Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa
File:                     3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa (raw, json)
Hash identifier:          ypp4nuDlU934tr99oERW+f2Pat9LYyNgBYMNax1oAz8=
Subject key identifier:   CF:48:54:B3:F0:2F:2B:74:B5:76:3B:3E:67:56:11:87:02:82:8F:5C
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       3446376AE8E7DBD77B1A9B89EE09F609909EEBD9
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa
Signing time:             Tue 05 Mar 2024 18:03:56 +0000
ROA not before:           Tue 05 Mar 2024 17:58:56 +0000
ROA not after:            Tue 04 Mar 2025 18:03:56 +0000
asID:                     272851
IP address blocks:        201.46.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:46:37:6a:e8:e7:db:d7:7b:1a:9b:89:ee:09:f6:09:90:9e:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Mar  5 17:58:56 2024 GMT
            Not After : Mar  4 18:03:56 2025 GMT
        Subject: CN=CF4854B3F02F2B74B5763B3E6756118702828F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:71:35:59:7e:b1:05:36:da:7e:14:f0:69:
                    94:9e:3c:12:d8:fb:b6:82:4c:ab:70:4c:11:ba:3c:
                    13:60:3f:72:3c:e6:59:cb:98:59:86:7f:54:cf:0d:
                    68:a4:a8:58:a7:62:e3:aa:53:3e:cb:b1:26:93:dc:
                    5d:3c:b3:31:1c:cf:e7:88:12:ee:11:89:79:ef:72:
                    94:5d:8a:d7:2f:b8:83:6e:48:84:e1:fa:a5:ed:a4:
                    5a:63:70:1b:54:9e:ea:9c:8b:f3:73:d6:d0:61:f6:
                    a6:7c:66:23:af:ad:49:40:7c:93:b3:98:16:6c:95:
                    c4:4a:85:8c:5d:7f:a3:3a:54:44:35:aa:eb:79:0e:
                    1b:61:7d:75:64:88:d2:15:e5:fc:ae:74:e1:8e:2a:
                    53:19:78:80:14:f7:50:f1:05:9b:88:05:5e:c5:8e:
                    7e:21:8e:93:2d:91:4c:41:b7:7a:b0:05:bf:4c:d6:
                    ef:e7:99:42:05:86:54:ec:c6:a4:76:38:62:93:65:
                    41:9b:9e:cc:0f:c6:13:d8:d1:0f:e8:2e:d7:81:f6:
                    87:c2:99:7f:d1:40:3f:61:99:5d:48:ea:d9:b6:ae:
                    d5:cb:2f:09:80:2c:68:39:32:60:a8:ac:93:9a:fe:
                    35:10:4b:fe:fb:16:86:c6:b5:5d:85:e4:67:b3:a1:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:48:54:B3:F0:2F:2B:74:B5:76:3B:3E:67:56:11:87:02:82:8F:5C
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:ba:4a:c9:e2:52:71:13:c5:89:88:82:0b:41:f0:bd:31:
         a3:7d:64:0b:14:15:cb:32:22:a7:c3:6a:7d:57:bb:0b:fd:eb:
         66:1f:03:12:8a:49:1a:4f:78:b5:cb:95:a2:a8:fc:3b:0e:5d:
         5b:59:08:80:8e:de:49:36:19:19:db:b7:eb:69:02:38:c1:63:
         1d:d8:ae:b4:68:f1:bd:9c:f4:85:09:78:cd:cf:69:62:d6:ce:
         b7:90:ff:79:de:6f:f4:37:71:34:3f:9b:a2:2f:47:06:f6:98:
         bd:94:b6:0d:5b:c0:5f:0a:4f:86:ca:9d:70:3e:a6:7c:fb:fa:
         1a:a8:d1:29:7f:c9:e5:8f:96:4c:b8:09:d4:5b:b0:ba:8d:10:
         2d:b4:b4:31:23:36:ff:11:9b:b4:48:a9:97:06:01:17:ac:d5:
         1c:a8:44:2e:bb:9e:3f:9c:bd:11:b6:8a:58:5c:80:56:0d:4e:
         a4:77:51:1b:d7:ee:50:17:cb:63:de:7c:71:55:7d:d6:e6:25:
         e1:e2:8a:bc:d6:ad:3e:10:76:2c:3f:a7:cc:1d:ad:35:7d:02:
         91:e3:fe:9d:4a:b6:55:29:15:3c:15:51:fe:bc:f4:69:6f:26:
         35:cc:d1:57:13:e2:e7:a7:9b:44:08:94:be:52:f5:c1:2a:13:
         51:9f:82:b2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNEY3aujn29d7GpuJ7gn2CZCe69kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQxQjNFRUFGMDg1NkZDREM2QzEyMDVBQUM3RDJDNkIx
N0Y0REFFMDAeFw0yNDAzMDUxNzU4NTZaFw0yNTAzMDQxODAzNTZaMDMxMTAvBgNV
BAMTKENGNDg1NEIzRjAyRjJCNzRCNTc2M0IzRTY3NTYxMTg3MDI4MjhGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfznE1WX6xBTbafhTwaZSePBLY
+7aCTKtwTBG6PBNgP3I85lnLmFmGf1TPDWikqFinYuOqUz7LsSaT3F08szEcz+eI
Eu4RiXnvcpRditcvuINuSITh+qXtpFpjcBtUnuqci/Nz1tBh9qZ8ZiOvrUlAfJOz
mBZslcRKhYxdf6M6VEQ1qut5DhthfXVkiNIV5fyudOGOKlMZeIAU91DxBZuIBV7F
jn4hjpMtkUxBt3qwBb9M1u/nmUIFhlTsxqR2OGKTZUGbnswPxhPY0Q/oLteB9ofC
mX/RQD9hmV1I6tm2rtXLLwmALGg5MmCorJOa/jUQS/77FobGtV2F5GezoVS3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUz0hUs/AvK3S1djs+Z1YRhwKCj1wwHwYDVR0j
BBgwFoAUHRs+6vCFb83GwSBarH0saxf02uAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QzUyQzZDNjMxMENEOTNDMEVCMENGQjBCNzE2NUM4OUMw
RjgwMDU2MTNFM0JDQUE3QURENTM0MTg0QUIxOEU1LzAvMUQxQjNFRUFGMDg1NkZD
REM2QzEyMDVBQUM3RDJDNkIxN0Y0REFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDFCM0VFQUYwODU2RkNEQzZD
MTIwNUFBQzdEMkM2QjE3RjREQUUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkM1MkM2QzYzMTBDRDkzQzBFQjBDRkIwQjcxNjVDODlDMEY4MDA1NjEz
RTNCQ0FBN0FERDUzNDE4NEFCMThFNS8wLzMyMzAzMTJlMzQzNjJlMzEzMTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyS5z
MA0GCSqGSIb3DQEBCwUAA4IBAQClzrpKyeJScRPFiYiCC0HwvTGjfWQLFBXLMiKn
w2p9V7sL/etmHwMSikkaT3i1y5WiqPw7Dl1bWQiAjt5JNhkZ27fraQI4wWMd2K60
aPG9nPSFCXjNz2li1s63kP953m/0N3E0P5uiL0cG9pi9lLYNW8BfCk+Gyp1wPqZ8
+/oaqNEpf8nlj5ZMuAnUW7C6jRAttLQxIzb/EZu0SKmXBgEXrNUcqEQuu54/nL0R
topYXIBWDU6kd1Eb1+5QF8tj3nxxVX3W5iXh4oq81q0+EHYsP6fMHa01fQKR4/6d
SrZVKRU8FVH+vPRpbyY1zNFXE+Lnp5tECJS+UvXBKhNRn4Ky
-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org