Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e2038313531.roa
File:                     3230312e3133312e3234382e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier:          zuemDTsu3M54EIgFdXE80uToAFMY2lJJfuF7EYd/rJ8=
Subject key identifier:   F4:73:C2:AC:7F:E8:1A:21:74:EC:8E:53:D8:71:CB:40:AC:5F:BE:38
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       0126DC5AEDA0E9802F64410B37A91047B5A5EE56
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e2038313531.roa
Signing time:             Fri 30 Aug 2024 20:55:02 +0000
ROA not before:           Fri 30 Aug 2024 20:50:02 +0000
ROA not after:            Fri 29 Aug 2025 20:55:02 +0000
asID:                     8151
IP address blocks:        201.131.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:dc:5a:ed:a0:e9:80:2f:64:41:0b:37:a9:10:47:b5:a5:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Aug 30 20:50:02 2024 GMT
            Not After : Aug 29 20:55:02 2025 GMT
        Subject: CN=F473C2AC7FE81A2174EC8E53D871CB40AC5FBE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:9e:5b:45:40:b9:db:34:ae:ae:98:92:dd:
                    89:9e:a6:ed:df:16:aa:77:5f:94:c1:c5:6b:af:9c:
                    f6:f4:46:0b:ca:72:88:ee:e0:7d:32:34:ae:3b:22:
                    e7:6e:b4:19:8b:c6:67:ea:a3:9e:73:af:9a:e0:12:
                    c9:2f:08:99:b7:c8:64:78:79:4e:ba:bf:fb:83:5e:
                    4c:af:db:cf:04:60:02:11:cb:9c:77:87:84:c9:c4:
                    ff:fd:3b:52:52:e2:d9:cd:b8:13:12:96:54:d0:1c:
                    2d:f4:ac:1b:be:4f:1c:a0:28:e6:a4:7b:90:08:b7:
                    54:c9:57:b3:93:b1:e7:5e:04:1b:fd:c1:1d:d9:e0:
                    4b:05:4f:6f:b2:50:e2:8c:64:c6:dc:7c:1a:f9:9f:
                    6f:e0:c7:d5:bc:49:c9:77:08:cd:2e:4d:6d:43:6c:
                    fc:3c:01:90:21:56:5a:1e:eb:34:d3:7f:2f:80:c2:
                    9a:39:54:d3:b3:08:f5:1a:d3:8d:d4:32:b3:64:19:
                    a4:44:d0:d3:96:2b:ff:72:45:b1:c2:46:be:c9:65:
                    30:1f:36:37:02:a2:44:23:ab:d8:98:c2:ed:d5:87:
                    ff:da:3b:70:26:34:d4:a6:31:02:f5:33:dd:1d:50:
                    9d:77:59:ae:6c:9a:0a:e4:c8:e3:cf:03:ce:e8:c3:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:C2:AC:7F:E8:1A:21:74:EC:8E:53:D8:71:CB:40:AC:5F:BE:38
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:2d:e6:7b:a8:88:e3:f8:ed:32:0b:12:09:9d:50:1c:90:
         96:9c:5a:12:8f:5c:2c:63:73:93:2f:f0:31:cd:c7:92:80:b1:
         01:cd:a5:b5:65:6a:af:82:35:5b:b0:7f:8d:d3:04:51:4d:91:
         99:6d:83:d5:7b:8b:ca:5b:8a:2d:19:5c:90:dc:a0:39:22:3e:
         3d:9d:f3:f5:76:3a:8a:40:27:f3:21:e7:96:c1:ff:1a:0c:f9:
         0c:c0:ff:8e:1b:63:f7:7d:4f:32:e5:17:e7:db:7e:f5:ee:51:
         3b:da:c6:81:ad:1d:a3:bd:85:ea:83:20:de:d1:30:d9:bd:6c:
         f3:e3:fe:b0:09:4d:80:74:0c:3d:dc:f1:70:ca:f3:e2:c1:22:
         66:2b:f7:09:c4:56:51:b1:b5:e8:a4:7b:b6:89:2d:f8:c1:9f:
         0d:0f:6f:6a:30:38:49:6c:38:69:b6:42:6a:84:07:f6:19:7c:
         69:93:be:00:b3:e4:a2:3f:64:32:bb:c3:f2:29:7f:4c:6a:e9:
         bf:3c:c8:99:0d:42:46:d0:fc:a2:df:ff:1c:61:87:39:90:9b:
         c1:0f:03:2b:74:5d:59:e0:73:33:fd:0c:0a:64:3b:27:5a:dd:
         23:90:3e:88:90:85:46:c2:62:23:d7:c7:2f:78:1e:a0:2c:9d:
         ad:3a:66:44
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUASbcWu2g6YAvZEELN6kQR7Wl7lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA4MzAyMDUwMDJaFw0yNTA4MjkyMDU1MDJaMDMxMTAvBgNV
BAMTKEY0NzNDMkFDN0ZFODFBMjE3NEVDOEU1M0Q4NzFDQjQwQUM1RkJFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpp5bRUC52zSurpiS3Ymepu3f
Fqp3X5TBxWuvnPb0RgvKcoju4H0yNK47IudutBmLxmfqo55zr5rgEskvCJm3yGR4
eU66v/uDXkyv288EYAIRy5x3h4TJxP/9O1JS4tnNuBMSllTQHC30rBu+TxygKOak
e5AIt1TJV7OTsedeBBv9wR3Z4EsFT2+yUOKMZMbcfBr5n2/gx9W8Scl3CM0uTW1D
bPw8AZAhVloe6zTTfy+Awpo5VNOzCPUa043UMrNkGaRE0NOWK/9yRbHCRr7JZTAf
NjcCokQjq9iYwu3Vh//aO3AmNNSmMQL1M90dUJ13Wa5smgrkyOPPA87owxLPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9HPCrH/oGiF07I5T2HHLQKxfvjgwHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMTJlMzEzMzMxMmUzMjM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMxMzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmD+DAN
BgkqhkiG9w0BAQsFAAOCAQEAPhct5nuoiOP47TILEgmdUByQlpxaEo9cLGNzky/w
Mc3HkoCxAc2ltWVqr4I1W7B/jdMEUU2RmW2D1XuLyluKLRlckNygOSI+PZ3z9XY6
ikAn8yHnlsH/Ggz5DMD/jhtj931PMuUX59t+9e5RO9rGga0do72F6oMg3tEw2b1s
8+P+sAlNgHQMPdzxcMrz4sEiZiv3CcRWUbG16KR7tokt+MGfDQ9vajA4SWw4abZC
aoQH9hl8aZO+ALPkoj9kMrvD8il/TGrpvzzImQ1CRtD8ot//HGGHOZCbwQ8DK3Rd
WeBzM/0MCmQ7J1rdI5A+iJCFRsJiI9fHL3geoCydrTpmRA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org