Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
File:                     3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          WT+ujFMWfRjzV3fjud5fQWUJhgbRsth7qym7eOYwGtU=
Subject key identifier:   D7:45:A0:8F:52:C2:1F:83:97:82:55:1D:11:92:0F:88:FD:AD:79:5F
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       3A5500B38C27C7FDE48748AB6BBA75D141FE06D7
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:27 +0000
ROA not before:           Tue 05 Mar 2024 17:39:27 +0000
ROA not after:            Tue 04 Mar 2025 17:44:27 +0000
asID:                     52328
IP address blocks:        201.159.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:55:00:b3:8c:27:c7:fd:e4:87:48:ab:6b:ba:75:d1:41:fe:06:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:27 2024 GMT
            Not After : Mar  4 17:44:27 2025 GMT
        Subject: CN=D745A08F52C21F839782551D11920F88FDAD795F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:7a:de:5b:83:fd:4e:1a:31:10:27:43:96:
                    29:e3:2f:57:89:8e:70:4b:1f:06:c8:15:b7:23:c1:
                    f3:94:a8:eb:97:c9:3a:aa:99:66:f9:b6:ac:8d:33:
                    27:28:e5:5c:65:20:dd:62:26:33:fa:fb:88:b2:af:
                    00:52:cc:6b:51:26:38:23:3a:e1:f8:46:f2:84:93:
                    2c:f0:bc:c8:95:60:8f:6f:18:51:5e:f9:ee:fd:95:
                    c7:7b:a6:bf:c0:22:ab:33:cb:62:e6:c0:1c:03:fa:
                    e4:ac:85:f3:c2:2f:d5:e2:9b:be:9e:ed:68:d8:a5:
                    a0:61:d9:96:23:b0:a8:82:d7:47:f0:31:cf:f4:cd:
                    c5:25:1a:94:ca:d7:72:2d:ca:c3:7c:2f:bc:b2:45:
                    df:52:b5:2d:42:5d:32:e3:2a:be:a1:4f:a2:54:85:
                    f4:42:e9:c6:33:d1:b5:6b:a9:af:d4:2c:5d:6f:ed:
                    5b:90:ee:63:86:02:b0:9f:bd:47:c7:d9:19:cd:2b:
                    bb:a1:1c:3e:87:15:e4:50:f9:0a:f7:0e:ac:12:55:
                    25:2d:fc:88:b7:20:b5:7b:34:5d:11:60:83:89:d0:
                    22:8c:55:37:0f:3b:75:16:3e:46:aa:c5:85:66:6c:
                    22:2c:d7:40:0c:f3:28:4c:8f:81:52:b7:3c:82:c3:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:45:A0:8F:52:C2:1F:83:97:82:55:1D:11:92:0F:88:FD:AD:79:5F
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:86:29:66:91:03:1b:42:ea:b6:df:9a:8d:b0:e0:92:66:5f:
         19:cb:0b:9c:ae:86:23:cf:c2:a8:94:92:d9:21:19:46:ed:ef:
         71:12:a6:6a:0b:b3:7d:96:80:fa:a7:4c:59:93:61:b5:7b:6c:
         3b:c6:29:07:06:be:e2:e9:ad:07:53:fa:79:a6:dd:98:a7:cd:
         1f:5f:ea:f7:9f:f7:d4:3d:fb:c0:f6:fc:f0:4c:1c:5b:da:99:
         fc:0e:ac:41:65:b2:2b:4f:84:ed:8f:96:81:19:f3:2f:99:6f:
         e2:73:11:7a:81:01:52:93:50:7a:f5:36:53:1c:27:3e:10:b8:
         1c:f9:a8:0d:99:c8:1d:8f:67:d5:70:97:81:ec:a8:a6:0a:13:
         12:f3:b9:12:d1:d6:ad:87:bd:eb:a8:c9:d2:59:f4:bf:d3:a5:
         ad:3f:d4:ee:d9:33:9a:fd:a5:17:dd:bc:f6:5b:69:21:79:4b:
         b4:2f:f0:69:93:1a:53:5c:39:bb:84:ba:41:5b:62:a4:d3:13:
         e4:27:9d:91:3a:3d:01:02:0d:19:9c:3e:61:65:1c:a7:3f:36:
         97:50:f5:c4:1c:37:5b:61:3c:f3:a0:75:c9:92:94:f2:a4:75:
         92:96:6a:cf:e6:09:d6:00:be:dc:04:ff:a7:1b:bf:3d:b8:4d:
         c4:34:55:48
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOlUAs4wnx/3kh0ira7p10UH+BtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNDAzMDUxNzM5MjdaFw0yNTAzMDQxNzQ0MjdaMDMxMTAvBgNV
BAMTKEQ3NDVBMDhGNTJDMjFGODM5NzgyNTUxRDExOTIwRjg4RkRBRDc5NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X3reW4P9ThoxECdDlinjL1eJ
jnBLHwbIFbcjwfOUqOuXyTqqmWb5tqyNMyco5VxlIN1iJjP6+4iyrwBSzGtRJjgj
OuH4RvKEkyzwvMiVYI9vGFFe+e79lcd7pr/AIqszy2LmwBwD+uSshfPCL9Xim76e
7WjYpaBh2ZYjsKiC10fwMc/0zcUlGpTK13ItysN8L7yyRd9StS1CXTLjKr6hT6JU
hfRC6cYz0bVrqa/ULF1v7VuQ7mOGArCfvUfH2RnNK7uhHD6HFeRQ+Qr3DqwSVSUt
/Ii3ILV7NF0RYIOJ0CKMVTcPO3UWPkaqxYVmbCIs10AM8yhMj4FStzyCw0fPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU10Wgj1LCH4OXglUdEZIPiP2teV8wHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMyMzAzMTJlMzEzNTM5MmUzMjMxMzgy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzMzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByZ/a
MA0GCSqGSIb3DQEBCwUAA4IBAQBghilmkQMbQuq235qNsOCSZl8ZywucroYjz8Ko
lJLZIRlG7e9xEqZqC7N9loD6p0xZk2G1e2w7xikHBr7i6a0HU/p5pt2Yp80fX+r3
n/fUPfvA9vzwTBxb2pn8DqxBZbIrT4Ttj5aBGfMvmW/icxF6gQFSk1B69TZTHCc+
ELgc+agNmcgdj2fVcJeB7KimChMS87kS0dath73rqMnSWfS/06WtP9Tu2TOa/aUX
3bz2W2kheUu0L/BpkxpTXDm7hLpBW2Kk0xPkJ52ROj0BAg0ZnD5hZRynPzaXUPXE
HDdbYTzzoHXJkpTypHWSlmrP5gnWAL7cBP+nG789uE3ENFVI
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org