Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          jXMdpLp8KCb+/kbSid7/o9OHPF6Y1di2o1zhpPECKB8=
Subject key identifier:   90:57:FF:6E:7B:0D:C4:33:B1:75:B8:01:3F:0B:A4:C5:3E:A8:97:95
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       254CDAD50665B380B50154A79A06BCD4CBD5BB32
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:35 +0000
ROA not before:           Tue 05 Mar 2024 18:15:35 +0000
ROA not after:            Tue 04 Mar 2025 18:20:35 +0000
asID:                     27768
IP address blocks:        201.217.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:da:d5:06:65:b3:80:b5:01:54:a7:9a:06:bc:d4:cb:d5:bb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:35 2024 GMT
            Not After : Mar  4 18:20:35 2025 GMT
        Subject: CN=9057FF6E7B0DC433B175B8013F0BA4C53EA89795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:ec:ae:00:53:df:60:48:a6:8c:ba:56:83:
                    f8:33:91:f5:fa:35:17:d5:8f:2f:43:48:c7:47:bb:
                    b7:e8:fc:d6:34:31:7c:ec:4d:0b:d9:5e:8a:c7:2e:
                    26:f1:1f:f4:d1:9a:d0:47:6b:33:ca:d9:66:e4:46:
                    0e:b4:d7:af:0c:48:a6:c8:81:25:f2:a6:c2:6c:e8:
                    bd:07:e7:c4:5f:f4:ea:74:3b:70:63:62:3b:5c:94:
                    8d:c3:19:f2:38:b5:3d:5f:6c:a6:4e:fc:07:30:06:
                    10:0f:fd:22:17:35:de:76:c9:20:c9:c1:6e:b6:03:
                    1a:dd:07:0a:88:2c:bd:54:46:25:44:7a:47:42:47:
                    fd:5a:13:95:23:11:a3:ba:5b:f4:c4:e4:b5:49:46:
                    c6:88:9e:15:39:01:b3:2a:85:82:93:1e:66:b3:9e:
                    1f:d2:e6:0a:6c:4d:eb:f9:c3:ff:93:8e:f7:a4:e1:
                    af:a5:88:9a:10:20:53:f6:3f:77:57:15:53:ef:81:
                    0b:25:48:b0:c2:1f:95:18:1a:f7:38:bd:21:95:c9:
                    c5:30:21:99:94:a7:11:e1:72:a1:a8:1f:bf:20:7e:
                    2f:d7:04:1d:97:9b:3f:ff:fe:65:12:df:fb:6b:72:
                    c8:db:90:56:3f:c4:7c:29:ae:7c:14:6e:cd:43:13:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:57:FF:6E:7B:0D:C4:33:B1:75:B8:01:3F:0B:A4:C5:3E:A8:97:95
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:f0:f1:3d:e3:d1:0c:8f:b3:37:55:58:3d:7b:a2:de:47:
         e3:e3:0a:c8:89:85:cc:d6:15:8b:96:eb:f6:b8:5a:1e:8a:5f:
         7d:ff:33:ed:51:07:44:29:29:4d:e4:1f:fa:c5:48:ff:8c:7b:
         e1:b2:17:40:a6:f5:41:9f:43:b6:df:2b:4f:d7:94:98:c9:b2:
         e3:f8:af:df:0d:6d:b9:c3:25:6e:33:e6:2f:65:41:51:de:27:
         50:25:a3:b9:14:e2:ca:07:00:36:b3:cb:b5:24:ea:c2:19:42:
         38:09:07:e6:53:4c:04:3f:8a:02:71:fd:ac:af:84:cf:6a:ff:
         a6:6f:dc:42:1c:ae:85:ac:db:05:bc:ef:3a:94:a6:a5:fb:fa:
         3d:2a:93:45:37:84:35:08:97:9d:5f:28:92:71:7a:fc:64:e0:
         39:dc:a6:52:32:ee:50:54:2d:b4:25:28:bd:e4:79:68:dd:42:
         59:c4:ce:87:90:7f:b2:1c:6e:4b:1d:ef:5d:41:50:4f:df:b9:
         b3:55:0d:9f:c5:30:8c:a8:71:92:23:c2:97:29:5f:d5:84:02:
         a7:9c:a5:39:cb:52:39:27:a0:20:09:13:80:48:50:3f:6c:ca:
         f6:4e:91:cb:b9:87:09:27:6f:ca:03:24:62:03:51:0f:cb:a3:
         1a:29:72:69
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJUza1QZls4C1AVSnmga81MvVuzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNDAzMDUxODE1MzVaFw0yNTAzMDQxODIwMzVaMDMxMTAvBgNV
BAMTKDkwNTdGRjZFN0IwREM0MzNCMTc1QjgwMTNGMEJBNEM1M0VBODk3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQeyuAFPfYEimjLpWg/gzkfX6
NRfVjy9DSMdHu7fo/NY0MXzsTQvZXorHLibxH/TRmtBHazPK2WbkRg60168MSKbI
gSXypsJs6L0H58Rf9Op0O3BjYjtclI3DGfI4tT1fbKZO/AcwBhAP/SIXNd52ySDJ
wW62AxrdBwqILL1URiVEekdCR/1aE5UjEaO6W/TE5LVJRsaInhU5AbMqhYKTHmaz
nh/S5gpsTev5w/+Tjvek4a+liJoQIFP2P3dXFVPvgQslSLDCH5UYGvc4vSGVycUw
IZmUpxHhcqGoH78gfi/XBB2Xmz///mUS3/trcsjbkFY/xHwprnwUbs1DE+qNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUkFf/bnsNxDOxdbgBPwukxT6ol5UwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZMTAN
BgkqhkiG9w0BAQsFAAOCAQEAW/Xw8T3j0QyPszdVWD17ot5H4+MKyImFzNYVi5br
9rhaHopfff8z7VEHRCkpTeQf+sVI/4x74bIXQKb1QZ9Dtt8rT9eUmMmy4/iv3w1t
ucMlbjPmL2VBUd4nUCWjuRTiygcANrPLtSTqwhlCOAkH5lNMBD+KAnH9rK+Ez2r/
pm/cQhyuhazbBbzvOpSmpfv6PSqTRTeENQiXnV8oknF6/GTgOdymUjLuUFQttCUo
veR5aN1CWcTOh5B/shxuSx3vXUFQT9+5s1UNn8UwjKhxkiPClylf1YQCp5ylOctS
OSegIAkTgEhQP2zK9k6Ry7mHCSdvygMkYgNRD8ujGilyaQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org