Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32342d3234203d3e203238313033.roa
File:                     3230312e3232322e34382e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          qtSGqgR9sNgXb+R1nuDNch+yU7/gW6+dfXgqbN9ymtI=
Subject key identifier:   E2:6C:7A:50:AF:8E:E7:22:DC:68:03:A5:C2:40:D0:74:7B:12:90:01
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       3DCCA4326E391854477002EAA558DC866DF5D31A
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:50:01 +0000
ROA not before:           Mon 12 Aug 2024 12:45:01 +0000
ROA not after:            Mon 11 Aug 2025 12:50:01 +0000
asID:                     28103
IP address blocks:        201.222.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cc:a4:32:6e:39:18:54:47:70:02:ea:a5:58:dc:86:6d:f5:d3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:45:01 2024 GMT
            Not After : Aug 11 12:50:01 2025 GMT
        Subject: CN=E26C7A50AF8EE722DC6803A5C240D0747B129001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:e4:80:0d:18:c7:2e:91:75:ba:d1:95:11:
                    46:f9:27:f5:ef:fa:e1:7e:6d:7f:5d:96:4e:a1:21:
                    a8:4d:51:05:f9:a6:fd:a9:bb:d6:8b:81:52:cd:4e:
                    2f:a0:98:86:83:0b:02:2f:c7:c4:f5:f6:9a:cd:57:
                    17:b9:59:78:fa:52:b1:68:9c:8f:71:7b:83:fc:7f:
                    8b:5e:a0:5d:2c:52:19:fd:cd:7c:1f:4b:7e:f6:df:
                    37:a6:b9:96:0b:33:d1:16:eb:0c:89:e6:9e:15:d5:
                    06:b9:90:42:ca:e2:fd:46:54:5a:60:a6:ed:47:02:
                    2d:e2:94:95:fa:33:67:62:a7:89:3c:13:b7:0e:df:
                    2d:49:3a:c4:82:cb:0c:27:fd:2f:b3:19:59:e7:f5:
                    95:4a:b1:1f:16:d3:aa:05:91:57:41:1a:a6:54:e3:
                    d8:5f:21:05:30:35:df:c0:6e:4e:ec:4f:e0:26:9e:
                    8e:a7:ae:90:6b:be:b4:1f:68:f7:a0:14:cc:52:3e:
                    88:24:4d:ae:fe:a2:06:1d:4b:45:34:59:53:12:87:
                    69:04:68:6c:5a:21:e8:83:e2:14:f7:e1:44:b2:cc:
                    22:0c:2c:1e:ea:a2:e2:1d:04:24:6d:93:32:eb:ef:
                    37:29:12:fd:07:51:96:50:00:04:53:da:7e:ce:74:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6C:7A:50:AF:8E:E7:22:DC:68:03:A5:C2:40:D0:74:7B:12:90:01
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:00:df:3a:49:d6:9a:b3:32:d3:b3:76:b1:34:56:93:fd:
         e0:b4:d9:1e:a2:3c:e5:d1:88:a6:fe:d6:07:4e:a0:06:3d:d9:
         db:4d:41:57:8a:c0:b4:d8:6b:22:e4:fc:43:df:c3:d2:a3:59:
         93:55:02:87:ea:a1:63:95:82:98:b4:c7:42:40:5f:04:c1:c8:
         b1:62:19:0a:b5:3e:fd:96:18:b3:82:34:60:38:80:01:16:fd:
         db:35:85:2f:bf:5f:0a:b2:ed:61:1c:c9:16:66:91:19:7a:2b:
         42:c8:b4:3e:c3:ab:22:cf:f6:c0:10:29:56:0b:b4:55:c7:30:
         97:eb:f7:b7:f2:0f:65:73:e4:82:61:e8:23:95:7c:55:ff:3e:
         f1:de:de:42:ea:af:93:2e:12:c1:c7:e2:e2:4f:6f:2e:72:2c:
         0a:dd:55:02:ca:65:64:de:ed:7c:05:fb:76:dd:c9:83:9e:ea:
         0a:cf:51:86:5a:8c:9f:52:28:cc:dc:96:82:64:54:32:1f:de:
         c2:99:7e:9b:6d:b9:01:d1:db:61:76:6b:22:79:a7:f5:4c:6a:
         b0:a7:71:a9:81:a6:51:7c:ed:fb:84:b0:e9:10:dc:77:0b:88:
         fc:82:01:fc:91:02:29:7c:0e:b8:31:25:43:de:18:bc:4f:ac:
         69:f6:b8:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPcykMm45GFRHcALqpVjchm310xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJCQUQxMzQ4RkU3
RjY1N0M1NzAeFw0yNDA4MTIxMjQ1MDFaFw0yNTA4MTExMjUwMDFaMDMxMTAvBgNV
BAMTKEUyNkM3QTUwQUY4RUU3MjJEQzY4MDNBNUMyNDBEMDc0N0IxMjkwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F+SADRjHLpF1utGVEUb5J/Xv
+uF+bX9dlk6hIahNUQX5pv2pu9aLgVLNTi+gmIaDCwIvx8T19prNVxe5WXj6UrFo
nI9xe4P8f4teoF0sUhn9zXwfS3723zemuZYLM9EW6wyJ5p4V1Qa5kELK4v1GVFpg
pu1HAi3ilJX6M2dip4k8E7cO3y1JOsSCywwn/S+zGVnn9ZVKsR8W06oFkVdBGqZU
49hfIQUwNd/Abk7sT+Amno6nrpBrvrQfaPegFMxSPogkTa7+ogYdS0U0WVMSh2kE
aGxaIeiD4hT34USyzCIMLB7qouIdBCRtkzLr7zcpEv0HUZZQAART2n7OdMh/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4mx6UK+O5yLcaAOlwkDQdHsSkAEwHwYDVR0j
BBgwFoAUMQtufkgfqHt7KVgrrRNI/n9lfFcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEy
RDQxMEFBN0QzQzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3
QjdCMjk1ODJCQUQxMzQ4RkU3RjY1N0M1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTBCNkU3RTQ4MUZBODdCN0Iy
OTU4MkJBRDEzNDhGRTdGNjU3QzU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEzOERGRDA4NzFBMkQ0MTBBQTdE
M0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzMyMzAzMTJlMzIzMjMyMmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMneMDAN
BgkqhkiG9w0BAQsFAAOCAQEAPt0A3zpJ1pqzMtOzdrE0VpP94LTZHqI85dGIpv7W
B06gBj3Z201BV4rAtNhrIuT8Q9/D0qNZk1UCh+qhY5WCmLTHQkBfBMHIsWIZCrU+
/ZYYs4I0YDiAARb92zWFL79fCrLtYRzJFmaRGXorQsi0PsOrIs/2wBApVgu0Vccw
l+v3t/IPZXPkgmHoI5V8Vf8+8d7eQuqvky4Swcfi4k9vLnIsCt1VAsplZN7tfAX7
dt3Jg57qCs9RhlqMn1IozNyWgmRUMh/ewpl+m225AdHbYXZrInmn9UxqsKdxqYGm
UXzt+4Sw6RDcdwuI/IIB/JECKXwOuDElQ94YvE+safa4vg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org