Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3230332e32302e38362e302f32342d3234203d3e20323634373536.roa
File:                     3230332e32302e38362e302f32342d3234203d3e20323634373536.roa (raw, json)
Hash identifier:          1mUrEo6/Zi4pkzeEa4DDz2JqGdgGmonzC/maDnU1eHg=
Subject key identifier:   7F:66:CE:9A:26:2F:8E:CC:5C:6C:0A:C2:9D:8D:38:57:A4:4C:0F:6A
Certificate issuer:       /CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
Certificate serial:       409252B07A830E1C814F8F18CF3EDFC0A1AAFBDB
Authority key identifier: EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3230332e32302e38362e302f32342d3234203d3e20323634373536.roa
Signing time:             Mon 15 Jul 2024 21:35:00 +0000
ROA not before:           Mon 15 Jul 2024 21:30:00 +0000
ROA not after:            Mon 14 Jul 2025 21:35:00 +0000
asID:                     264756
IP address blocks:        203.20.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl
                          rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:92:52:b0:7a:83:0e:1c:81:4f:8f:18:cf:3e:df:c0:a1:aa:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
        Validity
            Not Before: Jul 15 21:30:00 2024 GMT
            Not After : Jul 14 21:35:00 2025 GMT
        Subject: CN=7F66CE9A262F8ECC5C6C0AC29D8D3857A44C0F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:6c:f8:2b:29:4c:6b:77:84:4c:cb:ed:70:
                    86:a6:34:90:20:7c:ac:93:82:11:0d:2e:5c:8a:15:
                    d4:b0:50:85:14:1b:5b:2c:28:f6:81:2e:ba:c1:1b:
                    e9:d4:5e:6b:c8:11:f2:04:7e:01:09:94:30:9d:39:
                    79:30:a8:7b:66:1b:13:96:09:54:9c:a5:31:bf:07:
                    7e:dd:6a:34:51:af:ad:f6:e2:38:63:9c:63:74:88:
                    86:d4:fa:19:13:7b:0f:7d:fe:6c:69:eb:99:43:ea:
                    d4:1f:59:03:0f:d0:11:87:bc:78:3d:b3:3b:53:3f:
                    2a:c0:56:9f:6b:c8:b9:5f:d7:af:31:5d:57:f9:10:
                    59:d5:6d:f4:81:e9:c0:69:cc:b4:6f:a2:8c:2d:06:
                    b8:02:05:08:a0:f7:d1:28:0f:72:5c:82:4e:41:2d:
                    51:d9:11:44:d4:a2:a0:32:e1:f0:95:e6:07:50:a1:
                    3a:6b:b1:b1:14:c0:a8:6c:ed:bd:91:5e:b4:f0:01:
                    5d:cd:a1:91:b1:ad:d8:df:a1:dc:25:c8:0b:97:99:
                    4d:4a:17:3e:29:a9:45:5d:2b:e1:c0:50:c6:5b:5c:
                    c0:4b:7b:8f:4b:a9:1f:fe:10:08:ae:b8:e9:62:6a:
                    57:4a:cc:a4:d5:06:17:2f:98:bc:1c:a2:fc:8e:02:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:CE:9A:26:2F:8E:CC:5C:6C:0A:C2:9D:8D:38:57:A4:4C:0F:6A
            X509v3 Authority Key Identifier:
                keyid:EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3230332e32302e38362e302f32342d3234203d3e20323634373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:4c:24:05:f8:67:dc:6a:00:d5:21:c6:7e:cd:e0:26:c5:
         85:28:54:1e:b9:4f:09:dc:ac:b0:9c:90:3b:63:6b:e3:df:b7:
         d3:35:61:4e:bd:f3:55:69:0f:5f:46:27:98:a0:85:1d:bc:47:
         0c:d2:dc:c5:19:c4:f8:73:56:0e:4f:8e:39:26:7d:64:64:d0:
         63:9b:2d:bf:c7:ae:39:a1:6c:20:00:19:3d:b3:8d:89:3c:ff:
         2d:ac:e3:13:ee:e3:d3:5f:7a:35:f4:39:b9:97:a8:3c:e6:66:
         46:93:17:e7:b3:cf:be:32:6b:f4:1e:f8:52:a9:3f:cd:4e:f1:
         ce:a0:a7:08:2b:65:51:16:02:4a:5c:99:87:86:e6:ee:85:fc:
         53:e9:31:22:39:81:a3:e3:da:92:9a:a5:2e:07:e9:6d:c6:cd:
         0e:d5:72:35:63:ab:72:fe:d5:d2:0f:2f:d2:59:a8:b0:0e:6e:
         fa:0b:31:95:a5:1e:1c:73:ea:90:09:99:f6:13:db:9c:9e:39:
         7f:aa:62:69:9e:9c:17:26:b2:5a:d6:69:5a:0f:ef:59:6d:09:
         63:5d:97:e2:df:d6:10:79:7a:bd:07:db:5a:eb:d6:ef:5f:b2:
         af:08:18:0a:9d:8d:42:5c:35:4d:a4:88:b2:e2:c8:2f:88:52:
         f9:e6:07:68
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQJJSsHqDDhyBT48Yzz7fwKGq+9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyQjA2NTE4OTM5QzFGQzI2OUY1NzI0QzVDNEM5MTRE
N0NGNTczMTAeFw0yNDA3MTUyMTMwMDBaFw0yNTA3MTQyMTM1MDBaMDMxMTAvBgNV
BAMTKDdGNjZDRTlBMjYyRjhFQ0M1QzZDMEFDMjlEOEQzODU3QTQ0QzBGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqWz4KylMa3eETMvtcIamNJAg
fKyTghENLlyKFdSwUIUUG1ssKPaBLrrBG+nUXmvIEfIEfgEJlDCdOXkwqHtmGxOW
CVScpTG/B37dajRRr6324jhjnGN0iIbU+hkTew99/mxp65lD6tQfWQMP0BGHvHg9
sztTPyrAVp9ryLlf168xXVf5EFnVbfSB6cBpzLRvoowtBrgCBQig99EoD3Jcgk5B
LVHZEUTUoqAy4fCV5gdQoTprsbEUwKhs7b2RXrTwAV3NoZGxrdjfodwlyAuXmU1K
Fz4pqUVdK+HAUMZbXMBLe49LqR/+EAiuuOlialdKzKTVBhcvmLwcovyOAqPtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUf2bOmiYvjsxcbArCnY04V6RMD2owHwYDVR0j
BBgwFoAU6ysGUYk5wfwmn1ckxcTJFNfPVzEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85ODFFRkYzNjlFRTBFOTU5NzVFRDJFNkYxOTY4RTcwODFB
MjcyQkJGMDEyRURDNkVCRjAxMTlFNENCNTlFRkIyLzAvRUIyQjA2NTE4OTM5QzFG
QzI2OUY1NzI0QzVDNEM5MTREN0NGNTczMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjJCMDY1MTg5MzlDMUZDMjY5
RjU3MjRDNUM0QzkxNEQ3Q0Y1NzMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTgxRUZGMzY5RUUwRTk1OTc1RUQyRTZGMTk2OEU3MDgxQTI3MkJCRjAx
MkVEQzZFQkYwMTE5RTRDQjU5RUZCMi8wLzMyMzAzMzJlMzIzMDJlMzgzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsUVjAN
BgkqhkiG9w0BAQsFAAOCAQEAd39MJAX4Z9xqANUhxn7N4CbFhShUHrlPCdyssJyQ
O2Nr49+30zVhTr3zVWkPX0YnmKCFHbxHDNLcxRnE+HNWDk+OOSZ9ZGTQY5stv8eu
OaFsIAAZPbONiTz/LazjE+7j0196NfQ5uZeoPOZmRpMX57PPvjJr9B74Uqk/zU7x
zqCnCCtlURYCSlyZh4bm7oX8U+kxIjmBo+PakpqlLgfpbcbNDtVyNWOrcv7V0g8v
0lmosA5u+gsxlaUeHHPqkAmZ9hPbnJ45f6piaZ6cFyayWtZpWg/vWW0JY12X4t/W
EHl6vQfbWuvW71+yrwgYCp2NQlw1TaSIsuLIL4hS+eYHaA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org