Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133312e3136312e3230302e302f32342d3234203d3e20323732393738.roa
File:                     3133312e3136312e3230302e302f32342d3234203d3e20323732393738.roa (raw, json)
Hash identifier:          pmdTnoCkffXRzLGfF6xyObETEEoWAZfrVxVE8RMArQk=
Subject key identifier:   56:1B:CD:D5:D0:C0:71:ED:A7:4E:1C:61:27:3F:4B:66:1F:E8:0A:69
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       10CE4C8C654718E49FE30FEF1B397F53C51AC9BD
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133312e3136312e3230302e302f32342d3234203d3e20323732393738.roa
Signing time:             Tue 05 Mar 2024 17:52:59 +0000
ROA not before:           Tue 05 Mar 2024 17:47:59 +0000
ROA not after:            Tue 04 Mar 2025 17:52:59 +0000
asID:                     272978
IP address blocks:        131.161.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ce:4c:8c:65:47:18:e4:9f:e3:0f:ef:1b:39:7f:53:c5:1a:c9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:47:59 2024 GMT
            Not After : Mar  4 17:52:59 2025 GMT
        Subject: CN=561BCDD5D0C071EDA74E1C61273F4B661FE80A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:45:d1:1f:b6:82:e4:f6:44:5b:d2:ba:62:
                    09:7a:d4:77:e1:b3:d6:71:8d:e1:05:a6:be:c3:b6:
                    16:85:f9:97:20:25:5f:cd:0e:11:f6:e8:c6:a7:c2:
                    cd:87:96:b6:f1:06:05:b7:e3:a7:58:ef:b3:e6:ff:
                    b7:d4:1a:11:d4:c0:e0:96:a4:be:67:d1:bf:e1:3c:
                    0b:b7:94:9a:f2:55:a4:55:f4:2b:47:d7:91:ef:ca:
                    b0:37:20:23:fb:85:61:ae:10:83:37:15:b0:8b:e5:
                    c5:38:d6:62:ed:fe:02:68:bd:65:27:15:1a:b2:98:
                    f7:4c:a6:28:51:4d:d0:84:ec:9e:dc:80:fe:49:78:
                    9a:24:52:41:8c:98:bc:fe:77:53:31:25:d3:a0:69:
                    a5:e1:a3:a3:62:ec:7d:ae:cc:9b:4a:ee:80:33:7c:
                    c5:03:ca:ac:b6:8f:c2:20:ba:3e:86:f6:3b:70:e3:
                    eb:7d:0f:11:13:e3:8b:d1:ec:6c:54:1f:23:c6:6f:
                    ae:bc:7f:6f:e9:50:47:41:7d:db:9a:d4:85:18:b6:
                    fd:5b:60:39:45:f8:73:05:44:c3:ff:53:c9:b3:dc:
                    fd:4b:36:d5:73:a8:d7:35:6d:a6:88:1f:50:e8:ac:
                    ef:98:d7:3e:4f:81:30:7f:bd:b6:b5:f3:c3:db:63:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:CD:D5:D0:C0:71:ED:A7:4E:1C:61:27:3F:4B:66:1F:E8:0A:69
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133312e3136312e3230302e302f32342d3234203d3e20323732393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:db:a6:40:e7:43:14:80:65:b3:af:3c:16:30:c9:50:a5:36:
         68:f1:73:9c:97:50:43:d0:f2:ac:c4:62:1a:f4:71:58:f1:f3:
         70:97:b7:de:3b:ec:67:cf:a5:9c:6e:0c:a7:5c:7f:08:15:26:
         59:f4:3a:aa:31:2c:b9:20:99:ac:7e:1e:1a:9c:ba:bb:14:6d:
         6d:b4:84:af:77:e0:34:94:c2:ea:cb:10:63:12:3e:20:f2:b4:
         12:bd:2a:58:93:28:fd:7c:a8:49:15:89:c9:c4:e3:39:c9:ee:
         54:b3:a2:cf:63:e4:c1:6c:df:de:ae:40:ae:c2:35:1e:6f:7d:
         cd:7f:ff:fb:02:fb:e9:b7:7b:93:81:e4:07:a4:60:44:1a:18:
         58:71:1d:c6:25:d9:f8:b6:ad:3a:85:b0:9e:8d:3a:dc:21:e1:
         ef:8f:a8:18:9e:bc:23:d9:6d:2c:22:dc:c4:4e:48:6e:45:8f:
         f8:bb:30:d0:5d:45:19:c7:d3:a0:0f:f1:dd:9f:22:9c:e2:2d:
         99:1f:8f:d3:2c:9b:bb:46:d3:5a:ee:97:2e:c2:4c:01:01:3d:
         5f:02:96:0f:bb:9b:3e:a2:79:ff:e0:8d:d5:6c:68:96:39:d3:
         56:34:f9:3b:50:55:28:42:39:a1:d0:34:17:61:06:83:9e:e0:
         1c:5a:c6:5d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEM5MjGVHGOSf4w/vGzl/U8Uayb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNDAzMDUxNzQ3NTlaFw0yNTAzMDQxNzUyNTlaMDMxMTAvBgNV
BAMTKDU2MUJDREQ1RDBDMDcxRURBNzRFMUM2MTI3M0Y0QjY2MUZFODBBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUUXRH7aC5PZEW9K6Ygl61Hfh
s9ZxjeEFpr7DthaF+ZcgJV/NDhH26Manws2HlrbxBgW346dY77Pm/7fUGhHUwOCW
pL5n0b/hPAu3lJryVaRV9CtH15HvyrA3ICP7hWGuEIM3FbCL5cU41mLt/gJovWUn
FRqymPdMpihRTdCE7J7cgP5JeJokUkGMmLz+d1MxJdOgaaXho6Ni7H2uzJtK7oAz
fMUDyqy2j8Iguj6G9jtw4+t9DxET44vR7GxUHyPGb668f2/pUEdBfdua1IUYtv1b
YDlF+HMFRMP/U8mz3P1LNtVzqNc1baaIH1DorO+Y1z5PgTB/vba188PbY9ZHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUVhvN1dDAce2nThxhJz9LZh/oCmkwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMxMzMzMTJlMzEzNjMxMmUzMjMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzOTM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACD
ocgwDQYJKoZIhvcNAQELBQADggEBAEbbpkDnQxSAZbOvPBYwyVClNmjxc5yXUEPQ
8qzEYhr0cVjx83CXt9477GfPpZxuDKdcfwgVJln0OqoxLLkgmax+HhqcursUbW20
hK934DSUwurLEGMSPiDytBK9KliTKP18qEkVicnE4znJ7lSzos9j5MFs396uQK7C
NR5vfc1///sC++m3e5OB5AekYEQaGFhxHcYl2fi2rTqFsJ6NOtwh4e+PqBievCPZ
bSwi3MROSG5Fj/i7MNBdRRnH06AP8d2fIpziLZkfj9Msm7tG01ruly7CTAEBPV8C
lg+7mz6ief/gjdVsaJY501Y0+TtQVShCOaHQNBdhBoOe4Bxaxl0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org