Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa
File:                     3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          KkonNYv/90fZdTOw7GqkImOyym26Yafd0WKQLZfRk2E=
Subject key identifier:   F6:A6:80:B0:6C:44:E4:5E:5D:57:35:2C:C3:7D:92:00:6E:24:9B:B9
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       1567BF71AFA2ADE97011C9D3547395B19F770556
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 17:42:18 +0000
ROA not before:           Tue 05 Mar 2024 17:37:18 +0000
ROA not after:            Tue 04 Mar 2025 17:42:18 +0000
asID:                     28432
IP address blocks:        201.131.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:bf:71:af:a2:ad:e9:70:11:c9:d3:54:73:95:b1:9f:77:05:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Mar  5 17:37:18 2024 GMT
            Not After : Mar  4 17:42:18 2025 GMT
        Subject: CN=F6A680B06C44E45E5D57352CC37D92006E249BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:79:db:5e:72:c8:96:6b:90:86:b5:7a:97:
                    71:30:80:71:ac:02:d0:47:e6:16:71:e7:8d:bf:98:
                    30:7c:61:c4:d1:0b:2c:d8:cf:02:f3:5d:0f:42:09:
                    bd:e6:58:78:9d:68:fc:8f:65:a5:2c:ae:16:f8:79:
                    99:77:37:d9:f6:7e:43:a5:91:69:e9:e3:06:72:6c:
                    89:cc:fd:92:e7:6b:39:5c:ce:db:eb:6b:65:d7:99:
                    6b:6d:70:a5:50:6c:8e:96:e9:ec:89:ae:10:d6:15:
                    00:7b:ae:e0:77:ad:1d:b3:15:77:78:65:82:5b:6a:
                    b4:8c:15:33:27:d0:0f:68:c7:ad:1a:90:9d:d0:be:
                    68:99:0e:eb:c2:e5:67:cf:36:40:61:75:f7:2d:8c:
                    78:df:74:d3:c6:d9:ac:da:04:13:47:e0:e5:5f:d3:
                    d5:6a:82:30:c1:9d:1a:f0:c9:90:df:b1:66:c0:f4:
                    cd:0f:ea:46:5e:be:a3:76:db:f1:1c:88:f4:50:aa:
                    8b:7f:58:70:bb:a4:46:74:59:35:16:8c:e4:31:48:
                    ca:d6:88:67:d7:03:87:17:c2:97:61:4e:9c:a2:af:
                    9c:a9:72:0e:ec:e9:0f:35:96:52:f8:29:7e:6a:b6:
                    92:e9:06:c6:11:18:d3:3c:77:f2:72:a0:51:16:7d:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:80:B0:6C:44:E4:5E:5D:57:35:2C:C3:7D:92:00:6E:24:9B:B9
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:a2:9a:72:21:2b:e7:bd:49:8a:2e:54:a1:ed:3b:d9:19:
         e7:9d:ec:ca:02:5e:88:15:cf:62:82:e0:f8:e0:14:ba:5c:a3:
         dd:54:64:37:47:2d:6b:31:ca:6d:29:c1:ba:1f:9a:bb:d8:b2:
         44:46:68:50:98:b4:4f:d3:7a:02:aa:77:42:22:61:c4:a9:a6:
         b0:7c:fc:d4:59:ae:f7:af:df:87:45:76:6f:f0:74:77:aa:7c:
         41:68:0a:b6:3e:e1:03:1f:5f:4a:dd:ea:bc:95:18:29:e0:53:
         e2:1a:1e:e0:e5:fc:54:52:f3:82:61:de:a2:60:f4:26:5d:43:
         ba:2b:d8:8a:d9:5b:14:42:f8:b3:e7:a2:c1:47:3e:3b:0f:92:
         73:e0:e9:3d:f6:83:b1:e9:51:bf:3e:dd:e7:76:df:20:a2:cf:
         d7:33:26:a8:f6:51:53:6c:6a:da:b8:a7:76:09:de:ac:99:6d:
         34:f4:c6:8e:b4:d2:aa:89:36:04:ce:cd:a1:83:6f:7f:42:a6:
         98:06:ad:c6:4f:51:cb:d9:64:19:49:2f:e1:80:fc:d2:5a:16:
         3e:3f:e1:81:4d:de:cf:17:0a:e5:de:84:3a:b0:41:ac:41:7c:
         10:8f:fa:06:9f:78:b5:2d:45:54:55:bd:6d:aa:f7:42:38:28:
         b7:2d:d0:df
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFWe/ca+irelwEcnTVHOVsZ93BVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgyNEYyQTQyRTg4
Qjc4QTFCNjAeFw0yNDAzMDUxNzM3MThaFw0yNTAzMDQxNzQyMThaMDMxMTAvBgNV
BAMTKEY2QTY4MEIwNkM0NEU0NUU1RDU3MzUyQ0MzN0Q5MjAwNkUyNDlCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1HnbXnLIlmuQhrV6l3EwgHGs
AtBH5hZx542/mDB8YcTRCyzYzwLzXQ9CCb3mWHidaPyPZaUsrhb4eZl3N9n2fkOl
kWnp4wZybInM/ZLnazlcztvra2XXmWttcKVQbI6W6eyJrhDWFQB7ruB3rR2zFXd4
ZYJbarSMFTMn0A9ox60akJ3QvmiZDuvC5WfPNkBhdfctjHjfdNPG2azaBBNH4OVf
09VqgjDBnRrwyZDfsWbA9M0P6kZevqN22/EciPRQqot/WHC7pEZ0WTUWjOQxSMrW
iGfXA4cXwpdhTpyir5ypcg7s6Q81llL4KX5qtpLpBsYRGNM8d/JyoFEWfbkPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9qaAsGxE5F5dVzUsw32SAG4km7kwHwYDVR0j
BBgwFoAUGb81WjgmPawMTz2CTypC6It4obYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjEx
NjcxRjA3MTMwMDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RB
QzBDNEYzRDgyNEYyQTQyRTg4Qjc4QTFCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJGMzU1QTM4MjYzREFDMEM0
RjNEODI0RjJBNDJFODhCNzhBMUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQzMjczQThBQ0YxMTY3MUYwNzEz
MDAyOTM5ODgyRURBREREREM1NzVENS8wLzMyMzAzMTJlMzEzMzMxMmUzMjMzMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYPs
MA0GCSqGSIb3DQEBCwUAA4IBAQATwKKaciEr571Jii5Uoe072RnnnezKAl6IFc9i
guD44BS6XKPdVGQ3Ry1rMcptKcG6H5q72LJERmhQmLRP03oCqndCImHEqaawfPzU
Wa73r9+HRXZv8HR3qnxBaAq2PuEDH19K3eq8lRgp4FPiGh7g5fxUUvOCYd6iYPQm
XUO6K9iK2VsUQviz56LBRz47D5Jz4Ok99oOx6VG/Pt3ndt8gos/XMyao9lFTbGra
uKd2Cd6smW009MaOtNKqiTYEzs2hg29/QqaYBq3GT1HL2WQZSS/hgPzSWhY+P+GB
Td7PFwrl3oQ6sEGsQXwQj/oGn3i1LUVUVb1tqvdCOCi3LdDf
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:20 2024 by rpki-client on console-ams.rpki-client.org