Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232342e302f32342d3234203d3e203238343135.roa
File:                     3138392e3230312e3232342e302f32342d3234203d3e203238343135.roa (raw, json)
Hash identifier:          oqGrciw70AMALapb3mPeKduxwpqvfNUO6ydwsAc0HH0=
Subject key identifier:   B6:F4:EA:F2:38:73:57:A2:F2:A2:50:DC:F4:0E:FE:53:4A:B8:9C:46
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       43495B20573C1DD19900BBC897619A94F7C3D725
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232342e302f32342d3234203d3e203238343135.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     28415
IP address blocks:        189.201.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:5b:20:57:3c:1d:d1:99:00:bb:c8:97:61:9a:94:f7:c3:d7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=B6F4EAF2387357A2F2A250DCF40EFE534AB89C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:ff:e9:b6:3d:24:d2:2f:23:22:62:6c:fc:
                    7f:28:cf:ad:19:60:c8:e0:c9:eb:4e:b0:63:10:b2:
                    23:4c:4c:f1:7e:e8:9f:9c:44:cf:52:28:3f:bd:cf:
                    fc:08:99:c7:af:04:e0:a9:61:1d:b9:2e:09:45:56:
                    a4:f0:3b:ef:3f:94:da:e7:7e:34:3b:f1:03:30:ef:
                    45:3e:49:88:06:1c:87:37:92:76:5b:22:68:ff:ee:
                    be:f6:c9:cf:03:b7:2f:0f:61:21:03:ec:c4:65:09:
                    a0:33:4c:ff:eb:02:f5:d4:c2:6e:90:87:1e:6e:25:
                    1d:54:75:e0:bf:b0:ed:43:85:43:2b:f8:cc:51:e3:
                    99:95:24:a6:59:8c:68:e5:fa:7a:2a:ec:ec:9b:dc:
                    e3:af:90:56:f3:17:43:b4:84:59:89:54:74:d5:2e:
                    e1:8f:1f:a7:c6:93:0e:b6:da:f0:5e:c6:61:c6:58:
                    1e:69:bb:0a:33:52:99:53:7d:d0:1a:0a:73:4e:da:
                    d7:28:66:03:c6:96:f0:f6:4c:8a:38:dd:dd:f8:32:
                    07:cd:e7:d7:35:96:79:0b:66:00:be:0b:29:fb:57:
                    42:69:8f:24:81:41:79:79:51:8e:38:b3:58:db:1c:
                    64:db:a0:fc:19:8b:a8:ca:21:7a:01:4f:c5:42:fe:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:EA:F2:38:73:57:A2:F2:A2:50:DC:F4:0E:FE:53:4A:B8:9C:46
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232342e302f32342d3234203d3e203238343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:83:b4:f7:ba:77:01:af:3f:47:28:89:08:7e:f4:df:6e:
         8e:b4:47:72:2a:f0:80:2e:64:be:00:94:63:64:b2:27:ff:f1:
         46:a2:d6:3a:8b:6e:2a:fc:f2:1f:de:42:80:6d:65:89:4f:96:
         03:67:3f:3e:35:40:e3:73:f8:d3:37:b3:87:c6:71:2d:bf:59:
         e7:e7:9d:32:9b:02:7e:ab:73:57:de:1b:71:e3:3c:1e:ee:00:
         ce:f7:01:e0:52:ed:85:43:b7:84:67:a3:cd:11:b4:24:49:2e:
         63:ad:8a:c6:6f:d8:0c:fe:c2:6f:8c:82:fc:c7:9a:e4:24:0b:
         56:0a:ab:e1:ae:21:5f:13:a8:08:23:06:b3:99:bb:aa:4e:bf:
         36:c4:9a:cd:b0:88:dc:53:52:44:24:45:c9:de:f5:28:6f:67:
         b3:f1:5f:d6:7e:04:78:a9:2a:2b:c2:8a:72:37:a1:85:4e:5a:
         ed:50:3f:e5:ae:a4:3b:01:ce:5e:b4:51:83:7e:77:4d:0d:c9:
         e8:24:57:cd:3c:2a:11:6b:e3:e9:65:aa:bd:b0:e2:ac:35:76:
         82:32:ac:a8:71:e1:93:d5:7a:13:77:38:3f:cb:18:93:7d:7a:
         b5:e2:f9:78:4d:1c:6f:04:f4:bf:1f:d1:98:00:b7:97:fc:e7:
         a0:10:97:cb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ0lbIFc8HdGZALvIl2GalPfD1yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCNDA3ODVFM0EyNDBBMjU3NTAwQzFFQUM5NDlBMjYx
MDNBODIxMDAeFw0yNDAzMDUxODExMjNaFw0yNTAzMDQxODE2MjNaMDMxMTAvBgNV
BAMTKEI2RjRFQUYyMzg3MzU3QTJGMkEyNTBEQ0Y0MEVGRTUzNEFCODlDNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFv/ptj0k0i8jImJs/H8oz60Z
YMjgyetOsGMQsiNMTPF+6J+cRM9SKD+9z/wImcevBOCpYR25LglFVqTwO+8/lNrn
fjQ78QMw70U+SYgGHIc3knZbImj/7r72yc8Dty8PYSED7MRlCaAzTP/rAvXUwm6Q
hx5uJR1UdeC/sO1DhUMr+MxR45mVJKZZjGjl+noq7Oyb3OOvkFbzF0O0hFmJVHTV
LuGPH6fGkw622vBexmHGWB5puwozUplTfdAaCnNO2tcoZgPGlvD2TIo43d34MgfN
59c1lnkLZgC+Cyn7V0JpjySBQXl5UY44s1jbHGTboPwZi6jKIXoBT8VC/sO5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtvTq8jhzV6LyolDc9A7+U0q4nEYwHwYDVR0j
BBgwFoAUwrQHheOiQKJXUAwerJSaJhA6ghAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzA0RDVDQTA3RDNDQzY3NUM3NjAzNkE5NEQ3NkRFQ0U1
MzRCMjExMjEwQjBDQjlFQUEyRTkwNENEMkY3RTFFLzAvQzJCNDA3ODVFM0EyNDBB
MjU3NTAwQzFFQUM5NDlBMjYxMDNBODIxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI0MDc4NUUzQTI0MEEyNTc1
MDBDMUVBQzk0OUEyNjEwM0E4MjEwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTMwNEQ1Q0EwN0QzQ0M2NzVDNzYwMzZBOTRENzZERUNFNTM0QjIxMTIx
MEIwQ0I5RUFBMkU5MDRDRDJGN0UxRS8wLzMxMzgzOTJlMzIzMDMxMmUzMjMyMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvcng
MA0GCSqGSIb3DQEBCwUAA4IBAQCal4O097p3Aa8/RyiJCH70326OtEdyKvCALmS+
AJRjZLIn//FGotY6i24q/PIf3kKAbWWJT5YDZz8+NUDjc/jTN7OHxnEtv1nn550y
mwJ+q3NX3htx4zwe7gDO9wHgUu2FQ7eEZ6PNEbQkSS5jrYrGb9gM/sJvjIL8x5rk
JAtWCqvhriFfE6gIIwazmbuqTr82xJrNsIjcU1JEJEXJ3vUob2ez8V/WfgR4qSor
wopyN6GFTlrtUD/lrqQ7Ac5etFGDfndNDcnoJFfNPCoRa+PpZaq9sOKsNXaCMqyo
ceGT1XoTdzg/yxiTfXq14vl4TRxvBPS/H9GYALeX/OegEJfL
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:21 2024 by rpki-client on console-ams.rpki-client.org