Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/3138312e3233322e3235322e302f32332d3234203d3e20323732313437.roa
File:                     3138312e3233322e3235322e302f32332d3234203d3e20323732313437.roa (raw, json)
Hash identifier:          i7uTUr6IMgPqvOysgqSUXRaGZdKoCSjh1H03TEMVTsw=
Subject key identifier:   92:DE:E2:EC:04:B6:2C:0C:2B:75:50:5B:97:AA:1A:8E:BF:18:3E:D1
Certificate issuer:       /CN=4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD
Certificate serial:       69815524116E64A47318F86A061AB0753699FB3B
Authority key identifier: 4D:B9:0F:DD:27:25:BA:D8:06:8D:5C:6E:5F:11:AE:8B:57:BC:CF:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/3138312e3233322e3235322e302f32332d3234203d3e20323732313437.roa
Signing time:             Tue 05 Mar 2024 18:20:20 +0000
ROA not before:           Tue 05 Mar 2024 18:15:20 +0000
ROA not after:            Tue 04 Mar 2025 18:20:20 +0000
asID:                     272147
IP address blocks:        181.232.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:55:24:11:6e:64:a4:73:18:f8:6a:06:1a:b0:75:36:99:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD
        Validity
            Not Before: Mar  5 18:15:20 2024 GMT
            Not After : Mar  4 18:20:20 2025 GMT
        Subject: CN=92DEE2EC04B62C0C2B75505B97AA1A8EBF183ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:ed:f5:d2:c0:1a:51:51:01:10:82:2a:74:
                    d8:e0:b4:37:a7:ff:17:35:8c:ce:1f:8c:ca:3f:5f:
                    8c:9f:e5:6b:57:d7:f5:e2:19:7e:22:27:8e:33:48:
                    44:72:33:d7:31:76:1f:09:79:08:dd:0c:09:36:ec:
                    79:41:68:0d:ea:67:d3:ee:9a:69:77:9a:86:3f:80:
                    e2:22:11:f5:cd:9b:e0:f9:ef:73:e0:fb:a2:fd:e6:
                    7f:dc:77:14:10:f6:90:96:0e:25:6c:e6:b0:0b:ae:
                    41:ab:f0:1c:0f:cb:e9:bf:3b:aa:81:bf:0a:64:ad:
                    5b:cf:28:8f:56:27:e5:97:ce:34:56:b2:a7:f9:ae:
                    32:71:a6:c7:33:81:3d:bd:fc:f5:cd:e9:43:e3:c9:
                    0c:0f:e8:b6:c2:51:37:c6:eb:14:9a:7a:7a:d3:fe:
                    46:dd:45:aa:38:0f:87:91:26:af:2d:57:c8:25:2e:
                    a5:4c:7c:af:a1:28:14:fb:b6:b3:90:34:1e:9c:e0:
                    fa:49:64:99:e4:22:53:44:4d:9c:eb:54:3f:14:39:
                    71:61:c1:ee:4e:a5:f8:1b:1d:e4:e6:f0:70:4d:af:
                    94:f7:8d:a4:9e:51:3b:48:e7:02:08:dd:1d:1c:7b:
                    83:1f:33:fc:4b:45:cb:c5:83:39:00:dd:74:13:03:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:E2:EC:04:B6:2C:0C:2B:75:50:5B:97:AA:1A:8E:BF:18:3E:D1
            X509v3 Authority Key Identifier:
                keyid:4D:B9:0F:DD:27:25:BA:D8:06:8D:5C:6E:5F:11:AE:8B:57:BC:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/3138312e3233322e3235322e302f32332d3234203d3e20323732313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:70:d7:15:74:22:a4:90:e3:9e:06:15:d2:12:9a:29:9a:83:
         93:33:96:e4:91:43:96:57:b3:1e:c1:80:54:a2:ff:25:b4:b8:
         68:53:32:23:5d:f5:2e:6e:75:cc:87:36:17:54:8e:33:f7:21:
         21:3b:4b:7e:3a:ca:32:ab:24:eb:17:6b:51:6c:40:0b:f0:bc:
         65:81:77:74:29:d4:b0:eb:92:32:f6:1a:15:05:71:06:8b:44:
         cf:50:55:af:02:9c:60:2f:fe:a0:39:eb:27:bc:e3:d8:90:d1:
         a6:33:b5:5f:23:13:99:d5:35:d0:25:ef:3f:a6:f0:f7:91:65:
         31:c5:58:0a:38:a5:e6:28:8e:f7:62:6b:f5:c5:57:6d:b2:a8:
         46:07:05:6a:75:a8:43:91:af:50:e9:74:6c:48:ef:56:96:2d:
         d5:50:ad:81:ec:2e:29:ec:9f:03:0f:8c:68:9f:96:a8:28:33:
         9f:21:57:0d:2a:db:6b:eb:c0:62:99:87:b0:18:f0:55:0c:fd:
         31:a6:8f:98:6c:ce:64:84:0e:da:77:91:12:9e:d0:4d:5e:2c:
         c7:cf:cc:91:94:0b:d9:7c:b0:af:13:f7:9f:b9:aa:41:f0:59:
         5a:fe:fd:ba:d0:22:67:69:b3:c1:d6:7e:0c:8b:92:52:a1:72:
         75:69:d5:e6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaYFVJBFuZKRzGPhqBhqwdTaZ+zswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERCOTBGREQyNzI1QkFEODA2OEQ1QzZFNUYxMUFFOEI1
N0JDQ0ZBRDAeFw0yNDAzMDUxODE1MjBaFw0yNTAzMDQxODIwMjBaMDMxMTAvBgNV
BAMTKDkyREVFMkVDMDRCNjJDMEMyQjc1NTA1Qjk3QUExQThFQkYxODNFRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfe310sAaUVEBEIIqdNjgtDen
/xc1jM4fjMo/X4yf5WtX1/XiGX4iJ44zSERyM9cxdh8JeQjdDAk27HlBaA3qZ9Pu
mml3moY/gOIiEfXNm+D573Pg+6L95n/cdxQQ9pCWDiVs5rALrkGr8BwPy+m/O6qB
vwpkrVvPKI9WJ+WXzjRWsqf5rjJxpsczgT29/PXN6UPjyQwP6LbCUTfG6xSaenrT
/kbdRao4D4eRJq8tV8glLqVMfK+hKBT7trOQNB6c4PpJZJnkIlNETZzrVD8UOXFh
we5OpfgbHeTm8HBNr5T3jaSeUTtI5wII3R0ce4MfM/xLRcvFgzkA3XQTA5D3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUkt7i7AS2LAwrdVBbl6oajr8YPtEwHwYDVR0j
BBgwFoAUTbkP3SclutgGjVxuXxGui1e8z60wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NDdGN0U3N0JFQjE3QUJCNzlERjE1NTA4NjQ3MzRGRTZB
QUY1MEEyRTkyQzMwOTYxNkNEREM0NjE1MzNBREM4LzAvNERCOTBGREQyNzI1QkFE
ODA2OEQ1QzZFNUYxMUFFOEI1N0JDQ0ZBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80REI5MEZERDI3MjVCQUQ4MDY4
RDVDNkU1RjExQUU4QjU3QkNDRkFELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTQ3RjdFNzdCRUIxN0FCQjc5REYxNTUwODY0NzM0RkU2QUFGNTBBMkU5
MkMzMDk2MTZDRERDNDYxNTMzQURDOC8wLzMxMzgzMTJlMzIzMzMyMmUzMjM1MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzIzMTM0Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG1
6PwwDQYJKoZIhvcNAQELBQADggEBACVw1xV0IqSQ454GFdISmimag5MzluSRQ5ZX
sx7BgFSi/yW0uGhTMiNd9S5udcyHNhdUjjP3ISE7S346yjKrJOsXa1FsQAvwvGWB
d3Qp1LDrkjL2GhUFcQaLRM9QVa8CnGAv/qA56ye849iQ0aYztV8jE5nVNdAl7z+m
8PeRZTHFWAo4peYojvdia/XFV22yqEYHBWp1qEORr1DpdGxI71aWLdVQrYHsLins
nwMPjGiflqgoM58hVw0q22vrwGKZh7AY8FUM/TGmj5hszmSEDtp3kRKe0E1eLMfP
zJGUC9l8sK8T95+5qkHwWVr+/brQImdps8HWfgyLklKhcnVp1eY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org