Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa
File:                     3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa (raw, json)
Hash identifier:          p5yx2nWP0i1zjNwHHbO2pbni63IyrAU5wPBKq13gSxM=
Subject key identifier:   4A:A6:A5:A3:CE:8A:CA:68:D0:B5:92:DF:A6:5C:E9:84:05:20:9B:6B
Certificate issuer:       /CN=F941F05838322F3861C4923BEDA92F310248FAF9
Certificate serial:       31683900F4D41288A2682C2A2EDEBE0C2A0511DF
Authority key identifier: F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa
Signing time:             Tue 05 Mar 2024 18:22:22 +0000
ROA not before:           Tue 05 Mar 2024 18:17:22 +0000
ROA not after:            Tue 04 Mar 2025 18:22:22 +0000
asID:                     272035
IP address blocks:        181.232.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:68:39:00:f4:d4:12:88:a2:68:2c:2a:2e:de:be:0c:2a:05:11:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F941F05838322F3861C4923BEDA92F310248FAF9
        Validity
            Not Before: Mar  5 18:17:22 2024 GMT
            Not After : Mar  4 18:22:22 2025 GMT
        Subject: CN=4AA6A5A3CE8ACA68D0B592DFA65CE98405209B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:ef:04:5d:60:d5:e3:7f:d8:dc:c4:53:74:
                    da:e8:38:b4:03:11:45:fa:a1:14:53:3c:f3:0c:0f:
                    26:3d:ca:46:5a:aa:bb:71:eb:16:6d:11:1f:92:6e:
                    18:97:e5:b5:c4:df:fb:e1:3c:9a:8b:df:e2:ea:ff:
                    1f:8f:cb:5b:e3:62:18:5c:01:ce:0d:a3:c1:3d:63:
                    4f:a0:8f:96:c1:60:db:e4:e5:77:b3:4e:82:b8:91:
                    ff:6f:0b:f8:72:7b:b6:f8:0d:f0:c2:5c:43:82:61:
                    05:b5:5d:06:76:31:e3:26:8a:d9:e5:97:59:bc:df:
                    fb:3f:8b:8a:e6:6f:29:42:db:8d:d6:02:18:26:c2:
                    ea:f1:13:ab:dd:27:36:08:ea:e6:74:b4:6d:58:22:
                    15:4f:28:dc:50:4b:06:95:b3:53:10:a4:8e:ba:35:
                    f3:c8:6c:03:e4:ab:7e:41:66:02:f5:ce:fd:53:2e:
                    3e:d8:87:98:51:7a:56:11:21:c3:da:4d:f3:bc:d4:
                    d7:16:95:b5:90:e6:aa:3a:55:74:63:25:d8:51:2b:
                    56:1e:02:22:21:bd:77:80:00:e6:8d:82:91:89:cc:
                    1b:bc:a2:1a:27:ae:dc:46:63:b5:23:7c:d8:7c:a6:
                    a1:d6:fc:a0:87:2c:ab:c4:eb:1b:7a:59:49:ea:c1:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:A5:A3:CE:8A:CA:68:D0:B5:92:DF:A6:5C:E9:84:05:20:9B:6B
            X509v3 Authority Key Identifier:
                keyid:F9:41:F0:58:38:32:2F:38:61:C4:92:3B:ED:A9:2F:31:02:48:FA:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/F941F05838322F3861C4923BEDA92F310248FAF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F941F05838322F3861C4923BEDA92F310248FAF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA9B4EA14C2F7117C72F1F0CEFFA6B5D03AB35E213305D4D00264FF9723854F6/0/3138312e3233322e3235352e302f32342d3234203d3e20323732303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:62:53:8b:b4:f0:20:f5:37:95:5e:90:9a:98:e3:c8:6a:de:
         4e:41:95:4a:6f:4e:35:f1:da:42:7c:60:d4:98:dd:8a:7f:d8:
         56:d1:d9:fd:9a:9f:1a:0a:90:4a:5f:37:78:40:b0:d5:b1:ee:
         f7:99:51:2f:54:11:6f:b2:90:5a:47:f1:3e:40:1f:e2:64:df:
         72:c4:93:d1:01:e7:b3:9f:27:da:9e:73:00:0e:da:db:8a:04:
         1b:80:ad:c9:96:17:7f:99:f5:6c:95:5a:37:82:00:8a:5a:9b:
         73:f2:e4:86:da:cb:29:46:9c:4e:6b:7b:a9:4b:e6:dd:db:3c:
         0a:8c:20:38:94:14:5d:19:47:33:9b:9a:ec:a7:f9:fc:ed:29:
         04:eb:3b:62:d6:54:ee:8f:a7:74:04:10:fd:01:96:81:f3:87:
         d1:b7:bb:8e:f5:09:94:e9:30:09:96:71:1f:8a:3c:5f:c0:b4:
         3a:92:62:89:06:b7:45:5f:da:8f:48:a8:a3:66:54:cd:55:13:
         8a:ac:73:6c:9f:e3:a7:a3:8b:58:45:3f:4e:23:61:33:c6:2b:
         fb:eb:48:50:47:71:64:a0:f8:28:da:7d:16:a3:61:f5:cf:46:
         df:1d:1b:16:8b:27:18:ef:3d:d2:3e:00:ba:8f:8b:45:bf:9c:
         c1:79:75:49
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMWg5APTUEoiiaCwqLt6+DCoFEd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0MUYwNTgzODMyMkYzODYxQzQ5MjNCRURBOTJGMzEw
MjQ4RkFGOTAeFw0yNDAzMDUxODE3MjJaFw0yNTAzMDQxODIyMjJaMDMxMTAvBgNV
BAMTKDRBQTZBNUEzQ0U4QUNBNjhEMEI1OTJERkE2NUNFOTg0MDUyMDlCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngu8EXWDV43/Y3MRTdNroOLQD
EUX6oRRTPPMMDyY9ykZaqrtx6xZtER+SbhiX5bXE3/vhPJqL3+Lq/x+Py1vjYhhc
Ac4No8E9Y0+gj5bBYNvk5XezToK4kf9vC/hye7b4DfDCXEOCYQW1XQZ2MeMmitnl
l1m83/s/i4rmbylC243WAhgmwurxE6vdJzYI6uZ0tG1YIhVPKNxQSwaVs1MQpI66
NfPIbAPkq35BZgL1zv1TLj7Yh5hRelYRIcPaTfO81NcWlbWQ5qo6VXRjJdhRK1Ye
AiIhvXeAAOaNgpGJzBu8ohonrtxGY7UjfNh8pqHW/KCHLKvE6xt6WUnqwbj/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUSqalo86KymjQtZLfplzphAUgm2swHwYDVR0j
BBgwFoAU+UHwWDgyLzhhxJI77akvMQJI+vkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTlCNEVBMTRDMkY3MTE3QzcyRjFGMENFRkZBNkI1RDAz
QUIzNUUyMTMzMDVENEQwMDI2NEZGOTcyMzg1NEY2LzAvRjk0MUYwNTgzODMyMkYz
ODYxQzQ5MjNCRURBOTJGMzEwMjQ4RkFGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GOTQxRjA1ODM4MzIyRjM4NjFD
NDkyM0JFREE5MkYzMTAyNDhGQUY5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE5QjRFQTE0QzJGNzExN0M3MkYxRjBDRUZGQTZCNUQwM0FCMzVFMjEz
MzA1RDREMDAyNjRGRjk3MjM4NTRGNi8wLzMxMzgzMTJlMzIzMzMyMmUzMjM1MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMDMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
6P8wDQYJKoZIhvcNAQELBQADggEBAFdiU4u08CD1N5VekJqY48hq3k5BlUpvTjXx
2kJ8YNSY3Yp/2FbR2f2anxoKkEpfN3hAsNWx7veZUS9UEW+ykFpH8T5AH+Jk33LE
k9EB57OfJ9qecwAO2tuKBBuArcmWF3+Z9WyVWjeCAIpam3Py5IbayylGnE5re6lL
5t3bPAqMIDiUFF0ZRzObmuyn+fztKQTrO2LWVO6Pp3QEEP0BloHzh9G3u471CZTp
MAmWcR+KPF/AtDqSYokGt0Vf2o9IqKNmVM1VE4qsc2yf46eji1hFP04jYTPGK/vr
SFBHcWSg+CjafRajYfXPRt8dGxaLJxjvPdI+ALqPi0W/nMF5dUk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:44 2024 by rpki-client on console-fra.rpki-client.org