Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
File:                     3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa (raw, json)
Hash identifier:          J2QByCKfk+mHcotM/JJoRIIGcCaV+VbBoKt/Cpuk87U=
Subject key identifier:   2B:B8:4E:28:51:7B:F8:79:11:EE:32:34:10:A8:2D:59:B8:66:9E:25
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       5BC3CBBAEE7A3ACD06842E75F88CB4F6779340F2
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     19905
IP address blocks:        132.251.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c3:cb:ba:ee:7a:3a:cd:06:84:2e:75:f8:8c:b4:f6:77:93:40:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=2BB84E28517BF87911EE323410A82D59B8669E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:da:3c:27:4b:02:5a:2c:61:77:88:fa:83:
                    4f:0b:e8:73:3a:16:03:85:35:68:ec:ab:22:e9:71:
                    c5:ba:5e:09:65:32:ce:a8:36:90:ab:fb:73:eb:fa:
                    7d:81:fa:39:c4:35:d8:19:c8:26:48:bf:16:39:89:
                    01:d8:dc:ef:36:33:1a:f9:db:a6:ed:4a:69:0d:43:
                    e6:8d:bd:5a:c6:82:15:e1:1d:a8:56:9c:1f:2d:b7:
                    71:8a:95:56:d3:68:04:94:48:3f:ef:37:04:37:ef:
                    63:ff:6c:2a:bc:17:31:54:ac:9c:9a:c4:9a:59:fc:
                    ed:27:14:0c:d2:c1:e1:28:80:12:16:da:3f:5d:0e:
                    fb:b1:4d:ff:b8:3a:9a:de:f7:48:d5:74:eb:42:9c:
                    06:7b:fe:07:dc:d2:c5:df:c4:21:56:ac:31:35:e0:
                    eb:83:5e:99:a1:d1:e9:8d:e9:7a:e8:4f:de:1e:4f:
                    9a:4e:34:18:e1:44:b7:e0:d3:1b:08:86:9d:37:60:
                    8c:c9:62:02:e5:c5:30:a7:b7:1b:57:00:d9:c8:e1:
                    17:eb:6a:08:e3:8c:bd:79:75:34:9d:e7:ef:f2:67:
                    c5:57:05:ac:2c:20:ad:c5:99:df:03:8d:58:47:98:
                    d9:59:4d:cc:e6:8f:7b:d6:38:f9:ac:de:ea:a6:90:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:4E:28:51:7B:F8:79:11:EE:32:34:10:A8:2D:59:B8:66:9E:25
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:73:9d:04:04:45:2a:d6:63:f0:1c:93:89:4e:f1:98:ec:94:
         34:31:9d:9b:a1:9e:de:d8:0d:f3:cd:26:9a:d0:fe:0e:88:25:
         1b:0b:b2:9d:57:66:f5:69:f5:b7:da:66:d6:b8:7e:60:d1:3a:
         26:ca:ce:8c:1d:41:c6:3e:53:d2:bd:28:a4:72:71:10:2e:18:
         f2:23:3d:d6:c0:55:06:70:0b:23:bf:d2:93:02:3b:e5:7d:f6:
         09:79:a3:65:3a:aa:0b:24:2d:b2:ce:1c:cb:8c:0b:52:cd:f5:
         2e:24:69:55:3f:28:30:75:e8:a7:4b:bb:c5:a2:b8:b1:1c:62:
         ae:d0:9d:88:f0:a1:a2:43:05:7e:45:66:bc:3a:7d:9a:eb:b8:
         97:19:b3:8e:89:3b:48:3f:41:59:0d:b5:e5:95:da:af:e5:e5:
         30:97:a9:28:bb:a2:74:56:9a:28:6e:05:a0:a7:e9:c1:5a:d4:
         18:88:5f:7d:59:eb:e4:69:6f:d3:18:22:41:17:0c:64:09:da:
         b0:31:6d:f7:05:5d:d4:04:e5:7e:ca:11:fd:fe:86:ab:a9:e0:
         40:bd:16:2d:1f:da:43:29:22:28:75:62:05:7b:39:b3:30:c1:
         46:d3:db:19:84:bd:4d:fb:7a:e5:33:30:c1:29:c8:fe:d1:9a:
         71:71:f4:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUW8PLuu56Os0GhC51+Iy09neTQPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNDAzMDUxNzUxNDNaFw0yNTAzMDQxNzU2NDNaMDMxMTAvBgNV
BAMTKDJCQjg0RTI4NTE3QkY4NzkxMUVFMzIzNDEwQTgyRDU5Qjg2NjlFMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeANo8J0sCWixhd4j6g08L6HM6
FgOFNWjsqyLpccW6XgllMs6oNpCr+3Pr+n2B+jnENdgZyCZIvxY5iQHY3O82Mxr5
26btSmkNQ+aNvVrGghXhHahWnB8tt3GKlVbTaASUSD/vNwQ372P/bCq8FzFUrJya
xJpZ/O0nFAzSweEogBIW2j9dDvuxTf+4Opre90jVdOtCnAZ7/gfc0sXfxCFWrDE1
4OuDXpmh0emN6XroT94eT5pONBjhRLfg0xsIhp03YIzJYgLlxTCntxtXANnI4Rfr
agjjjL15dTSd5+/yZ8VXBawsIK3Fmd8DjVhHmNlZTczmj3vWOPms3uqmkMJHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUK7hOKFF7+HkR7jI0EKgtWbhmniUwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhPuA
MA0GCSqGSIb3DQEBCwUAA4IBAQAYc50EBEUq1mPwHJOJTvGY7JQ0MZ2boZ7e2A3z
zSaa0P4OiCUbC7KdV2b1afW32mbWuH5g0Tomys6MHUHGPlPSvSikcnEQLhjyIz3W
wFUGcAsjv9KTAjvlffYJeaNlOqoLJC2yzhzLjAtSzfUuJGlVPygwdeinS7vForix
HGKu0J2I8KGiQwV+RWa8On2a67iXGbOOiTtIP0FZDbXlldqv5eUwl6kou6J0Vpoo
bgWgp+nBWtQYiF99WevkaW/TGCJBFwxkCdqwMW33BV3UBOV+yhH9/oarqeBAvRYt
H9pDKSIodWIFezmzMMFG09sZhL1N+3rlMzDBKcj+0ZpxcfS7
-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org