Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa
File:                     3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa (raw, json)
Hash identifier:          sfhJolPtn+gs2Vdh53W+HnASvKS5/56CumJyIVpfUcA=
Subject key identifier:   E0:61:06:EC:79:60:6B:4A:A3:35:32:81:E3:56:89:3D:53:31:61:6A
Certificate issuer:       /CN=F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0
Certificate serial:       66CBA2123741E0245BC2FFD8189AA65C99C3939A
Authority key identifier: F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa
Signing time:             Tue 05 Mar 2024 18:05:40 +0000
ROA not before:           Tue 05 Mar 2024 18:00:40 +0000
ROA not after:            Tue 04 Mar 2025 18:05:40 +0000
asID:                     263714
IP address blocks:        201.131.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cb:a2:12:37:41:e0:24:5b:c2:ff:d8:18:9a:a6:5c:99:c3:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0
        Validity
            Not Before: Mar  5 18:00:40 2024 GMT
            Not After : Mar  4 18:05:40 2025 GMT
        Subject: CN=E06106EC79606B4AA3353281E356893D5331616A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:77:98:ac:fb:55:88:c9:86:03:98:46:9e:
                    13:ee:3d:09:fb:0e:26:0b:64:ca:11:49:25:8c:6c:
                    20:9d:1d:d3:35:cb:29:c1:29:44:9b:b2:12:5a:2c:
                    b9:23:6f:b0:e6:99:5b:6a:8b:f8:af:ad:35:75:91:
                    34:69:69:a3:d5:65:23:cb:12:01:48:19:19:78:e7:
                    f6:b4:eb:ae:2b:a1:a0:a1:be:67:e5:34:4e:2b:27:
                    20:70:11:3e:07:1b:0d:eb:12:07:9d:70:dc:cf:5f:
                    6f:87:6c:88:ba:18:2f:72:65:c3:37:e6:a7:a8:82:
                    d6:6c:65:c0:35:17:02:57:5f:94:b5:14:51:9e:6b:
                    d5:93:d3:ac:9b:56:aa:65:da:05:e0:fe:f1:4a:f5:
                    ed:a3:75:c0:92:41:35:b1:1c:22:c3:34:17:84:7c:
                    a0:19:f2:46:74:ed:7f:42:50:7d:fb:3b:8a:b7:7f:
                    dc:ee:5b:51:cf:82:e6:29:fd:00:21:eb:91:7f:30:
                    4b:45:39:98:80:f2:9a:fd:e9:a5:40:fd:e3:96:e0:
                    c1:a2:5d:83:3c:2f:dd:28:f7:f7:a0:c0:78:49:c2:
                    71:e7:99:cf:cc:1d:cb:19:bf:f4:c1:fc:d7:f3:b3:
                    b6:78:6a:a6:80:a5:ee:b0:0f:6e:3f:43:20:41:28:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:61:06:EC:79:60:6B:4A:A3:35:32:81:E3:56:89:3D:53:31:61:6A
            X509v3 Authority Key Identifier:
                keyid:F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:86:16:ed:4d:71:ca:c8:96:88:e6:46:77:b4:cc:42:7c:
         bc:7e:42:d7:46:16:21:9d:3f:ec:79:37:d1:22:1a:f9:48:88:
         4b:e5:0f:e3:e1:1e:c7:e2:0d:73:62:54:69:b2:8b:b6:e6:20:
         83:02:ad:21:d8:bd:fb:8a:87:13:51:e7:1d:ee:d4:d3:7e:2d:
         a3:d9:b2:52:7b:cd:76:25:a2:e6:d8:5e:9d:b4:1d:70:92:d6:
         ee:7d:9f:a3:a9:22:4f:cc:2e:0f:f9:9e:03:a2:9d:93:fc:23:
         e0:a8:35:bb:c0:95:ff:09:fc:c0:56:ef:cb:af:c5:a3:cf:51:
         d8:94:db:4e:84:0c:f4:a5:8d:72:ed:b4:bc:14:ae:3a:1b:1c:
         22:54:a4:af:41:b9:5d:14:8a:0d:a4:d5:4e:d6:0c:8f:61:a5:
         4c:ea:0b:ec:86:b1:26:e5:c0:af:e9:82:da:5d:61:21:e3:31:
         4c:42:55:ff:e0:5d:5a:c5:cb:d3:6a:3a:be:f6:87:45:61:a4:
         41:a9:ee:8e:11:39:6f:da:9a:ed:3e:51:d7:87:70:eb:e4:a8:
         c3:45:ae:42:5e:39:86:6f:18:e8:d3:01:45:e7:0f:1b:d5:24:
         69:79:40:af:8d:8c:b3:2a:be:c8:5f:01:6d:73:0e:27:b0:82:
         df:14:77:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZsuiEjdB4CRbwv/YGJqmXJnDk5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdGMTlGNEQ2NzU3RkQwMjdCMkI5OUM1MUNCOUJBMjdE
MzJGMTRGMDAeFw0yNDAzMDUxODAwNDBaFw0yNTAzMDQxODA1NDBaMDMxMTAvBgNV
BAMTKEUwNjEwNkVDNzk2MDZCNEFBMzM1MzI4MUUzNTY4OTNENTMzMTYxNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTXeYrPtViMmGA5hGnhPuPQn7
DiYLZMoRSSWMbCCdHdM1yynBKUSbshJaLLkjb7DmmVtqi/ivrTV1kTRpaaPVZSPL
EgFIGRl45/a0664roaChvmflNE4rJyBwET4HGw3rEgedcNzPX2+HbIi6GC9yZcM3
5qeogtZsZcA1FwJXX5S1FFGea9WT06ybVqpl2gXg/vFK9e2jdcCSQTWxHCLDNBeE
fKAZ8kZ07X9CUH37O4q3f9zuW1HPguYp/QAh65F/MEtFOZiA8pr96aVA/eOW4MGi
XYM8L90o9/egwHhJwnHnmc/MHcsZv/TB/Nfzs7Z4aqaApe6wD24/QyBBKLnjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4GEG7Hlga0qjNTKB41aJPVMxYWowHwYDVR0j
BBgwFoAU9/GfTWdX/QJ7K5nFHLm6J9MvFPAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMUFCNjAwMkZBMjI1RTk4QkY0NzA4QTMyOEJBMDE0NDlC
MEFEM0VBQjJGNjVDMjQ5RkZCOTA0OERGOTY2RjY0LzAvRjdGMTlGNEQ2NzU3RkQw
MjdCMkI5OUM1MUNCOUJBMjdEMzJGMTRGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0YxOUY0RDY3NTdGRDAyN0Iy
Qjk5QzUxQ0I5QkEyN0QzMkYxNEYwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzFBQjYwMDJGQTIyNUU5OEJGNDcwOEEzMjhCQTAxNDQ5QjBBRDNFQUIy
RjY1QzI0OUZGQjkwNDhERjk2NkY2NC8wLzMyMzAzMTJlMzEzMzMxMmUzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYNJ
MA0GCSqGSIb3DQEBCwUAA4IBAQAOc4YW7U1xysiWiOZGd7TMQny8fkLXRhYhnT/s
eTfRIhr5SIhL5Q/j4R7H4g1zYlRpsou25iCDAq0h2L37iocTUecd7tTTfi2j2bJS
e812JaLm2F6dtB1wktbufZ+jqSJPzC4P+Z4Dop2T/CPgqDW7wJX/CfzAVu/Lr8Wj
z1HYlNtOhAz0pY1y7bS8FK46GxwiVKSvQbldFIoNpNVO1gyPYaVM6gvshrEm5cCv
6YLaXWEh4zFMQlX/4F1axcvTajq+9odFYaRBqe6OETlv2prtPlHXh3Dr5KjDRa5C
XjmGbxjo0wFF5w8b1SRpeUCvjYyzKr7IXwFtcw4nsILfFHfS
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org