Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33322e302f32342d3234203d3e203532343434.roa
File:                     3230312e3233342e33322e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          2y6fDLYx2l3VdWleaJTKAkL880032OfLBMnPfuDEax8=
Subject key identifier:   3F:27:11:CD:58:5D:50:09:5B:C9:28:74:AA:83:66:AC:59:D5:5E:E7
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       170CD8E6B94F4199509A0B3F6DD1FDB837ABFB9A
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33322e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:00:46 +0000
ROA not before:           Tue 05 Mar 2024 17:55:46 +0000
ROA not after:            Tue 04 Mar 2025 18:00:46 +0000
asID:                     52444
IP address blocks:        201.234.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0c:d8:e6:b9:4f:41:99:50:9a:0b:3f:6d:d1:fd:b8:37:ab:fb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:46 2024 GMT
            Not After : Mar  4 18:00:46 2025 GMT
        Subject: CN=3F2711CD585D50095BC92874AA8366AC59D55EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:69:ab:62:14:63:1c:81:f6:62:03:1e:22:
                    41:6f:12:45:42:fb:b5:d3:58:7f:47:eb:9e:80:1d:
                    f1:f9:38:cd:95:b6:6b:0a:7a:b0:c3:02:75:22:46:
                    01:11:e5:95:2d:b3:8c:3a:87:25:02:14:2e:b2:d4:
                    47:88:17:08:91:4b:9b:4c:41:43:e1:2a:3b:d8:03:
                    38:ea:5b:3d:fc:89:6e:fd:90:b3:ab:c3:72:f6:3f:
                    58:11:20:bf:8d:f6:da:4f:fe:ae:7c:91:ed:ee:cd:
                    7c:a6:b7:d0:79:a0:04:07:05:06:b9:aa:61:3b:3e:
                    f6:21:ab:d8:b1:61:a4:6b:e2:e5:cd:19:e6:94:95:
                    58:f5:3f:a4:7f:05:b5:1e:01:f1:37:f8:fd:14:a4:
                    7a:3c:2c:51:94:27:6c:cf:16:36:78:63:8d:4d:25:
                    3a:35:e9:23:ed:a5:30:cd:2b:5c:1f:2b:23:54:94:
                    56:90:89:8d:e5:48:92:88:8a:70:df:56:f9:9c:2e:
                    e7:18:17:00:25:95:25:89:68:e1:60:9f:1d:54:fd:
                    62:7d:4a:cf:b2:54:ad:98:e3:ac:fd:54:ff:b6:7f:
                    c3:cf:e4:c2:bf:8d:3b:86:2d:0b:36:bb:83:29:e0:
                    b0:c3:8d:e9:26:dc:09:9b:b3:70:3a:d9:4d:19:e5:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:11:CD:58:5D:50:09:5B:C9:28:74:AA:83:66:AC:59:D5:5E:E7
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33322e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:83:d0:58:e1:4f:b3:52:c0:d8:54:0b:b2:fb:31:06:6b:99:
         c9:22:2b:f2:8f:d8:ae:51:9f:bc:1e:d6:c5:1b:75:e7:ba:3b:
         81:ef:5c:eb:a7:76:c1:65:89:e5:31:b0:4b:30:d3:55:02:28:
         98:b8:a7:51:09:01:76:98:71:ec:7b:60:eb:44:bf:31:b9:26:
         f4:51:03:de:d7:be:57:ec:57:a8:b2:1c:6c:00:8c:d9:97:6f:
         3c:9b:7e:82:68:b3:20:4a:78:be:6d:33:7f:09:a9:39:a3:db:
         1b:11:60:21:f3:0e:d4:99:5d:cf:93:e4:5b:1f:52:ab:30:c7:
         a3:45:c6:3c:36:af:07:0d:cf:fb:b6:13:e4:d7:06:ba:86:2f:
         ce:bb:a6:ad:43:d8:8d:c4:6a:41:c2:c5:31:51:6d:be:c0:f1:
         e6:e7:dc:e8:4e:50:42:81:8f:b4:ba:e7:07:ee:1a:76:75:9c:
         d4:4b:f2:a3:55:84:6a:b0:64:5a:85:43:a2:81:e6:6d:c5:ac:
         f9:8e:c4:56:ad:d1:4a:67:94:74:a0:83:1a:e2:dd:22:97:bd:
         32:4e:59:6c:db:aa:c5:98:5c:f4:46:d4:63:3c:d0:48:55:d6:
         74:3c:8e:57:fb:75:1a:0e:7b:3f:03:70:c0:c4:66:ad:e3:85:
         05:68:44:d9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFwzY5rlPQZlQmgs/bdH9uDer+5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NDZaFw0yNTAzMDQxODAwNDZaMDMxMTAvBgNV
BAMTKDNGMjcxMUNENTg1RDUwMDk1QkM5Mjg3NEFBODM2NkFDNTlENTVFRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDGmrYhRjHIH2YgMeIkFvEkVC
+7XTWH9H656AHfH5OM2VtmsKerDDAnUiRgER5ZUts4w6hyUCFC6y1EeIFwiRS5tM
QUPhKjvYAzjqWz38iW79kLOrw3L2P1gRIL+N9tpP/q58ke3uzXymt9B5oAQHBQa5
qmE7PvYhq9ixYaRr4uXNGeaUlVj1P6R/BbUeAfE3+P0UpHo8LFGUJ2zPFjZ4Y41N
JTo16SPtpTDNK1wfKyNUlFaQiY3lSJKIinDfVvmcLucYFwAllSWJaOFgnx1U/WJ9
Ss+yVK2Y46z9VP+2f8PP5MK/jTuGLQs2u4Mp4LDDjekm3Ambs3A62U0Z5ePFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPycRzVhdUAlbySh0qoNmrFnVXucwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMTJlMzIzMzM0MmUzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnqIDAN
BgkqhkiG9w0BAQsFAAOCAQEAaIPQWOFPs1LA2FQLsvsxBmuZySIr8o/YrlGfvB7W
xRt157o7ge9c66d2wWWJ5TGwSzDTVQIomLinUQkBdphx7Htg60S/Mbkm9FED3te+
V+xXqLIcbACM2ZdvPJt+gmizIEp4vm0zfwmpOaPbGxFgIfMO1Jldz5PkWx9SqzDH
o0XGPDavBw3P+7YT5NcGuoYvzrumrUPYjcRqQcLFMVFtvsDx5ufc6E5QQoGPtLrn
B+4adnWc1Evyo1WEarBkWoVDooHmbcWs+Y7EVq3RSmeUdKCDGuLdIpe9Mk5ZbNuq
xZhc9EbUYzzQSFXWdDyOV/t1Gg57PwNwwMRmreOFBWhE2Q==
-----END CERTIFICATE-----
Generated at Thu May 2 04:01:24 2024 by rpki-client on console-fra.rpki-client.org