Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa
File:                     3133322e3235352e32302e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier:          ADMjWWCL/LQP1U27EV0bU7JpUKvZe7/nvweXp8YLxRo=
Subject key identifier:   B5:04:CB:E1:A8:7C:9D:4F:C4:67:5D:DF:F7:5C:23:2E:2B:30:C1:69
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       77CC01B15B95A45C9518DBF9F8B07606425E06E3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     27951
IP address blocks:        132.255.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cc:01:b1:5b:95:a4:5c:95:18:db:f9:f8:b0:76:06:42:5e:06:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=B504CBE1A87C9D4FC4675DDFF75C232E2B30C169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:d4:ce:d6:9d:15:da:b9:1f:df:97:31:95:
                    26:b8:6b:0a:c5:dc:44:d5:7f:fb:fc:cd:f5:60:58:
                    82:c8:61:f4:2c:d0:4e:cb:73:16:27:f2:35:04:1b:
                    c6:7b:d2:97:1a:e5:cc:6e:28:17:5d:ee:6b:39:d7:
                    8c:76:d1:36:3f:23:e4:80:81:04:29:1c:41:41:10:
                    f8:ed:40:0a:70:ff:ac:a8:47:7e:c2:3d:38:25:3f:
                    72:1c:fd:88:26:53:3d:8b:73:2b:2c:e9:42:35:d8:
                    00:ce:ab:8d:f6:99:4a:73:0b:b1:f8:9d:f0:dc:ef:
                    9a:83:41:b9:ad:ab:4d:bc:28:11:13:b0:57:43:41:
                    f9:5f:5a:20:b4:c5:6e:59:e6:2e:46:cb:f2:90:63:
                    65:4c:5b:9f:09:e8:c4:f1:94:f6:27:27:90:63:13:
                    d1:03:21:c6:7e:b0:67:88:33:1a:ff:56:08:21:95:
                    49:4c:7e:15:92:ea:42:7c:9e:94:d9:de:42:32:6b:
                    17:02:8a:34:53:cc:9c:c7:14:ad:bd:26:41:18:57:
                    ec:26:3d:3c:64:da:a8:02:2d:df:9e:33:ca:26:f1:
                    b9:dd:9f:bc:8d:cc:e1:42:35:71:77:6d:7a:e5:80:
                    95:a9:a9:0e:c8:df:bc:96:7a:dd:b8:b3:b4:1a:84:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:CB:E1:A8:7C:9D:4F:C4:67:5D:DF:F7:5C:23:2E:2B:30:C1:69
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133322e3235352e32302e302f32322d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:55:86:08:95:b6:07:7a:31:70:cf:08:53:9a:38:4a:8e:
         eb:80:82:8b:06:ec:58:6c:4a:bf:8d:dd:43:91:8d:82:fd:67:
         60:f2:4d:91:a0:1e:bf:c9:7d:2f:5c:ce:0f:87:40:7d:5b:2f:
         0e:fa:9f:70:e2:9b:de:53:c8:a5:a5:d9:b4:6e:5d:a3:c5:c2:
         8f:22:67:d2:2b:23:dd:09:0f:5d:c5:41:24:e2:fa:46:4e:26:
         86:47:23:a1:8e:4f:00:3e:cc:b4:2a:e9:7b:2d:f5:7e:b7:30:
         d6:d3:f6:03:f4:18:6a:90:70:cf:71:b2:dc:10:5e:a4:ee:8e:
         f2:55:50:46:84:45:46:ac:38:6c:1c:d6:e6:56:80:28:29:cf:
         a4:da:52:48:66:d3:0b:c8:0e:d9:0d:c9:76:44:fc:50:24:b5:
         97:f7:30:2a:79:9b:29:b4:d2:c5:90:ed:dd:a2:5a:f9:aa:09:
         25:39:fc:6a:88:a6:9b:ef:98:7d:44:bf:78:b6:10:6b:bc:35:
         4c:14:b7:29:99:35:fb:23:06:8d:24:10:9b:9a:ab:2d:69:97:
         de:cc:90:7b:c0:6b:4d:b8:19:37:68:02:f2:f2:31:51:91:a2:
         20:f2:df:c4:0b:31:4e:b3:5e:b8:ec:17:6d:3e:f4:52:fb:8d:
         c6:7f:b8:ce
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd8wBsVuVpFyVGNv5+LB2BkJeBuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNDAzMDUxNzU3NDhaFw0yNTAzMDQxODAyNDhaMDMxMTAvBgNV
BAMTKEI1MDRDQkUxQTg3QzlENEZDNDY3NURERkY3NUMyMzJFMkIzMEMxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLW9TO1p0V2rkf35cxlSa4awrF
3ETVf/v8zfVgWILIYfQs0E7LcxYn8jUEG8Z70pca5cxuKBdd7ms514x20TY/I+SA
gQQpHEFBEPjtQApw/6yoR37CPTglP3Ic/YgmUz2Lcyss6UI12ADOq432mUpzC7H4
nfDc75qDQbmtq028KBETsFdDQflfWiC0xW5Z5i5Gy/KQY2VMW58J6MTxlPYnJ5Bj
E9EDIcZ+sGeIMxr/VgghlUlMfhWS6kJ8npTZ3kIyaxcCijRTzJzHFK29JkEYV+wm
PTxk2qgCLd+eM8om8bndn7yNzOFCNXF3bXrlgJWpqQ7I37yWet24s7QahHaPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtQTL4ah8nU/EZ13f91wjLiswwWkwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzMzMjJlMzIzNTM1MmUzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/FDAN
BgkqhkiG9w0BAQsFAAOCAQEAErxVhgiVtgd6MXDPCFOaOEqO64CCiwbsWGxKv43d
Q5GNgv1nYPJNkaAev8l9L1zOD4dAfVsvDvqfcOKb3lPIpaXZtG5do8XCjyJn0isj
3QkPXcVBJOL6Rk4mhkcjoY5PAD7MtCrpey31frcw1tP2A/QYapBwz3Gy3BBepO6O
8lVQRoRFRqw4bBzW5laAKCnPpNpSSGbTC8gO2Q3JdkT8UCS1l/cwKnmbKbTSxZDt
3aJa+aoJJTn8aoimm++YfUS/eLYQa7w1TBS3KZk1+yMGjSQQm5qrLWmX3syQe8Br
TbgZN2gC8vIxUZGiIPLfxAsxTrNeuOwXbT70UvuNxn+4zg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org