Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa
File:                     3230312e3137352e352e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          7lN6Tq65yGR+zKsW9cxJ9YjOOLv75bmw1+DUCL+bjsQ=
Subject key identifier:   3A:4D:C2:3C:C3:97:7C:C9:57:30:09:28:72:EB:6D:35:15:B0:22:51
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       55B66BF667A224C74438C6027770A88361698E95
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 05 Mar 2024 18:05:24 +0000
ROA not before:           Tue 05 Mar 2024 18:00:24 +0000
ROA not after:            Tue 04 Mar 2025 18:05:24 +0000
asID:                     22011
IP address blocks:        201.175.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b6:6b:f6:67:a2:24:c7:44:38:c6:02:77:70:a8:83:61:69:8e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Mar  5 18:00:24 2024 GMT
            Not After : Mar  4 18:05:24 2025 GMT
        Subject: CN=3A4DC23CC3977CC95730092872EB6D3515B02251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:7d:43:a7:57:88:6c:cf:e8:8e:da:1c:d1:
                    b0:ef:e6:76:18:d0:c7:17:ba:d5:e5:10:0d:c6:fa:
                    95:6e:14:05:75:52:33:9f:2a:e5:7e:86:be:f1:bd:
                    fb:0b:d4:24:67:f2:f5:90:db:b0:3b:f5:d4:84:2f:
                    5c:75:46:e0:dc:99:c3:9a:d8:b8:67:b9:45:d5:d8:
                    5a:d6:65:51:27:2f:9e:56:19:8e:92:a1:45:21:22:
                    bc:3d:a7:b3:fa:17:92:e9:a2:30:bf:f6:d8:2a:45:
                    47:83:74:f6:73:8f:01:b4:4a:0e:5b:1d:ea:1d:d7:
                    4d:09:c5:04:e0:09:a5:88:3f:1f:0e:27:79:53:03:
                    ae:e4:d6:26:af:9f:1e:3d:7b:c9:5e:ea:5b:79:10:
                    d4:18:29:a6:96:9b:34:d3:6b:f8:e7:40:37:ae:58:
                    f2:2e:d9:b5:f8:09:06:14:f6:12:d6:41:c9:60:6d:
                    bf:84:d1:1b:46:09:71:df:cc:7b:db:fa:7f:04:63:
                    8a:88:72:c2:10:73:b3:8e:4f:68:d7:1a:1b:eb:95:
                    8f:cc:09:df:bc:d0:5a:b8:50:04:b4:b6:5b:b4:86:
                    4c:4c:3b:84:a2:df:af:7c:8e:1f:98:1b:69:55:3b:
                    91:21:7d:cd:d3:a1:af:b4:bb:b2:23:bd:0d:87:95:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4D:C2:3C:C3:97:7C:C9:57:30:09:28:72:EB:6D:35:15:B0:22:51
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:e0:b5:04:aa:95:79:f2:a7:9e:27:24:83:ba:7f:0a:00:
         9e:f9:4d:87:98:30:d6:e2:d3:ab:7f:ca:92:6b:e8:b0:c8:42:
         93:87:34:a0:7a:68:63:68:17:61:ad:4e:37:a3:b1:f5:02:78:
         19:34:bf:74:9f:c8:96:dd:73:5b:88:96:78:44:c9:bd:ac:11:
         3f:de:64:7c:1c:18:89:c5:59:21:53:10:a4:fe:0d:58:45:e2:
         67:bb:22:9f:74:60:21:c7:d9:b7:6c:80:23:c9:3c:9f:20:8a:
         37:2f:55:2a:51:4f:d0:54:80:14:01:b3:6e:7c:34:0b:d3:93:
         64:29:24:c5:3e:85:de:ac:d6:b4:7f:a4:7d:36:86:ff:fe:57:
         86:30:63:ea:df:1c:88:be:1a:45:bf:ae:ae:8a:6d:9a:81:2b:
         5d:1d:b5:7c:7f:60:a8:17:5e:04:15:84:30:ea:e4:e5:75:c7:
         82:a4:9e:a5:43:ae:bb:d9:cc:66:66:04:61:3f:e4:fb:de:98:
         86:ef:58:46:0b:5e:85:5f:3d:37:d7:c9:51:9f:24:fb:bb:e2:
         26:18:41:18:b9:ce:13:df:c6:3d:6c:21:51:82:8c:bd:44:5e:
         46:95:b5:4b:45:09:02:c4:37:c5:cb:ff:73:19:22:f0:55:26:
         f7:69:7c:c0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVbZr9meiJMdEOMYCd3Cog2FpjpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlGNTFEQTZDNEIxOEU4MENBQ0U1ODkxNjMzMUMyMTJF
MDI4NjBDNDAeFw0yNDAzMDUxODAwMjRaFw0yNTAzMDQxODA1MjRaMDMxMTAvBgNV
BAMTKDNBNERDMjNDQzM5NzdDQzk1NzMwMDkyODcyRUI2RDM1MTVCMDIyNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwX1Dp1eIbM/ojtoc0bDv5nYY
0McXutXlEA3G+pVuFAV1UjOfKuV+hr7xvfsL1CRn8vWQ27A79dSEL1x1RuDcmcOa
2LhnuUXV2FrWZVEnL55WGY6SoUUhIrw9p7P6F5LpojC/9tgqRUeDdPZzjwG0Sg5b
Heod100JxQTgCaWIPx8OJ3lTA67k1iavnx49e8le6lt5ENQYKaaWmzTTa/jnQDeu
WPIu2bX4CQYU9hLWQclgbb+E0RtGCXHfzHvb+n8EY4qIcsIQc7OOT2jXGhvrlY/M
Cd+80Fq4UAS0tlu0hkxMO4Si3698jh+YG2lVO5Ehfc3Toa+0u7IjvQ2HlVpTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOk3CPMOXfMlXMAkocuttNRWwIlEwHwYDVR0j
BBgwFoAUSfUdpsSxjoDKzliRYzHCEuAoYMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjFGNEQ4RTMxODIwOTg0MUE3QzNGNTU2QzlCM0FEQTZE
MzNCMjI5MDE4MjAyQUFCMUNBRkE0NkI2MEI4NzcwLzAvNDlGNTFEQTZDNEIxOEU4
MENBQ0U1ODkxNjMzMUMyMTJFMDI4NjBDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUY1MURBNkM0QjE4RTgwQ0FD
RTU4OTE2MzMxQzIxMkUwMjg2MEM0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzYxRjREOEUzMTgyMDk4NDFBN0MzRjU1NkM5QjNBREE2RDMzQjIyOTAx
ODIwMkFBQjFDQUZBNDZCNjBCODc3MC8wLzMyMzAzMTJlMzEzNzM1MmUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzMDMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJrwUwDQYJ
KoZIhvcNAQELBQADggEBADO34LUEqpV58qeeJySDun8KAJ75TYeYMNbi06t/ypJr
6LDIQpOHNKB6aGNoF2GtTjejsfUCeBk0v3SfyJbdc1uIlnhEyb2sET/eZHwcGInF
WSFTEKT+DVhF4me7Ip90YCHH2bdsgCPJPJ8gijcvVSpRT9BUgBQBs258NAvTk2Qp
JMU+hd6s1rR/pH02hv/+V4YwY+rfHIi+GkW/rq6KbZqBK10dtXx/YKgXXgQVhDDq
5OV1x4KknqVDrrvZzGZmBGE/5PvemIbvWEYLXoVfPTfXyVGfJPu74iYYQRi5zhPf
xj1sIVGCjL1EXkaVtUtFCQLEN8XL/3MZIvBVJvdpfMA=
-----END CERTIFICATE-----
Generated at Sun May 19 00:15:33 2024 by rpki-client on console-fra.rpki-client.org