Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e31362e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          A/5aTpra9Mt88mg7yWUDXWTpnBY2pk3P7Z+1oPmmqdI=
Subject key identifier:   77:7F:29:1E:5D:FF:61:C8:FE:48:44:FD:A6:0C:FE:59:3D:A2:2A:CF
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       54091401B8A8612E0A65E5E2D5F3DD4065B4AF67
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:54 +0000
ROA not before:           Tue 05 Mar 2024 18:12:54 +0000
ROA not after:            Tue 04 Mar 2025 18:17:54 +0000
asID:                     32098
IP address blocks:        201.174.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:09:14:01:b8:a8:61:2e:0a:65:e5:e2:d5:f3:dd:40:65:b4:af:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:54 2024 GMT
            Not After : Mar  4 18:17:54 2025 GMT
        Subject: CN=777F291E5DFF61C8FE4844FDA60CFE593DA22ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:0a:e1:77:70:f3:f9:ac:25:3a:b1:f7:df:
                    52:68:7c:9c:53:00:e0:6c:e5:cc:21:4b:df:a2:96:
                    a1:1c:1a:81:56:bd:ef:39:10:62:2a:a3:24:7a:4a:
                    f1:62:de:67:c7:54:22:7b:33:cd:15:8f:b3:64:09:
                    f7:7c:7b:78:3e:63:c5:72:bd:0e:80:21:98:bb:6b:
                    2d:0c:14:21:d5:b6:e7:da:af:ab:8d:54:c0:41:75:
                    a3:3a:ce:53:24:4d:18:16:f4:09:68:4e:0e:03:31:
                    51:25:b3:82:08:51:f0:87:a0:ea:0e:80:5a:25:bd:
                    10:4b:c8:d6:a9:d1:74:6d:e4:8e:f1:9e:1b:99:25:
                    bf:97:c3:12:0c:02:94:9e:58:df:00:24:3d:71:1d:
                    35:99:89:d3:71:2b:bd:5f:69:13:1c:a0:1c:d5:ba:
                    ed:f2:e9:92:8b:23:78:20:1a:c6:e0:c3:54:83:7b:
                    28:ab:3d:4f:e2:69:34:c8:08:6b:93:c1:0e:54:0d:
                    42:98:59:16:25:40:aa:b1:11:fd:88:69:da:29:28:
                    84:5d:df:dd:3f:61:70:ba:e7:24:98:b3:8f:94:3c:
                    70:7b:33:70:71:25:dc:31:31:18:78:22:3c:37:d0:
                    1f:f6:0f:3d:81:65:cc:af:f8:50:83:90:e0:e9:4b:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:29:1E:5D:FF:61:C8:FE:48:44:FD:A6:0C:FE:59:3D:A2:2A:CF
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e31362e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:83:12:ca:c9:97:8b:97:f6:ce:94:2c:a4:3a:b9:a7:dc:f1:
         5e:8a:43:a8:96:ad:e3:24:11:88:e7:2f:41:67:c0:7e:0e:2e:
         db:98:92:06:4f:41:f4:68:a9:99:45:d8:90:24:58:c7:27:f7:
         50:8e:d9:53:38:19:ed:57:30:77:62:25:17:5f:6c:75:76:ea:
         02:cf:b8:cb:63:60:c6:79:84:23:71:20:d1:0a:00:e0:69:9c:
         a4:88:1b:95:ce:7d:c8:dc:71:ed:eb:a9:07:4c:5c:d8:07:58:
         e9:57:19:d7:54:4b:b5:cd:0c:39:30:c0:d8:c0:0b:a9:c9:9f:
         4b:2d:f5:ce:a1:c5:da:b2:74:47:29:f5:c4:90:45:c8:c9:ad:
         31:f1:98:74:07:65:3b:e3:54:79:f1:c8:65:bd:95:02:0c:a9:
         c6:7b:e1:e1:d3:13:7d:d6:1d:d4:dd:e2:67:ec:02:a0:3b:34:
         7c:83:47:5a:b8:3a:30:a3:3d:74:60:76:60:1e:3b:68:6b:f9:
         1b:72:c6:da:ae:60:2d:98:13:48:f1:5a:5e:df:0d:8d:c4:52:
         b7:fc:f0:6b:62:ad:08:f9:9f:78:ee:8b:f0:57:1d:be:ff:ec:
         f9:0e:c3:f6:fd:87:8b:bc:7d:04:b3:7e:81:5f:73:8c:65:9d:
         3b:31:ac:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVAkUAbioYS4KZeXi1fPdQGW0r2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNDAzMDUxODEyNTRaFw0yNTAzMDQxODE3NTRaMDMxMTAvBgNV
BAMTKDc3N0YyOTFFNURGRjYxQzhGRTQ4NDRGREE2MENGRTU5M0RBMjJBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlwrhd3Dz+awlOrH331JofJxT
AOBs5cwhS9+ilqEcGoFWve85EGIqoyR6SvFi3mfHVCJ7M80Vj7NkCfd8e3g+Y8Vy
vQ6AIZi7ay0MFCHVtufar6uNVMBBdaM6zlMkTRgW9AloTg4DMVEls4IIUfCHoOoO
gFolvRBLyNap0XRt5I7xnhuZJb+XwxIMApSeWN8AJD1xHTWZidNxK71faRMcoBzV
uu3y6ZKLI3ggGsbgw1SDeyirPU/iaTTICGuTwQ5UDUKYWRYlQKqxEf2IadopKIRd
390/YXC65ySYs4+UPHB7M3BxJdwxMRh4Ijw30B/2Dz2BZcyv+FCDkODpS9lpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUd38pHl3/Ycj+SET9pgz+WT2iKs8wHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8muEDAN
BgkqhkiG9w0BAQsFAAOCAQEAOYMSysmXi5f2zpQspDq5p9zxXopDqJat4yQRiOcv
QWfAfg4u25iSBk9B9GipmUXYkCRYxyf3UI7ZUzgZ7Vcwd2IlF19sdXbqAs+4y2Ng
xnmEI3Eg0QoA4GmcpIgblc59yNxx7eupB0xc2AdY6VcZ11RLtc0MOTDA2MALqcmf
Sy31zqHF2rJ0Ryn1xJBFyMmtMfGYdAdlO+NUefHIZb2VAgypxnvh4dMTfdYd1N3i
Z+wCoDs0fINHWrg6MKM9dGB2YB47aGv5G3LG2q5gLZgTSPFaXt8NjcRSt/zwa2Kt
CPmfeO6L8Fcdvv/s+Q7D9v2Hi7x9BLN+gV9zjGWdOzGs+A==
-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org