Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3135203d3e203133343839.roa
File:                     3230312e3138342e302e302f31352d3135203d3e203133343839.roa (raw, json)
Hash identifier:          4RJjHMVFTXl7nvJGzZRKVGyrMJ4CguLU4ayUh3xDEHs=
Subject key identifier:   44:8C:41:D5:B3:C7:02:A8:BF:DD:5C:FB:B4:4D:51:A5:46:B9:0D:D2
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       3A2AF05BD73A325C00A5451444EC50596C40A3EA
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3135203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:45:00 +0000
ROA not before:           Mon 30 Sep 2024 22:40:00 +0000
ROA not after:            Mon 29 Sep 2025 22:45:00 +0000
asID:                     13489
IP address blocks:        201.184.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2a:f0:5b:d7:3a:32:5c:00:a5:45:14:44:ec:50:59:6c:40:a3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:40:00 2024 GMT
            Not After : Sep 29 22:45:00 2025 GMT
        Subject: CN=448C41D5B3C702A8BFDD5CFBB44D51A546B90DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:03:52:2e:f1:07:f9:30:2e:3e:6f:22:fb:
                    d1:b8:a1:24:f1:e9:23:58:bf:6d:d8:15:c0:b6:ea:
                    92:6e:a0:b5:68:22:cd:c4:cd:19:62:4b:d7:be:dc:
                    14:07:d6:19:ba:e0:3a:b6:5a:93:78:90:ed:2e:20:
                    b1:5d:ae:e2:e7:2f:14:5e:eb:1d:0e:eb:89:b8:54:
                    fa:42:78:6e:44:f7:0f:e2:22:12:45:34:f2:67:eb:
                    96:8e:c2:03:9b:f4:c7:b4:65:95:29:6b:d1:ca:30:
                    87:29:61:c1:a5:30:7e:a1:20:00:cd:21:6c:e8:8d:
                    d9:2b:64:44:94:81:1a:f7:ab:9a:07:d1:30:fd:b3:
                    a7:54:64:4b:96:dc:50:75:96:d2:73:11:5c:17:3a:
                    ea:49:cd:91:40:3c:b6:d7:62:b5:29:32:a3:12:24:
                    f8:43:61:5b:ac:dc:ad:9a:98:14:5d:8b:e5:54:da:
                    5d:d2:ee:16:74:77:80:10:e8:e4:e4:3a:65:71:10:
                    72:b8:3d:16:9c:6d:57:99:a4:25:80:6f:4f:3c:c6:
                    e6:88:57:be:8d:7d:c2:9f:5a:67:78:1f:8a:d2:2e:
                    5b:7d:77:f8:87:c6:cf:7d:3a:93:f7:fe:3b:09:32:
                    ab:91:5a:1e:8a:c8:d1:9e:b2:fa:27:ef:71:e3:d1:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8C:41:D5:B3:C7:02:A8:BF:DD:5C:FB:B4:4D:51:A5:46:B9:0D:D2
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3135203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.184.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:0e:a1:38:64:43:c7:56:14:88:3a:d6:25:a0:99:1f:9c:
         ab:cd:83:e6:ef:01:91:ea:41:ba:48:70:a6:5b:6e:4c:d6:74:
         27:75:63:0c:cd:24:97:24:4f:91:78:8f:75:b6:e0:e7:10:83:
         71:45:6d:1e:10:76:98:c1:8f:6d:3e:5a:19:eb:f3:40:18:0b:
         da:f0:76:16:c4:be:d3:ef:c8:1c:00:c8:b2:93:19:4f:ee:ae:
         27:52:63:3a:0d:07:4b:82:d4:fb:ce:fe:76:c6:08:85:8f:4a:
         ba:b0:07:e8:b1:c2:65:40:8f:9e:fb:4e:8d:d3:ee:4c:88:14:
         f8:07:ab:5b:36:18:f6:a9:8f:5b:44:ec:bd:14:a6:9a:68:ce:
         be:36:67:d5:98:f7:fc:92:7e:fb:83:0b:69:a4:f6:a3:10:f9:
         49:63:e0:9c:ff:ed:6b:00:06:26:52:ed:af:8d:b5:20:6f:9c:
         6c:3b:a0:0f:4a:e9:07:7f:29:bc:8d:48:81:d6:12:a9:da:25:
         f3:59:07:6b:12:db:35:d9:db:e2:76:92:29:a2:ab:54:8e:73:
         90:28:eb:6b:72:4b:0a:5b:5a:3b:f0:a7:75:4f:ca:cd:b0:6a:
         fe:8e:d5:10:71:6d:31:94:31:37:ab:e1:1c:6c:83:d6:6e:e2:
         13:fb:cd:6c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUOirwW9c6MlwApUUUROxQWWxAo+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDA5MzAyMjQwMDBaFw0yNTA5MjkyMjQ1MDBaMDMxMTAvBgNV
BAMTKDQ0OEM0MUQ1QjNDNzAyQThCRkRENUNGQkI0NEQ1MUE1NDZCOTBERDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6gNSLvEH+TAuPm8i+9G4oSTx
6SNYv23YFcC26pJuoLVoIs3EzRliS9e+3BQH1hm64Dq2WpN4kO0uILFdruLnLxRe
6x0O64m4VPpCeG5E9w/iIhJFNPJn65aOwgOb9Me0ZZUpa9HKMIcpYcGlMH6hIADN
IWzojdkrZESUgRr3q5oH0TD9s6dUZEuW3FB1ltJzEVwXOupJzZFAPLbXYrUpMqMS
JPhDYVus3K2amBRdi+VU2l3S7hZ0d4AQ6OTkOmVxEHK4PRacbVeZpCWAb088xuaI
V76NfcKfWmd4H4rSLlt9d/iHxs99OpP3/jsJMquRWh6KyNGesvon73Hj0WWlAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQURIxB1bPHAqi/3Vz7tE1RpUa5DdIwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzAzMTJlMzEzODM0MmUzMDJlMzAy
ZjMxMzUyZDMxMzUyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHJuDANBgkq
hkiG9w0BAQsFAAOCAQEADisOoThkQ8dWFIg61iWgmR+cq82D5u8BkepBukhwpltu
TNZ0J3VjDM0klyRPkXiPdbbg5xCDcUVtHhB2mMGPbT5aGevzQBgL2vB2FsS+0+/I
HADIspMZT+6uJ1JjOg0HS4LU+87+dsYIhY9KurAH6LHCZUCPnvtOjdPuTIgU+Aer
WzYY9qmPW0TsvRSmmmjOvjZn1Zj3/JJ++4MLaaT2oxD5SWPgnP/tawAGJlLtr421
IG+cbDugD0rpB38pvI1IgdYSqdol81kHaxLbNdnb4naSKaKrVI5zkCjra3JLClta
O/CndU/KzbBq/o7VEHFtMZQxN6vhHGyD1m7iE/vNbA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org