Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/3230312e3135302e3131362e302f32322d3234203d3e20323635353837.roa
File:                     3230312e3135302e3131362e302f32322d3234203d3e20323635353837.roa (raw, json)
Hash identifier:          l+Fb5/lIzRpDSgR2qr2nWqXkIU0j3S5+F1KpyDbs/JM=
Subject key identifier:   4C:1B:5C:1D:A2:8A:50:7A:E1:41:AF:3D:79:0E:BA:13:4B:C9:4A:8C
Certificate issuer:       /CN=CF1072EDD71A22433D893E8025A69449AE90BB5C
Certificate serial:       696D3EFF925808076FA560AD833CE084AB005F3E
Authority key identifier: CF:10:72:ED:D7:1A:22:43:3D:89:3E:80:25:A6:94:49:AE:90:BB:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/3230312e3135302e3131362e302f32322d3234203d3e20323635353837.roa
Signing time:             Tue 05 Mar 2024 18:11:30 +0000
ROA not before:           Tue 05 Mar 2024 18:06:30 +0000
ROA not after:            Tue 04 Mar 2025 18:11:30 +0000
asID:                     265587
IP address blocks:        201.150.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:3e:ff:92:58:08:07:6f:a5:60:ad:83:3c:e0:84:ab:00:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1072EDD71A22433D893E8025A69449AE90BB5C
        Validity
            Not Before: Mar  5 18:06:30 2024 GMT
            Not After : Mar  4 18:11:30 2025 GMT
        Subject: CN=4C1B5C1DA28A507AE141AF3D790EBA134BC94A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:ce:6a:7c:fc:36:6a:11:07:32:da:85:fb:
                    13:eb:cf:69:61:63:bc:c8:e3:05:84:b4:0b:05:e9:
                    78:e2:eb:51:c4:fb:47:cb:cf:f2:7a:d3:75:76:91:
                    a1:1a:b4:d6:78:7f:1c:84:63:8b:c5:e0:aa:57:9c:
                    75:3f:5b:e3:bd:ae:6b:2d:c9:b2:5a:73:ef:b6:89:
                    33:f2:d5:43:83:c1:7a:a7:d5:12:cf:aa:74:14:91:
                    00:5b:02:a5:a5:28:29:ee:16:e3:51:01:ad:dc:e9:
                    4f:07:d7:b9:f1:d0:4f:d0:e7:c5:fd:92:f6:c3:a5:
                    e7:6a:9a:40:70:ef:85:cf:31:74:ce:b1:af:90:97:
                    98:c6:22:e9:c8:9a:a4:24:f2:ad:8d:09:d0:22:c9:
                    74:95:bd:8d:17:86:0f:c6:60:84:98:91:bf:48:59:
                    9a:33:67:7a:ca:00:bd:54:a0:e7:15:e9:87:72:8d:
                    61:f3:b6:5f:bf:ca:dc:04:60:b6:0a:09:43:43:af:
                    8b:c7:37:a8:9d:27:44:4b:12:1e:85:42:f7:0f:15:
                    68:13:7a:95:cc:6f:82:96:cf:38:3e:e8:e1:a2:b0:
                    a4:cf:4d:b0:06:d1:fd:9c:7f:b5:8b:b3:a8:85:f2:
                    48:e2:22:72:79:9e:50:87:c3:c6:b0:c6:c9:db:4f:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:5C:1D:A2:8A:50:7A:E1:41:AF:3D:79:0E:BA:13:4B:C9:4A:8C
            X509v3 Authority Key Identifier:
                keyid:CF:10:72:ED:D7:1A:22:43:3D:89:3E:80:25:A6:94:49:AE:90:BB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1072EDD71A22433D893E8025A69449AE90BB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6748D129B2B820AA48E434ADB0B0627A27B90B178298567D3EAE819D163716C5/0/3230312e3135302e3131362e302f32322d3234203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:ba:bb:02:fe:c6:0a:43:f2:f9:2e:ec:41:4e:e6:25:69:
         ad:96:56:69:52:c9:c0:b2:e8:51:c2:c2:e2:36:4e:4e:f8:4f:
         64:0d:76:70:ce:32:ac:33:6d:41:e7:9a:4f:36:86:7d:78:6a:
         5e:7b:93:7f:4e:ed:37:77:41:3d:18:a1:f3:c4:52:ba:10:98:
         a6:d3:43:81:55:df:9b:c1:b8:19:e5:66:df:94:ce:92:66:dc:
         d1:50:73:5b:f1:cb:73:25:e5:71:56:ba:fb:ba:8f:2d:0f:3b:
         9f:9d:13:c5:d7:d3:c0:93:76:09:b6:aa:f6:84:24:34:e8:e8:
         49:0b:87:bb:96:05:78:1b:3c:9c:38:c5:4a:fc:8c:5e:90:57:
         eb:51:c1:d0:a3:d8:7d:4a:e3:13:dc:79:a8:11:f2:d5:32:d7:
         6e:fc:05:27:35:d9:32:66:72:74:ee:cb:62:eb:0b:61:21:c1:
         00:32:1c:e0:93:27:9e:a7:e3:e7:40:4c:7d:35:1c:3e:1d:bf:
         89:21:be:45:55:fe:e3:dd:01:3e:49:ea:ea:7e:4d:a6:b1:29:
         6b:b5:46:9d:9f:7f:b4:20:90:7b:e4:e0:91:12:da:f2:c8:49:
         1b:16:ca:d5:06:15:0b:1a:04:47:d5:73:86:45:39:ae:7d:87:
         e3:24:13:13
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaW0+/5JYCAdvpWCtgzzghKsAXz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxMDcyRURENzFBMjI0MzNEODkzRTgwMjVBNjk0NDlB
RTkwQkI1QzAeFw0yNDAzMDUxODA2MzBaFw0yNTAzMDQxODExMzBaMDMxMTAvBgNV
BAMTKDRDMUI1QzFEQTI4QTUwN0FFMTQxQUYzRDc5MEVCQTEzNEJDOTRBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzc5qfPw2ahEHMtqF+xPrz2lh
Y7zI4wWEtAsF6Xji61HE+0fLz/J603V2kaEatNZ4fxyEY4vF4KpXnHU/W+O9rmst
ybJac++2iTPy1UODwXqn1RLPqnQUkQBbAqWlKCnuFuNRAa3c6U8H17nx0E/Q58X9
kvbDpedqmkBw74XPMXTOsa+Ql5jGIunImqQk8q2NCdAiyXSVvY0Xhg/GYISYkb9I
WZozZ3rKAL1UoOcV6YdyjWHztl+/ytwEYLYKCUNDr4vHN6idJ0RLEh6FQvcPFWgT
epXMb4KWzzg+6OGisKTPTbAG0f2cf7WLs6iF8kjiInJ5nlCHw8awxsnbTyEfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUTBtcHaKKUHrhQa89eQ66E0vJSowwHwYDVR0j
BBgwFoAUzxBy7dcaIkM9iT6AJaaUSa6Qu1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzQ4RDEyOUIyQjgyMEFBNDhFNDM0QURCMEIwNjI3QTI3
QjkwQjE3ODI5ODU2N0QzRUFFODE5RDE2MzcxNkM1LzAvQ0YxMDcyRURENzFBMjI0
MzNEODkzRTgwMjVBNjk0NDlBRTkwQkI1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjEwNzJFREQ3MUEyMjQzM0Q4
OTNFODAyNUE2OTQ0OUFFOTBCQjVDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc0OEQxMjlCMkI4MjBBQTQ4RTQzNEFEQjBCMDYyN0EyN0I5MEIxNzgy
OTg1NjdEM0VBRTgxOUQxNjM3MTZDNS8wLzMyMzAzMTJlMzEzNTMwMmUzMTMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNTM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
lnQwDQYJKoZIhvcNAQELBQADggEBAFHMursC/sYKQ/L5LuxBTuYlaa2WVmlSycCy
6FHCwuI2Tk74T2QNdnDOMqwzbUHnmk82hn14al57k39O7Td3QT0YofPEUroQmKbT
Q4FV35vBuBnlZt+UzpJm3NFQc1vxy3Ml5XFWuvu6jy0PO5+dE8XX08CTdgm2qvaE
JDTo6EkLh7uWBXgbPJw4xUr8jF6QV+tRwdCj2H1K4xPceagR8tUy1278BSc12TJm
cnTuy2LrC2EhwQAyHOCTJ56n4+dATH01HD4dv4khvkVV/uPdAT5J6up+TaaxKWu1
Rp2ff7QgkHvk4JES2vLISRsWytUGFQsaBEfVc4ZFOa59h+MkExM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org