Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
File:                     3135322e3233312e34382e302f32302d3234203d3e203532343230.roa (raw, json)
Hash identifier:          1tPY8JD5Pu42KaoAr/8Uf+SEqYNoQPiLZLXprXQp4ZY=
Subject key identifier:   38:56:C8:27:D6:AC:EA:5F:3C:3D:84:82:71:A3:39:CD:AE:24:BA:95
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       57FC04BC11D7D51C86AB7F849B8772281F1FA32A
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
Signing time:             Tue 05 Mar 2024 17:57:44 +0000
ROA not before:           Tue 05 Mar 2024 17:52:44 +0000
ROA not after:            Tue 04 Mar 2025 17:57:44 +0000
asID:                     52420
IP address blocks:        152.231.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:04:bc:11:d7:d5:1c:86:ab:7f:84:9b:87:72:28:1f:1f:a3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Mar  5 17:52:44 2024 GMT
            Not After : Mar  4 17:57:44 2025 GMT
        Subject: CN=3856C827D6ACEA5F3C3D848271A339CDAE24BA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:65:3f:e2:89:be:05:de:cb:48:92:03:fb:
                    a9:d6:5d:a2:55:25:7a:cc:61:c4:61:2f:fe:f1:8d:
                    03:52:a0:48:57:9f:f7:c8:d6:5d:17:51:7e:fe:9a:
                    43:f5:ec:97:bd:3e:89:8b:ab:92:d2:e3:51:af:7b:
                    f5:a3:4e:b4:cf:1a:64:bb:c7:e4:80:58:82:4e:a4:
                    0c:8a:aa:43:7d:c0:3b:f8:52:54:6e:2a:f5:de:d9:
                    69:c0:6d:01:4f:5b:b7:38:9c:9b:a4:3d:58:01:fb:
                    a1:9a:57:b5:e5:29:ea:56:f6:58:6c:51:ff:9b:9e:
                    2b:d5:2d:92:b5:b1:86:b0:3d:15:5a:06:cf:1d:62:
                    02:97:87:8d:3e:42:a9:80:f4:ec:e8:6a:91:02:7c:
                    a2:f2:b3:f9:ee:7c:5b:85:f7:76:a5:6e:13:b9:81:
                    78:5a:89:cc:6c:31:98:40:96:a5:f3:20:8d:e5:82:
                    47:71:1e:1c:00:ca:a4:06:1f:a9:25:d0:7d:4c:4f:
                    8e:7a:a4:13:48:f8:15:a1:6d:b7:57:68:42:03:a2:
                    96:b0:25:e6:2a:92:8a:3e:a8:52:99:c9:ea:cf:c0:
                    c1:69:55:49:68:16:51:06:7d:6d:6f:ed:d5:b6:e1:
                    82:71:d7:cd:61:41:00:26:d7:c1:48:9a:86:2c:6d:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:C8:27:D6:AC:EA:5F:3C:3D:84:82:71:A3:39:CD:AE:24:BA:95
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:85:20:fa:12:fe:a6:dc:39:52:59:bc:79:dd:51:e2:f0:2c:
         51:bc:48:30:28:74:81:21:1c:35:b0:b9:cd:ab:f7:0c:30:28:
         db:2a:70:9c:2a:00:fc:2f:d3:ea:77:db:82:89:83:72:1c:02:
         9f:0d:1b:46:79:85:47:79:d8:5d:79:dc:0a:f3:57:6e:46:d9:
         61:73:44:fa:ec:26:49:3c:dc:2a:66:36:4e:1c:04:8a:f0:87:
         1f:9e:6a:d0:5a:f9:95:ff:3d:2a:b5:2e:b4:ee:36:8a:f2:53:
         32:5f:be:5e:75:11:01:de:3b:52:42:77:bc:a8:2b:d2:00:ea:
         51:f5:9e:f7:9b:7b:5e:61:a8:02:ef:11:75:54:4a:af:2d:ba:
         45:5d:e9:6a:37:a1:eb:5a:4c:8c:36:18:d9:b2:80:4d:fd:72:
         f7:29:44:02:84:02:d4:85:26:c4:bb:d6:d5:56:a0:26:ca:37:
         7a:d3:6a:88:eb:8d:1f:d1:d1:a5:3a:be:6f:7f:af:43:f5:0c:
         35:73:6b:c0:13:b8:13:a5:2a:6b:7a:4e:50:d0:c4:27:78:70:
         a6:05:48:72:77:11:55:6f:a8:74:1c:d0:fa:9b:b5:e8:b1:32:
         ec:da:71:89:d4:f0:d8:41:34:53:a2:cc:89:04:69:17:a5:c9:
         15:2c:5a:07
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV/wEvBHX1RyGq3+Em4dyKB8foyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVFRjc0RUM1NDlCQkEzQTk4NTg2OTQ4QTY1MkVGMUU2
NzcyOUYwODAeFw0yNDAzMDUxNzUyNDRaFw0yNTAzMDQxNzU3NDRaMDMxMTAvBgNV
BAMTKDM4NTZDODI3RDZBQ0VBNUYzQzNEODQ4MjcxQTMzOUNEQUUyNEJBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKdmU/4om+Bd7LSJID+6nWXaJV
JXrMYcRhL/7xjQNSoEhXn/fI1l0XUX7+mkP17Je9PomLq5LS41Gve/WjTrTPGmS7
x+SAWIJOpAyKqkN9wDv4UlRuKvXe2WnAbQFPW7c4nJukPVgB+6GaV7XlKepW9lhs
Uf+bnivVLZK1sYawPRVaBs8dYgKXh40+QqmA9OzoapECfKLys/nufFuF93albhO5
gXhaicxsMZhAlqXzII3lgkdxHhwAyqQGH6kl0H1MT456pBNI+BWhbbdXaEIDopaw
JeYqkoo+qFKZyerPwMFpVUloFlEGfW1v7dW24YJx181hQQAm18FImoYsbQ8XAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOFbIJ9as6l88PYSCcaM5za4kupUwHwYDVR0j
BBgwFoAUXu907FSbujqYWGlIplLvHmdynwgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0UwQURGOUFFODYyOTNENDFEQTg4QUUxRDM4MTQxRUE5
ODM2OEI5OTlFRjY4RTMxOThFRjlFNTRFRjFDNjJGLzAvNUVFRjc0RUM1NDlCQkEz
QTk4NTg2OTQ4QTY1MkVGMUU2NzcyOUYwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUVGNzRFQzU0OUJCQTNBOTg1
ODY5NDhBNjUyRUYxRTY3NzI5RjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNFMEFERjlBRTg2MjkzRDQxREE4OEFFMUQzODE0MUVBOTgzNjhCOTk5
RUY2OEUzMTk4RUY5RTU0RUYxQzYyRi8wLzMxMzUzMjJlMzIzMzMxMmUzNDM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjM0MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJjnMDAN
BgkqhkiG9w0BAQsFAAOCAQEAIYUg+hL+ptw5Ulm8ed1R4vAsUbxIMCh0gSEcNbC5
zav3DDAo2ypwnCoA/C/T6nfbgomDchwCnw0bRnmFR3nYXXncCvNXbkbZYXNE+uwm
STzcKmY2ThwEivCHH55q0Fr5lf89KrUutO42ivJTMl++XnURAd47UkJ3vKgr0gDq
UfWe95t7XmGoAu8RdVRKry26RV3pajeh61pMjDYY2bKATf1y9ylEAoQC1IUmxLvW
1VagJso3etNqiOuNH9HRpTq+b3+vQ/UMNXNrwBO4E6Uqa3pOUNDEJ3hwpgVIcncR
VW+odBzQ+pu16LEy7NpxidTw2EE0U6LMiQRpF6XJFSxaBw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org