Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa
File:                     3230312e3139322e302e302f31322d3234203d3e203131383330.roa (raw, json)
Hash identifier:          dJ52rlCvytMJIBEPIW+Vr6qPS6z9+Fv1IfzSk06u0RY=
Subject key identifier:   84:C1:E3:5C:9A:8F:E6:A4:0B:28:C7:1C:45:B8:DC:43:95:EC:0E:AB
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       691E8B966FD2AB8AAF0A7AD822EE4681AF2C3994
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:02:38 +0000
ROA not before:           Tue 05 Mar 2024 17:57:38 +0000
ROA not after:            Tue 04 Mar 2025 18:02:38 +0000
asID:                     11830
IP address blocks:        201.192.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:8b:96:6f:d2:ab:8a:af:0a:7a:d8:22:ee:46:81:af:2c:39:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:38 2024 GMT
            Not After : Mar  4 18:02:38 2025 GMT
        Subject: CN=84C1E35C9A8FE6A40B28C71C45B8DC4395EC0EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:64:d9:b6:9f:86:6f:d3:e1:1f:98:7e:94:
                    af:eb:cd:6d:83:c6:94:d7:19:4f:4b:ba:76:f2:3f:
                    b7:d5:54:7c:d5:30:82:fd:f9:12:19:9d:2e:8c:9a:
                    d2:f5:d0:5d:40:ea:89:36:ca:80:68:37:84:91:42:
                    8b:79:e8:3d:20:8f:e2:be:bb:85:e4:ff:b9:14:d4:
                    dd:0e:5e:44:d5:9d:41:40:09:88:c2:5b:94:4d:2b:
                    e9:94:97:8b:db:50:98:ef:58:fc:cf:76:e8:86:44:
                    0b:8b:4b:22:bb:c5:d2:b3:f6:00:67:c1:dc:fc:b5:
                    54:76:2e:b8:0b:d5:75:8f:61:55:68:01:43:8a:b8:
                    ee:f6:66:48:1e:4a:4e:b0:fe:07:48:4d:99:ed:1b:
                    7a:d6:e2:98:1a:60:bd:09:e3:79:e5:2a:5b:ac:da:
                    6e:c6:f5:46:23:53:4f:fd:2e:70:fb:09:31:44:37:
                    b1:3a:3e:a1:d0:bb:87:4f:21:f3:14:f7:cd:7f:0b:
                    b3:38:77:a0:0c:e7:c2:3d:0f:b1:9d:ce:4e:d6:1e:
                    0a:28:6c:fe:58:79:6f:5e:f8:5f:87:f2:4a:02:44:
                    e4:b7:c9:31:ac:fe:f4:bd:78:3b:a3:1b:60:43:b5:
                    7b:dd:24:5f:4e:56:7b:87:a7:e0:63:50:da:a4:56:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:E3:5C:9A:8F:E6:A4:0B:28:C7:1C:45:B8:DC:43:95:EC:0E:AB
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:58:6f:6c:fd:9e:e2:b6:4a:3c:f4:e1:89:57:df:6f:c8:
         09:0c:01:3c:4f:c3:54:eb:a3:f6:4f:9d:6e:a6:cd:cf:1d:bc:
         97:06:ec:91:a7:e5:87:fa:a6:12:a2:70:f7:4b:5b:5e:62:b8:
         49:cb:58:f9:0b:92:1d:95:ab:61:77:e5:18:98:16:1b:a3:8f:
         ce:e1:c5:11:ad:bd:72:c7:a0:f7:b6:f7:41:d8:92:61:ee:f1:
         60:50:f9:48:42:98:43:66:9e:66:a2:eb:da:11:d8:d4:3d:cb:
         aa:77:dc:2f:c6:25:e8:52:83:0c:d6:48:45:6e:57:e0:69:ab:
         f1:9e:9a:66:7c:f7:aa:7f:4f:37:48:bb:ce:2e:7b:a4:df:ae:
         8c:2e:aa:4b:d2:cd:2a:84:40:98:9c:b0:36:5c:fe:47:19:5e:
         a0:18:7d:62:95:60:b6:d3:37:55:95:05:31:4f:7c:47:49:62:
         1b:58:4e:e8:fa:d2:d3:b7:f9:51:16:3f:6e:65:58:e5:ce:c6:
         1b:89:4e:b4:51:16:90:d3:a3:54:1d:32:55:6f:16:39:19:a2:
         36:2f:20:5c:f5:51:c6:8d:0a:47:13:0b:c9:5e:14:76:bd:9a:
         cb:1a:50:43:b8:7a:c5:58:e3:b2:23:ca:18:b0:3b:17:53:a4:
         d7:35:ea:01
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUaR6Llm/Sq4qvCnrYIu5Gga8sOZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNDAzMDUxNzU3MzhaFw0yNTAzMDQxODAyMzhaMDMxMTAvBgNV
BAMTKDg0QzFFMzVDOUE4RkU2QTQwQjI4QzcxQzQ1QjhEQzQzOTVFQzBFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KmTZtp+Gb9PhH5h+lK/rzW2D
xpTXGU9LunbyP7fVVHzVMIL9+RIZnS6MmtL10F1A6ok2yoBoN4SRQot56D0gj+K+
u4Xk/7kU1N0OXkTVnUFACYjCW5RNK+mUl4vbUJjvWPzPduiGRAuLSyK7xdKz9gBn
wdz8tVR2LrgL1XWPYVVoAUOKuO72ZkgeSk6w/gdITZntG3rW4pgaYL0J43nlKlus
2m7G9UYjU0/9LnD7CTFEN7E6PqHQu4dPIfMU981/C7M4d6AM58I9D7Gdzk7WHgoo
bP5YeW9e+F+H8koCROS3yTGs/vS9eDujG2BDtXvdJF9OVnuHp+BjUNqkVujRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUhMHjXJqP5qQLKMccRbjcQ5XsDqswHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzEzOTMyMmUzMDJlMzAy
ZjMxMzIyZDMyMzQyMDNkM2UyMDMxMzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwTJwDANBgkq
hkiG9w0BAQsFAAOCAQEAA5tYb2z9nuK2Sjz04YlX32/ICQwBPE/DVOuj9k+dbqbN
zx28lwbskaflh/qmEqJw90tbXmK4SctY+QuSHZWrYXflGJgWG6OPzuHFEa29cseg
97b3QdiSYe7xYFD5SEKYQ2aeZqLr2hHY1D3LqnfcL8Yl6FKDDNZIRW5X4Gmr8Z6a
Znz3qn9PN0i7zi57pN+ujC6qS9LNKoRAmJywNlz+RxleoBh9YpVgttM3VZUFMU98
R0liG1hO6PrS07f5URY/bmVY5c7GG4lOtFEWkNOjVB0yVW8WORmiNi8gXPVRxo0K
RxMLyV4Udr2ayxpQQ7h6xVjjsiPKGLA7F1Ok1zXqAQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org