Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323032.roa
File:                     3138312e3139332e302e302f31362d3234203d3e20323032.roa (raw, json)
Hash identifier:          O/kDRSB0g+5Svy1D/GevrJzrkhomH98OLnyDzW5yN6c=
Subject key identifier:   D0:15:59:39:8B:8E:0E:85:4F:B7:04:B2:3A:DB:2C:67:4F:18:B6:25
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       39342662DED20164F1A05249628AA76D119745B1
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:45 +0000
ROA not before:           Tue 05 Mar 2024 17:57:45 +0000
ROA not after:            Tue 04 Mar 2025 18:02:45 +0000
asID:                     202
IP address blocks:        181.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:34:26:62:de:d2:01:64:f1:a0:52:49:62:8a:a7:6d:11:97:45:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:45 2024 GMT
            Not After : Mar  4 18:02:45 2025 GMT
        Subject: CN=D01559398B8E0E854FB704B23ADB2C674F18B625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:3d:cc:c5:3e:b7:9b:a3:4b:70:d9:3f:1b:
                    0d:ca:d3:60:6b:df:ad:25:e4:1e:06:ab:dd:ad:c7:
                    2b:b4:75:97:1f:76:01:3a:74:32:e4:56:86:78:66:
                    8a:c6:06:fd:5d:f4:32:cc:4e:f1:fa:39:e1:9f:28:
                    0d:7b:60:bc:2d:0b:09:17:3c:da:f7:a3:fb:e5:26:
                    96:c9:f3:4d:1b:47:79:c7:71:64:65:06:c5:fd:5b:
                    77:43:9d:f7:92:24:08:2c:18:d2:59:d6:7a:93:3d:
                    28:9a:68:5c:e4:e9:6b:f6:eb:9b:de:d9:51:d8:2f:
                    f9:db:69:ce:81:a9:41:16:9a:d7:d4:61:3e:7d:20:
                    96:dd:42:23:ee:e2:75:ce:65:65:09:7a:3f:a7:26:
                    c7:a9:32:52:6c:e5:47:6f:cf:49:00:0b:34:b3:03:
                    d9:cd:8e:49:e8:df:3e:74:49:26:fa:30:d1:7b:d0:
                    2c:a6:7c:ea:90:57:8d:2b:6a:cf:bc:56:75:c2:c9:
                    08:12:aa:9d:cd:37:d9:2d:09:7a:fe:3f:da:e4:12:
                    86:82:6a:ab:fc:46:1c:3a:c2:02:26:07:f7:17:42:
                    93:c4:0f:99:9f:35:da:cb:7f:3b:5d:dc:e3:c7:6e:
                    05:46:d8:c5:70:3e:91:29:ef:a5:6b:83:29:35:56:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:59:39:8B:8E:0E:85:4F:B7:04:B2:3A:DB:2C:67:4F:18:B6:25
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:cb:cd:c6:e0:f3:82:e8:45:f7:4e:3b:a6:f8:4b:7a:dc:
         17:57:b2:0c:3b:22:26:b0:37:a1:1a:31:3a:6f:39:5d:67:75:
         2d:a5:6d:06:de:4f:0e:03:ee:56:f3:06:21:64:0a:db:45:0d:
         c2:c4:0c:f5:66:cc:a4:02:df:ab:6e:5f:25:64:6a:e4:a1:62:
         7a:dc:91:9b:f5:a1:95:41:40:0d:16:ec:5c:33:4b:0a:91:5d:
         68:9a:af:28:f4:b2:c5:70:1e:c8:23:4e:6c:46:b3:ea:9e:31:
         06:02:27:73:d0:ca:29:e5:86:5d:e8:75:b9:13:8e:f8:cd:43:
         4b:50:60:ba:0c:c7:bc:b5:7d:95:da:20:7e:bc:fb:0a:5b:cc:
         93:85:26:a7:1b:17:ad:9a:65:a9:6b:5c:a5:c9:d6:cf:34:3e:
         66:34:3e:8f:78:3a:5b:94:cb:80:ec:cd:e3:0f:74:3f:61:a6:
         9e:15:fd:75:f9:b0:69:7a:a7:e7:50:f0:51:b1:56:34:ac:91:
         22:cc:ae:8f:78:1b:c1:69:95:f4:f4:28:01:68:40:44:6c:e4:
         3c:a8:5b:a0:af:4e:18:b7:0e:d9:02:6b:b6:26:65:02:35:62:
         9f:48:90:5f:96:ac:0f:16:68:c7:7d:41:26:ff:eb:e5:cf:39:
         45:0c:e6:f8
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUOTQmYt7SAWTxoFJJYoqnbRGXRbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNDAzMDUxNzU3NDVaFw0yNTAzMDQxODAyNDVaMDMxMTAvBgNV
BAMTKEQwMTU1OTM5OEI4RTBFODU0RkI3MDRCMjNBREIyQzY3NEYxOEI2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/D3MxT63m6NLcNk/Gw3K02Br
360l5B4Gq92txyu0dZcfdgE6dDLkVoZ4ZorGBv1d9DLMTvH6OeGfKA17YLwtCwkX
PNr3o/vlJpbJ800bR3nHcWRlBsX9W3dDnfeSJAgsGNJZ1nqTPSiaaFzk6Wv265ve
2VHYL/nbac6BqUEWmtfUYT59IJbdQiPu4nXOZWUJej+nJsepMlJs5Udvz0kACzSz
A9nNjkno3z50SSb6MNF70CymfOqQV40ras+8VnXCyQgSqp3NN9ktCXr+P9rkEoaC
aqv8Rhw6wgImB/cXQpPED5mfNdrLfztd3OPHbgVG2MVwPpEp76Vrgyk1Vh+HAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQU0BVZOYuODoVPtwSyOtssZ08YtiUwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMxMzgzMTJlMzEzOTMzMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALXBMA0GCSqGSIb3
DQEBCwUAA4IBAQBQbMvNxuDzguhF9047pvhLetwXV7IMOyImsDehGjE6bzldZ3Ut
pW0G3k8OA+5W8wYhZArbRQ3CxAz1ZsykAt+rbl8lZGrkoWJ63JGb9aGVQUANFuxc
M0sKkV1omq8o9LLFcB7II05sRrPqnjEGAidz0Mop5YZd6HW5E474zUNLUGC6DMe8
tX2V2iB+vPsKW8yThSanGxetmmWpa1ylydbPND5mND6PeDpblMuA7M3jD3Q/Yaae
Ff11+bBpeqfnUPBRsVY0rJEizK6PeBvBaZX09CgBaEBEbOQ8qFugr04Ytw7ZAmu2
JmUCNWKfSJBflqwPFmjHfUEm/+vlzzlFDOb4
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:11 2024 by rpki-client on console-ams.rpki-client.org