3wzdrIFUL7tJLsza1fyWTCA1KdxSs9/Xw/VAKNSE3GErzRV1c
NbkvTHUVflTzua0f++h49Uk9RpT585IWJ9Sx256war1IQ0kRp8gmHMDZ0v+S3kiK
6Ucu/WUUKGK200fkxicUT+xd0j5u50xjsgZMivuo1cTWU/Wf5HlrUJNIPqrMdXWJ
Up7PesdScbmdD+kOS/Voxfq/+waCxqdLqFk7DMMjoFGox7F+kA5++sbAelNPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUqCBrJfFoCdZvbvIJqodnF4BS1QowHwYDVR0j
BBgwFoAU0qUzf6h3l5cdIzvjJ5BzltCBPV4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzVENzg0NkNERjlGQjFDQTcxQkUwNkM2NDU3NDAzRTUw
NUU3NDEzNDE0RDU3QzYxOUQ5MkY3QUQ1NTlBREZCLzAvRDJBNTMzN0ZBODc3OTc5
NzFEMjMzQkUzMjc5MDczOTZEMDgxM0Q1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkE1MzM3RkE4Nzc5Nzk3MUQy
MzNCRTMyNzkwNzM5NkQwODEzRDVFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc1RDc4NDZDREY5RkIxQ0E3MUJFMDZDNjQ1NzQwM0U1MDVFNzQxMzQx
NEQ1N0M2MTlEOTJGN0FENTU5QURGQi8wLzMxMzYzODJlMzIzMzMyMmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM5MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6KswDQYJKoZIhvcNAQELBQADggEBAHSGXZ5y7XcEZdouFY4R1qWLV6d8GyyxuaJ0
VzMaj0opPDIlAK9GGSNWaEeqRpkgFBHsT4jAIx/RNjGMs3I2u4LMdfjyOYdrUMdY
dXJvqqAuIB9hqEQ2i61vg2LY1tNX1cNRmKNxXN7wEN9rgz6ofv6hM7VD6SLibuK4
T+0hVm1g6fVoVVXN8aB1/2cELqyJzs/M8hIlgQCuzmXpnUMgLvwIu6C0rVw1+8tP
KE2njQrnAwlnWuCaof0ZoKsX8uSAsKfZe6r57SKO7JB4cGrvEPzk42w24AcjWf+Q
tjhhotMe29I6+BdyoW7uHkjnfpHQJLRbn5Fag4tuh3CeoDyV1RE=
-----END CERTIFICATE-----
Generated at Fri Oct 25 02:22:19 2024 by rpki-client on console-fra.rpki-client.org