Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa
File:                     3135322e3233312e33322e302f32302d3234203d3e203238303336.roa (raw, json)
Hash identifier:          42m8HDGZWchRiJspvlwtbNe50PJOfRP+7T8vLxUgUCU=
Subject key identifier:   98:1A:BE:DF:97:EE:7B:A9:9E:EB:34:4B:50:86:A7:DD:F8:A9:CB:90
Certificate issuer:       /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial:       73601C71AC849580C887057E09E6FE3BCF2209E0
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa
Signing time:             Wed 18 Dec 2024 17:15:00 +0000
ROA not before:           Wed 18 Dec 2024 17:10:00 +0000
ROA not after:            Wed 17 Dec 2025 17:15:00 +0000
asID:                     28036
IP address blocks:        152.231.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:60:1c:71:ac:84:95:80:c8:87:05:7e:09:e6:fe:3b:cf:22:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
        Validity
            Not Before: Dec 18 17:10:00 2024 GMT
            Not After : Dec 17 17:15:00 2025 GMT
        Subject: CN=981ABEDF97EE7BA99EEB344B5086A7DDF8A9CB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:06:3b:9a:ca:d2:84:5e:ed:c7:2b:0a:1a:
                    df:d5:c1:37:75:b5:3d:fa:00:ef:f0:bf:47:e6:4d:
                    c7:51:6a:ba:bb:aa:e9:82:22:12:b1:01:f4:35:53:
                    a8:ff:0a:97:4b:2d:75:49:74:65:88:28:2f:ec:40:
                    75:40:fd:d1:e7:cf:57:0a:37:80:67:dc:08:0e:b6:
                    4f:2e:ec:19:3e:59:89:10:04:a6:b6:b7:26:9c:02:
                    a1:12:5d:3f:d8:9a:be:a1:de:93:27:0a:b5:0b:a7:
                    f1:7e:ef:fe:f3:f4:1a:64:4c:44:66:18:7f:81:30:
                    bf:41:bf:2a:d9:9f:03:6c:0b:13:37:b8:65:d0:f0:
                    2b:67:1d:28:c1:59:da:44:a7:62:7c:ec:2f:af:c6:
                    dd:fe:38:10:f8:8a:75:18:0f:53:a0:9f:c3:15:0d:
                    25:76:cc:47:d0:a7:e2:87:11:18:64:2f:f8:56:84:
                    b4:cc:ab:93:32:ce:af:98:99:7b:53:33:31:07:66:
                    01:1f:64:fd:1b:6f:85:e8:f7:49:f2:7b:c3:8d:24:
                    39:bc:46:6b:fd:8e:5a:75:1a:cc:db:b1:51:51:ff:
                    65:c6:28:dd:77:20:0d:3a:a1:9c:5b:e7:03:ae:45:
                    ad:c2:08:5e:26:2a:7c:58:e7:db:8a:17:c2:5e:30:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:BE:DF:97:EE:7B:A9:9E:EB:34:4B:50:86:A7:DD:F8:A9:CB:90
            X509v3 Authority Key Identifier:
                keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:2d:d7:dd:c1:87:2c:e8:3d:31:97:50:43:63:02:dd:7d:
         96:cd:db:6a:27:55:23:f5:0e:91:bd:60:86:e0:df:47:2b:51:
         d2:a3:9f:d4:cc:96:3d:9e:c0:ca:80:7a:ca:86:38:88:54:c9:
         50:ac:31:af:73:03:d5:03:ec:52:14:86:73:99:72:12:7b:b6:
         77:26:b5:3f:61:28:7a:28:9a:22:b6:4a:a9:89:4c:dc:3a:d5:
         b3:4a:7f:d8:61:7d:24:90:3b:06:2d:a6:82:b6:76:7c:b2:dd:
         e2:e0:e9:93:59:2a:e5:ab:4c:35:03:6e:f8:00:9c:c2:67:d0:
         22:bd:da:b9:79:59:df:bf:2d:13:47:9c:b8:f8:4c:a8:f8:6b:
         98:ee:3c:f5:da:59:46:4f:77:8a:80:4c:b1:dc:57:0a:3c:8b:
         d7:7b:d0:17:c6:83:cb:2d:b7:e9:ee:84:2e:77:74:4a:75:a5:
         0c:ad:1a:94:79:82:e1:b0:7e:7f:65:18:e5:40:a6:37:43:77:
         ab:42:83:45:e2:8d:a5:2f:37:57:39:3b:a5:46:77:10:c4:c2:
         cf:bc:da:7d:d2:b5:45:a6:02:d0:5e:c5:99:18:45:48:23:ee:
         f1:5e:74:2c:67:7d:a2:67:60:9a:f4:9c:d7:55:dc:2d:a5:c9:
         d7:57:80:5a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUc2AccayElYDIhwV+Ceb+O88iCeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYyRkMzRkMwNERDMTQ2MkJDNjg5NjM0MUIyMjhGNDhC
NkFBMDZFMjAeFw0yNDEyMTgxNzEwMDBaFw0yNTEyMTcxNzE1MDBaMDMxMTAvBgNV
BAMTKDk4MUFCRURGOTdFRTdCQTk5RUVCMzQ0QjUwODZBN0RERjhBOUNCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FgY7msrShF7txysKGt/VwTd1
tT36AO/wv0fmTcdRarq7qumCIhKxAfQ1U6j/CpdLLXVJdGWIKC/sQHVA/dHnz1cK
N4Bn3AgOtk8u7Bk+WYkQBKa2tyacAqESXT/Ymr6h3pMnCrULp/F+7/7z9BpkTERm
GH+BML9BvyrZnwNsCxM3uGXQ8CtnHSjBWdpEp2J87C+vxt3+OBD4inUYD1Ogn8MV
DSV2zEfQp+KHERhkL/hWhLTMq5Myzq+YmXtTMzEHZgEfZP0bb4Xo90nye8ONJDm8
Rmv9jlp1GszbsVFR/2XGKN13IA06oZxb5wOuRa3CCF4mKnxY59uKF8JeMGpfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmBq+35fue6me6zRLUIan3fipy5AwHwYDVR0j
BBgwFoAUny/D/ATcFGK8aJY0GyKPSLaqBuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BODg2OTY3NDAwOTI1NjM2OTVBMTU4OUQzMDE2MTJGQTlE
RTJGQ0RDMjFCRjI5NUE0NTQyM0E5NEY5RjBCMkYyLzAvOUYyRkMzRkMwNERDMTQ2
MkJDNjg5NjM0MUIyMjhGNDhCNkFBMDZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjJGQzNGQzA0REMxNDYyQkM2
ODk2MzQxQjIyOEY0OEI2QUEwNkUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTg4Njk2NzQwMDkyNTYzNjk1QTE1ODlEMzAxNjEyRkE5REUyRkNEQzIx
QkYyOTVBNDU0MjNBOTRGOUYwQjJGMi8wLzMxMzUzMjJlMzIzMzMxMmUzMzMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMwMzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJjnIDAN
BgkqhkiG9w0BAQsFAAOCAQEATJYt193BhyzoPTGXUENjAt19ls3baidVI/UOkb1g
huDfRytR0qOf1MyWPZ7AyoB6yoY4iFTJUKwxr3MD1QPsUhSGc5lyEnu2dya1P2Eo
eiiaIrZKqYlM3DrVs0p/2GF9JJA7Bi2mgrZ2fLLd4uDpk1kq5atMNQNu+ACcwmfQ
Ir3auXlZ378tE0ecuPhMqPhrmO489dpZRk93ioBMsdxXCjyL13vQF8aDyy236e6E
Lnd0SnWlDK0alHmC4bB+f2UY5UCmN0N3q0KDReKNpS83Vzk7pUZ3EMTCz7zafdK1
RaYC0F7FmRhFSCPu8V50LGd9omdgmvSc11XcLaXJ11eAWg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:49 2025 by rpki-client