Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          eMCYkZ9QduPcFzMqIzvtORfzeBbE7oWXVlePkE8glko=
Subject key identifier:   5E:94:D7:40:D7:CC:AB:3A:60:01:AE:F4:9C:4B:82:CF:7D:29:91:1E
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       72BB1E622BDA25A88559D86BF867C9145735DCD0
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:58 +0000
ROA not before:           Tue 05 Mar 2024 18:12:58 +0000
ROA not after:            Tue 04 Mar 2025 18:17:58 +0000
asID:                     32098
IP address blocks:        201.174.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:1e:62:2b:da:25:a8:85:59:d8:6b:f8:67:c9:14:57:35:dc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:58 2024 GMT
            Not After : Mar  4 18:17:58 2025 GMT
        Subject: CN=5E94D740D7CCAB3A6001AEF49C4B82CF7D29911E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:55:57:3e:c6:08:3f:b9:53:fb:f9:35:3e:
                    7f:9d:9f:11:cb:7e:14:52:42:a4:24:f7:20:19:78:
                    e3:6a:5f:21:b2:b4:b1:e8:e6:92:f5:03:b6:7d:a1:
                    16:d4:16:57:86:39:19:96:66:91:14:e8:9b:fe:5f:
                    37:bc:55:bc:e5:10:9a:29:a3:bf:83:9c:f5:3d:56:
                    e7:8f:52:81:89:07:66:5a:f7:6e:43:e3:65:07:8b:
                    02:cc:03:38:0e:c9:58:45:c1:d5:b0:9d:35:7e:62:
                    91:30:3e:bf:e8:eb:2e:a6:65:1d:19:f4:d8:33:67:
                    d5:38:94:33:82:a7:34:14:32:e8:1a:89:0a:cb:28:
                    dd:25:e4:84:3d:a6:0e:ab:12:98:92:db:f7:a0:36:
                    e6:4f:76:b5:ae:bb:46:f4:eb:45:ac:15:f0:8c:a0:
                    c0:5c:ac:36:75:dc:96:0a:f9:03:c4:6c:5f:52:87:
                    df:7f:f3:1b:42:bb:0d:50:9c:52:f8:bd:e1:f5:47:
                    6d:23:0b:6a:36:b6:ff:fd:ba:68:58:18:58:12:a3:
                    60:07:c9:c3:a1:cf:80:8b:b8:21:39:29:b1:a2:e8:
                    25:75:c7:d5:12:83:a9:b6:4c:e5:18:35:da:d6:13:
                    36:5c:85:91:28:8f:d2:83:ce:69:50:2e:70:04:09:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:94:D7:40:D7:CC:AB:3A:60:01:AE:F4:9C:4B:82:CF:7D:29:91:1E
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:62:8f:7c:75:64:70:3d:47:73:be:26:5a:30:c6:6c:8a:81:
         d9:6d:b9:04:a0:6e:b8:92:c5:a9:0a:32:fb:af:6e:2d:7f:35:
         e6:ef:88:8b:d2:3a:34:bf:7f:f4:a5:60:e3:5e:d4:2d:10:98:
         b8:cc:64:de:f0:d8:f9:84:77:ce:9f:c8:7b:cd:87:bd:a6:de:
         da:a6:7f:c4:94:81:3b:55:7b:84:77:99:92:11:87:7c:32:40:
         5f:3f:29:2c:a8:5d:8c:97:ff:e6:e9:4e:65:99:d1:f1:a3:07:
         e3:e4:54:93:26:b0:94:f0:c3:41:49:dc:a6:60:cb:92:bc:d8:
         1d:81:c9:0d:93:d1:62:a9:6e:04:8e:5a:ae:fe:78:e8:e6:2d:
         fa:75:80:0c:15:49:1b:4c:78:3c:c1:c5:35:52:4d:db:0b:9b:
         d9:6a:c7:0b:66:37:61:d5:01:78:98:84:0c:72:20:27:35:49:
         80:e6:8e:29:52:db:72:64:f6:10:5c:8b:06:84:a0:fa:59:a3:
         98:6e:6a:b3:99:9a:40:32:0f:c5:67:a4:0a:36:1d:57:19:90:
         1d:eb:d4:d3:9b:c9:96:3a:35:14:b7:00:36:3b:a3:ef:1a:50:
         d7:9e:4d:14:fc:9f:dc:4e:0c:2c:92:38:82:69:3e:87:aa:27:
         4c:ec:93:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcrseYivaJaiFWdhr+GfJFFc13NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNDAzMDUxODEyNThaFw0yNTAzMDQxODE3NThaMDMxMTAvBgNV
BAMTKDVFOTRENzQwRDdDQ0FCM0E2MDAxQUVGNDlDNEI4MkNGN0QyOTkxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCC5lVXPsYIP7lT+/k1Pn+dnxHL
fhRSQqQk9yAZeONqXyGytLHo5pL1A7Z9oRbUFleGORmWZpEU6Jv+Xze8VbzlEJop
o7+DnPU9VuePUoGJB2Za925D42UHiwLMAzgOyVhFwdWwnTV+YpEwPr/o6y6mZR0Z
9NgzZ9U4lDOCpzQUMugaiQrLKN0l5IQ9pg6rEpiS2/egNuZPdrWuu0b060WsFfCM
oMBcrDZ13JYK+QPEbF9Sh99/8xtCuw1QnFL4veH1R20jC2o2tv/9umhYGFgSo2AH
ycOhz4CLuCE5KbGi6CV1x9USg6m2TOUYNdrWEzZchZEoj9KDzmlQLnAECSldAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXpTXQNfMqzpgAa70nEuCz30pkR4wHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMTMwMzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzMyMzAzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBya5m
MA0GCSqGSIb3DQEBCwUAA4IBAQBTYo98dWRwPUdzviZaMMZsioHZbbkEoG64ksWp
CjL7r24tfzXm74iL0jo0v3/0pWDjXtQtEJi4zGTe8Nj5hHfOn8h7zYe9pt7apn/E
lIE7VXuEd5mSEYd8MkBfPyksqF2Ml//m6U5lmdHxowfj5FSTJrCU8MNBSdymYMuS
vNgdgckNk9FiqW4Ejlqu/njo5i36dYAMFUkbTHg8wcU1Uk3bC5vZascLZjdh1QF4
mIQMciAnNUmA5o4pUttyZPYQXIsGhKD6WaOYbmqzmZpAMg/FZ6QKNh1XGZAd69TT
m8mWOjUUtwA2O6PvGlDXnk0U/J/cTgwskjiCaT6HqidM7JN3
-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org