Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e35392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          BSeYmmHlijYKRS1mZPsNJEjvL+5CFEWSRohbeNOFznM=
Subject key identifier:   1A:E0:6B:E2:25:EA:1B:82:6F:08:A2:70:5C:B9:56:2F:74:53:5C:0A
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       541119F19523556C83FA8A0C0286CCB84C637599
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:32 +0000
ROA not before:           Tue 05 Mar 2024 18:15:32 +0000
ROA not after:            Tue 04 Mar 2025 18:20:32 +0000
asID:                     27768
IP address blocks:        201.217.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:19:f1:95:23:55:6c:83:fa:8a:0c:02:86:cc:b8:4c:63:75:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:32 2024 GMT
            Not After : Mar  4 18:20:32 2025 GMT
        Subject: CN=1AE06BE225EA1B826F08A2705CB9562F74535C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:a7:2f:71:4b:33:63:40:95:1c:a4:14:64:
                    d9:4c:d0:3d:9d:0e:82:8e:aa:22:7f:c2:1b:4b:3b:
                    fb:bd:73:84:f1:7c:9f:b0:c5:5e:3f:92:0a:bc:29:
                    86:be:49:a1:c1:64:41:e9:37:46:bd:85:d3:24:aa:
                    0a:20:a2:ad:b2:bd:bc:6d:eb:c3:6a:07:bc:d8:2c:
                    e4:62:a8:dd:bd:55:b0:da:64:d1:56:4a:80:39:88:
                    5b:35:24:12:3e:16:1b:85:35:1a:f1:61:5f:e4:43:
                    4b:10:42:c4:d2:73:07:40:f4:18:70:f1:b4:3e:62:
                    a3:9e:75:3e:99:c1:76:9a:df:1e:5b:8d:99:55:14:
                    d0:e5:b1:2e:c3:9e:a3:d5:3e:13:0c:70:da:e8:e1:
                    6e:ad:00:80:c8:1b:6a:7b:68:47:ee:c1:09:d5:5b:
                    e0:c8:76:c4:0d:b6:d6:f4:b8:2d:45:80:42:9e:b7:
                    1b:bc:df:23:73:4e:07:e2:d9:e1:b9:b0:bb:5d:6c:
                    17:b6:ce:ad:e0:b4:71:32:e9:98:b8:1d:e9:12:70:
                    ac:2c:25:85:71:e6:85:fe:41:91:3b:37:9f:da:c2:
                    92:cb:85:b2:8c:7d:71:cc:5b:7d:74:92:e0:72:ca:
                    33:38:d2:2c:2b:81:ea:57:ef:05:0e:80:a1:b7:7a:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:6B:E2:25:EA:1B:82:6F:08:A2:70:5C:B9:56:2F:74:53:5C:0A
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:42:84:b1:32:89:01:c6:be:91:8a:50:a5:d8:6e:80:09:a2:
         7d:10:a1:f2:b4:dc:b4:37:fb:d1:72:9b:be:fa:e5:4a:f9:5e:
         08:4b:07:4f:57:d5:2c:ec:eb:d8:5b:0e:62:c0:a6:00:35:6f:
         5f:51:db:bc:07:cb:f9:81:05:74:13:c8:26:e0:10:65:4b:7c:
         65:8c:57:d5:ae:18:3c:5d:95:56:a9:a1:76:5a:58:46:1a:00:
         bf:ab:7b:73:b0:c2:1f:ab:e7:3e:2f:9e:e6:ae:9c:da:cc:a7:
         d3:d4:c1:a6:fc:b2:b8:d2:84:9c:6c:1b:5c:72:81:d0:cb:a2:
         11:27:c1:13:f1:3e:49:25:64:59:1b:e3:ce:4f:7f:aa:02:cd:
         77:0d:10:05:e1:de:89:b8:de:1a:9c:94:c8:b5:bf:c7:54:38:
         9a:68:d2:e6:00:4d:7f:c7:63:88:50:8d:4e:21:3b:3d:4f:da:
         47:22:f5:97:ed:62:49:ae:0a:63:75:78:d3:ae:fc:62:a0:45:
         78:ae:6a:1f:af:17:90:ad:75:01:3a:e5:c0:f6:a2:8e:2f:47:
         ab:c8:ca:cb:f5:f4:2e:14:ac:a7:e1:a8:c5:d3:8d:6a:22:40:
         8e:80:53:51:f7:c5:fe:a1:d1:a7:0c:6d:d9:4e:33:7c:40:57:
         7a:dc:00:79
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVBEZ8ZUjVWyD+ooMAobMuExjdZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNDAzMDUxODE1MzJaFw0yNTAzMDQxODIwMzJaMDMxMTAvBgNV
BAMTKDFBRTA2QkUyMjVFQTFCODI2RjA4QTI3MDVDQjk1NjJGNzQ1MzVDMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCho6cvcUszY0CVHKQUZNlM0D2d
DoKOqiJ/whtLO/u9c4TxfJ+wxV4/kgq8KYa+SaHBZEHpN0a9hdMkqgogoq2yvbxt
68NqB7zYLORiqN29VbDaZNFWSoA5iFs1JBI+FhuFNRrxYV/kQ0sQQsTScwdA9Bhw
8bQ+YqOedT6ZwXaa3x5bjZlVFNDlsS7DnqPVPhMMcNro4W6tAIDIG2p7aEfuwQnV
W+DIdsQNttb0uC1FgEKetxu83yNzTgfi2eG5sLtdbBe2zq3gtHEy6Zi4HekScKws
JYVx5oX+QZE7N5/awpLLhbKMfXHMW310kuByyjM40iwrgepX7wUOgKG3es+nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGuBr4iXqG4JvCKJwXLlWL3RTXAowHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzNTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZOzAN
BgkqhkiG9w0BAQsFAAOCAQEAVkKEsTKJAca+kYpQpdhugAmifRCh8rTctDf70XKb
vvrlSvleCEsHT1fVLOzr2FsOYsCmADVvX1HbvAfL+YEFdBPIJuAQZUt8ZYxX1a4Y
PF2VVqmhdlpYRhoAv6t7c7DCH6vnPi+e5q6c2syn09TBpvyyuNKEnGwbXHKB0Mui
ESfBE/E+SSVkWRvjzk9/qgLNdw0QBeHeibjeGpyUyLW/x1Q4mmjS5gBNf8djiFCN
TiE7PU/aRyL1l+1iSa4KY3V40678YqBFeK5qH68XkK11ATrlwPaiji9Hq8jKy/X0
LhSsp+GoxdONaiJAjoBTUffF/qHRpwxt2U4zfEBXetwAeQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org