Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
File:                     3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa (raw, json)
Hash identifier:          mFg+iBEI+65MWc6+DzCuYjffn+Nils3epdH7UuCjUJw=
Subject key identifier:   14:44:48:D4:34:74:CC:05:56:AF:1D:78:CB:A1:3C:08:3C:6F:61:14
Certificate issuer:       /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial:       7D3E363CE84B97FFDA57A1F931B14825436E73BF
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
Signing time:             Fri 22 Nov 2024 19:55:00 +0000
ROA not before:           Fri 22 Nov 2024 19:50:00 +0000
ROA not after:            Fri 21 Nov 2025 19:55:00 +0000
asID:                     273097
IP address blocks:        201.222.46.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3e:36:3c:e8:4b:97:ff:da:57:a1:f9:31:b1:48:25:43:6e:73:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
        Validity
            Not Before: Nov 22 19:50:00 2024 GMT
            Not After : Nov 21 19:55:00 2025 GMT
        Subject: CN=144448D43474CC0556AF1D78CBA13C083C6F6114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:42:ae:e5:ac:ac:30:57:f0:1b:15:bc:43:
                    35:ec:de:e9:e7:46:39:5c:54:d4:8e:34:ae:c0:33:
                    c7:96:04:f1:bb:a0:ce:50:aa:97:bf:03:98:5f:a6:
                    98:86:a9:57:48:42:34:04:92:36:cd:70:05:ba:ab:
                    54:19:7a:e6:76:5b:86:2e:48:d8:eb:a1:19:bb:a1:
                    0a:14:1c:f9:c4:58:e2:40:17:62:fc:2a:49:8c:fc:
                    a5:6d:0d:9b:37:68:93:53:fe:15:8c:f7:5e:76:cb:
                    4b:50:d6:00:bb:82:97:d7:b2:32:55:42:4c:05:f3:
                    27:1e:1e:5c:70:68:fb:b1:b9:0c:48:92:bf:dd:da:
                    09:2c:76:52:2c:35:85:69:6a:eb:73:8b:cf:fd:6a:
                    2f:ae:b4:31:b5:c0:16:70:a3:d7:f9:3f:30:bd:ee:
                    d6:72:30:c2:75:c8:26:60:46:60:8d:35:a1:24:0c:
                    f4:43:52:6a:d0:c2:6c:d0:b8:69:2c:6f:fb:ff:74:
                    36:61:8d:d7:7e:12:4e:2e:b1:d4:09:84:d2:e5:36:
                    d9:ee:9d:a6:4f:9b:1b:ee:2d:31:04:f2:7e:95:ec:
                    c1:05:3b:76:a9:3e:e4:3d:a3:3a:b9:e5:7e:e1:b6:
                    76:37:a8:8f:94:52:63:df:2c:ea:d5:74:83:e5:e5:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:44:48:D4:34:74:CC:05:56:AF:1D:78:CB:A1:3C:08:3C:6F:61:14
            X509v3 Authority Key Identifier:
                keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:6e:ef:ad:15:05:cf:8d:f7:ed:e2:7c:f0:bd:23:44:f9:
         da:74:03:ea:8c:94:ef:1d:68:ba:84:19:cf:4f:ff:fd:86:0d:
         11:ea:3c:b6:57:09:6f:d2:3f:20:99:0f:ff:d4:c5:62:9c:dc:
         22:dc:61:28:a8:2d:ca:d7:66:c8:6a:06:f6:87:b6:ad:40:2a:
         a3:43:4e:f4:ef:ec:c0:87:00:c2:f2:95:63:32:62:49:52:d7:
         ec:7c:6c:30:51:6c:1c:16:9f:1a:de:be:90:6f:fc:16:cb:45:
         5f:53:d1:b7:4d:dd:c4:7a:69:55:7d:40:d8:cb:14:b5:5a:13:
         94:24:3d:8b:a5:32:eb:fb:9f:fd:82:8d:e9:d9:80:fe:a1:01:
         9c:54:79:07:4d:62:f9:09:f6:fd:f0:00:91:cf:95:2e:77:70:
         84:fc:3a:de:50:37:cc:44:df:28:91:23:45:51:a4:13:92:cd:
         89:c8:84:20:b9:f1:34:e1:5e:13:9e:91:71:16:e3:19:15:69:
         1a:d9:d0:52:a5:3a:1b:c4:7c:3e:be:41:1b:83:f8:fa:7a:a4:
         3a:08:c8:72:7c:a6:ca:c8:47:ff:9f:b2:df:b3:ec:e8:3a:21:
         8b:91:c0:25:6d:b3:5b:09:d0:b4:73:7e:bd:ca:5c:ba:bb:7d:
         51:60:8a:19
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfT42POhLl//aV6H5MbFIJUNuc78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNEMDI5OTVFMTcwQ0U2MjJGNjA1NzlFQjEzRDlERDAz
N0I0NkE1MjAeFw0yNDExMjIxOTUwMDBaFw0yNTExMjExOTU1MDBaMDMxMTAvBgNV
BAMTKDE0NDQ0OEQ0MzQ3NENDMDU1NkFGMUQ3OENCQTEzQzA4M0M2RjYxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJUKu5aysMFfwGxW8QzXs3unn
RjlcVNSONK7AM8eWBPG7oM5Qqpe/A5hfppiGqVdIQjQEkjbNcAW6q1QZeuZ2W4Yu
SNjroRm7oQoUHPnEWOJAF2L8KkmM/KVtDZs3aJNT/hWM9152y0tQ1gC7gpfXsjJV
QkwF8yceHlxwaPuxuQxIkr/d2gksdlIsNYVpautzi8/9ai+utDG1wBZwo9f5PzC9
7tZyMMJ1yCZgRmCNNaEkDPRDUmrQwmzQuGksb/v/dDZhjdd+Ek4usdQJhNLlNtnu
naZPmxvuLTEE8n6V7MEFO3apPuQ9ozq55X7htnY3qI+UUmPfLOrVdIPl5TflAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFERI1DR0zAVWrx14y6E8CDxvYRQwHwYDVR0j
BBgwFoAUw9ApleFwzmIvYFeesT2d0De0alIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMDIzQjc2MjQ4Q0NFMDdEQTI1QjE0NjI4NEQ0OTkxNDgw
NTFDMjlBNDJGMzA0MjY2MTQ5OTE0QzE0QTEwNTA3LzAvQzNEMDI5OTVFMTcwQ0U2
MjJGNjA1NzlFQjEzRDlERDAzN0I0NkE1Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0QwMjk5NUUxNzBDRTYyMkY2
MDU3OUVCMTNEOUREMDM3QjQ2QTUyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDAyM0I3NjI0OENDRTA3REEyNUIxNDYyODRENDk5MTQ4MDUxQzI5QTQy
RjMwNDI2NjE0OTkxNEMxNEExMDUwNy8wLzMyMzAzMTJlMzIzMjMyMmUzNDM2MmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzIzNzMzMzAzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyd4u
MA0GCSqGSIb3DQEBCwUAA4IBAQCKaG7vrRUFz4337eJ88L0jRPnadAPqjJTvHWi6
hBnPT//9hg0R6jy2Vwlv0j8gmQ//1MVinNwi3GEoqC3K12bIagb2h7atQCqjQ070
7+zAhwDC8pVjMmJJUtfsfGwwUWwcFp8a3r6Qb/wWy0VfU9G3Td3EemlVfUDYyxS1
WhOUJD2LpTLr+5/9go3p2YD+oQGcVHkHTWL5Cfb98ACRz5Uud3CE/DreUDfMRN8o
kSNFUaQTks2JyIQgufE04V4TnpFxFuMZFWka2dBSpTobxHw+vkEbg/j6eqQ6CMhy
fKbKyEf/n7Lfs+zoOiGLkcAlbbNbCdC0c369yly6u31RYIoZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org