Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323032.roa
File:                     3230312e3232312e3132342e302f32332d3234203d3e20323032.roa (raw, json)
Hash identifier:          Ivr7dY+oaJzwIRc3H88crMZjGD/Ny9aNxRBh+tCUp+8=
Subject key identifier:   BF:B1:A0:E1:17:E7:BD:9C:C0:5D:B0:2C:C1:31:39:57:F7:F3:8D:2B
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       29E32E388C8D40E7015C7F42C912163A402AB14A
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 17:54:17 +0000
ROA not before:           Tue 05 Mar 2024 17:49:17 +0000
ROA not after:            Tue 04 Mar 2025 17:54:17 +0000
asID:                     202
IP address blocks:        201.221.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:2e:38:8c:8d:40:e7:01:5c:7f:42:c9:12:16:3a:40:2a:b1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:17 2024 GMT
            Not After : Mar  4 17:54:17 2025 GMT
        Subject: CN=BFB1A0E117E7BD9CC05DB02CC1313957F7F38D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:25:9f:5a:c9:dd:a1:e2:d2:53:68:94:cd:
                    c1:5a:5b:a1:54:76:ad:de:c4:04:0a:75:27:f7:f0:
                    1d:b9:07:5f:bc:9e:12:f5:58:09:c8:54:a1:f2:82:
                    0d:6a:32:4a:55:a9:bf:05:c2:0c:c5:e4:ae:b9:62:
                    4a:f4:38:38:65:e9:45:9e:45:91:75:98:bb:e3:9c:
                    d8:f2:70:0a:8f:89:27:a7:dd:27:f6:82:e0:ae:12:
                    6e:08:e4:01:b8:c0:0b:10:3e:56:6b:78:ed:94:39:
                    bb:f5:dc:2c:4a:97:33:af:39:d7:02:e7:42:7e:1b:
                    98:d0:8c:dc:3b:3c:c0:cf:62:95:c7:48:da:a1:22:
                    9e:1a:29:24:0e:4f:b6:d8:f7:38:bf:8a:65:50:bd:
                    0e:23:f9:4d:84:ad:77:6c:e0:59:80:e0:2d:75:3a:
                    c0:81:0f:b2:1c:ca:48:19:be:f2:d6:19:c4:6f:2f:
                    a1:0d:2b:ea:01:38:38:45:f2:ea:e7:dd:e1:ac:32:
                    42:34:c1:b2:1a:35:b0:11:a9:fb:f3:3d:52:10:90:
                    e4:8d:10:22:68:40:b9:de:9c:f7:ba:f0:f8:94:97:
                    0c:d3:bc:9e:02:88:f8:c4:1e:84:0a:98:0d:60:af:
                    4f:9e:4d:f2:0f:9c:ff:69:a0:53:77:fc:7d:58:8c:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B1:A0:E1:17:E7:BD:9C:C0:5D:B0:2C:C1:31:39:57:F7:F3:8D:2B
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:b3:03:5e:a1:15:2e:55:6a:31:ad:e1:7b:3f:1f:e4:f8:
         7e:43:df:0a:c9:b3:ff:72:95:37:c4:48:d0:97:8b:4c:ab:b8:
         1a:75:04:8a:93:eb:ef:55:a4:e8:2b:14:c1:81:6f:c0:65:32:
         40:57:fd:f1:fb:cd:20:a1:9a:90:05:d0:97:4d:0d:12:1e:11:
         b4:53:a1:98:8f:04:ac:3d:e3:68:57:a8:d5:36:fb:b0:20:9b:
         99:2e:3a:22:b9:1d:e8:2e:28:d1:be:4c:50:08:89:9d:f0:13:
         e4:74:9b:31:72:43:dd:91:e2:1a:1c:61:38:3c:e2:84:1f:8c:
         5f:07:30:1c:8e:55:b1:2f:a3:c4:29:0c:50:6a:5b:45:bd:84:
         c4:3d:6e:d8:bf:ef:8a:86:df:5c:6e:d6:f4:0f:c5:e9:a3:f7:
         c9:e5:6c:9d:60:22:a3:45:1b:6e:f9:5c:f7:6f:e2:1b:11:e8:
         bd:4c:95:24:6d:3d:de:bc:9e:c3:0f:5b:b0:7a:b9:8c:51:a6:
         26:6c:c3:00:79:4b:17:3e:72:02:bd:df:07:e1:63:1b:09:d1:
         75:5a:2d:fe:85:00:41:a9:2b:87:16:c0:2e:45:62:25:75:2c:
         55:09:3f:5e:93:5a:ad:ba:6e:45:d3:bd:8d:df:32:ab:f5:4c:
         33:67:07:b2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKeMuOIyNQOcBXH9CyRIWOkAqsUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNDAzMDUxNzQ5MTdaFw0yNTAzMDQxNzU0MTdaMDMxMTAvBgNV
BAMTKEJGQjFBMEUxMTdFN0JEOUNDMDVEQjAyQ0MxMzEzOTU3RjdGMzhEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUyWfWsndoeLSU2iUzcFaW6FU
dq3exAQKdSf38B25B1+8nhL1WAnIVKHygg1qMkpVqb8FwgzF5K65Ykr0ODhl6UWe
RZF1mLvjnNjycAqPiSen3Sf2guCuEm4I5AG4wAsQPlZreO2UObv13CxKlzOvOdcC
50J+G5jQjNw7PMDPYpXHSNqhIp4aKSQOT7bY9zi/imVQvQ4j+U2ErXds4FmA4C11
OsCBD7IcykgZvvLWGcRvL6ENK+oBODhF8urn3eGsMkI0wbIaNbARqfvzPVIQkOSN
ECJoQLnenPe68PiUlwzTvJ4CiPjEHoQKmA1gr0+eTfIPnP9poFN3/H1YjAL1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUv7Gg4RfnvZzAXbAswTE5V/fzjSswHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMyMzAzMTJlMzIzMjMxMmUzMTMyMzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJ3XwwDQYJ
KoZIhvcNAQELBQADggEBACpmswNeoRUuVWoxreF7Px/k+H5D3wrJs/9ylTfESNCX
i0yruBp1BIqT6+9VpOgrFMGBb8BlMkBX/fH7zSChmpAF0JdNDRIeEbRToZiPBKw9
42hXqNU2+7Agm5kuOiK5HeguKNG+TFAIiZ3wE+R0mzFyQ92R4hocYTg84oQfjF8H
MByOVbEvo8QpDFBqW0W9hMQ9bti/74qG31xu1vQPxemj98nlbJ1gIqNFG275XPdv
4hsR6L1MlSRtPd68nsMPW7B6uYxRpiZswwB5Sxc+cgK93wfhYxsJ0XVaLf6FAEGp
K4cWwC5FYiV1LFUJP16TWq26bkXTvY3fMqv1TDNnB7I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org