Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/3230312e37372e39362e302f32322d3234203d3e20323635353837.roa
File:                     3230312e37372e39362e302f32322d3234203d3e20323635353837.roa (raw, json)
Hash identifier:          XB7DKP/YoIvN/rgT2QsreLPY88359X1WrAd3Pb+NAC8=
Subject key identifier:   1D:B2:A8:F2:BC:FB:EA:4A:F0:13:D2:F5:B7:46:94:0B:16:F3:FB:52
Certificate issuer:       /CN=341943B43C82090C568D3356B7373F9CE4151BF1
Certificate serial:       10775DA0C6620E0C54C1F9B11FDE2BB4CD1FCB11
Authority key identifier: 34:19:43:B4:3C:82:09:0C:56:8D:33:56:B7:37:3F:9C:E4:15:1B:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/341943B43C82090C568D3356B7373F9CE4151BF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/3230312e37372e39362e302f32322d3234203d3e20323635353837.roa
Signing time:             Tue 05 Mar 2024 18:10:19 +0000
ROA not before:           Tue 05 Mar 2024 18:05:19 +0000
ROA not after:            Tue 04 Mar 2025 18:10:19 +0000
asID:                     265587
IP address blocks:        201.77.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/341943B43C82090C568D3356B7373F9CE4151BF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/341943B43C82090C568D3356B7373F9CE4151BF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/341943B43C82090C568D3356B7373F9CE4151BF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:77:5d:a0:c6:62:0e:0c:54:c1:f9:b1:1f:de:2b:b4:cd:1f:cb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341943B43C82090C568D3356B7373F9CE4151BF1
        Validity
            Not Before: Mar  5 18:05:19 2024 GMT
            Not After : Mar  4 18:10:19 2025 GMT
        Subject: CN=1DB2A8F2BCFBEA4AF013D2F5B746940B16F3FB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:06:34:05:d4:48:3c:65:e5:c3:01:a8:54:
                    b7:05:45:49:d8:15:65:55:29:cb:fc:e9:95:5d:46:
                    b8:4a:f0:0d:3b:38:a0:b6:a4:0e:0e:cd:34:d3:d9:
                    81:8c:25:1e:df:c8:74:24:1d:3f:6e:b6:e7:50:e2:
                    0c:8c:60:1b:a7:fd:e2:bc:6d:15:65:d3:b0:c4:47:
                    74:3e:6e:5b:da:b9:cc:27:eb:1a:dd:ca:19:6a:37:
                    c6:93:af:3c:a8:24:03:25:10:0a:58:bf:33:99:b2:
                    07:44:dd:ff:6f:27:1a:d5:22:90:49:3e:16:63:46:
                    ef:45:12:1e:56:ac:49:66:84:98:15:2f:90:14:da:
                    56:b5:47:4e:12:7f:d1:b4:5f:ab:ac:c3:73:71:4f:
                    88:86:59:3c:32:6d:52:b1:ac:1d:21:c2:51:d6:b5:
                    d4:77:5c:7f:6b:eb:90:2d:97:57:65:d1:1c:e5:61:
                    6d:ba:3b:24:77:de:c5:f0:cb:23:f3:76:d7:74:7f:
                    77:32:51:b2:2d:d3:07:db:40:e2:b0:09:3d:cc:8f:
                    e1:5c:7f:81:eb:0e:fa:df:b3:ba:22:cb:e2:e4:0c:
                    cd:80:13:6b:3b:65:53:0d:df:f6:d8:f2:fb:ed:b2:
                    1a:c1:dd:0a:b0:df:9a:c4:bb:d7:66:14:54:4d:c9:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:A8:F2:BC:FB:EA:4A:F0:13:D2:F5:B7:46:94:0B:16:F3:FB:52
            X509v3 Authority Key Identifier:
                keyid:34:19:43:B4:3C:82:09:0C:56:8D:33:56:B7:37:3F:9C:E4:15:1B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/341943B43C82090C568D3356B7373F9CE4151BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/341943B43C82090C568D3356B7373F9CE4151BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10A3239D082E7E699A3FC40453A171CA745EF06F61AA2D3F45B46457D228D5FF/0/3230312e37372e39362e302f32322d3234203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:be:6a:fa:a9:df:1e:eb:7d:19:26:66:3f:06:10:81:7a:
         22:cd:30:72:7f:4a:ca:24:f1:b3:e9:1b:b3:13:35:19:36:e4:
         e1:61:d4:7a:e2:43:17:45:20:61:9d:4b:85:c5:25:3e:88:0f:
         1b:5b:c5:3e:c9:cb:ab:4f:37:e6:e3:cb:41:c9:4c:86:02:8e:
         4d:b1:2c:a0:d6:1e:94:62:a1:c8:7f:21:0e:4a:b5:1a:5d:b8:
         a2:e3:ce:f5:37:68:41:b3:17:89:77:f3:23:81:5a:32:ec:4a:
         d2:92:0d:7b:2a:2f:43:37:88:6e:6f:d8:46:5c:3d:ab:f7:c3:
         5c:0f:00:00:c1:44:39:b2:42:6d:a7:ba:9d:14:eb:7b:7b:53:
         1f:20:71:6f:f9:d2:47:6e:8c:7a:2d:4f:c0:6c:e6:40:04:5e:
         d5:d7:77:c1:8d:be:ad:36:75:7c:93:81:b2:cf:44:f7:ae:03:
         8c:0c:55:c9:f9:26:be:14:b6:07:86:8f:d3:a7:69:31:ce:c0:
         e7:0f:e5:ae:b6:b3:53:e1:9d:3c:ef:5f:5c:71:a5:a5:52:5d:
         f4:9d:b4:82:97:1e:04:c4:59:7f:bf:16:0a:e4:13:19:4a:97:
         e5:7f:5d:55:19:f7:b6:1c:e8:e8:99:58:33:d4:b3:61:50:ce:
         bc:01:bb:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEHddoMZiDgxUwfmxH94rtM0fyxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQxOTQzQjQzQzgyMDkwQzU2OEQzMzU2QjczNzNGOUNF
NDE1MUJGMTAeFw0yNDAzMDUxODA1MTlaFw0yNTAzMDQxODEwMTlaMDMxMTAvBgNV
BAMTKDFEQjJBOEYyQkNGQkVBNEFGMDEzRDJGNUI3NDY5NDBCMTZGM0ZCNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwgY0BdRIPGXlwwGoVLcFRUnY
FWVVKcv86ZVdRrhK8A07OKC2pA4OzTTT2YGMJR7fyHQkHT9utudQ4gyMYBun/eK8
bRVl07DER3Q+blvaucwn6xrdyhlqN8aTrzyoJAMlEApYvzOZsgdE3f9vJxrVIpBJ
PhZjRu9FEh5WrElmhJgVL5AU2la1R04Sf9G0X6usw3NxT4iGWTwybVKxrB0hwlHW
tdR3XH9r65Atl1dl0RzlYW26OyR33sXwyyPzdtd0f3cyUbIt0wfbQOKwCT3Mj+Fc
f4HrDvrfs7oiy+LkDM2AE2s7ZVMN3/bY8vvtshrB3Qqw35rEu9dmFFRNyWELAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHbKo8rz76krwE9L1t0aUCxbz+1IwHwYDVR0j
BBgwFoAUNBlDtDyCCQxWjTNWtzc/nOQVG/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEEzMjM5RDA4MkU3RTY5OUEzRkM0MDQ1M0ExNzFDQTc0
NUVGMDZGNjFBQTJEM0Y0NUI0NjQ1N0QyMjhENUZGLzAvMzQxOTQzQjQzQzgyMDkw
QzU2OEQzMzU2QjczNzNGOUNFNDE1MUJGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDE5NDNCNDNDODIwOTBDNTY4
RDMzNTZCNzM3M0Y5Q0U0MTUxQkYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBBMzIzOUQwODJFN0U2OTlBM0ZDNDA0NTNBMTcxQ0E3NDVFRjA2RjYx
QUEyRDNGNDVCNDY0NTdEMjI4RDVGRi8wLzMyMzAzMTJlMzczNzJlMzkzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAslNYDAN
BgkqhkiG9w0BAQsFAAOCAQEAW5W+avqp3x7rfRkmZj8GEIF6Is0wcn9KyiTxs+kb
sxM1GTbk4WHUeuJDF0UgYZ1LhcUlPogPG1vFPsnLq0835uPLQclMhgKOTbEsoNYe
lGKhyH8hDkq1Gl24ouPO9TdoQbMXiXfzI4FaMuxK0pINeyovQzeIbm/YRlw9q/fD
XA8AAMFEObJCbae6nRTre3tTHyBxb/nSR26Mei1PwGzmQARe1dd3wY2+rTZ1fJOB
ss9E964DjAxVyfkmvhS2B4aP06dpMc7A5w/lrrazU+GdPO9fXHGlpVJd9J20gpce
BMRZf78WCuQTGUqX5X9dVRn3thzo6JlYM9SzYVDOvAG7bw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org