Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3232203d3e203237393634.roa
File:                     3230312e34392e3133322e302f32322d3232203d3e203237393634.roa (raw, json)
Hash identifier:          3eVUZvWps5o7ms5Gh87AR4LXFetzBI6Hpzc+R81tqIo=
Subject key identifier:   BD:1E:85:C0:47:C1:AE:E5:85:AF:83:37:11:8B:1F:F9:4D:59:90:1B
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       11A6A0154174F06B5BAEAAE626171783E3AFBE2A
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3232203d3e203237393634.roa
Signing time:             Tue 05 Mar 2024 18:21:11 +0000
ROA not before:           Tue 05 Mar 2024 18:16:11 +0000
ROA not after:            Tue 04 Mar 2025 18:21:11 +0000
asID:                     27964
IP address blocks:        201.49.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a6:a0:15:41:74:f0:6b:5b:ae:aa:e6:26:17:17:83:e3:af:be:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Mar  5 18:16:11 2024 GMT
            Not After : Mar  4 18:21:11 2025 GMT
        Subject: CN=BD1E85C047C1AEE585AF8337118B1FF94D59901B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:c3:20:34:9c:a3:36:0a:12:13:96:3e:7c:
                    32:44:40:7a:d0:04:52:3f:a6:ce:9f:c8:49:21:d3:
                    54:75:53:e4:25:d4:d3:6e:5e:72:f8:99:25:a1:6e:
                    63:62:c4:b2:a7:49:97:fe:39:ee:f0:0e:cd:fd:91:
                    0f:cc:ac:3c:47:a3:c9:5b:13:32:8f:fc:5b:c8:64:
                    12:77:27:4e:80:e2:d6:f0:f1:2b:03:e6:37:90:5c:
                    11:43:46:ef:7d:3d:a8:68:d0:44:d2:b9:89:01:44:
                    e2:9d:75:fd:b3:1e:62:98:76:73:5b:52:1e:0a:c8:
                    b3:2c:02:6b:f3:02:03:13:9a:bf:22:96:dc:19:18:
                    75:a0:a3:ab:a8:6c:cd:78:d2:c3:78:9f:c7:11:1b:
                    50:db:64:69:d9:f6:ee:ec:52:f0:87:5e:a3:28:8a:
                    cd:af:28:7d:3f:10:94:4c:9c:6d:8d:be:9c:9d:24:
                    24:24:d0:09:c1:da:6d:d7:c0:f9:22:73:73:08:dc:
                    51:2f:0a:f8:49:ee:be:33:c0:0f:b1:e7:92:a7:8a:
                    e0:b9:38:1f:62:1f:c1:8a:34:39:2b:15:1a:96:a0:
                    9a:12:ec:1f:bf:51:b8:f3:8c:4a:fa:98:9f:ec:55:
                    db:9e:80:28:82:c1:f0:d0:0f:16:94:e3:8b:6a:68:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1E:85:C0:47:C1:AE:E5:85:AF:83:37:11:8B:1F:F9:4D:59:90:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3232203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:f4:4a:76:0d:7b:01:59:50:0d:be:2b:15:f3:c0:24:ce:
         2d:1c:64:01:46:b7:9a:48:66:71:67:26:09:fa:41:dc:fa:e2:
         09:c4:48:1b:bf:9e:36:35:d8:a4:c8:b4:23:86:4e:41:5a:e3:
         ff:b3:64:14:c1:45:38:25:d8:7f:cd:c7:fa:c3:5e:b8:95:77:
         25:4b:8c:bc:17:7a:de:cd:5e:1a:bf:77:f4:21:d1:d6:95:95:
         0b:4a:35:e2:b7:e1:7d:19:df:4c:97:ff:c3:0f:62:4a:26:52:
         07:a8:91:3d:ec:a5:9a:bb:a6:1d:8f:56:67:6b:33:bd:80:c8:
         6e:ab:27:4b:b3:e7:69:00:91:3c:c7:3f:84:35:fd:3d:31:bf:
         37:4d:9d:a8:2b:91:3d:58:71:61:88:b2:f0:59:ec:7f:98:db:
         e8:55:41:78:e7:1b:95:09:0e:8d:50:44:98:f1:32:40:01:27:
         41:36:9f:b8:c2:a8:44:eb:3c:59:05:9c:12:6e:8d:43:07:41:
         bc:88:6e:3e:b0:57:a4:aa:27:2c:a5:b7:f3:b3:2c:19:9f:cc:
         8c:0b:1f:15:f6:56:98:3c:9f:19:11:59:fd:31:49:86:b3:17:
         ef:d7:26:b2:68:f7:18:2a:94:de:ba:29:50:7d:ef:65:29:dc:
         c9:27:44:1b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEaagFUF08GtbrqrmJhcXg+OvviowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NTYwRkM5RjM0MEIyQTdFRjM5NTU5OUQ5RjdGQzVE
OTYxOUM1ODAeFw0yNDAzMDUxODE2MTFaFw0yNTAzMDQxODIxMTFaMDMxMTAvBgNV
BAMTKEJEMUU4NUMwNDdDMUFFRTU4NUFGODMzNzExOEIxRkY5NEQ1OTkwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5cMgNJyjNgoSE5Y+fDJEQHrQ
BFI/ps6fyEkh01R1U+Ql1NNuXnL4mSWhbmNixLKnSZf+Oe7wDs39kQ/MrDxHo8lb
EzKP/FvIZBJ3J06A4tbw8SsD5jeQXBFDRu99Paho0ETSuYkBROKddf2zHmKYdnNb
Uh4KyLMsAmvzAgMTmr8iltwZGHWgo6uobM140sN4n8cRG1DbZGnZ9u7sUvCHXqMo
is2vKH0/EJRMnG2NvpydJCQk0AnB2m3XwPkic3MI3FEvCvhJ7r4zwA+x55KniuC5
OB9iH8GKNDkrFRqWoJoS7B+/UbjzjEr6mJ/sVduegCiCwfDQDxaU44tqaEcxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvR6FwEfBruWFr4M3EYsf+U1ZkBswHwYDVR0j
BBgwFoAUaWVg/J80Cyp+85VZnZ9/xdlhnFgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjI0RTgyMEJFRjc4QjNCMEIzNUI4OUI0OTFDRUJGMkQ4
RkQ2NzQwMzRDNjQ3OENGNTNCRjU2NDdGNkZDQUQ5LzAvNjk2NTYwRkM5RjM0MEIy
QTdFRjM5NTU5OUQ5RjdGQzVEOTYxOUM1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTY1NjBGQzlGMzQwQjJBN0VG
Mzk1NTk5RDlGN0ZDNUQ5NjE5QzU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIyNEU4MjBCRUY3OEIzQjBCMzVCODlCNDkxQ0VCRjJEOEZENjc0MDM0
QzY0NzhDRjUzQkY1NjQ3RjZGQ0FEOS8wLzMyMzAzMTJlMzQzOTJlMzEzMzMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM5MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAskxhDAN
BgkqhkiG9w0BAQsFAAOCAQEAOiv0SnYNewFZUA2+KxXzwCTOLRxkAUa3mkhmcWcm
CfpB3PriCcRIG7+eNjXYpMi0I4ZOQVrj/7NkFMFFOCXYf83H+sNeuJV3JUuMvBd6
3s1eGr939CHR1pWVC0o14rfhfRnfTJf/ww9iSiZSB6iRPeylmrumHY9WZ2szvYDI
bqsnS7PnaQCRPMc/hDX9PTG/N02dqCuRPVhxYYiy8Fnsf5jb6FVBeOcblQkOjVBE
mPEyQAEnQTafuMKoROs8WQWcEm6NQwdBvIhuPrBXpKonLKW387MsGZ/MjAsfFfZW
mDyfGRFZ/TFJhrMX79cmsmj3GCqU3ropUH3vZSncySdEGw==
-----END CERTIFICATE-----
Generated at Tue May 7 14:07:15 2024 by rpki-client on console-ams.rpki-client.org