Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203231353735.roa
File:                     3133322e3135372e302e302f31362d3234203d3e203231353735.roa (raw, json)
Hash identifier:          OTqvZboK4r4HDjomfMxGiCtxJPkAj8tT6W+urOj5jWo=
Subject key identifier:   C5:2E:40:85:2C:0C:65:F3:92:24:79:93:C4:6B:DA:6E:1D:73:30:BC
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       65D31506CD0D2CDF681965CE957E790BCD426A53
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     21575
IP address blocks:        132.157.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d3:15:06:cd:0d:2c:df:68:19:65:ce:95:7e:79:0b:cd:42:6a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=C52E40852C0C65F392247993C46BDA6E1D7330BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:be:f8:b4:6a:c3:52:84:fa:fb:22:98:34:
                    da:23:0c:dc:8b:9b:93:63:b1:60:f2:28:f4:d6:39:
                    f2:9a:84:60:9f:ed:b3:f4:44:fd:f1:8e:b5:1e:2b:
                    49:48:a0:0d:a8:41:c2:5f:70:17:05:1c:a0:80:c8:
                    9a:d7:bc:7f:70:f2:00:01:40:05:3b:c1:31:c8:f9:
                    59:c7:9b:83:96:ea:21:0a:95:72:2e:e3:2b:9a:5e:
                    1b:9e:5f:1c:98:dd:bf:0b:81:1f:c4:ec:d6:82:0d:
                    28:b2:48:c1:a0:f7:8a:f6:10:fc:7a:40:26:cf:4d:
                    de:43:62:5e:42:1a:c4:95:ef:ea:9b:e5:2d:da:c1:
                    3a:8b:f8:8d:28:a1:aa:e0:f3:c2:6d:6b:97:fe:c8:
                    1f:65:d7:96:cf:30:aa:c4:a6:68:e3:56:ed:37:6c:
                    98:5a:5f:49:7c:16:d0:95:15:09:be:b3:da:c6:1f:
                    a8:ba:04:1d:d9:90:7e:4a:c2:96:c8:d5:2d:56:ba:
                    c2:c5:03:ec:84:df:93:89:cc:00:e1:7c:aa:1a:e7:
                    8f:c5:46:bc:46:df:ec:a2:75:f5:b3:e2:70:b5:ec:
                    5a:1c:64:78:5b:d2:bd:cf:70:03:9d:6e:18:07:7b:
                    95:21:bf:e8:53:bc:f2:f5:0d:8e:ab:90:f1:cc:e3:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:40:85:2C:0C:65:F3:92:24:79:93:C4:6B:DA:6E:1D:73:30:BC
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:a6:5b:67:53:dd:c4:68:b9:8b:72:18:bb:8b:c2:13:15:
         4a:88:1e:bd:45:fd:cc:aa:b7:73:0c:e5:e6:b9:0b:70:d1:3a:
         67:85:0f:ea:a7:e3:68:35:5c:7a:fe:2f:b4:5b:45:43:62:1f:
         34:2c:eb:d3:4e:42:3b:ea:f9:91:3f:b5:92:88:21:41:7a:1f:
         c0:84:4f:30:f9:89:0c:f8:2b:9a:71:ab:fc:0a:58:1c:d9:97:
         40:d7:d2:6d:96:5f:5f:ba:4b:3c:f0:d0:96:89:dd:c1:24:1a:
         89:95:89:b7:e7:d3:b6:31:84:3b:45:ac:0d:dc:5a:52:89:a8:
         89:0f:05:32:2b:0f:cc:ce:d6:06:e5:08:5c:66:fe:cb:b2:91:
         17:f0:d1:58:da:d8:fa:89:d1:78:d8:84:6a:cc:4d:06:50:cd:
         a5:59:9e:34:70:98:e8:fd:ed:cd:57:e2:3a:0b:cb:53:52:55:
         e0:e1:bb:d1:a1:36:b0:7c:16:5e:b6:60:bd:b9:c2:e1:96:6c:
         18:ef:1f:65:63:9f:8a:6d:e2:e3:5a:e2:e6:81:e8:2c:ac:ef:
         71:0e:f5:75:d1:e9:d2:de:32:87:12:1e:33:2c:1d:53:b2:16:
         4e:25:65:6f:fe:1b:01:ad:d4:d1:2f:a1:e1:c5:3e:a2:f8:24:
         31:f7:9a:2d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZdMVBs0NLN9oGWXOlX55C81CalMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNDAzMDUxNzUxNDBaFw0yNTAzMDQxNzU2NDBaMDMxMTAvBgNV
BAMTKEM1MkU0MDg1MkMwQzY1RjM5MjI0Nzk5M0M0NkJEQTZFMUQ3MzMwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0L74tGrDUoT6+yKYNNojDNyL
m5NjsWDyKPTWOfKahGCf7bP0RP3xjrUeK0lIoA2oQcJfcBcFHKCAyJrXvH9w8gAB
QAU7wTHI+VnHm4OW6iEKlXIu4yuaXhueXxyY3b8LgR/E7NaCDSiySMGg94r2EPx6
QCbPTd5DYl5CGsSV7+qb5S3awTqL+I0ooarg88Jta5f+yB9l15bPMKrEpmjjVu03
bJhaX0l8FtCVFQm+s9rGH6i6BB3ZkH5KwpbI1S1WusLFA+yE35OJzADhfKoa54/F
RrxG3+yidfWz4nC17FocZHhb0r3PcAOdbhgHe5Uhv+hTvPL1DY6rkPHM4+CFAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUxS5AhSwMZfOSJHmTxGvabh1zMLwwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzEzNTM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCEnTANBgkq
hkiG9w0BAQsFAAOCAQEAdbmmW2dT3cRouYtyGLuLwhMVSogevUX9zKq3cwzl5rkL
cNE6Z4UP6qfjaDVcev4vtFtFQ2IfNCzr005CO+r5kT+1koghQXofwIRPMPmJDPgr
mnGr/ApYHNmXQNfSbZZfX7pLPPDQlondwSQaiZWJt+fTtjGEO0WsDdxaUomoiQ8F
MisPzM7WBuUIXGb+y7KRF/DRWNrY+onReNiEasxNBlDNpVmeNHCY6P3tzVfiOgvL
U1JV4OG70aE2sHwWXrZgvbnC4ZZsGO8fZWOfim3i41ri5oHoLKzvcQ71ddHp0t4y
hxIeMywdU7IWTiVlb/4bAa3U0S+h4cU+ovgkMfeaLQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org