Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa
File:                     3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          TX/03drvPQBB2wqH3o/jrTtCEwqdugqlJs5oHIS8R40=
Subject key identifier:   EC:1C:A9:8B:BE:B9:17:80:57:A0:9F:8C:D9:AA:34:36:14:16:A4:94
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       62324BACF2A71099521F0D2AE88CC6390DCC6D82
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa
Signing time:             Wed 02 Oct 2024 03:45:00 +0000
ROA not before:           Wed 02 Oct 2024 03:40:00 +0000
ROA not after:            Wed 01 Oct 2025 03:45:00 +0000
asID:                     266777
IP address blocks:        160.20.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:4b:ac:f2:a7:10:99:52:1f:0d:2a:e8:8c:c6:39:0d:cc:6d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Oct  2 03:40:00 2024 GMT
            Not After : Oct  1 03:45:00 2025 GMT
        Subject: CN=EC1CA98BBEB9178057A09F8CD9AA34361416A494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:cd:e8:4d:44:e6:07:a3:28:d1:f3:ec:ae:
                    f2:9a:85:8e:0a:08:76:3d:d8:7b:a5:d8:5d:ca:73:
                    70:2f:c2:0c:ad:17:bc:dd:4f:73:21:5a:5a:5a:32:
                    80:b2:92:8b:fc:24:bb:d0:db:26:ed:b9:ba:e4:28:
                    6d:86:48:a2:2b:bf:ee:3b:6e:e2:5e:64:9e:a9:17:
                    22:21:85:d7:88:df:56:1a:c2:50:86:18:1e:4f:cc:
                    05:fc:e6:ad:eb:0f:c2:4c:44:0f:47:4c:b5:32:0b:
                    16:8f:d8:69:98:74:6a:52:27:20:ba:22:4e:90:0b:
                    33:85:e5:f7:86:6d:a4:86:59:e9:45:6c:33:20:81:
                    b0:63:5f:38:5e:91:83:c8:e9:4c:fb:c3:01:f6:7a:
                    49:3b:8f:9f:96:a2:b9:5e:f3:9b:ae:77:63:04:4e:
                    0f:9a:ec:c6:d5:98:be:59:fd:54:14:32:88:f0:51:
                    c7:b2:07:47:85:1f:dd:2f:4f:1f:27:be:9c:95:12:
                    58:9a:77:3d:13:8a:5b:1b:19:94:c9:e4:ea:5a:3c:
                    42:7d:88:70:a0:37:32:4c:cf:d2:d1:c0:8e:e8:a6:
                    c7:34:48:46:18:03:99:f1:e3:e4:fe:59:77:a3:a6:
                    d9:89:03:5d:9b:0f:88:3e:d4:c4:49:bd:f6:9d:a4:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1C:A9:8B:BE:B9:17:80:57:A0:9F:8C:D9:AA:34:36:14:16:A4:94
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/3136302e32302e3234372e302f32342d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:b3:48:29:2e:51:3b:a4:e0:d2:fd:75:c3:54:13:54:d8:
         20:d3:90:dc:f9:38:1b:42:b6:9d:bb:1e:47:2f:71:f0:20:f8:
         d4:5d:69:6f:fa:aa:03:1b:49:4e:33:dc:e4:8c:3b:f7:f1:a8:
         4b:d7:5a:ac:de:87:b1:0e:f3:76:59:32:af:35:fb:d4:01:21:
         60:61:cf:2c:b7:0c:cf:bd:c7:3e:dc:e4:2e:b0:eb:fe:46:81:
         31:a8:22:42:c8:e5:05:d8:86:e2:ff:0d:63:da:01:3e:bb:9b:
         c4:f8:cf:07:54:c5:7a:2a:a2:7e:b1:15:2e:6c:c3:65:88:14:
         5a:eb:16:ab:bd:f2:e2:39:70:24:7a:90:4c:e3:77:e1:dc:e2:
         48:37:fd:57:a7:d1:ba:f7:4e:f1:bf:c5:a4:93:8e:40:f6:b6:
         13:63:f8:e4:0d:40:a5:b0:14:1c:d4:18:e6:bc:d0:3a:55:b1:
         84:d5:ac:c4:a0:a6:9e:f5:21:a7:fd:57:5c:b0:4d:19:39:c4:
         b3:79:a6:4c:99:bb:80:a2:c4:55:93:b5:7d:50:91:9c:a3:88:
         33:4b:7f:8c:52:85:2d:b6:be:5b:1e:2a:e9:b9:69:c4:cc:32:
         38:fe:52:2e:06:6d:97:85:6c:3f:a4:81:3d:f3:d4:4d:6d:59:
         0a:36:b9:2f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYjJLrPKnEJlSHw0q6IzGOQ3MbYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk5MDA4RjNDMzMzNjI3RTlGOEM2OTM5MzcwNjk2Rjcw
NDlDMjJFQjAeFw0yNDEwMDIwMzQwMDBaFw0yNTEwMDEwMzQ1MDBaMDMxMTAvBgNV
BAMTKEVDMUNBOThCQkVCOTE3ODA1N0EwOUY4Q0Q5QUEzNDM2MTQxNkE0OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsfs3oTUTmB6Mo0fPsrvKahY4K
CHY92Hul2F3Kc3AvwgytF7zdT3MhWlpaMoCykov8JLvQ2ybtubrkKG2GSKIrv+47
buJeZJ6pFyIhhdeI31YawlCGGB5PzAX85q3rD8JMRA9HTLUyCxaP2GmYdGpSJyC6
Ik6QCzOF5feGbaSGWelFbDMggbBjXzhekYPI6Uz7wwH2ekk7j5+Worle85uud2ME
Tg+a7MbVmL5Z/VQUMojwUceyB0eFH90vTx8nvpyVEliadz0TilsbGZTJ5OpaPEJ9
iHCgNzJMz9LRwI7opsc0SEYYA5nx4+T+WXejptmJA12bD4g+1MRJvfadpH0nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7Bypi765F4BXoJ+M2ao0NhQWpJQwHwYDVR0j
BBgwFoAU6ZAI88MzYn6fjGk5NwaW9wScIuswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CN0VCQ0Y0MDdGNjJCQUYxMzNEQ0UwODBDMzFBRTdENEYy
Q0VGOEE2MDNBNDcyQkNFNEE3OEVCQ0E5MzJDODRFLzAvRTk5MDA4RjNDMzMzNjI3
RTlGOEM2OTM5MzcwNjk2RjcwNDlDMjJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTkwMDhGM0MzMzM2MjdFOUY4
QzY5MzkzNzA2OTZGNzA0OUMyMkVCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjdFQkNGNDA3RjYyQkFGMTMzRENFMDgwQzMxQUU3RDRGMkNFRjhBNjAz
QTQ3MkJDRTRBNzhFQkNBOTMyQzg0RS8wLzMxMzYzMDJlMzIzMDJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBT3
MA0GCSqGSIb3DQEBCwUAA4IBAQA7n7NIKS5RO6Tg0v11w1QTVNgg05Dc+TgbQrad
ux5HL3HwIPjUXWlv+qoDG0lOM9zkjDv38ahL11qs3oexDvN2WTKvNfvUASFgYc8s
twzPvcc+3OQusOv+RoExqCJCyOUF2Ibi/w1j2gE+u5vE+M8HVMV6KqJ+sRUubMNl
iBRa6xarvfLiOXAkepBM43fh3OJIN/1Xp9G6907xv8Wkk45A9rYTY/jkDUClsBQc
1BjmvNA6VbGE1azEoKae9SGn/VdcsE0ZOcSzeaZMmbuAosRVk7V9UJGco4gzS3+M
UoUttr5bHirpuWnEzDI4/lIuBm2XhWw/pIE989RNbVkKNrkv
-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:37 2024 by rpki-client on console-fra.rpki-client.org