Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa
File:                     3138312e3232372e302e302f31362d3136203d3e203238303234.roa (raw, json)
Hash identifier:          RVwWk9K6nYkb8fOhcsgpngojIqz2DqH1zkSvYNT0jFA=
Subject key identifier:   0D:A8:42:02:52:6F:D6:2C:64:5C:A9:56:9B:EF:4F:E3:70:70:44:84
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       2E786A47F28A97A50A728A0742DE82D3247B0501
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     28024
IP address blocks:        181.227.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:78:6a:47:f2:8a:97:a5:0a:72:8a:07:42:de:82:d3:24:7b:05:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=0DA84202526FD62C645CA9569BEF4FE370704484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:46:79:32:2a:b3:da:f0:a1:0f:2d:a8:02:
                    9f:3b:4f:62:12:5f:4a:44:56:c4:01:8b:92:b8:ec:
                    d9:db:e6:aa:d5:65:57:19:f5:d9:06:3b:be:d9:cd:
                    a1:f9:ca:23:a7:37:9a:be:68:43:9a:48:66:ee:02:
                    59:3a:a4:28:de:95:4a:8a:89:e5:55:4b:03:ec:8a:
                    58:5a:f4:fe:e9:4b:8f:47:65:c8:12:9d:36:96:87:
                    4a:6e:ab:21:ae:7b:1a:41:c6:84:97:35:b0:54:73:
                    40:97:b1:e6:d7:59:c2:75:fe:03:38:96:6f:f4:f1:
                    ac:f1:36:5d:2d:31:62:ee:4a:ff:e8:fd:1a:01:e5:
                    fa:3f:25:f9:25:2e:90:64:34:44:9c:06:37:d2:21:
                    16:58:fa:00:d6:02:70:ae:9c:23:68:1b:e7:ba:5f:
                    43:b9:2c:a6:2b:9d:ae:af:e6:97:7c:2e:75:92:5c:
                    f0:f3:5b:4a:56:c1:60:5d:ac:bc:7e:58:1e:13:a7:
                    19:34:c4:c0:83:9b:ee:c6:ab:d5:95:cc:75:8c:d7:
                    86:12:c3:b8:2c:6d:55:40:32:2a:a8:a0:90:f9:5c:
                    e0:7c:15:ea:bf:5f:a5:74:64:8e:f0:fc:4a:58:62:
                    32:f8:78:bb:7a:3d:a6:5a:57:0e:5d:23:0a:ca:42:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A8:42:02:52:6F:D6:2C:64:5C:A9:56:9B:EF:4F:E3:70:70:44:84
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31362d3136203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:04:2e:87:3b:28:32:a9:72:74:0a:b7:3a:1c:c4:4d:be:
         57:19:09:85:65:bb:5d:85:d1:86:15:b5:07:b6:dd:bc:f9:2c:
         3f:72:ca:99:39:ea:4f:c7:04:74:f7:6f:d0:39:3d:a6:83:bb:
         4f:44:2c:49:8c:5c:8b:e0:78:41:55:04:2d:44:e2:c3:19:e3:
         f4:bd:07:68:de:9f:79:d5:8e:63:91:30:95:c5:c4:d7:ec:97:
         17:11:9b:bd:d1:12:d3:b0:2a:e0:6c:b8:7f:98:38:fd:5b:da:
         37:c3:a6:2e:34:09:2d:c8:85:ff:d5:14:f0:b5:92:f6:b2:92:
         53:ac:63:b8:c2:73:0c:3f:96:07:ae:61:bd:4f:6a:7c:8d:35:
         b7:48:e7:b5:36:e1:d6:8a:b6:1c:6c:fe:a4:63:db:99:35:c6:
         56:25:b2:1e:39:75:4d:74:2f:4e:00:0f:ed:5d:53:21:ea:6d:
         67:fb:d4:9c:6d:38:86:5d:50:6a:ab:c1:42:59:4b:cf:cc:17:
         ee:fa:6c:2d:29:60:6c:f4:ff:37:cb:c2:fb:ae:07:2f:30:75:
         69:21:e8:b0:11:c6:ed:22:33:39:12:1f:38:a3:4e:a6:f8:7b:
         bd:e7:23:69:88:f2:e3:30:d4:a5:b2:22:95:cb:58:29:d1:a4:
         09:bf:18:0d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIULnhqR/KKl6UKcooHQt6C0yR7BQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNDAzMDUxNzUxMDdaFw0yNTAzMDQxNzU2MDdaMDMxMTAvBgNV
BAMTKDBEQTg0MjAyNTI2RkQ2MkM2NDVDQTk1NjlCRUY0RkUzNzA3MDQ0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0N0Z5Miqz2vChDy2oAp87T2IS
X0pEVsQBi5K47Nnb5qrVZVcZ9dkGO77ZzaH5yiOnN5q+aEOaSGbuAlk6pCjelUqK
ieVVSwPsilha9P7pS49HZcgSnTaWh0puqyGuexpBxoSXNbBUc0CXsebXWcJ1/gM4
lm/08azxNl0tMWLuSv/o/RoB5fo/JfklLpBkNEScBjfSIRZY+gDWAnCunCNoG+e6
X0O5LKYrna6v5pd8LnWSXPDzW0pWwWBdrLx+WB4Tpxk0xMCDm+7Gq9WVzHWM14YS
w7gsbVVAMiqooJD5XOB8Feq/X6V0ZI7w/EpYYjL4eLt6PaZaVw5dIwrKQoadAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUDahCAlJv1ixkXKlWm+9P43BwRIQwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzgzMTJlMzIzMjM3MmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMyMzgzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC14zANBgkq
hkiG9w0BAQsFAAOCAQEAe+YELoc7KDKpcnQKtzocxE2+VxkJhWW7XYXRhhW1B7bd
vPksP3LKmTnqT8cEdPdv0Dk9poO7T0QsSYxci+B4QVUELUTiwxnj9L0HaN6fedWO
Y5EwlcXE1+yXFxGbvdES07Aq4Gy4f5g4/VvaN8OmLjQJLciF/9UU8LWS9rKSU6xj
uMJzDD+WB65hvU9qfI01t0jntTbh1oq2HGz+pGPbmTXGViWyHjl1TXQvTgAP7V1T
IeptZ/vUnG04hl1QaqvBQllLz8wX7vpsLSlgbPT/N8vC+64HLzB1aSHosBHG7SIz
ORIfOKNOpvh7vecjaYjy4zDUpbIilctYKdGkCb8YDQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:41 2024 by rpki-client on console-ams.rpki-client.org