Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          QBw7MMgDAjMFju5qgWWu2qnjxvoVQ81ivwmxTqgDJXM=
Subject key identifier:   D4:FB:0B:AD:49:79:2A:C4:50:45:14:70:0E:CD:F9:54:29:BA:30:23
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       5FF3E8441D4555009AD9A57359B73428EF2AEE16
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa
Signing time:             Tue 05 Mar 2024 18:09:01 +0000
ROA not before:           Tue 05 Mar 2024 18:04:01 +0000
ROA not after:            Tue 04 Mar 2025 18:09:01 +0000
asID:                     265774
IP address blocks:        164.163.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:e8:44:1d:45:55:00:9a:d9:a5:73:59:b7:34:28:ef:2a:ee:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Mar  5 18:04:01 2024 GMT
            Not After : Mar  4 18:09:01 2025 GMT
        Subject: CN=D4FB0BAD49792AC4504514700ECDF95429BA3023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:98:91:ca:51:db:78:49:f6:4a:a5:2d:0b:64:
                    32:1d:5b:64:a4:46:83:2b:41:13:19:5d:ee:03:60:
                    20:bc:44:8f:b1:4a:fd:79:4f:d0:b8:d1:7e:3d:72:
                    53:e3:a0:2d:2b:4b:81:f1:3a:2d:53:fd:2e:21:95:
                    1f:aa:cf:92:b7:ec:98:d3:88:0c:01:7b:a9:06:74:
                    c3:1f:59:39:17:61:55:71:4b:60:2e:89:20:8c:f1:
                    5b:de:74:05:28:09:01:47:73:55:60:c8:71:b7:11:
                    4f:b1:59:b4:1a:8d:45:de:4d:6d:48:5a:7b:ca:e5:
                    a4:67:3c:1f:7e:0c:24:dd:c5:1e:3e:8b:0e:9d:aa:
                    7a:3c:25:e3:a0:08:a2:e9:cc:a1:d8:1f:d4:44:16:
                    9a:bc:96:55:0b:55:47:32:92:dc:0c:1f:a0:cb:95:
                    84:fe:f9:c1:09:1c:97:90:3e:c3:49:22:17:87:2e:
                    44:c0:c5:73:2e:09:5c:86:f3:cb:a2:52:0d:ec:78:
                    9c:2d:d1:63:2e:2d:b9:83:cd:27:81:b8:2f:88:ea:
                    b7:8f:11:b1:d9:6f:02:8d:79:69:a5:7b:a9:c4:46:
                    d2:73:40:3f:6f:8b:80:5c:fd:8a:a9:90:1e:3e:1c:
                    64:5c:92:f7:35:39:13:9f:70:3d:d8:15:c7:7e:3f:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FB:0B:AD:49:79:2A:C4:50:45:14:70:0E:CD:F9:54:29:BA:30:23
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231382e302f32342d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:24:1d:3c:4f:7d:97:4a:84:02:44:3a:ba:76:22:be:76:a3:
         7b:f5:13:64:19:6a:ee:9d:bb:b5:08:ac:ea:1d:3c:ac:f6:32:
         59:1c:2e:ed:8d:0e:38:b7:c4:e5:1f:fe:93:c2:06:6a:1c:4a:
         94:dd:12:9e:b4:1c:4a:4f:e2:26:4b:d9:c1:50:bb:64:4f:e7:
         72:9a:08:92:be:b0:82:38:95:fa:6f:64:23:78:3f:6a:10:cc:
         4b:58:45:53:ba:97:03:81:a0:35:da:bb:43:1e:b9:6e:6c:a2:
         34:71:a1:de:ea:e6:c9:8d:ac:c3:1e:d0:53:e9:38:c4:24:8e:
         c6:a0:09:b3:6c:83:54:e4:16:22:14:f8:55:93:bb:3a:2f:2a:
         bb:76:1a:85:92:f9:f7:dd:77:d3:ec:a5:f0:61:65:e1:98:5e:
         2b:88:43:77:8b:ae:15:af:3b:d3:3b:34:45:85:ba:f3:c7:10:
         9d:d8:77:c1:8f:fa:1d:dd:0f:5d:bc:de:82:0e:40:3c:73:b9:
         73:e5:60:fc:34:02:85:4e:49:e8:e1:72:a1:58:7d:4f:8f:31:
         44:29:8b:c9:f9:cb:81:7a:0f:52:25:de:d0:1f:ab:31:18:03:
         01:f6:86:22:1d:09:06:4d:ce:a8:44:99:93:a3:bd:95:5c:26:
         95:19:67:b4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUX/PoRB1FVQCa2aVzWbc0KO8q7hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBODk4MTcwRkIzQTA3NDFGQzJEMzI0OTY1QjYxQjM2
OERCMEE0RTAeFw0yNDAzMDUxODA0MDFaFw0yNTAzMDQxODA5MDFaMDMxMTAvBgNV
BAMTKEQ0RkIwQkFENDk3OTJBQzQ1MDQ1MTQ3MDBFQ0RGOTU0MjlCQTMwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxmJHKUdt4SfZKpS0LZDIdW2Sk
RoMrQRMZXe4DYCC8RI+xSv15T9C40X49clPjoC0rS4HxOi1T/S4hlR+qz5K37JjT
iAwBe6kGdMMfWTkXYVVxS2AuiSCM8VvedAUoCQFHc1VgyHG3EU+xWbQajUXeTW1I
WnvK5aRnPB9+DCTdxR4+iw6dqno8JeOgCKLpzKHYH9REFpq8llULVUcyktwMH6DL
lYT++cEJHJeQPsNJIheHLkTAxXMuCVyG88uiUg3seJwt0WMuLbmDzSeBuC+I6reP
EbHZbwKNeWmle6nERtJzQD9vi4Bc/YqpkB4+HGRckvc1OROfcD3YFcd+PwWXAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU1PsLrUl5KsRQRRRwDs35VCm6MCMwHwYDVR0j
BBgwFoAU1aiYFw+zoHQfwtMkllths2jbCk4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOEQwRkE0OTFDQzJBMjBDNDk0RUY3QzU0N0M1ODZCQzVB
MTAxRjBFOTVDMEI2ODUxM0QwNTgwODRCNkExMzA4LzAvRDVBODk4MTcwRkIzQTA3
NDFGQzJEMzI0OTY1QjYxQjM2OERCMEE0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENUE4OTgxNzBGQjNBMDc0MUZD
MkQzMjQ5NjVCNjFCMzY4REIwQTRFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjhEMEZBNDkxQ0MyQTIwQzQ5NEVGN0M1NDdDNTg2QkM1QTEwMUYwRTk1
QzBCNjg1MTNEMDU4MDg0QjZBMTMwOC8wLzMxMzYzNDJlMzEzNjMzMmUzMjMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM3MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACk
o9owDQYJKoZIhvcNAQELBQADggEBAM0kHTxPfZdKhAJEOrp2Ir52o3v1E2QZau6d
u7UIrOodPKz2MlkcLu2NDji3xOUf/pPCBmocSpTdEp60HEpP4iZL2cFQu2RP53Ka
CJK+sII4lfpvZCN4P2oQzEtYRVO6lwOBoDXau0MeuW5sojRxod7q5smNrMMe0FPp
OMQkjsagCbNsg1TkFiIU+FWTuzovKrt2GoWS+ffdd9PspfBhZeGYXiuIQ3eLrhWv
O9M7NEWFuvPHEJ3Yd8GP+h3dD1283oIOQDxzuXPlYPw0AoVOSejhcqFYfU+PMUQp
i8n5y4F6D1Il3tAfqzEYAwH2hiIdCQZNzqhEmZOjvZVcJpUZZ7Q=
-----END CERTIFICATE-----
Generated at Sun May 5 02:31:51 2024 by rpki-client on console-fra.rpki-client.org