Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa
File:                     3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa (raw, json)
Hash identifier:          fobldIFvOPrIWg3W0rR9zQkXyOmgB2LW5dl1fJxHLSQ=
Subject key identifier:   B3:FE:05:16:D2:5A:24:FF:8E:28:F9:A5:35:25:06:B1:E4:88:6F:35
Certificate issuer:       /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Certificate serial:       17A8EDFB79804087B0FA180DF2EBD280CC0ADBBB
Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa
Signing time:             Tue 05 Mar 2024 18:22:37 +0000
ROA not before:           Tue 05 Mar 2024 18:17:37 +0000
ROA not after:            Tue 04 Mar 2025 18:22:37 +0000
asID:                     271973
IP address blocks:        201.222.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:ed:fb:79:80:40:87:b0:fa:18:0d:f2:eb:d2:80:cc:0a:db:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
        Validity
            Not Before: Mar  5 18:17:37 2024 GMT
            Not After : Mar  4 18:22:37 2025 GMT
        Subject: CN=B3FE0516D25A24FF8E28F9A5352506B1E4886F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:80:49:9d:3c:39:6a:f3:2f:f8:4f:32:1d:
                    51:a0:d0:a8:c5:b0:ab:df:c2:dd:14:10:12:c2:47:
                    6b:10:56:8c:5a:e6:a3:e2:cf:e9:82:4d:ea:fa:9f:
                    c1:2e:a3:87:21:5b:6f:ac:83:59:3c:20:80:96:e7:
                    ce:14:cb:1f:98:52:ab:1f:c6:f6:5e:4d:6a:c7:b4:
                    6f:a9:6a:fb:f4:99:39:e0:63:86:eb:f0:ec:f8:80:
                    7c:3d:49:d6:0b:2b:26:53:ff:27:01:af:27:4a:56:
                    13:ef:ca:87:b8:5a:18:dc:1f:ae:d7:10:68:7e:90:
                    f0:11:24:c7:f9:9a:8b:da:23:e6:5d:ee:39:c4:f4:
                    5d:85:e7:22:01:b5:18:ba:98:52:8c:e5:f8:af:3f:
                    f1:22:f8:37:6d:6c:74:36:3c:cc:e2:d5:4d:f3:e7:
                    be:60:ab:61:93:0f:fc:38:01:5b:82:49:d4:58:ad:
                    a6:95:56:3e:5b:ef:e4:bf:22:37:a7:5f:76:00:0c:
                    5f:8b:36:32:b5:d9:f0:07:a7:f9:60:a4:68:25:ec:
                    18:94:33:2d:c6:1e:21:71:ed:c2:ac:95:31:95:34:
                    57:83:d9:f4:01:47:66:d5:4e:66:86:57:a7:d0:8b:
                    82:f1:83:9c:38:43:f0:91:44:41:79:92:64:3b:a0:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:05:16:D2:5A:24:FF:8E:28:F9:A5:35:25:06:B1:E4:88:6F:35
            X509v3 Authority Key Identifier:
                keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:9b:c9:b1:fd:e6:45:58:69:4f:2e:81:94:8d:77:e7:6e:6c:
         26:b5:43:76:04:ab:d1:19:76:16:35:96:da:a6:ec:f5:65:de:
         39:5d:1e:ea:72:da:76:5a:5d:73:eb:1c:e1:4f:c5:5c:55:da:
         8c:48:52:cd:bc:e2:7c:2b:0d:ab:d7:17:a5:a2:dc:8f:2b:d2:
         83:45:f9:38:d6:94:8f:fb:ae:13:c1:db:7e:6a:d0:91:09:35:
         15:d8:07:ee:67:31:f4:6c:dc:bc:19:67:69:7a:e8:ea:b2:93:
         3f:c4:8d:17:ce:88:13:49:b1:57:32:91:04:f4:8f:9b:9a:b9:
         bd:8b:ec:a2:51:ff:e3:40:46:58:2f:5b:93:4c:5f:0c:d6:1d:
         db:6f:05:99:07:23:db:76:c7:71:e7:a8:68:12:ff:65:c8:35:
         e3:dd:e9:a6:4f:7a:6b:2e:ef:15:ef:f0:d1:1e:f2:3e:c1:1f:
         df:50:32:73:99:5c:9f:5d:98:6d:63:4e:25:32:43:a1:4a:4f:
         8e:0f:89:5e:4a:e3:84:07:58:72:7c:e6:95:37:d9:4d:80:61:
         32:34:c2:38:80:ad:fc:1c:b9:41:fa:dd:a3:7b:ee:ef:e0:e9:
         74:a5:01:2c:16:54:76:0c:58:7f:cb:ae:13:f7:27:5d:07:61:
         79:b0:97:6a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF6jt+3mAQIew+hgN8uvSgMwK27swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY0QTExQTlBNzdFNTI5OEQ2OTY3MjhDNjc5NkVGN0I3
QjJERTdEMDAeFw0yNDAzMDUxODE3MzdaFw0yNTAzMDQxODIyMzdaMDMxMTAvBgNV
BAMTKEIzRkUwNTE2RDI1QTI0RkY4RTI4RjlBNTM1MjUwNkIxRTQ4ODZGMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCng4BJnTw5avMv+E8yHVGg0KjF
sKvfwt0UEBLCR2sQVoxa5qPiz+mCTer6n8Euo4chW2+sg1k8IICW584Uyx+YUqsf
xvZeTWrHtG+pavv0mTngY4br8Oz4gHw9SdYLKyZT/ycBrydKVhPvyoe4WhjcH67X
EGh+kPARJMf5movaI+Zd7jnE9F2F5yIBtRi6mFKM5fivP/Ei+DdtbHQ2PMzi1U3z
575gq2GTD/w4AVuCSdRYraaVVj5b7+S/IjenX3YADF+LNjK12fAHp/lgpGgl7BiU
My3GHiFx7cKslTGVNFeD2fQBR2bVTmaGV6fQi4Lxg5w4Q/CRREF5kmQ7oBv3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUs/4FFtJaJP+OKPmlNSUGseSIbzUwHwYDVR0j
BBgwFoAU1koRqad+UpjWlnKMZ5bve3st59AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTQ0Njc1NTkzRkNCNTYyMDEwMDQzOUNDODY0RjE5QzQw
ODYzNDNEMjFCMjBDOUVGNDI3OUM4Q0I1MDU5MDYwLzAvRDY0QTExQTlBNzdFNTI5
OEQ2OTY3MjhDNjc5NkVGN0I3QjJERTdEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjRBMTFBOUE3N0U1Mjk4RDY5
NjcyOEM2Nzk2RUY3QjdCMkRFN0QwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U0NDY3NTU5M0ZDQjU2MjAxMDA0MzlDQzg2NEYxOUM0MDg2MzQzRDIx
QjIwQzlFRjQyNzlDOENCNTA1OTA2MC8wLzMyMzAzMTJlMzIzMjMyMmUzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyd4r
MA0GCSqGSIb3DQEBCwUAA4IBAQDPm8mx/eZFWGlPLoGUjXfnbmwmtUN2BKvRGXYW
NZbapuz1Zd45XR7qctp2Wl1z6xzhT8VcVdqMSFLNvOJ8Kw2r1xelotyPK9KDRfk4
1pSP+64Twdt+atCRCTUV2AfuZzH0bNy8GWdpeujqspM/xI0XzogTSbFXMpEE9I+b
mrm9i+yiUf/jQEZYL1uTTF8M1h3bbwWZByPbdsdx56hoEv9lyDXj3emmT3prLu8V
7/DRHvI+wR/fUDJzmVyfXZhtY04lMkOhSk+OD4leSuOEB1hyfOaVN9lNgGEyNMI4
gK38HLlB+t2je+7v4Ol0pQEsFlR2DFh/y64T9yddB2F5sJdq
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org