Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa
File:                     3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa (raw, json)
Hash identifier:          gfiN4VKfkh1QYFINIwJvoTNgJNreUVFXpcHXxSpnr4A=
Subject key identifier:   D2:57:90:0A:DA:33:F3:45:DE:19:2C:96:BD:31:59:08:2B:A6:DF:B9
Certificate issuer:       /CN=E6A7505DAA0B511A5813C04388D52EC51B947806
Certificate serial:       5C52AC75FBDB24D02753036650395C45F2913AF3
Authority key identifier: E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa
Signing time:             Tue 09 Apr 2024 16:55:00 +0000
ROA not before:           Tue 09 Apr 2024 16:50:00 +0000
ROA not after:            Tue 08 Apr 2025 16:55:00 +0000
asID:                     270009
IP address blocks:        201.182.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:52:ac:75:fb:db:24:d0:27:53:03:66:50:39:5c:45:f2:91:3a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A7505DAA0B511A5813C04388D52EC51B947806
        Validity
            Not Before: Apr  9 16:50:00 2024 GMT
            Not After : Apr  8 16:55:00 2025 GMT
        Subject: CN=D257900ADA33F345DE192C96BD3159082BA6DFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:83:c3:c6:29:2b:76:42:bb:2e:ab:d1:2b:
                    ef:92:6e:98:5c:95:cc:20:28:ea:24:a0:7b:05:81:
                    e5:6f:a4:a7:b4:5d:e5:9d:09:2e:41:02:94:63:c2:
                    9c:81:26:53:15:1d:55:e4:e7:db:60:95:ed:2e:1c:
                    6d:ee:3f:db:6f:0d:af:9c:63:22:a2:ec:cf:83:c9:
                    54:ad:98:c6:32:0f:e7:ad:22:39:d2:bc:6f:b2:c1:
                    cf:a4:fb:8c:b3:2d:4d:01:56:fa:2f:e4:f8:f6:31:
                    9b:fd:07:7d:7a:13:49:32:92:71:be:65:30:3e:87:
                    b9:83:ea:30:ab:43:7e:94:0a:04:f0:83:36:22:b7:
                    32:d6:bd:45:98:37:fc:0a:7d:05:f0:7a:bb:aa:e1:
                    7e:51:74:8d:e9:65:a4:4c:91:d3:6d:86:50:f9:a7:
                    49:3a:f4:dd:47:87:d5:f6:0d:aa:92:b1:db:f3:97:
                    10:d2:60:5a:f2:d2:59:ca:93:49:df:48:d8:59:33:
                    d4:27:79:72:d7:a9:0b:5c:8e:fe:a4:4c:f7:1a:c3:
                    42:58:25:43:ce:be:87:9d:c0:a5:24:f6:9b:95:1b:
                    3a:11:3f:fb:16:07:e5:d6:06:b2:ab:8c:e0:de:d5:
                    a5:88:de:04:3f:af:58:11:ea:11:64:21:35:3b:55:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:90:0A:DA:33:F3:45:DE:19:2C:96:BD:31:59:08:2B:A6:DF:B9
            X509v3 Authority Key Identifier:
                keyid:E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:85:e8:07:1b:e7:f9:8a:eb:65:30:a6:a1:ba:53:f0:30:12:
         0b:ee:88:b6:c8:6d:09:e6:c4:c6:a5:81:0c:a3:81:ee:d2:5f:
         c6:f8:50:35:63:36:55:bc:6f:dc:b2:8b:de:41:24:0f:06:22:
         dc:19:99:5a:a7:e3:b7:6b:01:c2:0f:16:2f:19:33:87:36:4b:
         ba:3c:2a:95:f4:f2:78:db:fb:ba:41:d9:bb:5b:50:5b:11:27:
         37:b2:2d:de:50:c3:92:bb:12:7a:2f:c1:64:e6:9f:ee:48:f7:
         ae:40:cf:a8:75:b4:f7:3e:b1:05:4f:d3:4d:48:75:4f:87:1e:
         12:ab:6a:68:b2:31:4f:0c:c3:62:67:5e:07:4b:42:13:46:2a:
         ce:1c:22:a3:67:96:e2:78:1b:a7:2e:53:54:4d:e6:fe:d4:ec:
         96:0d:d7:da:e2:05:08:ae:85:42:0f:38:cd:1f:99:eb:76:0e:
         84:84:26:eb:d5:9d:95:78:2e:35:8a:94:e3:8c:4b:71:34:ea:
         01:69:44:d1:30:3c:43:f3:ba:ee:42:1d:c6:4c:06:02:d1:30:
         f6:b2:d3:84:fe:a1:89:4f:35:bc:a0:5b:53:29:fe:2f:55:bb:
         f1:9a:9a:9d:54:60:36:23:c3:49:2e:b5:3c:55:b8:89:7f:8c:
         1e:a8:86:c3
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXFKsdfvbJNAnUwNmUDlcRfKROvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBNzUwNURBQTBCNTExQTU4MTNDMDQzODhENTJFQzUx
Qjk0NzgwNjAeFw0yNDA0MDkxNjUwMDBaFw0yNTA0MDgxNjU1MDBaMDMxMTAvBgNV
BAMTKEQyNTc5MDBBREEzM0YzNDVERTE5MkM5NkJEMzE1OTA4MkJBNkRGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAYPDxikrdkK7LqvRK++Sbphc
lcwgKOokoHsFgeVvpKe0XeWdCS5BApRjwpyBJlMVHVXk59tgle0uHG3uP9tvDa+c
YyKi7M+DyVStmMYyD+etIjnSvG+ywc+k+4yzLU0BVvov5Pj2MZv9B316E0kyknG+
ZTA+h7mD6jCrQ36UCgTwgzYitzLWvUWYN/wKfQXweruq4X5RdI3pZaRMkdNthlD5
p0k69N1Hh9X2DaqSsdvzlxDSYFry0lnKk0nfSNhZM9QneXLXqQtcjv6kTPcaw0JY
JUPOvoedwKUk9puVGzoRP/sWB+XWBrKrjODe1aWI3gQ/r1gR6hFkITU7VYttAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU0leQCtoz80XeGSyWvTFZCCum37kwHwYDVR0j
BBgwFoAU5qdQXaoLURpYE8BDiNUuxRuUeAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDFFQjNEMkVEMUE5QTY3NjdEQkVGNzI2QkJEMTZBRjYx
RjY5RjY5QTExNzQxOTRDNTJGRjYyMEExOUIwMzgxLzAvRTZBNzUwNURBQTBCNTEx
QTU4MTNDMDQzODhENTJFQzUxQjk0NzgwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNkE3NTA1REFBMEI1MTFBNTgx
M0MwNDM4OEQ1MkVDNTFCOTQ3ODA2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQxRUIzRDJFRDFBOUE2NzY3REJFRjcyNkJCRDE2QUY2MUY2OUY2OUEx
MTc0MTk0QzUyRkY2MjBBMTlCMDM4MS8wLzMyMzAzMTJlMzEzODMyMmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMwMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
tvAwDQYJKoZIhvcNAQELBQADggEBAFWF6Acb5/mK62UwpqG6U/AwEgvuiLbIbQnm
xMalgQyjge7SX8b4UDVjNlW8b9yyi95BJA8GItwZmVqn47drAcIPFi8ZM4c2S7o8
KpX08njb+7pB2btbUFsRJzeyLd5Qw5K7EnovwWTmn+5I965Az6h1tPc+sQVP001I
dU+HHhKramiyMU8Mw2JnXgdLQhNGKs4cIqNnluJ4G6cuU1RN5v7U7JYN19riBQiu
hUIPOM0fmet2DoSEJuvVnZV4LjWKlOOMS3E06gFpRNEwPEPzuu5CHcZMBgLRMPay
04T+oYlPNbygW1Mp/i9Vu/Gamp1UYDYjw0kutTxVuIl/jB6ohsM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:22 2024 by rpki-client on console-fra.rpki-client.org