Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3234203d3e203631353533.roa
File:                     3230312e3138322e3133382e302f32342d3234203d3e203631353533.roa (raw, json)
Hash identifier:          9eHrX6Y2AOHjMpSHc/TpZap4Gjxyh9N2XFPiVnG5r0I=
Subject key identifier:   70:EB:4E:52:B7:49:90:38:F6:7A:F8:04:CF:5D:C5:B0:46:98:ED:4C
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1A6C9ABF2FEBD99E396042165B8F365305AB916A
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3234203d3e203631353533.roa
Signing time:             Tue 05 Mar 2024 18:15:59 +0000
ROA not before:           Tue 05 Mar 2024 18:10:59 +0000
ROA not after:            Tue 04 Mar 2025 18:15:59 +0000
asID:                     61553
IP address blocks:        201.182.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 01:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6c:9a:bf:2f:eb:d9:9e:39:60:42:16:5b:8f:36:53:05:ab:91:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:59 2024 GMT
            Not After : Mar  4 18:15:59 2025 GMT
        Subject: CN=70EB4E52B7499038F67AF804CF5DC5B04698ED4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:6d:e1:bd:df:0c:32:99:de:c3:3d:fb:bf:
                    ed:81:b7:37:28:3a:44:d2:a6:83:16:b2:22:52:9d:
                    36:32:b0:0b:58:a2:52:a4:e9:68:27:d4:ff:fa:26:
                    09:7a:15:1d:57:54:a2:c6:d6:90:bf:21:21:9c:63:
                    3a:ac:fc:e2:a2:16:15:46:1f:60:48:c4:ed:fb:d4:
                    77:b3:31:50:40:4c:b6:bb:30:9b:1d:86:91:27:84:
                    28:92:4b:fa:6d:3c:15:c5:c6:be:f5:a7:56:1b:f6:
                    bc:09:05:bb:2f:34:99:36:0d:8e:8b:71:29:1a:8a:
                    cd:c6:5d:ac:89:27:97:dc:3c:c2:5c:5d:c6:30:dd:
                    53:75:b7:2a:4a:4c:c1:22:21:7a:9e:eb:1b:a9:57:
                    ad:f3:ca:70:28:dc:6c:66:dc:2f:48:a0:09:40:17:
                    78:8f:37:19:1c:49:4e:87:ec:fc:44:2f:11:f2:de:
                    47:2f:42:56:0b:1b:9e:30:12:79:ce:59:79:cd:77:
                    41:d3:6b:3c:56:e3:4b:9d:3a:19:a1:84:00:64:39:
                    46:85:cc:01:e8:91:3b:b2:ed:81:13:36:fd:61:d5:
                    1a:cb:88:ca:cc:80:cd:63:6d:68:38:a2:ea:ac:55:
                    fa:46:fb:a4:96:b2:86:f2:ef:c3:38:e6:fa:c5:2e:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:4E:52:B7:49:90:38:F6:7A:F8:04:CF:5D:C5:B0:46:98:ED:4C
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3234203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:09:71:77:3a:a0:3f:7c:cb:d9:a2:c5:52:78:fe:62:6a:
         ee:cf:76:20:15:83:6a:b5:94:9c:9d:12:4d:63:63:61:e6:d6:
         b9:94:d9:f8:f4:14:92:c7:94:c7:97:e0:89:d4:8d:25:78:a6:
         a0:72:0a:cd:1d:82:08:f2:10:be:88:16:b9:a2:24:b5:43:5b:
         ce:75:06:d6:da:e5:12:1a:1c:1a:db:a1:37:ed:fd:64:9c:98:
         1c:a7:a1:e9:95:0b:d8:d7:fe:dc:7d:16:8d:39:ac:85:ec:23:
         60:83:ed:08:30:31:c7:5c:2e:9e:53:df:e5:37:a9:26:d0:80:
         a2:d8:af:de:8d:46:b1:a0:32:36:1b:47:45:2b:19:c1:f6:3f:
         e7:97:a2:b2:32:74:df:c8:e9:b8:d5:29:eb:e4:1d:32:e8:32:
         e4:90:89:dc:4f:65:94:54:41:b8:9b:70:ca:e3:8b:62:96:2c:
         ff:05:50:de:d2:ac:09:8c:ba:9b:61:0f:4a:51:42:44:13:d8:
         7b:a3:b2:95:45:ed:bf:b7:bc:4a:2e:aa:c2:9d:e6:4f:01:03:
         31:70:fb:7f:7e:f7:26:d6:06:2d:d9:2d:61:b4:48:69:45:df:
         8b:69:cd:f8:b4:70:c4:6d:67:91:20:35:17:dd:11:f5:42:82:
         ce:2e:49:17
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGmyavy/r2Z45YEIWW482UwWrkWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNDAzMDUxODEwNTlaFw0yNTAzMDQxODE1NTlaMDMxMTAvBgNV
BAMTKDcwRUI0RTUyQjc0OTkwMzhGNjdBRjgwNENGNURDNUIwNDY5OEVENEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupG3hvd8MMpnewz37v+2Btzco
OkTSpoMWsiJSnTYysAtYolKk6Wgn1P/6Jgl6FR1XVKLG1pC/ISGcYzqs/OKiFhVG
H2BIxO371HezMVBATLa7MJsdhpEnhCiSS/ptPBXFxr71p1Yb9rwJBbsvNJk2DY6L
cSkais3GXayJJ5fcPMJcXcYw3VN1typKTMEiIXqe6xupV63zynAo3Gxm3C9IoAlA
F3iPNxkcSU6H7PxELxHy3kcvQlYLG54wEnnOWXnNd0HTazxW40udOhmhhABkOUaF
zAHokTuy7YETNv1h1RrLiMrMgM1jbWg4ouqsVfpG+6SWsoby78M45vrFLoq9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcOtOUrdJkDj2evgEz13FsEaY7UwwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMTJlMzEzODMyMmUzMTMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzUzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAybaK
MA0GCSqGSIb3DQEBCwUAA4IBAQBR5glxdzqgP3zL2aLFUnj+Ymruz3YgFYNqtZSc
nRJNY2Nh5ta5lNn49BSSx5THl+CJ1I0leKagcgrNHYII8hC+iBa5oiS1Q1vOdQbW
2uUSGhwa26E37f1knJgcp6HplQvY1/7cfRaNOayF7CNgg+0IMDHHXC6eU9/lN6km
0ICi2K/ejUaxoDI2G0dFKxnB9j/nl6KyMnTfyOm41Snr5B0y6DLkkIncT2WUVEG4
m3DK44tiliz/BVDe0qwJjLqbYQ9KUUJEE9h7o7KVRe2/t7xKLqrCneZPAQMxcPt/
fvcm1gYt2S1htEhpRd+Lac34tHDEbWeRIDUX3RH1QoLOLkkX
-----END CERTIFICATE-----
Generated at Wed May 1 22:05:45 2024 by rpki-client on console-fra.rpki-client.org