Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa
File:                     3231362e3234312e382e302f32332d3234203d3e203230303135.roa (raw, json)
Hash identifier:          cLeyMRKAn3ECI2h24Zv8AL7p1E9WEfQ00oqgzDBIZ4s=
Subject key identifier:   BA:18:BF:C1:0A:16:8F:1B:C4:8B:F2:A0:2B:92:89:4A:F3:AE:12:6B
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       16898B5E43614800DC9B0AF3ED571F6B49813530
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa
Signing time:             Wed 05 Jun 2024 16:30:01 +0000
ROA not before:           Wed 05 Jun 2024 16:25:01 +0000
ROA not after:            Wed 04 Jun 2025 16:30:01 +0000
asID:                     20015
IP address blocks:        216.241.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:89:8b:5e:43:61:48:00:dc:9b:0a:f3:ed:57:1f:6b:49:81:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Jun  5 16:25:01 2024 GMT
            Not After : Jun  4 16:30:01 2025 GMT
        Subject: CN=BA18BFC10A168F1BC48BF2A02B92894AF3AE126B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:c0:09:ba:71:74:e7:b1:1a:77:f9:3b:db:
                    3a:eb:ae:55:e3:ae:d9:50:3d:24:c7:bb:30:11:59:
                    e6:be:e9:90:d7:a7:34:b3:7d:94:32:04:08:50:6c:
                    08:c5:24:89:0e:e0:6c:dd:fd:a2:7a:d7:6a:52:13:
                    eb:98:bc:9c:16:c3:13:ca:8b:21:87:2c:a0:a5:60:
                    56:7f:4c:b2:a4:24:dc:18:e5:ca:80:93:8d:e3:88:
                    a1:68:43:b8:d3:21:38:3c:4b:b4:4f:f3:1f:ce:ab:
                    26:84:c1:1e:4d:ff:1d:2b:15:d3:17:21:36:8c:c3:
                    a1:21:72:90:fb:0d:a8:4a:1c:39:44:f3:a6:bf:dc:
                    c8:e0:07:b0:d4:e5:c9:09:84:9e:ed:ae:5a:98:dc:
                    53:83:27:7e:ff:0d:90:ce:48:ce:b6:08:29:03:76:
                    13:e2:d6:20:a0:0d:b0:40:42:95:cf:77:6a:78:2c:
                    50:df:ca:bc:33:6b:da:60:c9:dc:a9:4d:5e:5b:a8:
                    84:c3:37:9b:9b:7f:cd:b1:21:2d:99:38:a2:eb:e5:
                    b6:cb:55:31:34:1e:f4:2f:13:41:27:b4:9a:af:f1:
                    c8:e6:3d:da:22:44:ea:b5:47:95:b1:e7:42:dc:03:
                    7a:da:68:67:77:80:41:a6:a0:d5:e1:a3:2b:2d:ff:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:BF:C1:0A:16:8F:1B:C4:8B:F2:A0:2B:92:89:4A:F3:AE:12:6B
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e382e302f32332d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:39:2c:15:f8:a3:c5:01:40:0b:73:3c:be:40:44:ef:81:
         95:fe:97:2d:c4:d3:a8:5d:1d:d3:ab:92:2a:2a:b7:70:3a:e5:
         ce:97:ac:bf:5e:0d:1f:cf:fc:0d:4d:fb:68:e2:c1:ad:18:12:
         a0:fd:23:09:f4:62:a0:50:f5:df:e9:f9:82:10:32:2e:5b:b8:
         3f:87:b6:1b:d8:21:61:d2:ce:e6:13:35:b7:bc:23:cf:e3:d8:
         bb:ad:a6:1c:fe:be:af:1f:86:8c:3e:66:77:c2:3f:72:72:b6:
         db:41:a9:de:5b:60:c6:76:18:50:59:d3:95:26:98:89:d3:7e:
         62:d4:9f:e9:8c:d7:88:9f:56:08:ba:91:83:ec:08:3a:83:56:
         94:70:b4:03:d2:97:62:13:e6:98:c0:1e:a5:62:33:78:7c:a8:
         b0:63:ea:77:38:e4:20:56:93:9e:8c:84:a3:c1:39:b9:4b:3d:
         70:ae:f6:f8:04:a7:37:08:7c:f4:0c:97:dd:aa:52:2e:06:ce:
         f5:1c:c1:6c:7b:50:4b:09:7c:4e:fc:0f:ff:ba:26:5a:bc:2b:
         a7:28:78:68:59:08:8d:29:00:22:38:2d:bb:d3:34:b1:13:7c:
         f8:3e:21:91:d4:ce:a4:2d:49:41:70:1f:cf:b5:47:3a:8f:da:
         33:87:38:bb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFomLXkNhSADcmwrz7Vcfa0mBNTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDA2MDUxNjI1MDFaFw0yNTA2MDQxNjMwMDFaMDMxMTAvBgNV
BAMTKEJBMThCRkMxMEExNjhGMUJDNDhCRjJBMDJCOTI4OTRBRjNBRTEyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nMAJunF057Ead/k72zrrrlXj
rtlQPSTHuzARWea+6ZDXpzSzfZQyBAhQbAjFJIkO4Gzd/aJ612pSE+uYvJwWwxPK
iyGHLKClYFZ/TLKkJNwY5cqAk43jiKFoQ7jTITg8S7RP8x/OqyaEwR5N/x0rFdMX
ITaMw6EhcpD7DahKHDlE86a/3MjgB7DU5ckJhJ7trlqY3FODJ37/DZDOSM62CCkD
dhPi1iCgDbBAQpXPd2p4LFDfyrwza9pgydypTV5bqITDN5ubf82xIS2ZOKLr5bbL
VTE0HvQvE0EntJqv8cjmPdoiROq1R5Wx50LcA3raaGd3gEGmoNXhoyst/4ctAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUuhi/wQoWjxvEi/KgK5KJSvOuEmswHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzEzNjJlMzIzNDMxMmUzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHY8QgwDQYJ
KoZIhvcNAQELBQADggEBAG38OSwV+KPFAUALczy+QETvgZX+ly3E06hdHdOrkioq
t3A65c6XrL9eDR/P/A1N+2jiwa0YEqD9Iwn0YqBQ9d/p+YIQMi5buD+HthvYIWHS
zuYTNbe8I8/j2Lutphz+vq8fhow+ZnfCP3JytttBqd5bYMZ2GFBZ05UmmInTfmLU
n+mM14ifVgi6kYPsCDqDVpRwtAPSl2IT5pjAHqViM3h8qLBj6nc45CBWk56MhKPB
OblLPXCu9vgEpzcIfPQMl92qUi4GzvUcwWx7UEsJfE78D/+6Jlq8K6coeGhZCI0p
ACI4LbvTNLETfPg+IZHUzqQtSUFwH8+1RzqP2jOHOLs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:18 2024 by rpki-client on console-ams.rpki-client.org