Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232352e302f32342d3234203d3e203238343135.roa
File:                     3138392e3230312e3232352e302f32342d3234203d3e203238343135.roa (raw, json)
Hash identifier:          1H7ycsGIHUFTb9OYeX+rqVPkOH0LW6cQO1BAvh24/FU=
Subject key identifier:   BB:A8:C6:AC:15:A3:74:33:CE:6F:A8:6B:F3:56:07:1D:F2:B2:F4:79
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       508812E3E31763AEA00D928F8E451E0C0DDA09D6
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232352e302f32342d3234203d3e203238343135.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     28415
IP address blocks:        189.201.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:88:12:e3:e3:17:63:ae:a0:0d:92:8f:8e:45:1e:0c:0d:da:09:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=BBA8C6AC15A37433CE6FA86BF356071DF2B2F479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:27:1c:08:83:80:0a:09:c3:ef:f7:9b:2e:
                    05:5d:6b:e3:79:86:6e:b0:72:cb:ba:e6:2b:0d:70:
                    e5:d2:d9:fc:e5:5e:98:57:ec:02:5d:60:ed:f2:67:
                    f2:34:d3:69:c8:98:ef:50:f5:a4:bb:f0:17:ec:85:
                    57:0b:6e:2f:f9:24:48:e6:47:47:a7:39:43:f6:52:
                    de:ba:be:e3:73:51:fd:5c:2f:74:05:a0:1c:75:0d:
                    b7:e9:80:d1:e4:28:06:61:fc:67:b4:2d:94:d9:ff:
                    af:bb:cf:77:f1:af:c3:d8:8f:42:77:da:ac:cc:ad:
                    63:a2:0d:47:e0:a5:33:17:94:7e:18:24:85:ec:36:
                    e1:41:5a:f4:45:54:87:18:73:cf:04:f3:52:20:dd:
                    36:7f:10:60:19:3c:01:35:a6:10:34:67:3a:65:2a:
                    d2:1e:94:40:66:7e:f1:e7:0c:00:61:8c:4d:0b:f1:
                    11:00:f5:11:a4:8e:f1:7c:a9:3a:08:6c:83:53:68:
                    c9:ee:b4:50:e4:97:a9:82:43:24:a9:ce:58:5f:48:
                    2d:e3:03:70:af:27:3c:12:0a:c2:85:08:76:0d:e6:
                    75:00:3b:0c:50:ff:a4:31:7a:80:e8:59:a0:8a:bf:
                    d0:bc:88:4f:9c:b3:f0:e8:9a:5f:25:ee:c9:b0:1b:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:C6:AC:15:A3:74:33:CE:6F:A8:6B:F3:56:07:1D:F2:B2:F4:79
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232352e302f32342d3234203d3e203238343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:52:53:01:39:96:a4:03:9e:f6:d7:91:12:f8:9f:87:3b:
         53:8b:35:94:40:2d:5b:c0:cc:a5:48:ad:c3:7e:7a:f8:1a:60:
         96:ef:f5:72:ac:2b:4b:b5:2d:18:87:52:ac:34:a5:4a:fc:e2:
         08:5e:32:13:7d:03:5f:2b:ec:89:da:d3:94:68:88:2e:7e:4b:
         82:ca:02:6a:6e:3c:7f:d8:2a:92:2d:10:80:cc:19:2d:39:16:
         53:40:d7:44:cf:71:bf:d4:1d:1a:92:8d:cb:d7:0d:97:0a:dd:
         66:6e:f0:4f:69:4d:6c:e8:a3:30:59:ca:57:52:cc:a4:15:12:
         d6:cb:ea:98:e1:2b:23:e3:19:68:de:19:5d:49:69:94:2e:d1:
         8c:12:d0:23:82:a9:90:af:ee:d4:8d:22:ef:9e:89:fe:04:63:
         ea:dd:1f:49:99:d7:58:a2:c1:cd:26:65:03:31:5a:b8:b4:ce:
         bc:92:68:ab:29:66:38:69:2d:5c:e9:55:65:bb:1c:3f:5c:6f:
         bb:6f:4d:65:18:1e:90:96:4e:b5:ea:75:5f:94:6d:4e:ff:15:
         b0:0b:8e:c9:50:9b:de:c4:d4:34:27:30:73:7f:8e:2c:07:6f:
         48:b2:8b:6c:b6:9f:bf:d2:e0:02:67:d2:d4:69:7d:f4:1d:ef:
         4c:bf:38:04
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUIgS4+MXY66gDZKPjkUeDA3aCdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCNDA3ODVFM0EyNDBBMjU3NTAwQzFFQUM5NDlBMjYx
MDNBODIxMDAeFw0yNDAzMDUxODExMjNaFw0yNTAzMDQxODE2MjNaMDMxMTAvBgNV
BAMTKEJCQThDNkFDMTVBMzc0MzNDRTZGQTg2QkYzNTYwNzFERjJCMkY0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBSccCIOACgnD7/ebLgVda+N5
hm6wcsu65isNcOXS2fzlXphX7AJdYO3yZ/I002nImO9Q9aS78BfshVcLbi/5JEjm
R0enOUP2Ut66vuNzUf1cL3QFoBx1DbfpgNHkKAZh/Ge0LZTZ/6+7z3fxr8PYj0J3
2qzMrWOiDUfgpTMXlH4YJIXsNuFBWvRFVIcYc88E81Ig3TZ/EGAZPAE1phA0Zzpl
KtIelEBmfvHnDABhjE0L8REA9RGkjvF8qToIbINTaMnutFDkl6mCQySpzlhfSC3j
A3CvJzwSCsKFCHYN5nUAOwxQ/6QxeoDoWaCKv9C8iE+cs/Doml8l7smwG1QfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUu6jGrBWjdDPOb6hr81YHHfKy9HkwHwYDVR0j
BBgwFoAUwrQHheOiQKJXUAwerJSaJhA6ghAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzA0RDVDQTA3RDNDQzY3NUM3NjAzNkE5NEQ3NkRFQ0U1
MzRCMjExMjEwQjBDQjlFQUEyRTkwNENEMkY3RTFFLzAvQzJCNDA3ODVFM0EyNDBB
MjU3NTAwQzFFQUM5NDlBMjYxMDNBODIxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI0MDc4NUUzQTI0MEEyNTc1
MDBDMUVBQzk0OUEyNjEwM0E4MjEwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTMwNEQ1Q0EwN0QzQ0M2NzVDNzYwMzZBOTRENzZERUNFNTM0QjIxMTIx
MEIwQ0I5RUFBMkU5MDRDRDJGN0UxRS8wLzMxMzgzOTJlMzIzMDMxMmUzMjMyMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvcnh
MA0GCSqGSIb3DQEBCwUAA4IBAQCMHFJTATmWpAOe9teREvifhztTizWUQC1bwMyl
SK3Dfnr4GmCW7/VyrCtLtS0Yh1KsNKVK/OIIXjITfQNfK+yJ2tOUaIgufkuCygJq
bjx/2CqSLRCAzBktORZTQNdEz3G/1B0ako3L1w2XCt1mbvBPaU1s6KMwWcpXUsyk
FRLWy+qY4Ssj4xlo3hldSWmULtGMEtAjgqmQr+7UjSLvnon+BGPq3R9JmddYosHN
JmUDMVq4tM68kmirKWY4aS1c6VVluxw/XG+7b01lGB6Qlk616nVflG1O/xWwC47J
UJvexNQ0JzBzf44sB29Isotstp+/0uACZ9LUaX30He9MvzgE
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org