Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa
File:                     3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa (raw, json)
Hash identifier:          T7TmqlhOODuvgmGNwdnq7biXLm1eKUJ17pcEuzxywrI=
Subject key identifier:   F7:40:3B:EE:DD:FA:D6:9D:FA:DC:BC:00:2B:F6:76:C0:C4:E6:36:7F
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       49871B88115942C9CC5CD0F547E8D5EF849D8B96
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa
Signing time:             Tue 05 Mar 2024 18:23:25 +0000
ROA not before:           Tue 05 Mar 2024 18:18:25 +0000
ROA not after:            Tue 04 Mar 2025 18:23:25 +0000
asID:                     265815
IP address blocks:        201.182.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:87:1b:88:11:59:42:c9:cc:5c:d0:f5:47:e8:d5:ef:84:9d:8b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Mar  5 18:18:25 2024 GMT
            Not After : Mar  4 18:23:25 2025 GMT
        Subject: CN=F7403BEEDDFAD69DFADCBC002BF676C0C4E6367F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:93:99:85:79:6a:7d:68:b7:8c:e3:f9:bd:
                    c7:21:96:c0:92:ba:5e:f0:ae:9a:52:85:86:58:32:
                    bc:79:e3:97:81:5f:c7:d3:c4:96:87:56:ee:dd:30:
                    ef:62:9b:d6:e9:98:6c:3f:af:d3:ac:95:35:7d:de:
                    13:a2:b0:0a:b9:ef:7f:98:ac:d1:85:e6:d8:e6:69:
                    e6:64:83:f3:e0:6b:67:da:4f:84:1e:94:cf:3a:e4:
                    a1:93:9c:15:0b:88:08:51:cc:17:ed:10:74:e4:c4:
                    a3:3d:22:9a:e3:34:c4:25:d4:17:cb:e5:ca:f9:22:
                    f5:79:e7:89:c4:fd:c2:69:79:62:67:96:ee:06:63:
                    1e:ad:5b:8d:99:87:2c:c0:f8:a8:c0:f6:8d:32:94:
                    bf:d0:a4:80:72:b8:91:06:09:02:a9:f3:f9:62:5a:
                    de:f8:06:6b:96:b0:02:44:69:0a:4a:3d:9f:fd:2d:
                    c6:94:75:2b:bb:5b:a2:96:ee:4e:24:aa:c8:26:2d:
                    bc:33:ee:a3:65:bf:1b:d6:af:8a:68:12:92:7f:82:
                    22:e0:19:58:69:f5:a5:d0:cf:61:0a:62:37:dd:89:
                    aa:38:ac:a5:5d:75:39:b2:27:fa:7e:a0:cd:68:ad:
                    24:a2:96:32:3f:ac:72:de:d7:ac:ca:54:50:8b:02:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:3B:EE:DD:FA:D6:9D:FA:DC:BC:00:2B:F6:76:C0:C4:E6:36:7F
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3134382e302f32332d3234203d3e20323635383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:85:e2:4c:de:17:11:ee:40:2a:cb:df:b2:4d:54:f5:63:1c:
         3f:e2:4e:e4:5c:26:0e:20:bc:d4:4e:bb:9e:70:9d:68:98:cb:
         2c:ef:a6:04:a2:48:07:dd:e4:9c:9a:a3:11:9b:77:13:31:66:
         06:af:06:7c:27:68:c9:a9:a3:5a:b8:31:93:d8:56:4e:2f:8f:
         65:f2:ea:e0:2e:33:53:45:34:27:a9:b1:60:e8:cd:6d:46:e2:
         72:ec:3a:ae:85:03:40:33:4c:06:fd:9f:83:b4:ce:d2:27:f8:
         c3:72:b0:41:b9:ac:a4:35:26:57:73:d1:7e:79:8f:c3:33:9b:
         06:63:75:46:6b:4c:d4:67:c3:db:90:84:0f:c7:74:6d:6f:53:
         b7:b6:78:6b:df:cb:67:bc:58:6e:a1:8b:e4:db:85:b0:50:ac:
         63:af:0a:50:16:d7:3e:b8:44:28:6e:f8:5d:b9:0b:a1:d2:e5:
         94:e6:c2:90:f2:71:f8:30:56:de:98:cc:7b:93:6d:c0:fe:c5:
         99:a2:cb:62:a3:73:23:fb:a6:cb:98:88:d1:73:ef:0c:38:a3:
         45:6c:ff:b4:42:7e:22:8a:01:85:ed:59:57:c9:a2:96:e3:05:
         99:b0:6a:a8:09:11:e0:a9:9f:34:98:a8:7e:bc:39:58:dc:91:
         ef:57:a8:c9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSYcbiBFZQsnMXND1R+jV74Sdi5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB
RDVGRTI1MzAeFw0yNDAzMDUxODE4MjVaFw0yNTAzMDQxODIzMjVaMDMxMTAvBgNV
BAMTKEY3NDAzQkVFRERGQUQ2OURGQURDQkMwMDJCRjY3NkMwQzRFNjM2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvpOZhXlqfWi3jOP5vcchlsCS
ul7wrppShYZYMrx545eBX8fTxJaHVu7dMO9im9bpmGw/r9OslTV93hOisAq573+Y
rNGF5tjmaeZkg/Pga2faT4QelM865KGTnBULiAhRzBftEHTkxKM9IprjNMQl1BfL
5cr5IvV554nE/cJpeWJnlu4GYx6tW42ZhyzA+KjA9o0ylL/QpIByuJEGCQKp8/li
Wt74BmuWsAJEaQpKPZ/9LcaUdSu7W6KW7k4kqsgmLbwz7qNlvxvWr4poEpJ/giLg
GVhp9aXQz2EKYjfdiao4rKVddTmyJ/p+oM1orSSiljI/rHLe16zKVFCLAsbpAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU90A77t361p363LwAK/Z2wMTmNn8wHwYDVR0j
BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4
NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF
NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy
Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE
NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzMyMzAzMTJlMzEzODMyMmUzMTM0Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzUzODMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHJ
tpQwDQYJKoZIhvcNAQELBQADggEBAJeF4kzeFxHuQCrL37JNVPVjHD/iTuRcJg4g
vNROu55wnWiYyyzvpgSiSAfd5JyaoxGbdxMxZgavBnwnaMmpo1q4MZPYVk4vj2Xy
6uAuM1NFNCepsWDozW1G4nLsOq6FA0AzTAb9n4O0ztIn+MNysEG5rKQ1Jldz0X55
j8MzmwZjdUZrTNRnw9uQhA/HdG1vU7e2eGvfy2e8WG6hi+TbhbBQrGOvClAW1z64
RChu+F25C6HS5ZTmwpDycfgwVt6YzHuTbcD+xZmiy2KjcyP7psuYiNFz7ww4o0Vs
/7RCfiKKAYXtWVfJopbjBZmwaqgJEeCpnzSYqH68OVjcke9XqMk=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org