Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          ww0+9pJi9NlhZ5eWXOjSTp8c7U6SdSIvYEElvsw4BbA=
Subject key identifier:   59:63:D6:95:DB:34:1C:C4:07:EB:ED:FC:D9:D1:08:96:FB:77:F1:8C
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7D5F6C1E5943FF276485004640B53652D1755374
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:56 +0000
ROA not before:           Tue 05 Mar 2024 18:12:56 +0000
ROA not after:            Tue 04 Mar 2025 18:17:56 +0000
asID:                     32098
IP address blocks:        201.174.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:6c:1e:59:43:ff:27:64:85:00:46:40:b5:36:52:d1:75:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:56 2024 GMT
            Not After : Mar  4 18:17:56 2025 GMT
        Subject: CN=5963D695DB341CC407EBEDFCD9D10896FB77F18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:ab:1a:c9:60:b6:91:76:45:85:3e:06:2c:
                    76:65:47:bb:eb:60:9d:3f:10:79:67:03:50:9d:3d:
                    50:84:04:8f:3a:2d:38:0d:fa:c1:01:22:93:83:8e:
                    b6:14:35:96:89:4c:98:9b:61:c2:90:19:bc:32:70:
                    c0:00:86:c1:48:e3:86:ea:2e:6d:d8:83:a0:11:e9:
                    6f:97:20:8b:46:7e:61:9e:f1:61:f7:75:0d:03:8c:
                    84:49:4f:59:04:cf:32:ea:c0:1a:c4:23:d5:be:21:
                    ff:6b:22:1d:0f:0a:91:c9:1d:79:57:0e:4b:8e:14:
                    34:d7:f2:bc:1a:bb:22:6c:d0:f0:7a:d0:d6:ca:2f:
                    59:f2:6b:41:f3:3b:e9:57:30:3a:75:35:7b:37:08:
                    1f:34:be:06:89:a6:a7:ed:0c:85:73:df:50:0a:47:
                    84:fd:7c:7d:0c:63:fa:28:83:95:f5:29:6d:b2:e0:
                    ef:4d:05:9c:b7:4a:07:e1:8c:ad:b5:6b:1a:30:c4:
                    e7:f4:90:fc:80:14:e9:dc:a1:9a:61:66:91:93:b7:
                    b3:fd:d0:e4:1c:81:cc:ea:78:36:be:cd:77:6b:9e:
                    23:07:5f:90:78:41:6f:9c:00:d4:f7:31:f9:e0:50:
                    ce:81:08:4d:20:bb:01:7a:9d:1a:81:f7:24:fb:d0:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:D6:95:DB:34:1C:C4:07:EB:ED:FC:D9:D1:08:96:FB:77:F1:8C
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:02:fc:60:a6:80:73:18:90:ed:57:b5:42:61:b3:59:a3:e6:
         a4:08:ce:2b:fd:66:89:3c:12:9b:a7:43:29:8d:93:3f:ef:1f:
         ca:bd:14:de:a4:59:98:84:5d:5f:78:e2:9c:1e:7b:d6:43:15:
         b2:51:33:b8:c0:92:30:e8:b9:01:c4:b3:1c:b6:05:7a:47:bb:
         a8:4a:c5:dc:dc:f0:ab:1c:e4:b9:38:9c:28:65:d0:c4:63:d9:
         1e:cc:d7:54:df:12:20:2d:a2:cb:18:d0:7c:f3:83:37:42:e9:
         ee:2b:0a:c3:b1:33:01:bd:e3:dd:a2:cf:3c:73:50:e3:1d:e7:
         d7:4a:d4:95:fa:ad:c1:16:e6:19:c0:59:49:31:4b:36:5b:70:
         22:2a:e0:a9:fd:bd:c4:ca:58:f3:81:37:f5:26:86:98:a1:8b:
         28:80:b3:0b:ea:80:dc:ba:d2:29:f7:2a:e5:3b:5c:cf:df:d8:
         0f:2b:7a:b8:11:33:d2:ba:a4:ed:7a:ce:e1:a2:50:52:a9:87:
         2f:fe:7f:9c:f6:7c:ba:6a:61:d0:0d:b2:6f:ed:89:04:39:fd:
         d7:46:ca:a5:5f:ae:93:56:c3:b1:4d:26:8a:5d:6f:ba:1e:57:
         ec:6d:63:45:6f:21:89:e1:04:0d:e7:54:8e:a1:87:f4:a7:d6:
         1c:0b:30:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfV9sHllD/ydkhQBGQLU2UtF1U3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNDAzMDUxODEyNTZaFw0yNTAzMDQxODE3NTZaMDMxMTAvBgNV
BAMTKDU5NjNENjk1REIzNDFDQzQwN0VCRURGQ0Q5RDEwODk2RkI3N0YxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZqsayWC2kXZFhT4GLHZlR7vr
YJ0/EHlnA1CdPVCEBI86LTgN+sEBIpODjrYUNZaJTJibYcKQGbwycMAAhsFI44bq
Lm3Yg6AR6W+XIItGfmGe8WH3dQ0DjIRJT1kEzzLqwBrEI9W+If9rIh0PCpHJHXlX
DkuOFDTX8rwauyJs0PB60NbKL1nya0HzO+lXMDp1NXs3CB80vgaJpqftDIVz31AK
R4T9fH0MY/oog5X1KW2y4O9NBZy3SgfhjK21axowxOf0kPyAFOncoZphZpGTt7P9
0OQcgczqeDa+zXdrniMHX5B4QW+cANT3MfngUM6BCE0guwF6nRqB9yT70D0tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWWPWlds0HMQH6+382dEIlvt38YwwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzMyMzAzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCya5s
MA0GCSqGSIb3DQEBCwUAA4IBAQBVAvxgpoBzGJDtV7VCYbNZo+akCM4r/WaJPBKb
p0MpjZM/7x/KvRTepFmYhF1feOKcHnvWQxWyUTO4wJIw6LkBxLMctgV6R7uoSsXc
3PCrHOS5OJwoZdDEY9kezNdU3xIgLaLLGNB884M3QunuKwrDsTMBvePdos88c1Dj
HefXStSV+q3BFuYZwFlJMUs2W3AiKuCp/b3EyljzgTf1JoaYoYsogLML6oDcutIp
9yrlO1zP39gPK3q4ETPSuqTtes7holBSqYcv/n+c9ny6amHQDbJv7YkEOf3XRsql
X66TVsOxTSaKXW+6HlfsbWNFbyGJ4QQN51SOoYf0p9YcCzAl
-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org