Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa
File:                     3138312e3233322e302e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          ugWTRxWV5Muw4n/xABEiZI9lA3kRxOjEoPHh+TYzZRA=
Subject key identifier:   20:EF:95:69:44:D3:C9:2F:40:06:6F:8B:17:98:73:ED:14:59:C8:D5
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       1FFC8200F81C2BC0669117574C752F694235ECAA
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:56 +0000
ROA not before:           Tue 05 Mar 2024 17:57:56 +0000
ROA not after:            Tue 04 Mar 2025 18:02:56 +0000
asID:                     27695
IP address blocks:        181.232.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:82:00:f8:1c:2b:c0:66:91:17:57:4c:75:2f:69:42:35:ec:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:56 2024 GMT
            Not After : Mar  4 18:02:56 2025 GMT
        Subject: CN=20EF956944D3C92F40066F8B179873ED1459C8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:43:dd:08:71:71:b9:50:11:7e:56:32:6f:
                    dd:9b:8e:41:0e:e7:70:0f:28:6e:3c:f4:da:2e:16:
                    cc:19:1d:eb:97:53:f8:79:05:ef:43:a4:ad:ba:d6:
                    f3:c6:12:1d:d1:cd:43:cf:58:af:00:74:dd:28:66:
                    6a:8a:39:da:3d:e7:f3:9b:61:da:90:5e:19:ef:bc:
                    e3:33:85:9a:f8:54:88:a1:e1:8d:f1:d2:f0:f1:d2:
                    6f:67:9f:fe:82:bd:5c:b9:fb:d1:a6:da:db:66:97:
                    2e:7e:00:22:52:2f:50:37:06:96:2a:d5:17:47:a8:
                    25:c0:fe:6c:68:06:32:51:e5:f6:cc:2d:2a:47:83:
                    b3:7d:a4:d2:c1:8e:3c:14:d5:77:8d:f8:9c:ca:a6:
                    52:1a:c1:cc:2c:6f:a3:bf:fb:6a:ba:09:29:cf:bf:
                    73:ad:b3:b5:00:73:90:f4:30:62:c8:84:92:55:e8:
                    22:ec:17:8e:b0:87:31:52:1b:10:dc:07:0b:57:67:
                    8e:ca:43:f6:14:e9:97:88:cd:82:85:4c:39:f6:ce:
                    cc:39:29:2b:f0:ff:b7:89:3d:78:50:49:0a:52:57:
                    ad:01:6d:08:92:87:b2:cb:c7:ed:a6:7d:e9:fc:23:
                    6f:bb:6b:54:22:49:8c:c7:66:47:ed:47:c9:34:af:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:95:69:44:D3:C9:2F:40:06:6F:8B:17:98:73:ED:14:59:C8:D5
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:2d:3d:d5:c9:1a:73:fa:57:7a:a8:de:c8:e7:e3:2e:36:
         c0:24:da:42:e3:0f:29:13:23:a7:81:38:55:ba:77:43:6a:88:
         40:62:f4:6f:93:c6:94:3b:36:36:44:d5:36:63:da:b7:72:2d:
         d5:7d:a3:7a:fd:ec:54:d2:b2:94:62:18:22:45:03:fd:5a:d0:
         e4:2f:14:5d:57:e6:c3:ab:0e:48:b5:b7:82:7a:18:62:8e:bc:
         4b:65:85:5c:43:0c:cb:1a:30:48:09:23:a9:22:f7:4c:52:0b:
         03:c3:4a:42:05:25:1c:4c:b3:18:f4:7d:17:a5:b3:ed:57:4b:
         a6:bc:e7:24:77:1e:5d:a0:c7:30:c9:ae:4e:f4:4b:2e:2e:52:
         bb:28:b0:2d:c6:f1:51:5c:04:11:91:49:17:40:91:73:8d:4f:
         96:1d:69:67:72:ac:41:bd:3d:8e:bb:5f:8d:ed:db:cb:7c:8a:
         c3:59:75:38:80:92:d8:b5:84:01:61:d4:04:8a:5d:11:81:bf:
         0a:29:f4:04:d2:4f:25:6b:46:cb:84:16:b7:ea:af:c2:81:17:
         a8:89:41:81:be:fc:4f:07:fc:17:b4:19:bb:e5:1c:0d:8c:41:
         a0:b8:91:f1:10:4d:fc:e5:a1:f7:fe:ac:d9:3b:93:09:60:27:
         cb:27:99:21
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUH/yCAPgcK8BmkRdXTHUvaUI17KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkxNDREODA3MEM0NDg1MjQwM0Y1NTBGMzFERUM1M0VC
RjQ4QTYxRjAeFw0yNDAzMDUxNzU3NTZaFw0yNTAzMDQxODAyNTZaMDMxMTAvBgNV
BAMTKDIwRUY5NTY5NDREM0M5MkY0MDA2NkY4QjE3OTg3M0VEMTQ1OUM4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWh0PdCHFxuVARflYyb92bjkEO
53APKG489NouFswZHeuXU/h5Be9DpK261vPGEh3RzUPPWK8AdN0oZmqKOdo95/Ob
YdqQXhnvvOMzhZr4VIih4Y3x0vDx0m9nn/6CvVy5+9Gm2ttmly5+ACJSL1A3BpYq
1RdHqCXA/mxoBjJR5fbMLSpHg7N9pNLBjjwU1XeN+JzKplIawcwsb6O/+2q6CSnP
v3Ots7UAc5D0MGLIhJJV6CLsF46whzFSGxDcBwtXZ47KQ/YU6ZeIzYKFTDn2zsw5
KSvw/7eJPXhQSQpSV60BbQiSh7LLx+2mfen8I2+7a1QiSYzHZkftR8k0r0glAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUIO+VaUTTyS9ABm+LF5hz7RRZyNUwHwYDVR0j
BBgwFoAUKRRNgHDESFJAP1UPMd7FPr9Iph8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RENEQjVBNjgwRDRGOEVDQjc0REExN0UwNUE4NjcxQjM0
M0I0MTFEOTk3N0NBREVCMTJDNDE5MUU0RjI4RTAzLzAvMjkxNDREODA3MEM0NDg1
MjQwM0Y1NTBGMzFERUM1M0VCRjQ4QTYxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTE0NEQ4MDcwQzQ0ODUyNDAz
RjU1MEYzMURFQzUzRUJGNDhBNjFGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0RDREI1QTY4MEQ0RjhFQ0I3NERBMTdFMDVBODY3MUIzNDNCNDExRDk5
NzdDQURFQjEyQzQxOTFFNEYyOEUwMy8wLzMxMzgzMTJlMzIzMzMyMmUzMDJlMzAy
ZjMxMzcyZDMxMzcyMDNkM2UyMDMyMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe16AAwDQYJ
KoZIhvcNAQELBQADggEBAC23LT3VyRpz+ld6qN7I5+MuNsAk2kLjDykTI6eBOFW6
d0NqiEBi9G+TxpQ7NjZE1TZj2rdyLdV9o3r97FTSspRiGCJFA/1a0OQvFF1X5sOr
Dki1t4J6GGKOvEtlhVxDDMsaMEgJI6ki90xSCwPDSkIFJRxMsxj0fRels+1XS6a8
5yR3Hl2gxzDJrk70Sy4uUrsosC3G8VFcBBGRSRdAkXONT5YdaWdyrEG9PY67X43t
28t8isNZdTiAkti1hAFh1ASKXRGBvwop9ATSTyVrRsuEFrfqr8KBF6iJQYG+/E8H
/Be0GbvlHA2MQaC4kfEQTfzloff+rNk7kwlgJ8snmSE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org