Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa
File:                     3230312e3233372e302e302f31362d3234203d3e2033333536.roa (raw, json)
Hash identifier:          Xg5fZaSlXh4Pu6Ops2PzQASN0l0BqTiLmbg88lNuu78=
Subject key identifier:   13:E8:CE:CE:4B:31:D8:16:17:DE:F3:CC:AE:91:C0:0E:7A:F3:9D:77
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6AB81418676A6B6D03BD0F86301DA0F2767BCB86
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 18:02:46 +0000
ROA not before:           Tue 05 Mar 2024 17:57:46 +0000
ROA not after:            Tue 04 Mar 2025 18:02:46 +0000
asID:                     3356
IP address blocks:        201.237.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b8:14:18:67:6a:6b:6d:03:bd:0f:86:30:1d:a0:f2:76:7b:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:46 2024 GMT
            Not After : Mar  4 18:02:46 2025 GMT
        Subject: CN=13E8CECE4B31D81617DEF3CCAE91C00E7AF39D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:a5:72:23:48:1d:17:26:29:45:3f:15:ec:
                    82:6b:ed:78:51:6c:86:85:f9:d0:35:cb:ae:84:af:
                    cb:12:a8:93:34:49:27:c3:8c:f2:07:2c:3d:04:89:
                    ef:28:a1:e6:38:cc:b1:6f:7d:fa:a1:13:49:12:d3:
                    1e:db:d0:4b:42:d2:e7:7e:27:6a:bc:21:ad:50:a0:
                    b1:e7:d7:d5:15:3a:e7:36:6a:17:32:22:f9:e3:8a:
                    36:39:20:2d:50:c3:ff:4e:a2:ad:4d:bf:6e:63:88:
                    33:8b:3e:43:a3:99:d7:05:98:63:40:79:b6:94:9b:
                    5a:b6:68:a5:3c:07:18:8c:50:ea:9e:a1:ea:19:49:
                    fb:82:60:24:a6:2a:a1:c0:57:e3:da:4c:99:55:fb:
                    18:cf:86:18:d4:3d:cc:39:50:46:cf:73:0c:6b:7a:
                    c4:f4:b6:04:8d:e0:66:ba:4f:99:27:a6:37:79:6e:
                    d1:93:39:58:52:67:6a:53:25:4e:a6:fb:f8:7f:72:
                    51:d0:00:d2:d8:0f:27:9b:a5:4e:46:66:5e:3d:d8:
                    0b:03:82:eb:8c:7f:23:2b:03:95:82:08:cf:97:60:
                    0f:69:c8:45:66:aa:88:7f:2c:9c:23:68:04:18:7c:
                    4a:d5:dc:43:b2:c3:1a:d4:31:b8:ef:b6:d0:57:a0:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:CE:CE:4B:31:D8:16:17:DE:F3:CC:AE:91:C0:0E:7A:F3:9D:77
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:52:63:37:cc:c1:7e:37:77:2b:75:87:8a:40:bb:4a:75:ad:
         de:20:5f:35:ac:af:ca:30:29:e1:52:12:1c:56:6a:31:9a:d6:
         c1:8b:d0:40:72:13:98:4b:68:56:f2:89:fd:14:03:f0:5a:27:
         3b:83:3d:54:6d:08:6a:1a:ef:63:47:19:03:01:03:ce:b4:1f:
         04:de:6c:cb:26:c9:09:b5:bc:e8:d3:33:a3:39:6c:84:2f:da:
         3e:33:50:4c:87:33:89:10:e8:b1:df:c5:26:6e:62:4b:4d:c6:
         84:22:b9:fa:e6:db:b0:f1:22:f2:19:5a:2f:5e:3f:3f:3a:93:
         e0:f1:0e:ad:31:f9:dc:c8:8d:71:08:2f:1c:86:d0:31:ac:19:
         56:02:0a:cf:6b:0a:b1:6e:6e:af:1a:b3:8c:6f:24:05:bc:37:
         1b:bd:b8:e8:9c:84:ca:b9:7d:a0:69:9f:bc:9e:a8:d2:9d:18:
         6a:33:1a:9c:80:ff:86:8b:8f:5f:ae:51:4d:75:06:ec:c4:e9:
         81:f3:34:44:0b:79:e6:ec:55:c0:e8:68:cf:d0:4f:d9:bb:2c:
         87:65:32:2e:a9:b1:a5:70:24:5c:dc:71:d2:44:b8:77:e5:f9:
         68:89:18:7b:bf:e6:af:28:09:f7:cf:8b:17:4b:50:25:04:47:
         4d:5d:c5:90
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUargUGGdqa20DvQ+GMB2g8nZ7y4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNDAzMDUxNzU3NDZaFw0yNTAzMDQxODAyNDZaMDMxMTAvBgNV
BAMTKDEzRThDRUNFNEIzMUQ4MTYxN0RFRjNDQ0FFOTFDMDBFN0FGMzlENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtKVyI0gdFyYpRT8V7IJr7XhR
bIaF+dA1y66Er8sSqJM0SSfDjPIHLD0Eie8ooeY4zLFvffqhE0kS0x7b0EtC0ud+
J2q8Ia1QoLHn19UVOuc2ahcyIvnjijY5IC1Qw/9Ooq1Nv25jiDOLPkOjmdcFmGNA
ebaUm1q2aKU8BxiMUOqeoeoZSfuCYCSmKqHAV+PaTJlV+xjPhhjUPcw5UEbPcwxr
esT0tgSN4Ga6T5knpjd5btGTOVhSZ2pTJU6m+/h/clHQANLYDyebpU5GZl492AsD
guuMfyMrA5WCCM+XYA9pyEVmqoh/LJwjaAQYfErV3EOywxrUMbjvttBXoA47AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUE+jOzksx2BYX3vPMrpHADnrznXcwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzIzMzM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAye0wDQYJKoZI
hvcNAQELBQADggEBAElSYzfMwX43dyt1h4pAu0p1rd4gXzWsr8owKeFSEhxWajGa
1sGL0EByE5hLaFbyif0UA/BaJzuDPVRtCGoa72NHGQMBA860HwTebMsmyQm1vOjT
M6M5bIQv2j4zUEyHM4kQ6LHfxSZuYktNxoQiufrm27DxIvIZWi9ePz86k+DxDq0x
+dzIjXEILxyG0DGsGVYCCs9rCrFubq8as4xvJAW8Nxu9uOichMq5faBpn7yeqNKd
GGozGpyA/4aLj1+uUU11BuzE6YHzNEQLeebsVcDoaM/QT9m7LIdlMi6psaVwJFzc
cdJEuHfl+WiJGHu/5q8oCffPixdLUCUER01dxZA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:31:47 2024 by rpki-client on console-fra.rpki-client.org