Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
File:                     3230312e3232322e34382e302f32312d3234203d3e203238313033.roa (raw, json)
Hash identifier:          A3oasWFYIjIenJVQvQ2LK3xVk2luFHXRGTWM9vJJJhg=
Subject key identifier:   3B:03:F0:71:0E:1D:99:58:3B:F7:24:05:07:1B:72:1E:5D:D5:F7:B7
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       3CEAFEF3E9843B060F03863392252C3CF7354559
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 13:15:01 +0000
ROA not before:           Mon 12 Aug 2024 13:10:01 +0000
ROA not after:            Mon 11 Aug 2025 13:15:01 +0000
asID:                     28103
IP address blocks:        201.222.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ea:fe:f3:e9:84:3b:06:0f:03:86:33:92:25:2c:3c:f7:35:45:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 13:10:01 2024 GMT
            Not After : Aug 11 13:15:01 2025 GMT
        Subject: CN=3B03F0710E1D99583BF72405071B721E5DD5F7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:f7:75:73:b8:a6:1d:14:1e:4c:35:9e:72:
                    03:d7:fd:8d:3e:51:6f:d2:07:62:5c:99:12:47:19:
                    b0:ed:d6:c4:75:a2:57:1d:0a:0c:e4:c9:71:0f:4b:
                    85:c7:28:64:55:00:bf:49:b3:c9:b7:e6:62:97:6a:
                    bb:1a:80:f3:b1:94:ea:66:3f:cd:6a:c0:c6:e4:fc:
                    a3:05:8d:c7:31:12:d0:64:4f:60:c6:81:54:46:ea:
                    b9:96:28:e9:d0:fd:87:03:de:40:9c:15:1a:74:f4:
                    62:61:a4:2b:47:7f:8f:d5:1f:23:e2:4f:e2:15:08:
                    de:09:6e:51:36:4e:43:ea:d9:92:04:f0:d5:d9:fd:
                    22:19:87:09:22:18:ba:55:7a:b6:3a:7f:32:6f:7a:
                    f1:0c:3a:ed:8b:b9:33:1c:ee:c3:95:ff:fc:32:55:
                    85:b1:65:66:01:2e:20:b0:e1:cf:b0:2e:93:59:69:
                    48:ea:a2:a7:79:e7:5c:47:4f:cf:2a:fc:a7:41:82:
                    88:b8:9c:90:55:a3:4a:73:b2:16:b2:08:45:53:c3:
                    37:ed:2b:83:60:1e:64:e8:ac:17:ee:0e:d1:79:f8:
                    d2:b6:ce:9a:2c:af:12:df:42:c8:53:a9:9f:ef:ea:
                    da:f4:72:17:15:af:03:f9:7d:2b:57:65:7f:ca:ca:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:03:F0:71:0E:1D:99:58:3B:F7:24:05:07:1B:72:1E:5D:D5:F7:B7
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:21:ea:17:3a:2f:d2:84:e6:e3:3f:15:80:83:25:f3:85:a0:
         86:8f:ad:d7:55:54:3f:87:de:64:a4:21:3e:69:8d:f5:6e:15:
         fb:91:c8:52:ba:fa:bf:85:75:9c:c4:be:7d:cf:34:85:fd:89:
         cb:5a:3d:94:8d:0a:07:5c:94:83:99:3f:df:ec:fb:87:39:ce:
         95:1e:32:bc:5d:ec:fc:aa:ff:6b:43:b7:29:44:b9:c7:88:e9:
         be:c0:77:a8:f0:4e:3f:69:73:51:f0:ff:db:61:da:7f:6e:ff:
         02:f4:f4:3f:34:04:2d:2b:ad:93:a9:ca:07:cd:94:ce:16:61:
         7f:41:1f:bb:75:dd:5e:c3:1b:f3:9b:75:3c:0d:51:85:33:94:
         6a:0b:94:83:82:d8:43:36:7c:77:24:41:2a:23:9d:bd:9c:e8:
         28:38:80:e5:8f:fc:90:ec:08:86:bb:b1:4d:24:69:4d:98:2a:
         f7:7b:42:bb:6d:e9:1d:8a:7c:67:29:11:21:0a:72:7a:10:73:
         dd:48:b0:26:91:c6:fe:1f:94:a5:8a:cd:a0:1a:22:ce:4d:d8:
         49:93:3c:65:e5:08:f6:ea:83:7b:5a:48:99:8d:f8:5c:b1:94:
         87:0c:09:a2:5b:9b:89:08:38:e8:0f:42:51:d6:1e:b5:e5:f5:
         41:00:49:f3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPOr+8+mEOwYPA4YzkiUsPPc1RVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNDA4MTIxMzEwMDFaFw0yNTA4MTExMzE1MDFaMDMxMTAvBgNV
BAMTKDNCMDNGMDcxMEUxRDk5NTgzQkY3MjQwNTA3MUI3MjFFNURENUY3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1H/d1c7imHRQeTDWecgPX/Y0+
UW/SB2JcmRJHGbDt1sR1olcdCgzkyXEPS4XHKGRVAL9Js8m35mKXarsagPOxlOpm
P81qwMbk/KMFjccxEtBkT2DGgVRG6rmWKOnQ/YcD3kCcFRp09GJhpCtHf4/VHyPi
T+IVCN4JblE2TkPq2ZIE8NXZ/SIZhwkiGLpVerY6fzJvevEMOu2LuTMc7sOV//wy
VYWxZWYBLiCw4c+wLpNZaUjqoqd551xHT88q/KdBgoi4nJBVo0pzshayCEVTwzft
K4NgHmTorBfuDtF5+NK2zposrxLfQshTqZ/v6tr0chcVrwP5fStXZX/KyslVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOwPwcQ4dmVg79yQFBxtyHl3V97cwHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMyMzAzMTJlMzIzMjMyMmUzNDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8neMDAN
BgkqhkiG9w0BAQsFAAOCAQEAFiHqFzov0oTm4z8VgIMl84Wgho+t11VUP4feZKQh
PmmN9W4V+5HIUrr6v4V1nMS+fc80hf2Jy1o9lI0KB1yUg5k/3+z7hznOlR4yvF3s
/Kr/a0O3KUS5x4jpvsB3qPBOP2lzUfD/22Haf27/AvT0PzQELSutk6nKB82UzhZh
f0Efu3XdXsMb85t1PA1RhTOUaguUg4LYQzZ8dyRBKiOdvZzoKDiA5Y/8kOwIhrux
TSRpTZgq93tCu23pHYp8ZykRIQpyehBz3UiwJpHG/h+UpYrNoBoizk3YSZM8ZeUI
9uqDe1pImY34XLGUhwwJolubiQg46A9CUdYeteX1QQBJ8w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org