Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa
File:                     3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          aClSmSSxxWAx1HKzF6G0HN07jTIJzQjgs/UgkP/z30U=
Subject key identifier:   14:01:9A:B1:6C:64:A3:4F:D3:4C:65:60:26:1D:34:23:EC:4B:5C:68
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       259C3702BF42F9137DC8A573EF586E974EDBCCDC
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:23:24 +0000
ROA not before:           Tue 05 Mar 2024 18:18:24 +0000
ROA not after:            Tue 04 Mar 2025 18:23:24 +0000
asID:                     52468
IP address blocks:        201.182.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9c:37:02:bf:42:f9:13:7d:c8:a5:73:ef:58:6e:97:4e:db:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Mar  5 18:18:24 2024 GMT
            Not After : Mar  4 18:23:24 2025 GMT
        Subject: CN=14019AB16C64A34FD34C6560261D3423EC4B5C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:44:36:f9:72:a7:3b:52:40:38:21:74:86:
                    bd:8f:1b:1f:da:fd:64:73:40:0a:6d:e0:da:2d:f8:
                    88:9f:28:f1:46:58:f8:3f:72:ad:b6:46:66:ac:8e:
                    bc:ba:c1:83:40:cd:e6:96:e7:96:8a:57:c2:c4:d5:
                    99:57:06:e1:04:d7:66:d5:da:4c:35:26:cd:1f:25:
                    34:6b:08:7c:92:11:c0:b4:30:70:60:2b:a7:72:88:
                    16:a6:73:9c:d2:9d:15:44:a4:2a:d5:05:c6:44:0d:
                    e2:b5:fd:c7:6b:0c:d0:21:52:4d:be:dc:59:72:0d:
                    93:92:5d:bb:21:02:b3:af:41:58:a2:69:19:c3:4e:
                    33:ce:a4:26:f0:c4:23:71:5a:19:8a:34:cb:3c:25:
                    1f:9a:72:a6:ee:5d:15:2e:e7:5f:c3:42:86:b0:47:
                    b1:dd:4e:44:a5:19:90:ca:4b:fb:d0:b2:b4:9a:2a:
                    dc:b7:8e:74:f7:1d:ee:c6:47:75:e1:05:be:b1:3e:
                    40:90:ad:07:ed:62:b0:53:4e:d7:61:f7:31:08:03:
                    67:4b:59:08:a0:bf:bc:3a:f5:80:c7:84:fa:3b:82:
                    06:fa:02:26:c3:6d:56:b8:a2:fd:8a:b0:21:a9:62:
                    b1:f7:b9:ea:1a:92:39:96:c9:b3:23:9a:d5:a9:5b:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:9A:B1:6C:64:A3:4F:D3:4C:65:60:26:1D:34:23:EC:4B:5C:68
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:d2:b5:49:17:78:ec:69:32:4e:95:cb:fc:df:50:2f:65:
         0a:b7:62:5d:6e:05:ea:e5:d6:f2:20:d2:97:65:fb:4c:bf:4b:
         76:c7:a3:9b:98:6b:1a:89:fa:46:39:72:72:99:7c:df:1b:ad:
         13:39:d2:33:a4:fc:5f:5d:53:ee:b5:ef:06:fa:34:0d:fe:77:
         bb:e0:fc:6e:02:d0:51:8d:b4:7b:ee:82:e3:c6:9c:ba:fa:17:
         01:34:3a:2b:cc:a4:b8:51:ad:db:d2:1e:1a:b3:bc:f1:da:44:
         ac:ce:16:17:39:34:6e:54:19:14:9d:d9:0c:3c:64:8a:a3:a3:
         5e:05:25:ae:f5:93:a9:f9:0e:57:ff:6b:b2:80:d6:4a:b3:2b:
         64:1b:1f:c6:2c:b9:ee:28:eb:81:1f:e1:76:54:ca:c4:56:1d:
         e1:1c:0e:b4:d0:68:3c:6d:a2:05:28:7c:f2:82:9f:3e:2e:06:
         88:f0:c8:a2:68:bd:58:16:2a:aa:84:29:52:f2:8a:b1:a9:c0:
         58:44:0d:ce:b6:26:5e:e4:54:ce:0c:d7:af:01:c0:e4:4e:56:
         3f:b8:1d:e7:95:6a:85:cf:4a:d2:c2:b7:8e:f3:39:81:4d:66:
         7c:8d:cd:27:d7:94:32:35:3f:f9:e2:19:c6:5d:fd:41:29:5d:
         fb:bf:21:ed
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJZw3Ar9C+RN9yKVz71hul07bzNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4NjJBOUJGQ0I5N0VFNkI2MkNFMURCMDc3RTNCNkVB
RDVGRTI1MzAeFw0yNDAzMDUxODE4MjRaFw0yNTAzMDQxODIzMjRaMDMxMTAvBgNV
BAMTKDE0MDE5QUIxNkM2NEEzNEZEMzRDNjU2MDI2MUQzNDIzRUM0QjVDNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kEQ2+XKnO1JAOCF0hr2PGx/a
/WRzQApt4Not+IifKPFGWPg/cq22Rmasjry6wYNAzeaW55aKV8LE1ZlXBuEE12bV
2kw1Js0fJTRrCHySEcC0MHBgK6dyiBamc5zSnRVEpCrVBcZEDeK1/cdrDNAhUk2+
3FlyDZOSXbshArOvQViiaRnDTjPOpCbwxCNxWhmKNMs8JR+acqbuXRUu51/DQoaw
R7HdTkSlGZDKS/vQsrSaKty3jnT3He7GR3XhBb6xPkCQrQftYrBTTtdh9zEIA2dL
WQigv7w69YDHhPo7ggb6AibDbVa4ov2KsCGpYrH3ueoakjmWybMjmtWpW8l7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFAGasWxko0/TTGVgJh00I+xLXGgwHwYDVR0j
BBgwFoAUA4Yqm/y5fua2LOHbB347bq1f4lMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEM4OUQ0MzE2OTY2NEI5QjBGNDI3Nzk3NDlCOEUyNzE4
NEJFMTA3OUQ1N0M3QTc2QTc2RDVEODgxMDhGODBDLzAvMDM4NjJBOUJGQ0I5N0VF
NkI2MkNFMURCMDc3RTNCNkVBRDVGRTI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMzg2MkE5QkZDQjk3RUU2QjYy
Q0UxREIwNzdFM0I2RUFENUZFMjUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRDODlENDMxNjk2NjRCOUIwRjQyNzc5NzQ5QjhFMjcxODRCRTEwNzlE
NTdDN0E3NkE3NkQ1RDg4MTA4RjgwQy8wLzMyMzAzMTJlMzEzODMyMmUzMTM1MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBybaW
MA0GCSqGSIb3DQEBCwUAA4IBAQBlStK1SRd47GkyTpXL/N9QL2UKt2JdbgXq5dby
INKXZftMv0t2x6ObmGsaifpGOXJymXzfG60TOdIzpPxfXVPute8G+jQN/ne74Pxu
AtBRjbR77oLjxpy6+hcBNDorzKS4Ua3b0h4as7zx2kSszhYXOTRuVBkUndkMPGSK
o6NeBSWu9ZOp+Q5X/2uygNZKsytkGx/GLLnuKOuBH+F2VMrEVh3hHA600Gg8baIF
KHzygp8+LgaI8MiiaL1YFiqqhClS8oqxqcBYRA3OtiZe5FTODNevAcDkTlY/uB3n
lWqFz0rSwreO8zmBTWZ8jc0n15QyNT/54hnGXf1BKV37vyHt
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org