Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
File:                     3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          gwFnDh42jkMGJqQjyxxt1mW1wSXZprhrzRlROkFry2s=
Subject key identifier:   A4:B6:15:3B:98:AB:9F:EB:32:8B:35:66:E6:83:BF:86:15:AF:9A:87
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       06D8885152B341097F4C8F415FAC1512176566F9
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:46 +0000
ROA not before:           Tue 05 Mar 2024 17:51:46 +0000
ROA not after:            Tue 04 Mar 2025 17:56:46 +0000
asID:                     19905
IP address blocks:        201.131.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d8:88:51:52:b3:41:09:7f:4c:8f:41:5f:ac:15:12:17:65:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:46 2024 GMT
            Not After : Mar  4 17:56:46 2025 GMT
        Subject: CN=A4B6153B98AB9FEB328B3566E683BF8615AF9A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:a6:0b:d1:8c:c5:52:23:c3:bb:84:56:c5:
                    7d:9b:15:8a:16:36:b6:ac:c7:e4:b6:d5:05:5d:29:
                    e0:00:4b:95:45:62:d2:c4:31:18:72:65:6e:2d:b7:
                    5f:5c:a4:8a:75:2e:19:66:9e:43:39:2c:4e:f7:ef:
                    e8:64:76:ba:30:04:50:69:37:d2:35:10:ab:30:ea:
                    59:e7:d3:65:92:71:12:64:d0:ef:d7:1b:37:e5:b0:
                    95:cf:5b:c0:ef:0b:c2:40:13:29:09:78:2b:19:0d:
                    de:38:67:d0:4b:09:a2:35:9d:a3:f1:d3:6c:6c:7e:
                    17:dd:de:8b:ee:9e:9e:a2:55:d2:29:61:85:23:ab:
                    32:3d:a6:fe:75:67:6d:a2:9f:ab:67:40:5f:63:d1:
                    3e:b4:54:3e:f3:55:e5:85:a7:f5:fb:3c:be:79:7b:
                    7c:40:f3:46:6b:10:11:00:cb:c0:64:49:d7:29:71:
                    e2:54:2b:27:63:71:f2:48:96:4b:85:8e:d9:38:38:
                    4e:ec:23:44:a1:f3:d0:66:3b:1a:7e:e6:c3:15:6d:
                    e7:0f:cd:ae:aa:e3:75:5b:ab:fa:51:3f:21:a4:ba:
                    32:f6:f3:05:00:e9:00:8d:2f:63:4a:a4:d5:30:22:
                    92:8c:56:60:0c:9e:c0:4a:cb:8e:57:57:cc:40:2a:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:15:3B:98:AB:9F:EB:32:8B:35:66:E6:83:BF:86:15:AF:9A:87
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:47:49:2c:90:87:eb:70:8b:ad:87:3a:a4:30:39:93:4b:c3:
         ba:bd:30:6f:ea:b0:db:59:93:38:77:7b:b2:2a:e1:61:0f:92:
         d9:83:5b:7c:ec:a3:51:bb:06:c9:cf:8c:f2:cf:d7:84:3c:e5:
         47:f5:86:39:09:af:3e:57:97:0a:7c:23:fa:09:a9:f6:df:4f:
         a4:0b:28:77:d2:9b:49:28:9d:8d:21:3e:4a:88:44:e0:5a:ea:
         74:6c:e7:79:f1:26:0a:99:57:60:8e:53:1f:6b:dc:15:68:84:
         20:52:80:6e:e6:98:af:fd:53:2e:d4:30:f1:2b:18:83:ee:fb:
         0e:42:9f:a0:5e:98:0a:14:09:0d:55:b5:c0:2e:0e:d1:b7:00:
         25:9e:52:cf:06:3a:dd:e8:be:54:46:0e:e6:e5:8c:7b:c3:a7:
         0e:25:7f:a1:a4:77:92:63:2f:f9:b0:7f:2f:9d:28:82:ed:dd:
         56:fd:18:40:43:49:35:ec:b0:23:e9:4b:fe:77:a8:b3:07:8d:
         32:bd:ae:f7:65:37:00:7a:5a:4c:8c:a7:dc:1b:6d:51:69:d8:
         73:4c:99:a9:19:f2:51:52:8f:19:18:5d:67:6b:57:bd:20:6d:
         8f:f9:08:92:cf:aa:e9:31:eb:ca:ea:86:43:5f:e5:c8:02:e0:
         0d:e3:fa:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBtiIUVKzQQl/TI9BX6wVEhdlZvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNDAzMDUxNzUxNDZaFw0yNTAzMDQxNzU2NDZaMDMxMTAvBgNV
BAMTKEE0QjYxNTNCOThBQjlGRUIzMjhCMzU2NkU2ODNCRjg2MTVBRjlBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4KYL0YzFUiPDu4RWxX2bFYoW
Nrasx+S21QVdKeAAS5VFYtLEMRhyZW4tt19cpIp1LhlmnkM5LE737+hkdrowBFBp
N9I1EKsw6lnn02WScRJk0O/XGzflsJXPW8DvC8JAEykJeCsZDd44Z9BLCaI1naPx
02xsfhfd3ovunp6iVdIpYYUjqzI9pv51Z22in6tnQF9j0T60VD7zVeWFp/X7PL55
e3xA80ZrEBEAy8BkSdcpceJUKydjcfJIlkuFjtk4OE7sI0Sh89BmOxp+5sMVbecP
za6q43Vbq/pRPyGkujL28wUA6QCNL2NKpNUwIpKMVmAMnsBKy45XV8xAKoJlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpLYVO5irn+syizVm5oO/hhWvmocwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzMTJlMzEzMzMxMmUzMTMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYN5
MA0GCSqGSIb3DQEBCwUAA4IBAQBYR0kskIfrcIuthzqkMDmTS8O6vTBv6rDbWZM4
d3uyKuFhD5LZg1t87KNRuwbJz4zyz9eEPOVH9YY5Ca8+V5cKfCP6Can230+kCyh3
0ptJKJ2NIT5KiETgWup0bOd58SYKmVdgjlMfa9wVaIQgUoBu5piv/VMu1DDxKxiD
7vsOQp+gXpgKFAkNVbXALg7RtwAlnlLPBjrd6L5URg7m5Yx7w6cOJX+hpHeSYy/5
sH8vnSiC7d1W/RhAQ0k17LAj6Uv+d6izB40yva73ZTcAelpMjKfcG21RadhzTJmp
GfJRUo8ZGF1na1e9IG2P+QiSz6rpMevK6oZDX+XIAuAN4/r3
-----END CERTIFICATE-----
Generated at Thu May 2 17:40:16 2024 by rpki-client on console-fra.rpki-client.org