Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3231322e302f32322d3234203d3e203237383935.roa
File:                     3138312e38352e3231322e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          fmpOgPL5W4rLLH5jTKrWWPJwEau4iSdB5+pKus19KIw=
Subject key identifier:   DA:3E:88:62:AD:E1:93:CB:19:1D:3F:BC:AA:94:CE:34:9C:9B:0A:E7
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       7C031F96A99824D26944E38B3AA813787704015C
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3231322e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:26 +0000
ROA not before:           Tue 05 Mar 2024 18:07:26 +0000
ROA not after:            Tue 04 Mar 2025 18:12:26 +0000
asID:                     27895
IP address blocks:        181.85.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:03:1f:96:a9:98:24:d2:69:44:e3:8b:3a:a8:13:78:77:04:01:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:26 2024 GMT
            Not After : Mar  4 18:12:26 2025 GMT
        Subject: CN=DA3E8862ADE193CB191D3FBCAA94CE349C9B0AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:ca:1b:68:04:eb:49:52:51:75:f8:22:ca:
                    cf:a8:a9:93:93:e4:f0:95:90:39:02:58:1b:69:81:
                    2a:91:93:1e:34:71:b6:29:da:7f:d5:e7:ed:da:7e:
                    91:09:0a:ec:56:38:5a:99:af:08:b8:62:32:1f:fc:
                    8f:c6:b1:f5:11:46:49:a6:4f:80:f4:6c:dd:2b:ad:
                    a7:3e:8d:96:1c:48:3a:68:cf:cb:06:b6:58:d1:44:
                    32:49:55:6f:be:82:9e:5c:43:a9:f1:c5:9c:58:76:
                    d1:3f:ac:84:6b:37:a9:9c:11:1f:a6:65:01:04:d1:
                    8c:7b:e3:f3:91:fe:87:af:f7:31:e1:a3:d1:94:4f:
                    54:c7:83:29:d3:17:8a:e1:5a:f8:a6:ed:2f:1d:d0:
                    a6:77:82:ad:58:dc:ad:dc:dc:cc:ad:8d:41:5a:0a:
                    c9:c1:2e:8f:42:a1:4f:24:a5:ff:ba:62:7d:f0:80:
                    1e:d3:72:64:1c:c4:06:a9:fa:35:9d:10:69:d7:1b:
                    c5:fd:52:2e:48:b9:c3:7b:4d:f9:3e:2b:54:b9:9f:
                    64:3b:82:37:05:48:13:2e:81:8b:64:c5:b7:53:a3:
                    44:80:92:e7:9b:a4:47:b1:76:df:98:f0:87:29:21:
                    75:67:01:a4:fa:06:95:c9:65:34:a9:bc:81:d7:83:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:88:62:AD:E1:93:CB:19:1D:3F:BC:AA:94:CE:34:9C:9B:0A:E7
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e38352e3231322e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.85.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:11:d7:3c:66:63:80:cc:d4:95:22:9a:29:4a:fe:95:f5:
         45:3e:9d:94:a8:4f:bd:e0:dc:bf:8c:ad:bc:9a:6f:9f:13:cc:
         5b:52:ac:f5:78:4a:fe:aa:c6:9f:85:db:a5:0b:e8:b0:d2:03:
         79:5b:6a:c3:ee:46:e2:05:37:9b:70:8c:66:f6:5c:cc:d2:f1:
         51:0a:c4:c4:01:34:33:40:5f:d1:69:52:e3:91:bf:dd:c5:4c:
         f6:23:2b:8c:b5:6e:bb:50:da:0c:d5:65:dc:e6:cd:b5:76:87:
         4d:97:6f:94:98:ec:28:cc:cb:fc:21:53:c5:a8:a2:bc:ea:89:
         d2:ba:0d:c4:22:9e:95:25:a4:74:7d:db:ed:ed:c1:0c:59:c1:
         7d:e5:71:51:3a:f0:a3:0a:a7:9d:97:f1:ee:8a:e7:49:5f:8f:
         02:87:8b:f2:38:d5:47:49:01:72:69:f9:4a:35:cb:90:7f:c0:
         45:80:27:cc:3c:f4:e8:9c:37:ca:92:11:0a:1c:3c:6c:e1:2c:
         e0:8d:e6:52:1f:81:5b:ee:30:d8:dd:71:9a:24:e2:60:59:88:
         6c:49:d0:5e:4a:a8:b3:89:a0:8c:a1:56:cd:1b:40:88:22:91:
         62:27:fc:50:1e:25:de:df:e7:33:57:3b:23:91:de:a4:c5:ea:
         da:3b:41:03
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfAMflqmYJNJpROOLOqgTeHcEAVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNDAzMDUxODA3MjZaFw0yNTAzMDQxODEyMjZaMDMxMTAvBgNV
BAMTKERBM0U4ODYyQURFMTkzQ0IxOTFEM0ZCQ0FBOTRDRTM0OUM5QjBBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhsobaATrSVJRdfgiys+oqZOT
5PCVkDkCWBtpgSqRkx40cbYp2n/V5+3afpEJCuxWOFqZrwi4YjIf/I/GsfURRkmm
T4D0bN0rrac+jZYcSDpoz8sGtljRRDJJVW++gp5cQ6nxxZxYdtE/rIRrN6mcER+m
ZQEE0Yx74/OR/oev9zHho9GUT1THgynTF4rhWvim7S8d0KZ3gq1Y3K3c3MytjUFa
CsnBLo9CoU8kpf+6Yn3wgB7TcmQcxAap+jWdEGnXG8X9Ui5IucN7Tfk+K1S5n2Q7
gjcFSBMugYtkxbdTo0SAkuebpEexdt+Y8IcpIXVnAaT6BpXJZTSpvIHXgz+vAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2j6IYq3hk8sZHT+8qpTONJybCucwHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzgzMTJlMzgzNTJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArVV1DAN
BgkqhkiG9w0BAQsFAAOCAQEAeU8R1zxmY4DM1JUimilK/pX1RT6dlKhPveDcv4yt
vJpvnxPMW1Ks9XhK/qrGn4XbpQvosNIDeVtqw+5G4gU3m3CMZvZczNLxUQrExAE0
M0Bf0WlS45G/3cVM9iMrjLVuu1DaDNVl3ObNtXaHTZdvlJjsKMzL/CFTxaiivOqJ
0roNxCKelSWkdH3b7e3BDFnBfeVxUTrwowqnnZfx7ornSV+PAoeL8jjVR0kBcmn5
SjXLkH/ARYAnzDz06Jw3ypIRChw8bOEs4I3mUh+BW+4w2N1xmiTiYFmIbEnQXkqo
s4mgjKFWzRtAiCKRYif8UB4l3t/nM1c7I5HepMXq2jtBAw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:18 2024 by rpki-client on console-fra.rpki-client.org