Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203238353131.roa
File:                     3230312e3133312e3234382e302f32342d3234203d3e203238353131.roa (raw, json)
Hash identifier:          slOprlgZz6WmqtV4yUavY2JnnP1ZUtEY092CA5j/pqg=
Subject key identifier:   8B:5C:9B:94:03:30:9E:CB:1C:38:98:CA:2B:71:CC:E5:7C:CC:B6:AE
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       3A617CDFF4106D8D86941613638EAD2DB846C6F4
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 22:45:01 +0000
ROA not before:           Fri 26 Apr 2024 22:40:01 +0000
ROA not after:            Fri 25 Apr 2025 22:45:01 +0000
asID:                     28511
IP address blocks:        201.131.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:61:7c:df:f4:10:6d:8d:86:94:16:13:63:8e:ad:2d:b8:46:c6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:40:01 2024 GMT
            Not After : Apr 25 22:45:01 2025 GMT
        Subject: CN=8B5C9B9403309ECB1C3898CA2B71CCE57CCCB6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:36:ce:fb:9b:80:13:3f:c2:19:99:86:03:
                    2f:66:35:e7:3b:66:e3:11:08:f6:72:63:c8:cf:cf:
                    62:1f:a9:96:d8:0a:d4:90:a9:ad:62:23:21:a7:fb:
                    c6:01:12:59:d4:8f:14:70:18:5e:a3:b8:76:1d:ef:
                    30:75:8a:83:94:56:ad:60:3e:0b:39:40:30:29:78:
                    23:39:4d:1d:6d:82:c8:6b:24:e4:3c:b3:61:47:3a:
                    d2:b6:8f:ce:dc:04:f2:1b:f0:58:b5:33:28:bf:05:
                    01:ab:90:7d:3a:58:89:14:c2:9b:2c:26:7a:18:09:
                    80:af:4f:46:7c:1e:49:64:cb:09:24:4e:6d:fe:ee:
                    24:ca:5d:68:ef:6c:74:bd:fe:6f:e7:b5:53:12:4e:
                    f4:8d:04:15:5e:11:a5:2c:e2:04:34:38:e5:19:8e:
                    58:52:93:b4:1d:03:57:62:f1:41:2b:58:34:cf:93:
                    cf:67:38:ae:fb:ee:9e:b7:d5:5b:00:02:f8:28:85:
                    a1:e8:0c:1e:80:37:a3:5d:47:e8:bd:97:64:e9:f6:
                    77:63:3b:82:1b:ca:1c:a4:a8:ac:34:68:65:ff:ff:
                    b7:0a:a4:cd:96:33:19:fe:4f:cb:9c:8d:d7:20:e0:
                    52:be:a5:44:b3:72:a8:17:41:63:40:50:3c:43:7d:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:9B:94:03:30:9E:CB:1C:38:98:CA:2B:71:CC:E5:7C:CC:B6:AE
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:38:aa:74:ff:63:89:e3:fe:4c:19:49:3d:17:01:bb:97:
         ce:90:44:1a:b7:94:b7:f4:49:fd:5b:1b:e2:7f:31:6a:94:28:
         3f:56:fc:7e:56:02:8c:b9:4b:6b:a1:b9:f2:27:3b:41:b7:14:
         38:01:0f:c0:94:e0:61:5e:27:54:e6:78:d6:fb:19:c7:2c:fa:
         57:06:8a:14:67:d8:48:6c:d2:43:35:b1:4a:13:d5:4f:b0:2d:
         87:3d:8d:fe:f6:6f:6e:fc:a5:d4:81:b9:c0:1c:36:45:4e:2c:
         4a:17:91:58:93:47:34:80:69:04:d6:45:f5:e5:c4:a7:1b:50:
         17:6b:14:44:5c:88:62:e3:f3:2e:4a:1b:0f:96:34:41:cd:72:
         b9:bd:97:4f:b7:39:1c:47:25:5b:3a:48:37:c3:59:65:f0:16:
         27:03:4c:23:90:e3:65:01:1f:64:35:d1:47:71:d1:30:a1:a0:
         fe:86:ba:11:bb:0b:1e:38:e9:47:76:2a:10:b2:56:d0:98:22:
         30:92:9b:61:79:f0:0a:3f:56:df:11:1c:66:92:e5:ea:8f:ed:
         0a:87:3b:8b:58:fc:94:1f:10:00:bf:46:94:70:1f:a1:ca:af:
         92:9b:4f:16:fc:d5:2e:36:8b:da:2d:2a:24:0c:cd:b8:cc:a2:
         9e:d1:c2:9a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOmF83/QQbY2GlBYTY46tLbhGxvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjYyMjQwMDFaFw0yNTA0MjUyMjQ1MDFaMDMxMTAvBgNV
BAMTKDhCNUM5Qjk0MDMzMDlFQ0IxQzM4OThDQTJCNzFDQ0U1N0NDQ0I2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4jbO+5uAEz/CGZmGAy9mNec7
ZuMRCPZyY8jPz2IfqZbYCtSQqa1iIyGn+8YBElnUjxRwGF6juHYd7zB1ioOUVq1g
Pgs5QDApeCM5TR1tgshrJOQ8s2FHOtK2j87cBPIb8Fi1Myi/BQGrkH06WIkUwpss
JnoYCYCvT0Z8HklkywkkTm3+7iTKXWjvbHS9/m/ntVMSTvSNBBVeEaUs4gQ0OOUZ
jlhSk7QdA1di8UErWDTPk89nOK777p631VsAAvgohaHoDB6AN6NdR+i9l2Tp9ndj
O4IbyhykqKw0aGX//7cKpM2WMxn+T8ucjdcg4FK+pUSzcqgXQWNAUDxDfSYvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUi1yblAMwnsscOJjKK3HM5XzMtq4wHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMTJlMzEzMzMxMmUzMjM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYP4
MA0GCSqGSIb3DQEBCwUAA4IBAQANBDiqdP9jieP+TBlJPRcBu5fOkEQat5S39En9
WxvifzFqlCg/Vvx+VgKMuUtrobnyJztBtxQ4AQ/AlOBhXidU5njW+xnHLPpXBooU
Z9hIbNJDNbFKE9VPsC2HPY3+9m9u/KXUgbnAHDZFTixKF5FYk0c0gGkE1kX15cSn
G1AXaxREXIhi4/MuShsPljRBzXK5vZdPtzkcRyVbOkg3w1ll8BYnA0wjkONlAR9k
NdFHcdEwoaD+hroRuwseOOlHdioQslbQmCIwkpthefAKP1bfERxmkuXqj+0KhzuL
WPyUHxAAv0aUcB+hyq+Sm08W/NUuNovaLSokDM24zKKe0cKa
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org