Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32342d3234203d3e20323732303939.roa
File:                     3138312e3233332e3130302e302f32342d3234203d3e20323732303939.roa (raw, json)
Hash identifier:          Wo38j/ViXKXdlOQTXeHZKtHPVsd4oJYhw76w//nd2eQ=
Subject key identifier:   CB:2F:79:7D:ED:08:A5:99:6D:DB:BD:56:3D:16:47:96:69:2B:94:3C
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       1050209FAF6906F73C9585DBEEB3A9FD0C7D7793
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32342d3234203d3e20323732303939.roa
Signing time:             Tue 05 Mar 2024 18:03:46 +0000
ROA not before:           Tue 05 Mar 2024 17:58:46 +0000
ROA not after:            Tue 04 Mar 2025 18:03:46 +0000
asID:                     272099
IP address blocks:        181.233.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:50:20:9f:af:69:06:f7:3c:95:85:db:ee:b3:a9:fd:0c:7d:77:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Mar  5 17:58:46 2024 GMT
            Not After : Mar  4 18:03:46 2025 GMT
        Subject: CN=CB2F797DED08A5996DDBBD563D164796692B943C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:0f:41:c7:d3:82:f3:24:87:53:d4:bd:30:
                    b5:36:29:09:ad:51:44:b0:93:97:6d:f3:90:ec:23:
                    9d:c2:c2:e8:eb:55:cf:01:f0:6c:83:08:79:6e:41:
                    58:25:2e:f0:9d:47:36:65:1c:43:a6:7f:6e:22:ac:
                    e7:fc:9b:9e:1b:35:86:c8:53:86:59:35:87:0f:53:
                    b1:00:ae:e9:ba:c1:7c:29:d4:ea:e4:25:bc:0a:94:
                    fb:dc:2d:11:2d:84:7d:8c:23:ac:de:13:42:86:f1:
                    81:6b:d7:f8:ca:ba:e7:6f:7d:44:a6:aa:28:c9:21:
                    87:df:ef:93:dc:a7:50:65:24:0e:7e:a6:ba:79:72:
                    ce:fb:04:30:66:78:12:a4:52:90:71:a2:2d:01:16:
                    b7:16:89:dd:78:aa:e1:cf:dc:76:c8:a0:06:bd:dd:
                    47:d3:b2:0a:28:75:2e:1c:d9:e6:02:8f:a4:c5:ec:
                    a3:52:9e:3b:19:6f:4e:3c:2d:93:d7:bf:33:80:92:
                    31:67:f2:6b:c7:7f:c5:bb:76:37:fa:1f:9c:e9:d1:
                    c4:08:ab:0d:03:b6:fc:b6:f7:44:95:62:a8:e7:78:
                    df:41:b1:91:9b:2a:33:4d:9f:dc:dc:95:44:10:af:
                    0e:3d:65:9d:85:1f:ef:17:8e:35:f6:04:42:3b:8a:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2F:79:7D:ED:08:A5:99:6D:DB:BD:56:3D:16:47:96:69:2B:94:3C
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32342d3234203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ba:3a:03:68:2d:2a:2c:fc:0b:fd:a6:b7:49:45:31:23:42:
         b4:4f:7f:63:c8:10:3c:27:7d:51:5d:38:ae:59:ca:78:ec:e8:
         39:cf:c8:29:a3:41:62:a8:d3:30:b7:e9:f2:ce:18:f0:c4:35:
         e4:33:76:67:9f:dd:3d:ba:50:b8:0f:08:ae:0f:71:c8:de:4f:
         b6:d9:62:85:bb:2a:40:05:fb:fd:64:41:85:a9:4b:a4:ba:d4:
         25:74:97:bb:84:d5:a2:30:45:65:7a:af:e0:f6:8f:fd:40:c7:
         8a:d8:a7:4e:72:9f:14:d9:13:01:52:af:3d:9f:5b:eb:64:14:
         03:06:cf:37:e9:c3:89:af:3a:e8:10:c5:8c:b4:18:c8:e1:40:
         40:2d:89:d6:16:25:a1:f8:e4:b7:5d:45:c4:6e:e3:e5:d8:1a:
         55:cf:17:12:e0:1f:c7:94:01:2c:8c:6f:b5:df:dd:ff:7e:af:
         91:31:38:a2:90:03:83:17:42:c1:46:b6:64:82:cb:6d:96:05:
         58:9d:29:5f:2c:1f:18:78:31:59:01:c6:e5:63:05:a6:b8:f5:
         fd:6d:ad:13:0f:62:f4:0d:97:38:61:ef:9d:03:98:1b:6c:2d:
         69:5b:f3:af:31:fd:ef:ad:bf:c5:9b:c5:bc:0f:03:96:75:34:
         7b:e7:34:61
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEFAgn69pBvc8lYXb7rOp/Qx9d5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEzQTFGQjY4NTg0MTVENTE1NUFERDc4NkZERjIxNDQw
OEFBNTczMDAeFw0yNDAzMDUxNzU4NDZaFw0yNTAzMDQxODAzNDZaMDMxMTAvBgNV
BAMTKENCMkY3OTdERUQwOEE1OTk2RERCQkQ1NjNEMTY0Nzk2NjkyQjk0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCg9Bx9OC8ySHU9S9MLU2KQmt
UUSwk5dt85DsI53CwujrVc8B8GyDCHluQVglLvCdRzZlHEOmf24irOf8m54bNYbI
U4ZZNYcPU7EArum6wXwp1OrkJbwKlPvcLREthH2MI6zeE0KG8YFr1/jKuudvfUSm
qijJIYff75Pcp1BlJA5+prp5cs77BDBmeBKkUpBxoi0BFrcWid14quHP3HbIoAa9
3UfTsgoodS4c2eYCj6TF7KNSnjsZb048LZPXvzOAkjFn8mvHf8W7djf6H5zp0cQI
qw0Dtvy290SVYqjneN9BsZGbKjNNn9zclUQQrw49ZZ2FH+8XjjX2BEI7iphrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUyy95fe0IpZlt271WPRZHlmkrlDwwHwYDVR0j
BBgwFoAUEToftoWEFdUVWt14b98hRAiqVzAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzQzRUVCODg4QjFBNjREM0Q5RTE1RDgyQ0Y0OTRCQUVB
QjA2MEIyOTRBQzJGNjFDMkRGM0NCNTUwRDkyMDZBLzAvMTEzQTFGQjY4NTg0MTVE
NTE1NUFERDc4NkZERjIxNDQwOEFBNTczMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTNBMUZCNjg1ODQxNUQ1MTU1
QURENzg2RkRGMjE0NDA4QUE1NzMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0M0VFQjg4OEIxQTY0RDNEOUUxNUQ4MkNGNDk0QkFFQUIwNjBCMjk0
QUMyRjYxQzJERjNDQjU1MEQ5MjA2QS8wLzMxMzgzMTJlMzIzMzMzMmUzMTMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMDM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
6WQwDQYJKoZIhvcNAQELBQADggEBAAW6OgNoLSos/Av9prdJRTEjQrRPf2PIEDwn
fVFdOK5Zynjs6DnPyCmjQWKo0zC36fLOGPDENeQzdmef3T26ULgPCK4PccjeT7bZ
YoW7KkAF+/1kQYWpS6S61CV0l7uE1aIwRWV6r+D2j/1Ax4rYp05ynxTZEwFSrz2f
W+tkFAMGzzfpw4mvOugQxYy0GMjhQEAtidYWJaH45LddRcRu4+XYGlXPFxLgH8eU
ASyMb7Xf3f9+r5ExOKKQA4MXQsFGtmSCy22WBVidKV8sHxh4MVkBxuVjBaa49f1t
rRMPYvQNlzhh750DmBtsLWlb868x/e+tv8WbxbwPA5Z1NHvnNGE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org