Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
File:                     3230312e3133312e332e302f32342d3234203d3e203234393430.roa (raw, json)
Hash identifier:          DRe+7hew9PGJm6PEeE13lg7xWCnOHJdu6r/s5s+3aBA=
Subject key identifier:   E8:17:76:AB:BF:A6:96:71:F2:6F:A5:EF:03:13:3C:61:15:E1:84:C9
Certificate issuer:       /CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
Certificate serial:       2242FC2FC60188467BA03DB49A82319B9C704790
Authority key identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
Signing time:             Tue 05 Mar 2024 17:49:39 +0000
ROA not before:           Tue 05 Mar 2024 17:44:39 +0000
ROA not after:            Tue 04 Mar 2025 17:49:39 +0000
asID:                     24940
IP address blocks:        201.131.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 12:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:fc:2f:c6:01:88:46:7b:a0:3d:b4:9a:82:31:9b:9c:70:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
        Validity
            Not Before: Mar  5 17:44:39 2024 GMT
            Not After : Mar  4 17:49:39 2025 GMT
        Subject: CN=E81776ABBFA69671F26FA5EF03133C6115E184C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:c3:cc:8b:80:a1:01:80:32:b4:5c:1b:d9:
                    9e:30:95:61:0f:a7:f4:53:18:06:29:e9:1f:d2:1c:
                    3a:78:f8:b3:a1:62:e6:d0:46:f3:90:c9:d8:d8:54:
                    f5:56:99:0b:77:8d:fa:ed:2f:e3:f3:c5:7d:08:3d:
                    cd:7e:f5:d6:27:ef:64:2f:61:0a:50:06:a9:b2:05:
                    94:2b:58:7d:80:89:db:5a:a4:ec:62:23:20:42:7e:
                    a8:cb:5c:b6:e1:e6:c4:e0:24:36:d0:4c:43:62:bc:
                    66:81:56:8e:89:e2:70:e3:eb:83:19:ce:a7:b9:ab:
                    07:39:d3:c0:d8:70:7d:9b:46:cc:0c:3c:4a:5e:d2:
                    aa:56:3b:f2:52:50:75:05:d6:27:7d:0a:74:0c:7a:
                    0d:26:1a:f9:fe:25:16:3c:01:61:79:0a:51:30:28:
                    13:98:49:0c:2d:f3:1a:17:08:7d:ee:0b:2e:3c:30:
                    66:91:36:d7:55:a9:b6:07:34:f5:0f:f4:fe:66:dc:
                    c7:13:5a:11:d3:02:d7:71:c2:0f:58:a0:8f:87:49:
                    b8:95:a2:51:2b:6d:50:6d:bd:61:a4:20:0f:a0:30:
                    94:ae:a9:4e:c7:80:e5:32:ac:36:29:19:86:bd:8f:
                    07:dd:40:27:52:fb:e6:2b:85:e9:a8:48:5e:4e:dc:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:76:AB:BF:A6:96:71:F2:6F:A5:EF:03:13:3C:61:15:E1:84:C9
            X509v3 Authority Key Identifier:
                keyid:AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:07:3a:e0:33:5a:75:9f:5a:62:9d:dd:e0:04:9c:d4:8d:
         36:73:0f:66:f5:9c:52:44:65:23:1d:1b:be:5b:74:b0:fc:36:
         53:02:37:2b:d9:7d:35:16:26:5e:dd:a1:c7:ca:73:56:e6:2f:
         2c:61:4c:2a:21:f8:8c:f5:21:9a:f8:cb:b8:57:f1:a7:c7:d7:
         f9:fe:2a:03:71:ee:a6:d6:88:be:20:e6:c7:1d:e3:91:6c:60:
         bf:9f:5f:97:cd:a1:63:cd:61:83:57:09:e8:38:d7:0f:a6:a5:
         2e:e9:3c:8c:74:0b:73:0d:5a:97:b7:45:c3:95:48:cb:d1:a4:
         ee:a1:e6:c5:be:a0:e1:b3:7e:25:7e:93:45:d8:47:7b:48:53:
         44:0e:48:f5:d2:fb:7a:27:b3:2b:5d:02:65:e7:c0:70:87:0f:
         69:25:bf:68:35:91:ff:53:da:f0:cf:af:92:2b:96:76:86:3b:
         64:10:76:a6:6e:8f:ae:5d:c5:88:ec:90:43:a7:56:20:4b:72:
         17:a2:56:ec:48:42:bc:28:99:33:86:ab:bf:79:75:cd:4e:c8:
         8a:0e:b8:32:c1:f0:37:51:a6:00:2a:35:cc:39:66:64:d4:e1:
         4d:1f:48:e2:f7:f8:fd:0b:ae:47:5c:13:f9:cf:56:32:06:c0:
         77:85:bb:21
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIkL8L8YBiEZ7oD20moIxm5xwR5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJBMjM1RjhFMkVGQkYxMEQ4OUU5NjQ0N0Y2MUJCQTkw
Q0YxNDgxMTAeFw0yNDAzMDUxNzQ0MzlaFw0yNTAzMDQxNzQ5MzlaMDMxMTAvBgNV
BAMTKEU4MTc3NkFCQkZBNjk2NzFGMjZGQTVFRjAzMTMzQzYxMTVFMTg0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrcPMi4ChAYAytFwb2Z4wlWEP
p/RTGAYp6R/SHDp4+LOhYubQRvOQydjYVPVWmQt3jfrtL+PzxX0IPc1+9dYn72Qv
YQpQBqmyBZQrWH2AidtapOxiIyBCfqjLXLbh5sTgJDbQTENivGaBVo6J4nDj64MZ
zqe5qwc508DYcH2bRswMPEpe0qpWO/JSUHUF1id9CnQMeg0mGvn+JRY8AWF5ClEw
KBOYSQwt8xoXCH3uCy48MGaRNtdVqbYHNPUP9P5m3McTWhHTAtdxwg9YoI+HSbiV
olErbVBtvWGkIA+gMJSuqU7HgOUyrDYpGYa9jwfdQCdS++YrhemoSF5O3BHDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU6Bd2q7+mlnHyb6XvAxM8YRXhhMkwHwYDVR0j
BBgwFoAUq6I1+OLvvxDYnpZEf2G7qQzxSBEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkEwRkFCRDUyQTlGOERBODY2RDdFMDNFQzY5RDA3MERE
OUE1NkU2NUI3Q0IzOUVFNTE3RDY1NzE3NjVENENDLzAvQUJBMjM1RjhFMkVGQkYx
MEQ4OUU5NjQ0N0Y2MUJCQTkwQ0YxNDgxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQkEyMzVGOEUyRUZCRjEwRDg5
RTk2NDQ3RjYxQkJBOTBDRjE0ODExLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJBMEZBQkQ1MkE5RjhEQTg2NkQ3RTAzRUM2OUQwNzBERDlBNTZFNjVC
N0NCMzlFRTUxN0Q2NTcxNzY1RDRDQy8wLzMyMzAzMTJlMzEzMzMxMmUzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQzOTM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJgwMwDQYJ
KoZIhvcNAQELBQADggEBABktBzrgM1p1n1pind3gBJzUjTZzD2b1nFJEZSMdG75b
dLD8NlMCNyvZfTUWJl7docfKc1bmLyxhTCoh+Iz1IZr4y7hX8afH1/n+KgNx7qbW
iL4g5scd45FsYL+fX5fNoWPNYYNXCeg41w+mpS7pPIx0C3MNWpe3RcOVSMvRpO6h
5sW+oOGzfiV+k0XYR3tIU0QOSPXS+3onsytdAmXnwHCHD2klv2g1kf9T2vDPr5Ir
lnaGO2QQdqZuj65dxYjskEOnViBLcheiVuxIQrwomTOGq795dc1OyIoOuDLB8DdR
pgAqNcw5ZmTU4U0fSOL3+P0LrkdcE/nPVjIGwHeFuyE=
-----END CERTIFICATE-----
Generated at Wed May 1 13:28:27 2024 by rpki-client on console-fra.rpki-client.org