Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231362e302f32322d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          Gy+TiJcOycprJEupsmgdLovQob8GqCdVMQKCR9muKpU=
Subject key identifier:   2E:A0:56:80:03:26:80:06:94:B0:DF:86:75:65:9D:C9:4F:32:98:EE
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       7AC404948D4859EFDC430333D7447FE20E02E542
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3234203d3e20323635373734.roa
Signing time:             Tue 05 Mar 2024 18:09:02 +0000
ROA not before:           Tue 05 Mar 2024 18:04:02 +0000
ROA not after:            Tue 04 Mar 2025 18:09:02 +0000
asID:                     265774
IP address blocks:        164.163.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c4:04:94:8d:48:59:ef:dc:43:03:33:d7:44:7f:e2:0e:02:e5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Mar  5 18:04:02 2024 GMT
            Not After : Mar  4 18:09:02 2025 GMT
        Subject: CN=2EA056800326800694B0DF8675659DC94F3298EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:e1:2a:5d:02:51:a3:00:ae:11:27:18:e5:
                    e3:85:55:90:e0:62:d8:20:12:73:50:9e:47:7c:2d:
                    31:fc:0e:3f:ec:b8:2f:5e:2a:e6:4b:fe:4f:95:c7:
                    0b:05:5e:39:8b:89:11:61:55:97:6c:d7:f5:61:9f:
                    8c:4a:ad:ca:ae:a7:57:0a:70:7e:19:0d:10:97:8b:
                    f3:c2:31:fc:2c:50:b0:ef:3e:63:4f:ff:a9:1c:85:
                    a7:e8:10:ec:df:0a:e7:40:a4:f8:0f:11:13:c8:57:
                    51:b3:a3:b3:18:a2:af:0f:0e:98:36:59:67:a8:17:
                    e3:f4:0a:bb:87:e9:a5:f4:4a:25:e4:3f:9a:88:69:
                    99:a5:6a:29:c3:84:b6:cc:52:a1:e8:5f:3a:aa:04:
                    37:2c:98:91:8a:e1:b4:cb:16:59:62:13:05:66:91:
                    4e:8e:66:6b:df:1c:8c:88:4e:83:2f:b4:f2:9f:e8:
                    a4:08:b4:4d:87:5e:af:f3:87:2e:d8:66:9a:63:49:
                    cf:09:21:c6:12:a8:88:2e:d0:0d:0c:e6:e5:5d:32:
                    01:fd:01:36:5c:06:28:65:d4:44:f5:3e:84:ed:f5:
                    15:9a:23:12:cb:86:53:ab:78:98:04:42:3d:df:6f:
                    7a:7e:7b:36:31:59:cf:49:87:2c:a1:b9:0c:2e:c1:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:56:80:03:26:80:06:94:B0:DF:86:75:65:9D:C9:4F:32:98:EE
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:bf:71:68:9f:d9:56:e2:92:f4:0b:53:8c:49:68:45:eb:
         a9:2c:fa:6c:36:55:86:be:0a:99:ec:3c:2e:49:8d:f1:4a:91:
         73:27:d8:8a:0c:50:40:42:f2:63:47:76:45:4b:31:e1:45:52:
         69:57:e9:5e:1c:95:c7:cc:92:e6:f7:6c:ad:a8:f2:9e:e4:91:
         d9:3c:3d:95:c8:85:b8:99:79:b5:06:03:08:19:fb:b7:59:a8:
         ae:ca:39:9d:ef:68:f9:11:12:08:eb:23:92:7f:72:d0:be:d4:
         e7:2c:fb:ac:e5:08:a2:89:32:c5:52:31:71:28:d1:3b:e5:7c:
         88:46:c2:0d:cd:4a:24:e6:19:d0:7b:1e:cf:5d:50:b8:39:71:
         da:62:e9:23:b7:83:39:42:e9:9b:86:4d:a3:03:ec:c3:0f:c8:
         3f:f6:fd:c1:2b:3c:ab:e9:96:67:d7:0c:89:31:64:c8:b1:24:
         65:2a:4c:44:7f:87:79:d4:82:0f:19:7e:4a:c7:9f:6b:ba:a7:
         a8:05:ea:34:92:c0:de:c8:11:74:cb:8e:96:8b:72:c1:5d:10:
         2f:de:ec:08:47:7e:14:54:26:63:56:8f:20:ac:50:88:49:69:
         e6:16:97:39:e3:77:d9:66:fe:ba:87:ad:c0:9e:bc:47:e4:d2:
         47:e5:e6:1e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUesQElI1IWe/cQwMz10R/4g4C5UIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBODk4MTcwRkIzQTA3NDFGQzJEMzI0OTY1QjYxQjM2
OERCMEE0RTAeFw0yNDAzMDUxODA0MDJaFw0yNTAzMDQxODA5MDJaMDMxMTAvBgNV
BAMTKDJFQTA1NjgwMDMyNjgwMDY5NEIwREY4Njc1NjU5REM5NEYzMjk4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26uEqXQJRowCuEScY5eOFVZDg
YtggEnNQnkd8LTH8Dj/suC9eKuZL/k+VxwsFXjmLiRFhVZds1/Vhn4xKrcqup1cK
cH4ZDRCXi/PCMfwsULDvPmNP/6kchafoEOzfCudApPgPERPIV1Gzo7MYoq8PDpg2
WWeoF+P0CruH6aX0SiXkP5qIaZmlainDhLbMUqHoXzqqBDcsmJGK4bTLFlliEwVm
kU6OZmvfHIyIToMvtPKf6KQItE2HXq/zhy7YZppjSc8JIcYSqIgu0A0M5uVdMgH9
ATZcBihl1ET1PoTt9RWaIxLLhlOreJgEQj3fb3p+ezYxWc9JhyyhuQwuwb5FAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULqBWgAMmgAaUsN+GdWWdyU8ymO4wHwYDVR0j
BBgwFoAU1aiYFw+zoHQfwtMkllths2jbCk4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOEQwRkE0OTFDQzJBMjBDNDk0RUY3QzU0N0M1ODZCQzVB
MTAxRjBFOTVDMEI2ODUxM0QwNTgwODRCNkExMzA4LzAvRDVBODk4MTcwRkIzQTA3
NDFGQzJEMzI0OTY1QjYxQjM2OERCMEE0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENUE4OTgxNzBGQjNBMDc0MUZD
MkQzMjQ5NjVCNjFCMzY4REIwQTRFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjhEMEZBNDkxQ0MyQTIwQzQ5NEVGN0M1NDdDNTg2QkM1QTEwMUYwRTk1
QzBCNjg1MTNEMDU4MDg0QjZBMTMwOC8wLzMxMzYzNDJlMzEzNjMzMmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM3MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKk
o9gwDQYJKoZIhvcNAQELBQADggEBAGNcv3Fon9lW4pL0C1OMSWhF66ks+mw2VYa+
CpnsPC5JjfFKkXMn2IoMUEBC8mNHdkVLMeFFUmlX6V4clcfMkub3bK2o8p7kkdk8
PZXIhbiZebUGAwgZ+7dZqK7KOZ3vaPkREgjrI5J/ctC+1Ocs+6zlCKKJMsVSMXEo
0TvlfIhGwg3NSiTmGdB7Hs9dULg5cdpi6SO3gzlC6ZuGTaMD7MMPyD/2/cErPKvp
lmfXDIkxZMixJGUqTER/h3nUgg8ZfkrHn2u6p6gF6jSSwN7IEXTLjpaLcsFdEC/e
7AhHfhRUJmNWjyCsUIhJaeYWlznjd9lm/rqHrcCevEfk0kfl5h4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:50 2024 by rpki-client on console-fra.rpki-client.org