Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/3230312e3133392e38302e302f32322d3234203d3e203631343439.roa
File:                     3230312e3133392e38302e302f32322d3234203d3e203631343439.roa (raw, json)
Hash identifier:          pRHbeeE4eixZ8zTNk/jZlTzEm9TChTm3UDBgdzMpj2Q=
Subject key identifier:   BE:1B:8F:8B:DF:57:5F:78:3A:1F:D2:93:64:B5:D8:76:38:A1:FB:15
Certificate issuer:       /CN=FC36177FB5D3BE96FC909B995D58454E8724B088
Certificate serial:       1FF3CCB8DF09AB2AE26F22D512745DF5F02F2510
Authority key identifier: FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/3230312e3133392e38302e302f32322d3234203d3e203631343439.roa
Signing time:             Tue 05 Mar 2024 18:09:16 +0000
ROA not before:           Tue 05 Mar 2024 18:04:16 +0000
ROA not after:            Tue 04 Mar 2025 18:09:16 +0000
asID:                     61449
IP address blocks:        201.139.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:cc:b8:df:09:ab:2a:e2:6f:22:d5:12:74:5d:f5:f0:2f:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC36177FB5D3BE96FC909B995D58454E8724B088
        Validity
            Not Before: Mar  5 18:04:16 2024 GMT
            Not After : Mar  4 18:09:16 2025 GMT
        Subject: CN=BE1B8F8BDF575F783A1FD29364B5D87638A1FB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:45:62:6a:cf:4a:49:1e:29:61:2b:75:ec:
                    65:b3:3f:c2:a4:bb:3d:d2:f2:a9:0f:7a:94:fe:ad:
                    bb:8d:a2:cb:2e:39:3b:37:25:95:b7:0f:6e:03:67:
                    7d:50:13:dc:72:d2:e8:08:6f:e6:c9:ba:ff:f7:60:
                    d8:59:64:5f:d4:c3:9e:fd:f9:95:ec:2d:99:a8:b7:
                    a7:02:ab:8c:01:ac:1a:e7:07:20:7f:34:52:61:35:
                    04:90:74:d6:ed:ff:66:24:cf:c9:3e:19:29:ac:14:
                    9d:c3:85:e7:6a:d2:46:80:da:c7:84:d7:e0:5d:bb:
                    44:85:ac:2a:a7:00:73:5b:1b:6c:5a:a3:00:a0:1a:
                    73:2d:78:a3:aa:9f:cd:59:e8:1f:4e:fe:b0:ef:91:
                    31:cf:10:6f:3e:48:b8:e3:35:8d:d5:c0:42:d1:41:
                    3b:77:18:b2:42:64:1e:a0:1f:cf:6b:54:4b:76:8b:
                    e3:30:a3:60:e4:84:7b:82:f4:13:12:a7:f6:fc:1a:
                    25:0a:a0:2f:7f:5f:91:40:d9:f3:4b:ea:79:55:19:
                    d6:2c:fc:91:ec:50:04:6c:36:9b:88:e9:0e:69:38:
                    ac:af:93:68:87:56:49:67:53:74:43:db:05:fa:d3:
                    ac:fb:01:37:99:2e:f7:38:2e:3e:e9:8a:1a:46:8b:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:8F:8B:DF:57:5F:78:3A:1F:D2:93:64:B5:D8:76:38:A1:FB:15
            X509v3 Authority Key Identifier:
                keyid:FC:36:17:7F:B5:D3:BE:96:FC:90:9B:99:5D:58:45:4E:87:24:B0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/FC36177FB5D3BE96FC909B995D58454E8724B088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC36177FB5D3BE96FC909B995D58454E8724B088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DEC94D7F5FA7DBCED768551B0F81E515B00E6C71BA1EB2F75850F62C2FA7031/0/3230312e3133392e38302e302f32322d3234203d3e203631343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:c3:65:dd:ee:6c:c7:b7:09:23:ce:3b:d9:b9:95:00:34:
         02:26:57:4b:a3:ff:7f:07:da:83:9d:55:01:3b:ec:09:ab:ba:
         fc:ad:bd:43:c4:67:15:ee:09:d7:b2:b7:c4:0a:cd:cd:64:ff:
         40:d0:7e:e3:3a:1f:7e:53:c5:95:b6:2a:02:df:25:8b:57:44:
         9a:bf:c8:4d:2d:08:b3:1a:bd:00:73:f6:a6:c7:15:55:e3:1d:
         6b:dc:a8:cb:1c:42:2f:14:4a:c5:e4:90:7a:5b:06:7f:84:b6:
         78:5f:2c:22:0c:8e:af:fc:b4:96:fc:06:b1:12:72:b2:bb:ce:
         7b:3e:37:d3:48:06:d8:df:c4:60:9c:f1:d6:af:e4:c6:02:6d:
         e2:ff:02:f5:4e:e5:78:e2:1d:48:4f:a4:2c:26:ba:c8:ce:68:
         21:06:1b:e1:fb:a5:a1:ab:e8:48:31:de:01:3d:62:b4:7d:40:
         01:44:82:b8:47:b2:34:ab:49:26:95:e1:6c:6c:2b:a8:47:95:
         81:1b:4d:93:81:e5:77:b7:08:b4:f8:bc:b6:f8:fa:ab:b5:a2:
         dd:8c:86:33:bc:06:66:f0:84:17:59:ac:25:d1:c2:3a:44:46:
         c2:49:a3:a3:f8:2f:0b:65:ef:8f:61:53:7a:c5:0d:56:eb:9e:
         fb:0e:95:aa
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUH/PMuN8JqyribyLVEnRd9fAvJRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMzNjE3N0ZCNUQzQkU5NkZDOTA5Qjk5NUQ1ODQ1NEU4
NzI0QjA4ODAeFw0yNDAzMDUxODA0MTZaFw0yNTAzMDQxODA5MTZaMDMxMTAvBgNV
BAMTKEJFMUI4RjhCREY1NzVGNzgzQTFGRDI5MzY0QjVEODc2MzhBMUZCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSN0Vias9KSR4pYSt17GWzP8Kk
uz3S8qkPepT+rbuNossuOTs3JZW3D24DZ31QE9xy0ugIb+bJuv/3YNhZZF/Uw579
+ZXsLZmot6cCq4wBrBrnByB/NFJhNQSQdNbt/2Ykz8k+GSmsFJ3Dhedq0kaA2seE
1+Bdu0SFrCqnAHNbG2xaowCgGnMteKOqn81Z6B9O/rDvkTHPEG8+SLjjNY3VwELR
QTt3GLJCZB6gH89rVEt2i+Mwo2DkhHuC9BMSp/b8GiUKoC9/X5FA2fNL6nlVGdYs
/JHsUARsNpuI6Q5pOKyvk2iHVklnU3RD2wX606z7ATeZLvc4Lj7pihpGiwg1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvhuPi99XX3g6H9KTZLXYdjih+xUwHwYDVR0j
BBgwFoAU/DYXf7XTvpb8kJuZXVhFTocksIgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83REVDOTREN0Y1RkE3REJDRUQ3Njg1NTFCMEY4MUU1MTVC
MDBFNkM3MUJBMUVCMkY3NTg1MEY2MkMyRkE3MDMxLzAvRkMzNjE3N0ZCNUQzQkU5
NkZDOTA5Qjk5NUQ1ODQ1NEU4NzI0QjA4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzM2MTc3RkI1RDNCRTk2RkM5
MDlCOTk1RDU4NDU0RTg3MjRCMDg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0RFQzk0RDdGNUZBN0RCQ0VENzY4NTUxQjBGODFFNTE1QjAwRTZDNzFC
QTFFQjJGNzU4NTBGNjJDMkZBNzAzMS8wLzMyMzAzMTJlMzEzMzM5MmUzODMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM0MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmLUDAN
BgkqhkiG9w0BAQsFAAOCAQEAGdfDZd3ubMe3CSPOO9m5lQA0AiZXS6P/fwfag51V
ATvsCau6/K29Q8RnFe4J17K3xArNzWT/QNB+4zofflPFlbYqAt8li1dEmr/ITS0I
sxq9AHP2pscVVeMda9yoyxxCLxRKxeSQelsGf4S2eF8sIgyOr/y0lvwGsRJysrvO
ez4300gG2N/EYJzx1q/kxgJt4v8C9U7leOIdSE+kLCa6yM5oIQYb4fuloavoSDHe
AT1itH1AAUSCuEeyNKtJJpXhbGwrqEeVgRtNk4Hld7cItPi8tvj6q7Wi3YyGM7wG
ZvCEF1msJdHCOkRGwkmjo/gvC2Xvj2FTesUNVuue+w6Vqg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org