Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa
File:                     3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa (raw, json)
Hash identifier:          Ed44sdfWRVNJV1IR7/QV6s1Wnctt9IBBjZgBo3B5qOk=
Subject key identifier:   B5:7E:7F:4E:F3:E5:9C:76:4B:47:CC:37:C0:32:64:DA:45:65:1A:94
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       7CC00A96FF3D7641C79D260D51A3BEB1BC48DCCB
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa
Signing time:             Tue 05 Mar 2024 18:03:44 +0000
ROA not before:           Tue 05 Mar 2024 17:58:44 +0000
ROA not after:            Tue 04 Mar 2025 18:03:44 +0000
asID:                     272099
IP address blocks:        181.233.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:0a:96:ff:3d:76:41:c7:9d:26:0d:51:a3:be:b1:bc:48:dc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Mar  5 17:58:44 2024 GMT
            Not After : Mar  4 18:03:44 2025 GMT
        Subject: CN=B57E7F4EF3E59C764B47CC37C03264DA45651A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:93:f4:00:16:94:c8:d1:40:63:dc:2b:a4:
                    99:a1:c5:01:62:25:f9:06:97:7e:e0:9b:2e:84:23:
                    ab:36:c6:79:dc:87:6d:bf:8d:16:c8:f0:af:98:4d:
                    1c:37:68:ad:6b:b8:6a:5a:50:08:9f:ba:d5:d9:3a:
                    0c:c0:4e:19:44:cd:f1:a8:ee:05:ff:56:c4:28:a0:
                    d5:c8:3e:89:70:c1:17:e1:cd:af:95:9f:fa:88:54:
                    7e:17:26:f8:81:77:50:3a:11:18:56:c4:9e:2d:36:
                    99:10:27:06:a6:2f:ae:75:9e:07:b7:0f:d3:cc:b7:
                    59:dc:38:ee:bc:3e:c5:9f:e2:28:bd:e5:fe:c2:28:
                    76:81:53:cb:41:77:ab:6e:cd:06:53:9d:2e:da:53:
                    87:de:c5:d3:ee:21:70:08:2f:ed:1e:e4:bb:16:67:
                    5e:95:2e:35:d3:28:20:e3:28:54:86:b5:84:d8:df:
                    8e:f1:28:b0:d5:93:6e:1c:83:fb:1c:db:73:0d:e9:
                    78:01:cc:81:3c:3b:aa:ad:6f:0a:5e:99:37:30:48:
                    05:11:9c:c4:82:3d:f2:3a:bf:71:33:05:62:d3:79:
                    68:36:24:a2:0a:07:ff:00:fb:30:c4:46:5d:0a:13:
                    3e:23:28:74:88:56:47:26:11:c4:83:70:45:e5:ac:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:7F:4E:F3:E5:9C:76:4B:47:CC:37:C0:32:64:DA:45:65:1A:94
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130312e302f32342d3234203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:98:93:46:cc:03:93:0c:6e:ce:c7:34:d7:0e:10:a5:d7:d5:
         54:52:2b:e1:48:3a:a6:41:15:1d:cc:61:08:a6:ad:91:46:df:
         86:45:2b:64:ca:cb:ee:cc:88:12:06:46:9d:16:a8:7a:a8:7a:
         dd:ba:1b:5b:99:ca:9b:f5:39:08:b4:79:55:a0:7c:c2:f8:d2:
         a5:f4:a0:a3:67:e3:7b:6a:d7:f3:05:27:55:e9:7c:13:b8:c2:
         09:10:27:b7:5e:81:c2:09:d0:b5:b6:5a:7a:be:38:df:c2:f9:
         74:73:a5:51:c0:37:4c:d4:f8:d8:e8:b4:00:aa:cc:52:55:a3:
         2f:de:0e:3c:9e:e5:7f:52:bf:7b:e7:44:ae:aa:74:6e:75:62:
         2d:91:6e:ab:70:c8:de:e5:c9:77:20:8f:fb:b0:82:63:89:ed:
         0b:78:f4:6d:8c:c0:8c:5b:24:84:9e:f1:de:88:5f:6f:2a:f2:
         36:85:7d:fa:d3:6d:71:61:5e:d4:c1:b7:09:65:68:ed:4b:9a:
         56:71:b2:b7:5b:4b:d9:47:50:9f:f0:4e:30:e6:e5:22:24:eb:
         71:0a:d1:bc:5f:ab:2b:59:46:8a:df:71:aa:9b:3a:7a:2a:be:
         b1:60:32:2d:3d:5d:d6:99:cb:5e:e7:61:3c:bb:2c:d5:17:83:
         d8:a0:99:6e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfMAKlv89dkHHnSYNUaO+sbxI3MswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEzQTFGQjY4NTg0MTVENTE1NUFERDc4NkZERjIxNDQw
OEFBNTczMDAeFw0yNDAzMDUxNzU4NDRaFw0yNTAzMDQxODAzNDRaMDMxMTAvBgNV
BAMTKEI1N0U3RjRFRjNFNTlDNzY0QjQ3Q0MzN0MwMzI2NERBNDU2NTFBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcpP0ABaUyNFAY9wrpJmhxQFi
JfkGl37gmy6EI6s2xnnch22/jRbI8K+YTRw3aK1ruGpaUAifutXZOgzAThlEzfGo
7gX/VsQooNXIPolwwRfhza+Vn/qIVH4XJviBd1A6ERhWxJ4tNpkQJwamL651nge3
D9PMt1ncOO68PsWf4ii95f7CKHaBU8tBd6tuzQZTnS7aU4fexdPuIXAIL+0e5LsW
Z16VLjXTKCDjKFSGtYTY347xKLDVk24cg/sc23MN6XgBzIE8O6qtbwpemTcwSAUR
nMSCPfI6v3EzBWLTeWg2JKIKB/8A+zDERl0KEz4jKHSIVkcmEcSDcEXlrD3JAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUtX5/TvPlnHZLR8w3wDJk2kVlGpQwHwYDVR0j
BBgwFoAUEToftoWEFdUVWt14b98hRAiqVzAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzQzRUVCODg4QjFBNjREM0Q5RTE1RDgyQ0Y0OTRCQUVB
QjA2MEIyOTRBQzJGNjFDMkRGM0NCNTUwRDkyMDZBLzAvMTEzQTFGQjY4NTg0MTVE
NTE1NUFERDc4NkZERjIxNDQwOEFBNTczMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTNBMUZCNjg1ODQxNUQ1MTU1
QURENzg2RkRGMjE0NDA4QUE1NzMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0M0VFQjg4OEIxQTY0RDNEOUUxNUQ4MkNGNDk0QkFFQUIwNjBCMjk0
QUMyRjYxQzJERjNDQjU1MEQ5MjA2QS8wLzMxMzgzMTJlMzIzMzMzMmUzMTMwMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMDM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
6WUwDQYJKoZIhvcNAQELBQADggEBAH2Yk0bMA5MMbs7HNNcOEKXX1VRSK+FIOqZB
FR3MYQimrZFG34ZFK2TKy+7MiBIGRp0WqHqoet26G1uZypv1OQi0eVWgfML40qX0
oKNn43tq1/MFJ1XpfBO4wgkQJ7degcIJ0LW2Wnq+ON/C+XRzpVHAN0zU+NjotACq
zFJVoy/eDjye5X9Sv3vnRK6qdG51Yi2RbqtwyN7lyXcgj/uwgmOJ7Qt49G2MwIxb
JISe8d6IX28q8jaFffrTbXFhXtTBtwllaO1LmlZxsrdbS9lHUJ/wTjDm5SIk63EK
0bxfqytZRorfcaqbOnoqvrFgMi09XdaZy17nYTy7LNUXg9igmW4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org