Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa
File:                     3230312e3231392e36342e302f31392d3234203d3e203134323332.roa (raw, json)
Hash identifier:          uelWnRS4WMIiL+D095zUrdUFtgtPm+0IAWCMQOK+qLs=
Subject key identifier:   80:35:3F:0B:EE:92:24:A4:74:9B:3B:A0:F3:85:FA:AE:38:B3:D2:4D
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       1A58B37D3AC62784B85915B8C051A3498155AC26
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa
Signing time:             Tue 05 Mar 2024 17:50:27 +0000
ROA not before:           Tue 05 Mar 2024 17:45:27 +0000
ROA not after:            Tue 04 Mar 2025 17:50:27 +0000
asID:                     14232
IP address blocks:        201.219.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:b3:7d:3a:c6:27:84:b8:59:15:b8:c0:51:a3:49:81:55:ac:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Mar  5 17:45:27 2024 GMT
            Not After : Mar  4 17:50:27 2025 GMT
        Subject: CN=80353F0BEE9224A4749B3BA0F385FAAE38B3D24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:61:fc:61:78:9f:d6:09:fc:e7:0e:77:82:
                    97:79:53:58:8f:7b:56:84:83:f1:63:ee:34:b4:50:
                    94:0a:0b:af:51:0b:df:e6:74:d1:cb:06:96:a8:17:
                    1e:36:ed:1b:77:01:aa:c4:25:2c:dc:27:0c:82:f5:
                    ff:c0:38:a1:29:38:4b:a5:17:27:da:02:59:ca:74:
                    80:4d:10:d9:9e:1c:cd:cf:6a:47:08:24:9f:32:c3:
                    b6:5f:d8:b8:19:b0:b6:19:ea:ae:91:1e:e3:28:40:
                    ab:d3:cc:be:78:b3:de:a0:4d:06:04:54:1d:37:08:
                    d5:4a:45:bf:b9:28:93:9c:1e:b1:bf:77:09:4c:60:
                    08:14:72:3c:89:4b:f8:17:a4:47:71:5c:2b:42:21:
                    26:fe:44:ce:47:3b:3e:2f:d7:97:e8:3e:31:68:64:
                    9f:55:67:53:5e:d5:fc:fa:d8:b5:24:b9:67:9d:77:
                    b4:99:26:a9:48:ae:5b:48:e4:8f:0c:66:eb:e0:cb:
                    7c:0d:55:50:2b:6f:76:91:39:29:8d:51:f0:b4:18:
                    e5:12:6b:c9:a4:e2:05:00:42:50:b6:7b:28:92:e4:
                    68:69:f3:f5:98:36:d2:60:7a:01:0f:56:26:51:2f:
                    db:a1:89:9a:09:0e:e1:af:64:c4:4c:ff:3b:c2:8d:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:3F:0B:EE:92:24:A4:74:9B:3B:A0:F3:85:FA:AE:38:B3:D2:4D
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e36342e302f31392d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:80:c8:31:65:50:05:72:c9:33:15:fd:86:dd:70:cc:b2:
         ea:b2:8c:25:cc:bf:d4:31:a6:dd:d6:76:e6:10:e6:12:d9:89:
         93:08:24:12:16:88:94:8f:3c:78:ea:6c:d6:2b:3d:23:e8:66:
         b2:68:96:1f:4b:a2:de:2d:10:a3:8a:f3:24:66:ab:85:95:54:
         ca:2d:89:71:b8:1c:76:65:69:41:fe:41:41:49:ce:ae:13:a2:
         2d:41:0d:3f:e7:fa:89:f0:23:80:bf:05:59:12:51:ad:94:1c:
         75:16:15:9f:16:e2:73:5b:0d:de:22:8d:0d:ec:37:17:46:af:
         79:bc:ea:06:b4:3c:1d:65:10:0a:b7:67:ee:25:8c:ac:40:5a:
         8b:8b:3d:78:b3:08:06:33:c4:47:82:e9:5a:70:bd:31:bf:bf:
         8e:e4:d1:82:4e:03:7b:5a:dc:e5:2f:e4:4e:2b:46:35:4f:ad:
         a9:b6:00:71:6f:c3:14:3d:62:3d:d4:51:5f:2e:e2:91:21:6f:
         19:d5:4f:06:d4:1a:df:b5:4b:f8:a0:67:76:65:90:c8:78:35:
         9a:a2:97:31:eb:f9:54:52:25:ea:2d:f0:d6:fa:68:0f:fb:f3:
         fd:20:d8:35:34:9c:91:53:27:80:76:db:a4:0c:be:59:b7:0c:
         b7:ab:0c:2a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGlizfTrGJ4S4WRW4wFGjSYFVrCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNDAzMDUxNzQ1MjdaFw0yNTAzMDQxNzUwMjdaMDMxMTAvBgNV
BAMTKDgwMzUzRjBCRUU5MjI0QTQ3NDlCM0JBMEYzODVGQUFFMzhCM0QyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtD2H8YXif1gn85w53gpd5U1iP
e1aEg/Fj7jS0UJQKC69RC9/mdNHLBpaoFx427Rt3AarEJSzcJwyC9f/AOKEpOEul
FyfaAlnKdIBNENmeHM3PakcIJJ8yw7Zf2LgZsLYZ6q6RHuMoQKvTzL54s96gTQYE
VB03CNVKRb+5KJOcHrG/dwlMYAgUcjyJS/gXpEdxXCtCISb+RM5HOz4v15foPjFo
ZJ9VZ1Ne1fz62LUkuWedd7SZJqlIrltI5I8MZuvgy3wNVVArb3aROSmNUfC0GOUS
a8mk4gUAQlC2eyiS5Ghp8/WYNtJgegEPViZRL9uhiZoJDuGvZMRM/zvCjT2rAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgDU/C+6SJKR0mzug84X6rjiz0k0wHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMyMzAzMTJlMzIzMTM5MmUzNjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcnbQDAN
BgkqhkiG9w0BAQsFAAOCAQEAPqCAyDFlUAVyyTMV/YbdcMyy6rKMJcy/1DGm3dZ2
5hDmEtmJkwgkEhaIlI88eOps1is9I+hmsmiWH0ui3i0Qo4rzJGarhZVUyi2Jcbgc
dmVpQf5BQUnOrhOiLUENP+f6ifAjgL8FWRJRrZQcdRYVnxbic1sN3iKNDew3F0av
ebzqBrQ8HWUQCrdn7iWMrEBai4s9eLMIBjPER4LpWnC9Mb+/juTRgk4De1rc5S/k
TitGNU+tqbYAcW/DFD1iPdRRXy7ikSFvGdVPBtQa37VL+KBndmWQyHg1mqKXMev5
VFIl6i3w1vpoD/vz/SDYNTSckVMngHbbpAy+WbcMt6sMKg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org