Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa
File:                     3138312e3132302e302e302f31332d3234203d3e203233323031.roa (raw, json)
Hash identifier:          QaIlIJo9h9QyqspFf5h9kt+2mapJ5O2nrMdII7dKvdU=
Subject key identifier:   92:28:9A:45:0F:25:96:E1:45:F6:92:5C:5A:E4:55:37:0A:D4:85:2C
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       6EC89A31C020BCE05D6C8E51CF306CD89D494C98
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     23201
IP address blocks:        181.120.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:9a:31:c0:20:bc:e0:5d:6c:8e:51:cf:30:6c:d8:9d:49:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=92289A450F2596E145F6925C5AE455370AD4852C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:b4:13:c1:ee:b3:61:1a:5d:77:87:04:d0:
                    c8:18:99:5f:a4:94:3d:a8:ad:48:3d:ad:89:3c:80:
                    df:1f:52:44:4b:f6:2b:dc:35:ff:cf:bd:fe:70:f5:
                    01:98:02:8d:5e:e5:04:f7:a5:4f:f1:6f:e5:7f:8e:
                    f8:71:f8:00:3a:ee:d8:c3:95:30:32:a7:5e:2d:fd:
                    50:35:10:41:54:61:3a:5e:d9:f8:b8:3d:f5:7a:e5:
                    23:6e:0f:e7:97:0e:b8:26:e3:bb:12:1f:b8:1e:11:
                    12:a1:a5:fd:fc:53:02:be:c2:d1:f3:07:9b:ed:5f:
                    e3:3b:41:4f:d1:89:b9:bb:65:58:08:1d:c1:f9:0b:
                    19:c6:70:2d:50:cc:cf:5c:90:cc:fc:f6:95:94:4e:
                    58:6c:c8:18:2c:12:df:ce:f0:42:58:d7:e6:88:3a:
                    db:b1:be:01:7d:ac:0c:46:03:58:70:b1:53:87:33:
                    69:5c:2d:7d:70:11:38:ae:49:1a:b7:51:76:c8:54:
                    ff:81:7d:c2:f0:ad:41:4a:f5:c0:09:18:45:24:48:
                    0c:b6:95:d5:9f:3c:60:c5:1b:d3:ab:b1:20:a9:ca:
                    ea:06:0c:3b:85:ae:4f:48:ee:3e:ad:56:72:d9:db:
                    69:1e:00:36:38:c4:17:8b:cc:86:e3:28:b6:12:de:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:28:9A:45:0F:25:96:E1:45:F6:92:5C:5A:E4:55:37:0A:D4:85:2C
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138312e3132302e302e302f31332d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.120.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a3:9e:19:f8:d4:d2:c7:35:7c:a6:9a:37:dc:b0:70:0c:1b:e1:
         8b:bb:7c:7b:16:c1:54:a1:af:7f:82:94:e9:e4:3c:c2:1a:ca:
         61:d4:3e:39:fa:6f:eb:55:c7:e6:92:13:d4:59:3d:d9:d8:d7:
         62:52:27:99:96:df:3d:c1:6e:51:44:c0:3a:f9:79:0e:3c:a8:
         63:c4:1f:95:ab:16:1b:18:c8:3a:31:a2:e2:ab:d5:96:86:3a:
         34:02:c1:74:e5:03:e6:bc:b6:e1:81:57:3b:33:16:f7:27:11:
         cf:f6:a6:25:84:66:4b:5a:be:10:4c:fb:53:9c:93:ed:27:80:
         5f:ab:68:d6:a4:44:93:eb:5c:11:fc:72:cd:53:ee:9c:68:f3:
         b6:3c:f2:7d:02:95:da:f8:55:79:f2:21:65:7f:2a:6c:72:f1:
         9e:20:6f:05:26:54:cd:d9:f7:c5:19:88:cd:fa:39:5f:f9:01:
         9d:05:52:55:e3:d1:89:5f:14:12:7d:d0:ac:04:0c:5b:cb:df:
         a9:1d:c7:23:df:71:e2:06:41:27:bb:0e:8e:41:3d:2a:0b:27:
         ed:5f:27:f8:f0:a1:b7:e3:df:4e:31:b9:86:18:f8:ec:6d:d6:
         46:3e:88:df:d8:28:c0:a3:2f:a9:52:3f:0d:55:83:32:01:52:
         f3:32:ed:63
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUbsiaMcAgvOBdbI5RzzBs2J1JTJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1NzQwMEFFNDJBMEEyMkEzRTYxODMwNEExNTAyRTBF
MEMwMURDQTAeFw0yNDAzMDUxODE3NTdaFw0yNTAzMDQxODIyNTdaMDMxMTAvBgNV
BAMTKDkyMjg5QTQ1MEYyNTk2RTE0NUY2OTI1QzVBRTQ1NTM3MEFENDg1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExbQTwe6zYRpdd4cE0MgYmV+k
lD2orUg9rYk8gN8fUkRL9ivcNf/Pvf5w9QGYAo1e5QT3pU/xb+V/jvhx+AA67tjD
lTAyp14t/VA1EEFUYTpe2fi4PfV65SNuD+eXDrgm47sSH7geERKhpf38UwK+wtHz
B5vtX+M7QU/Ribm7ZVgIHcH5CxnGcC1QzM9ckMz89pWUTlhsyBgsEt/O8EJY1+aI
OtuxvgF9rAxGA1hwsVOHM2lcLX1wETiuSRq3UXbIVP+BfcLwrUFK9cAJGEUkSAy2
ldWfPGDFG9OrsSCpyuoGDDuFrk9I7j6tVnLZ22keADY4xBeLzIbjKLYS3knRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUkiiaRQ8lluFF9pJcWuRVNwrUhSwwHwYDVR0j
BBgwFoAUmFdACuQqCiKj5hgwShUC4ODAHcowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0IyQTYzRDY2RjQyQ0I2RTUwMzU0QTYyOUJGQjVBNjhB
M0ZDNkY5NkRDMkEyMDQzQTc1MUQzQTlDOUQ0MzIxLzAvOTg1NzQwMEFFNDJBMEEy
MkEzRTYxODMwNEExNTAyRTBFMEMwMURDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODU3NDAwQUU0MkEwQTIyQTNF
NjE4MzA0QTE1MDJFMEUwQzAxRENBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdCMkE2M0Q2NkY0MkNCNkU1MDM1NEE2MjlCRkI1QTY4QTNGQzZGOTZE
QzJBMjA0M0E3NTFEM0E5QzlENDMyMS8wLzMxMzgzMTJlMzEzMjMwMmUzMDJlMzAy
ZjMxMzMyZDMyMzQyMDNkM2UyMDMyMzMzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwO1eDANBgkq
hkiG9w0BAQsFAAOCAQEAo54Z+NTSxzV8ppo33LBwDBvhi7t8exbBVKGvf4KU6eQ8
whrKYdQ+Ofpv61XH5pIT1Fk92djXYlInmZbfPcFuUUTAOvl5DjyoY8QflasWGxjI
OjGi4qvVloY6NALBdOUD5ry24YFXOzMW9ycRz/amJYRmS1q+EEz7U5yT7SeAX6to
1qREk+tcEfxyzVPunGjztjzyfQKV2vhVefIhZX8qbHLxniBvBSZUzdn3xRmIzfo5
X/kBnQVSVePRiV8UEn3QrAQMW8vfqR3HI99x4gZBJ7sOjkE9Kgsn7V8n+PCht+Pf
TjG5hhj47G3WRj6I39gowKMvqVI/DVWDMgFS8zLtYw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org