Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa
File:                     3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa (raw, json)
Hash identifier:          MCPfehxookYe+3vkg3e0BzZ89HPOno/OqhycY9MdgY4=
Subject key identifier:   20:D3:FF:33:2C:B0:19:FA:5F:B5:35:E9:6A:59:C6:16:46:AA:EC:7E
Certificate issuer:       /CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
Certificate serial:       79B4674E302A2A695E63AC4B2B0A09DFDD5C5B96
Authority key identifier: 08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa
Signing time:             Tue 05 Mar 2024 17:55:22 +0000
ROA not before:           Tue 05 Mar 2024 17:50:22 +0000
ROA not after:            Tue 04 Mar 2025 17:55:22 +0000
asID:                     264629
IP address blocks:        143.202.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b4:67:4e:30:2a:2a:69:5e:63:ac:4b:2b:0a:09:df:dd:5c:5b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
        Validity
            Not Before: Mar  5 17:50:22 2024 GMT
            Not After : Mar  4 17:55:22 2025 GMT
        Subject: CN=20D3FF332CB019FA5FB535E96A59C61646AAEC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4b:a1:f0:00:dd:dd:2e:00:3f:ae:07:ad:27:
                    b3:92:99:df:51:77:8c:bb:89:4a:72:48:6a:59:57:
                    d7:d1:c4:08:17:1c:c8:5e:9f:d5:ae:5f:f1:ae:18:
                    92:41:b3:37:53:10:31:14:f6:a5:3c:9e:f3:aa:2f:
                    d4:99:82:cf:48:40:24:7d:e8:ca:de:d1:e7:f9:83:
                    77:7e:8a:5d:23:61:43:c6:d8:1f:f1:42:b1:71:e5:
                    ed:e1:c4:fd:c6:bd:01:b3:e4:ca:f8:7b:13:af:0d:
                    00:77:88:64:d7:f2:92:16:25:13:28:1f:c8:34:73:
                    6f:a6:d9:33:24:a1:24:47:c0:c0:0b:b0:93:99:ba:
                    79:ab:41:fe:65:2f:40:01:08:e5:cb:2b:d4:21:24:
                    2a:32:17:87:f4:39:89:86:07:7d:8d:3c:56:66:98:
                    f2:24:19:ce:97:c7:b9:21:56:78:05:c2:40:9d:7d:
                    a4:73:88:ae:a4:07:ef:e2:e1:a2:54:9c:fb:85:31:
                    b5:7c:47:13:69:55:18:ef:ac:7d:7e:6a:46:5d:85:
                    d5:2a:88:cd:4d:0f:b4:ba:ed:f5:ac:e0:50:bb:2c:
                    e6:29:80:5e:2f:dd:1a:36:9f:8c:f2:01:ff:ff:fc:
                    41:b1:27:1c:aa:5f:90:1a:98:b0:e9:7c:38:26:d9:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:FF:33:2C:B0:19:FA:5F:B5:35:E9:6A:59:C6:16:46:AA:EC:7E
            X509v3 Authority Key Identifier:
                keyid:08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:24:dc:12:9f:c0:56:0b:db:64:dc:1f:c0:14:88:ee:c7:f5:
         92:15:a6:07:ae:97:2f:4b:1b:c9:da:ec:53:79:b1:b2:97:46:
         cd:f1:b0:36:a3:26:38:bd:ce:6a:ea:77:98:ba:34:4e:1a:e8:
         9b:c6:01:e1:66:8e:cf:33:3b:f9:ce:f0:cf:d9:78:1e:41:a3:
         eb:13:a4:3e:b5:07:99:cf:e5:b1:a9:88:63:4d:90:34:75:1b:
         d0:19:be:17:25:0c:1e:82:52:ca:cf:a3:93:d3:a8:16:b1:2a:
         01:9d:c5:74:b8:52:a8:4b:89:a0:21:42:1a:c9:26:6b:9a:f8:
         03:e0:b5:1a:52:cf:46:d2:7d:2e:0e:43:f2:65:c7:7d:d0:58:
         ac:2a:e4:f7:de:28:16:04:e8:46:16:3f:14:7b:db:96:60:20:
         95:be:cb:2b:67:0e:63:d2:2f:b8:69:cb:cf:d5:d4:fb:ff:1e:
         10:3b:93:a8:8a:f7:7d:dd:cf:e6:86:36:64:bf:17:a1:5a:04:
         c7:c9:b2:50:59:9c:35:aa:aa:bc:04:d3:a6:90:d3:f0:02:cc:
         36:c1:11:b0:c0:4d:93:72:ca:9c:be:d1:e4:fc:bc:3a:27:fa:
         5b:67:54:54:c4:4b:48:15:61:7e:7a:49:7b:78:91:13:80:66:
         6d:0e:30:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUebRnTjAqKmleY6xLKwoJ391cW5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhGQjYyQTA4NENFMzQ3RkI1Q0VFODM2OTZGRTREMzgz
N0YxRTQ1NjAeFw0yNDAzMDUxNzUwMjJaFw0yNTAzMDQxNzU1MjJaMDMxMTAvBgNV
BAMTKDIwRDNGRjMzMkNCMDE5RkE1RkI1MzVFOTZBNTlDNjE2NDZBQUVDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzS6HwAN3dLgA/rgetJ7OSmd9R
d4y7iUpySGpZV9fRxAgXHMhen9WuX/GuGJJBszdTEDEU9qU8nvOqL9SZgs9IQCR9
6Mre0ef5g3d+il0jYUPG2B/xQrFx5e3hxP3GvQGz5Mr4exOvDQB3iGTX8pIWJRMo
H8g0c2+m2TMkoSRHwMALsJOZunmrQf5lL0ABCOXLK9QhJCoyF4f0OYmGB32NPFZm
mPIkGc6Xx7khVngFwkCdfaRziK6kB+/i4aJUnPuFMbV8RxNpVRjvrH1+akZdhdUq
iM1ND7S67fWs4FC7LOYpgF4v3Ro2n4zyAf///EGxJxyqX5AamLDpfDgm2c1BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUINP/MyywGfpftTXpalnGFkaq7H4wHwYDVR0j
BBgwFoAUCPtioITONH+1zug2lv5NODfx5FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81REZGQ0UzNTgwMDAxRDc2NTczM0E1MDMwM0I5QzYxNEQ0
NzAzNjU2MDVBNTVFQThBMDM3MjAzMDJGNTE0NTI4LzAvMDhGQjYyQTA4NENFMzQ3
RkI1Q0VFODM2OTZGRTREMzgzN0YxRTQ1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEZCNjJBMDg0Q0UzNDdGQjVD
RUU4MzY5NkZFNEQzODM3RjFFNDU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNURGRkNFMzU4MDAwMUQ3NjU3MzNBNTAzMDNCOUM2MTRENDcwMzY1NjA1
QTU1RUE4QTAzNzIwMzAyRjUxNDUyOC8wLzMxMzQzMzJlMzIzMDMyMmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8og
MA0GCSqGSIb3DQEBCwUAA4IBAQBFJNwSn8BWC9tk3B/AFIjux/WSFaYHrpcvSxvJ
2uxTebGyl0bN8bA2oyY4vc5q6neYujROGuibxgHhZo7PMzv5zvDP2XgeQaPrE6Q+
tQeZz+WxqYhjTZA0dRvQGb4XJQweglLKz6OT06gWsSoBncV0uFKoS4mgIUIaySZr
mvgD4LUaUs9G0n0uDkPyZcd90FisKuT33igWBOhGFj8Ue9uWYCCVvssrZw5j0i+4
acvP1dT7/x4QO5Ooivd93c/mhjZkvxehWgTHybJQWZw1qqq8BNOmkNPwAsw2wRGw
wE2TcsqcvtHk/Lw6J/pbZ1RUxEtIFWF+ekl7eJETgGZtDjCz
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:17 2024 by rpki-client on console-ams.rpki-client.org