Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3233302e302f32342d3234203d3e203230333231.roa
File:                     3230312e3231362e3233302e302f32342d3234203d3e203230333231.roa (raw, json)
Hash identifier:          bcGAQ+sROqjLCQcrdCz08RGPm3KATWvJn8szleA0hrg=
Subject key identifier:   67:80:EC:A6:0B:76:64:84:04:67:9D:5A:3F:81:70:36:B3:71:51:82
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       665655627385D2FF44B974B5E7752C33A4E836ED
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3233302e302f32342d3234203d3e203230333231.roa
Signing time:             Tue 05 Mar 2024 18:12:12 +0000
ROA not before:           Tue 05 Mar 2024 18:07:12 +0000
ROA not after:            Tue 04 Mar 2025 18:12:12 +0000
asID:                     20321
IP address blocks:        201.216.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:55:62:73:85:d2:ff:44:b9:74:b5:e7:75:2c:33:a4:e8:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:12 2024 GMT
            Not After : Mar  4 18:12:12 2025 GMT
        Subject: CN=6780ECA60B76648404679D5A3F817036B3715182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:79:a3:14:69:0d:c0:d9:46:bc:50:a7:99:
                    0c:22:a5:e8:62:8e:91:f1:fd:14:54:a4:60:24:42:
                    5c:c3:f8:6f:2e:a1:7e:58:8e:83:b2:b2:20:83:b9:
                    ee:99:03:24:73:f6:b8:40:5c:13:eb:fc:99:dc:83:
                    dc:89:b3:36:47:e1:4d:a8:8b:4e:7f:03:9f:fa:eb:
                    45:ac:45:45:23:c9:b6:de:8a:9b:86:28:6c:82:0a:
                    4c:09:69:e5:48:87:ca:2d:03:77:f1:78:8d:c4:f0:
                    30:da:53:3a:9b:41:94:b4:1f:88:77:04:89:fd:5e:
                    5b:aa:22:fc:ec:d2:31:f7:75:46:e7:a4:c3:53:31:
                    f9:bc:b4:d9:d0:fa:a7:36:f5:cd:1b:08:53:5c:f8:
                    3c:60:49:86:30:fc:96:82:39:5d:a8:93:3e:9a:0c:
                    2d:b0:51:dd:28:2e:30:1f:c6:ed:96:5b:e8:a8:3c:
                    fd:d7:24:1b:1c:79:6a:99:a6:94:c3:c1:54:73:e8:
                    8d:f7:71:a1:7e:26:3c:b6:91:3b:96:b4:42:87:25:
                    1c:6d:2a:9e:41:17:ef:4f:90:d8:01:dc:ff:b2:fb:
                    89:10:8f:d0:2c:bd:49:10:0e:72:89:37:76:1b:22:
                    92:56:2c:fc:c1:e0:e3:c8:8b:15:71:3e:7c:dc:b4:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:80:EC:A6:0B:76:64:84:04:67:9D:5A:3F:81:70:36:B3:71:51:82
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3233302e302f32342d3234203d3e203230333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:35:0e:a3:b0:93:d8:3d:8f:04:cb:0c:1b:ca:05:2f:80:40:
         32:eb:86:ba:4e:c9:2c:ea:56:a0:aa:d7:41:a7:6f:15:5e:6e:
         be:61:ae:3f:a6:a5:4f:15:09:7f:70:19:bb:8d:98:f5:1f:30:
         a7:2b:8d:92:62:89:2b:24:78:88:9f:50:ff:48:4b:94:80:9d:
         48:5e:f9:77:ad:9e:e5:3a:42:01:0b:86:b2:1f:55:43:54:d6:
         59:5c:82:63:53:bc:d3:bc:f2:c9:40:4d:cf:9f:6b:27:cb:d3:
         a3:16:f4:d4:ef:c9:9b:54:06:d7:73:ad:07:b5:29:2b:ba:d4:
         13:0f:71:9f:7f:b4:7b:7a:39:26:e1:f3:e9:4e:61:46:df:3e:
         16:59:a5:7f:52:4b:02:7c:a2:7b:02:bf:bd:cc:c1:5d:d0:9d:
         d0:46:9f:d0:3d:23:6d:a9:4b:67:55:da:3c:6b:29:5f:5a:5f:
         ef:83:37:28:de:e1:50:54:2a:4f:87:b6:45:4c:50:a5:33:88:
         81:57:73:52:dd:f1:83:f1:75:16:80:41:de:13:5a:7e:16:d3:
         1e:99:57:b1:2e:02:40:7b:59:b1:da:01:03:46:36:f1:9f:5e:
         b9:29:c1:3b:4c:c6:c8:59:f0:6b:f1:aa:52:01:18:68:60:e3:
         b7:de:41:2b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZlZVYnOF0v9EuXS153UsM6ToNu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNDAzMDUxODA3MTJaFw0yNTAzMDQxODEyMTJaMDMxMTAvBgNV
BAMTKDY3ODBFQ0E2MEI3NjY0ODQwNDY3OUQ1QTNGODE3MDM2QjM3MTUxODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/3mjFGkNwNlGvFCnmQwipehi
jpHx/RRUpGAkQlzD+G8uoX5YjoOysiCDue6ZAyRz9rhAXBPr/Jncg9yJszZH4U2o
i05/A5/660WsRUUjybbeipuGKGyCCkwJaeVIh8otA3fxeI3E8DDaUzqbQZS0H4h3
BIn9XluqIvzs0jH3dUbnpMNTMfm8tNnQ+qc29c0bCFNc+DxgSYYw/JaCOV2okz6a
DC2wUd0oLjAfxu2WW+ioPP3XJBsceWqZppTDwVRz6I33caF+Jjy2kTuWtEKHJRxt
Kp5BF+9PkNgB3P+y+4kQj9AsvUkQDnKJN3YbIpJWLPzB4OPIixVxPnzctKvnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZ4Dspgt2ZIQEZ51aP4FwNrNxUYIwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzAzMTJlMzIzMTM2MmUzMjMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAydjm
MA0GCSqGSIb3DQEBCwUAA4IBAQAiNQ6jsJPYPY8EywwbygUvgEAy64a6Tsks6lag
qtdBp28VXm6+Ya4/pqVPFQl/cBm7jZj1HzCnK42SYokrJHiIn1D/SEuUgJ1IXvl3
rZ7lOkIBC4ayH1VDVNZZXIJjU7zTvPLJQE3Pn2sny9OjFvTU78mbVAbXc60HtSkr
utQTD3Gff7R7ejkm4fPpTmFG3z4WWaV/UksCfKJ7Ar+9zMFd0J3QRp/QPSNtqUtn
Vdo8aylfWl/vgzco3uFQVCpPh7ZFTFClM4iBV3NS3fGD8XUWgEHeE1p+FtMemVex
LgJAe1mx2gEDRjbxn165KcE7TMbIWfBr8apSARhoYOO33kEr
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org