Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa
File:                     3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa (raw, json)
Hash identifier:          +EIZv9ooWpeNxlvqNIteeKNWWXb9WlhKbwz0PsZrd8c=
Subject key identifier:   EF:9B:10:0C:30:EF:EC:A1:EC:56:82:41:40:51:9B:35:04:23:FF:85
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       76ACD6AC30A6B9F6FFD2ABB2DBAE0995364B1073
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa
Signing time:             Tue 05 Mar 2024 18:18:23 +0000
ROA not before:           Tue 05 Mar 2024 18:13:23 +0000
ROA not after:            Tue 04 Mar 2025 18:18:23 +0000
asID:                     393629
IP address blocks:        201.221.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ac:d6:ac:30:a6:b9:f6:ff:d2:ab:b2:db:ae:09:95:36:4b:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:23 2024 GMT
            Not After : Mar  4 18:18:23 2025 GMT
        Subject: CN=EF9B100C30EFECA1EC56824140519B350423FF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:fb:6c:15:af:b2:bf:98:fb:1b:99:bc:5f:
                    2d:a6:67:54:e9:36:05:a0:1d:e7:55:10:8f:5b:46:
                    75:0a:61:4f:97:66:90:e0:b1:73:e8:8c:40:17:08:
                    bf:f7:e8:f4:1d:5d:80:d2:07:06:e4:fa:57:e7:f3:
                    bd:49:1c:28:35:f2:b1:dd:e2:8a:da:5b:1f:d2:a5:
                    a1:dd:83:e6:5f:5a:a8:0f:a7:a8:1d:91:a7:f0:ed:
                    9f:d6:53:4b:bf:39:46:81:ee:ab:47:b7:bd:75:78:
                    34:5f:e8:38:f0:8d:3d:14:2c:b5:2b:fe:8f:be:04:
                    a1:3d:eb:30:ba:d6:fc:99:16:d4:23:d7:eb:c6:05:
                    0b:88:ea:62:84:4f:b2:10:1d:3f:3c:7e:08:61:60:
                    46:7e:99:57:ab:c0:7d:4a:2a:98:83:e0:ed:99:79:
                    bc:17:2f:21:1a:f6:32:e4:ef:e4:67:06:ae:a0:a6:
                    c0:22:f6:18:f1:52:41:5e:c4:fc:67:cf:c2:dc:65:
                    8f:b2:be:10:fe:f6:d8:db:fe:99:ae:7b:b4:16:11:
                    ab:8c:82:7f:06:3b:ba:05:cb:be:58:5f:51:c8:91:
                    08:e8:7e:1c:d9:c9:d8:a6:dc:e3:f1:5a:96:57:f7:
                    ab:5b:50:1a:37:57:64:1e:95:dc:2a:45:e8:63:ed:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:10:0C:30:EF:EC:A1:EC:56:82:41:40:51:9B:35:04:23:FF:85
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38382e302f32322d3234203d3e20333933363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:47:f8:d6:5b:53:72:51:0c:bb:80:36:b0:ec:0d:07:7e:
         80:a8:a7:cc:87:b3:b3:76:79:df:4a:4e:b8:8d:56:c5:62:e6:
         26:cb:2f:e0:bd:08:f5:c2:65:81:53:c6:ca:2d:97:b8:53:7f:
         6e:34:82:09:41:ff:5f:7c:60:4f:90:fc:b1:11:b8:8a:79:e4:
         60:d5:56:55:d5:01:53:d9:d3:f2:d8:2f:b6:95:f2:b1:78:a3:
         bf:4b:22:79:f0:d8:6d:b7:1b:97:96:cb:97:b3:10:30:ae:b3:
         d5:cc:4e:84:0b:08:18:8e:49:03:10:ae:a7:fe:b1:07:d8:4a:
         d8:19:ef:10:6e:8a:21:ac:fd:d3:74:84:2e:13:78:f7:d2:ee:
         3e:96:90:f2:77:88:e4:9b:51:97:fb:31:94:62:bc:fc:47:4e:
         07:25:0c:f2:23:61:fa:65:d6:a4:56:d3:e8:ff:3c:2e:3e:e1:
         4e:20:9f:9f:5a:68:7d:5b:9f:07:38:2d:07:c7:c0:47:7b:ec:
         e4:d1:0a:47:e3:2c:67:67:6f:4c:f2:51:8d:59:dc:9a:87:4b:
         ee:0a:8e:e5:22:28:a8:f0:41:61:9e:b6:24:53:74:d9:4e:78:
         59:79:2f:1b:95:cb:01:42:49:87:e2:9b:b5:6c:8a:26:a1:14:
         8a:2d:13:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdqzWrDCmufb/0quy264JlTZLEHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDAzMDUxODEzMjNaFw0yNTAzMDQxODE4MjNaMDMxMTAvBgNV
BAMTKEVGOUIxMDBDMzBFRkVDQTFFQzU2ODI0MTQwNTE5QjM1MDQyM0ZGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqw/tsFa+yv5j7G5m8Xy2mZ1Tp
NgWgHedVEI9bRnUKYU+XZpDgsXPojEAXCL/36PQdXYDSBwbk+lfn871JHCg18rHd
4oraWx/SpaHdg+ZfWqgPp6gdkafw7Z/WU0u/OUaB7qtHt711eDRf6DjwjT0ULLUr
/o++BKE96zC61vyZFtQj1+vGBQuI6mKET7IQHT88fghhYEZ+mVerwH1KKpiD4O2Z
ebwXLyEa9jLk7+RnBq6gpsAi9hjxUkFexPxnz8LcZY+yvhD+9tjb/pmue7QWEauM
gn8GO7oFy75YX1HIkQjofhzZydim3OPxWpZX96tbUBo3V2QeldwqRehj7SZVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU75sQDDDv7KHsVoJBQFGbNQQj/4UwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMyMzAzMTJlMzIzMjMxMmUzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzOTMzMzYzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyd1Y
MA0GCSqGSIb3DQEBCwUAA4IBAQABw0f41ltTclEMu4A2sOwNB36AqKfMh7Ozdnnf
Sk64jVbFYuYmyy/gvQj1wmWBU8bKLZe4U39uNIIJQf9ffGBPkPyxEbiKeeRg1VZV
1QFT2dPy2C+2lfKxeKO/SyJ58NhttxuXlsuXsxAwrrPVzE6ECwgYjkkDEK6n/rEH
2ErYGe8QboohrP3TdIQuE3j30u4+lpDyd4jkm1GX+zGUYrz8R04HJQzyI2H6Zdak
VtPo/zwuPuFOIJ+fWmh9W58HOC0Hx8BHe+zk0QpH4yxnZ29M8lGNWdyah0vuCo7l
Iiio8EFhnrYkU3TZTnhZeS8blcsBQkmH4pu1bIomoRSKLRNG
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org