Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa
File:                     3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (raw, json)
Hash identifier:          0Ws37RO9MoYEBvwu4yRleZPu3kz4XNP88MnonMRyFYA=
Subject key identifier:   CC:07:25:88:94:54:97:07:7B:74:7E:63:FB:53:F1:11:5B:C1:3F:4D
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       0162CB61E985675F302D118326098855A186C5C0
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     273006
IP address blocks:        201.131.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:62:cb:61:e9:85:67:5f:30:2d:11:83:26:09:88:55:a1:86:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=CC072588945497077B747E63FB53F1115BC13F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:08:8a:0d:b4:c1:c0:b7:9b:e2:36:29:1f:
                    bc:24:c0:38:b3:21:39:ab:1e:20:bb:ad:19:65:86:
                    c5:7f:eb:aa:dc:be:a0:c2:91:e2:ce:b6:93:51:8d:
                    7e:c1:4a:fc:83:3e:5d:ca:30:ef:df:0c:94:2e:13:
                    b1:2c:52:ef:86:d0:95:1a:81:01:75:19:84:1e:71:
                    8f:6b:78:28:40:f5:fb:6f:a8:6a:5f:d8:73:da:83:
                    fa:af:5c:77:eb:2f:c3:e8:29:b1:b6:0d:a5:92:ab:
                    de:f3:68:c7:64:3e:39:2d:9e:e4:57:db:0b:88:69:
                    80:64:b6:f8:f2:8e:75:4a:aa:80:93:ad:46:1d:4d:
                    33:7d:96:fc:99:fe:53:db:92:83:09:37:fc:9f:3e:
                    41:77:7f:1a:b9:6d:38:49:d3:a2:64:ba:d1:99:3a:
                    41:88:d3:ee:4e:ae:81:45:fa:e7:03:50:c8:3a:87:
                    1c:5b:f6:11:f9:42:b9:3f:86:69:7b:95:01:ec:9f:
                    41:ba:a8:a9:22:26:2f:55:56:62:68:4d:be:34:3d:
                    91:67:71:3e:cc:42:b8:00:3d:df:34:5b:5f:2c:27:
                    76:db:1d:f0:c2:e5:89:2f:e6:18:37:23:d6:6d:c2:
                    ee:78:aa:c4:e1:b6:07:52:cb:ce:ab:2a:03:28:4d:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:25:88:94:54:97:07:7B:74:7E:63:FB:53:F1:11:5B:C1:3F:4D
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:98:65:7c:57:01:32:fa:9d:9c:c2:e1:d7:ed:7c:e0:0e:7f:
         83:8b:cb:d4:5f:b2:4e:da:b1:4e:e6:80:7c:0a:ad:c4:62:48:
         15:23:f6:fe:31:4f:11:b0:1b:cc:9e:16:66:75:60:da:0f:4c:
         81:ba:d9:f4:25:5a:0d:9b:2e:bd:a6:04:b9:f1:c1:ec:70:37:
         f4:5b:c0:4f:55:07:bf:08:f8:2f:02:00:30:01:60:0c:6d:f4:
         5d:d8:12:de:e2:18:fd:ec:48:d8:75:4d:08:2b:9e:7b:bf:af:
         d7:48:d4:16:e1:a1:c6:0c:89:e8:73:66:d5:6c:c3:01:31:d8:
         da:65:b2:b4:f2:35:e9:2e:d7:e2:bd:c1:28:5c:f4:69:e0:0a:
         8c:50:6d:1f:33:4a:8f:a1:25:6a:aa:40:16:9c:d6:e8:96:72:
         2b:71:2a:08:cd:ba:ea:c1:ff:12:d0:cc:79:62:fd:d6:64:88:
         7a:b6:f2:f9:aa:40:61:4e:be:ec:36:42:d2:4c:6f:aa:a5:a6:
         59:12:99:75:3c:bf:2d:09:5e:a1:77:45:d3:8b:9c:c7:a9:be:
         91:8c:a1:e7:36:8d:3e:69:c3:0e:fc:be:50:54:b4:1e:7c:9b:
         bc:f8:ab:db:c8:53:26:04:80:85:21:a8:7e:01:88:f8:c5:94:
         9d:fe:85:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAWLLYemFZ18wLRGDJgmIVaGGxcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx
MERBN0Q0NTAeFw0yNDAzMDUxNzM1NTVaFw0yNTAzMDQxNzQwNTVaMDMxMTAvBgNV
BAMTKENDMDcyNTg4OTQ1NDk3MDc3Qjc0N0U2M0ZCNTNGMTExNUJDMTNGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZAiKDbTBwLeb4jYpH7wkwDiz
ITmrHiC7rRllhsV/66rcvqDCkeLOtpNRjX7BSvyDPl3KMO/fDJQuE7EsUu+G0JUa
gQF1GYQecY9reChA9ftvqGpf2HPag/qvXHfrL8PoKbG2DaWSq97zaMdkPjktnuRX
2wuIaYBktvjyjnVKqoCTrUYdTTN9lvyZ/lPbkoMJN/yfPkF3fxq5bThJ06JkutGZ
OkGI0+5OroFF+ucDUMg6hxxb9hH5Qrk/hml7lQHsn0G6qKkiJi9VVmJoTb40PZFn
cT7MQrgAPd80W18sJ3bbHfDC5Ykv5hg3I9Ztwu54qsThtgdSy86rKgMoTdg5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzAcliJRUlwd7dH5j+1PxEVvBP00wHwYDVR0j
BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3
QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz
RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5
MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx
MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzMyMzAzMTJlMzEzMzMxMmUzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYNY
MA0GCSqGSIb3DQEBCwUAA4IBAQApmGV8VwEy+p2cwuHX7XzgDn+Di8vUX7JO2rFO
5oB8Cq3EYkgVI/b+MU8RsBvMnhZmdWDaD0yButn0JVoNmy69pgS58cHscDf0W8BP
VQe/CPgvAgAwAWAMbfRd2BLe4hj97EjYdU0IK557v6/XSNQW4aHGDInoc2bVbMMB
MdjaZbK08jXpLtfivcEoXPRp4AqMUG0fM0qPoSVqqkAWnNbolnIrcSoIzbrqwf8S
0Mx5Yv3WZIh6tvL5qkBhTr7sNkLSTG+qpaZZEpl1PL8tCV6hd0XTi5zHqb6RjKHn
No0+acMO/L5QVLQefJu8+KvbyFMmBICFIah+AYj4xZSd/oUc
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org