Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
File:                     32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (raw, json)
Hash identifier:          8c3bKIDxGBWbTE40/DWSqj3m0T9UPuKIQI7wocxWSQ0=
Subject key identifier:   F9:FD:B5:E4:51:8F:85:27:B6:F8:23:5F:60:47:E2:FE:73:21:B4:C3
Certificate issuer:       /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial:       2AFBB4169BA8FF8331E08296F8D73B297FEBB9BA
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
Signing time:             Tue 05 Mar 2024 18:20:43 +0000
ROA not before:           Tue 05 Mar 2024 18:15:43 +0000
ROA not after:            Tue 04 Mar 2025 18:20:43 +0000
asID:                     269976
IP address blocks:        24.152.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fb:b4:16:9b:a8:ff:83:31:e0:82:96:f8:d7:3b:29:7f:eb:b9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
        Validity
            Not Before: Mar  5 18:15:43 2024 GMT
            Not After : Mar  4 18:20:43 2025 GMT
        Subject: CN=F9FDB5E4518F8527B6F8235F6047E2FE7321B4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:a1:18:d1:96:38:32:d5:06:18:fe:58:85:
                    ab:76:91:ee:b8:96:39:0e:f4:31:17:f2:0b:44:4d:
                    f5:a7:ae:e3:5f:c9:91:77:8c:4e:90:cb:f7:af:80:
                    18:87:31:fb:fc:4b:d7:80:cf:85:1f:cb:46:b4:85:
                    16:af:52:1f:21:a7:b3:48:e2:7b:e4:46:07:31:f7:
                    52:5e:36:9f:13:99:30:e8:eb:9b:c1:b4:45:45:72:
                    2f:68:1f:db:ac:c9:8b:25:02:fc:09:cf:1e:1d:48:
                    72:0c:61:0f:77:c2:30:08:f1:78:00:1c:a9:72:db:
                    d8:9e:28:7d:82:e3:6d:cd:12:d3:be:c2:5b:ed:c9:
                    5c:ec:11:56:b0:63:f5:88:a9:b0:4f:1a:bc:02:50:
                    d8:16:f3:e1:54:28:cf:dc:22:eb:b0:cf:f5:32:72:
                    c8:7c:8e:70:ed:54:9f:ac:b4:79:f3:62:28:37:d2:
                    23:58:31:b5:75:e9:d5:2b:41:13:13:4d:bb:cb:b1:
                    f8:c9:96:44:76:59:3c:6a:a7:dc:8a:d4:b2:6a:f7:
                    32:c1:59:1d:82:11:f3:7e:5e:51:93:40:be:9b:e9:
                    61:ea:c1:c3:b8:4f:b1:7e:0d:51:4c:5a:8a:6d:b3:
                    55:30:3e:c3:d3:1a:a1:5b:8b:df:ad:a2:84:13:50:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:B5:E4:51:8F:85:27:B6:F8:23:5F:60:47:E2:FE:73:21:B4:C3
            X509v3 Authority Key Identifier:
                keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:e5:a3:9d:de:e9:20:b0:b5:eb:5a:6d:e6:6a:be:e1:84:79:
         96:24:8e:33:cd:b9:a2:69:77:25:cb:4a:36:01:5a:38:5e:6b:
         57:0c:a6:19:81:60:2f:04:f6:f6:53:b8:d4:0b:9e:d1:60:8d:
         a4:f3:b6:57:49:21:fa:e6:74:65:64:57:68:c8:1e:68:67:62:
         c2:d2:2f:85:ca:b3:de:ef:78:5c:4b:0d:db:9a:01:1d:c4:c1:
         49:91:bc:14:c3:38:58:c4:9c:a7:8b:71:b2:22:5e:bb:2f:46:
         0e:2e:69:d6:0d:4d:44:c9:96:7b:da:fa:5e:16:8e:4e:b7:bb:
         2a:1f:0d:3f:84:13:6a:ff:ae:90:97:5e:1e:58:1e:a0:42:bb:
         88:36:65:b2:f4:c5:30:f1:7c:18:b3:bf:4f:bb:53:2f:f1:08:
         8c:1e:16:c1:af:76:49:0b:20:d8:c5:04:f5:71:3d:8d:15:be:
         18:ed:94:69:92:e5:54:60:d7:7e:64:7d:16:70:0a:00:89:04:
         25:1a:b3:c6:fd:b8:97:bd:bd:15:a7:3f:59:92:17:1e:17:39:
         f0:a1:a2:ce:c9:b4:51:9b:77:3f:ee:9d:85:70:9d:1d:e9:69:
         78:9e:8d:dc:7b:81:96:20:74:12:ff:c4:f8:44:39:27:d4:3c:
         91:f3:bf:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKvu0Fpuo/4Mx4IKW+Nc7KX/rubowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3MERDQ0YyNzVCMTQ3MTdGNkExMjQxNEYxRUUxM0RB
RkNFNEU3MjAeFw0yNDAzMDUxODE1NDNaFw0yNTAzMDQxODIwNDNaMDMxMTAvBgNV
BAMTKEY5RkRCNUU0NTE4Rjg1MjdCNkY4MjM1RjYwNDdFMkZFNzMyMUI0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64qEY0ZY4MtUGGP5Yhat2ke64
ljkO9DEX8gtETfWnruNfyZF3jE6Qy/evgBiHMfv8S9eAz4Ufy0a0hRavUh8hp7NI
4nvkRgcx91JeNp8TmTDo65vBtEVFci9oH9usyYslAvwJzx4dSHIMYQ93wjAI8XgA
HKly29ieKH2C423NEtO+wlvtyVzsEVawY/WIqbBPGrwCUNgW8+FUKM/cIuuwz/Uy
csh8jnDtVJ+stHnzYig30iNYMbV16dUrQRMTTbvLsfjJlkR2WTxqp9yK1LJq9zLB
WR2CEfN+XlGTQL6b6WHqwcO4T7F+DVFMWopts1UwPsPTGqFbi9+tooQTUOZfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+f215FGPhSe2+CNfYEfi/nMhtMMwHwYDVR0j
BBgwFoAUjHDczydbFHF/ahJBTx7hPa/OTnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzBEMjQwQkFGMUQ5QkJBQTZFMjQxMzI2NDdFNTM4RTAx
MDdGOEYxNDM2MEFEMTEyNzM4RkU3OUMwOTAwMTEwLzAvOEM3MERDQ0YyNzVCMTQ3
MTdGNkExMjQxNEYxRUUxM0RBRkNFNEU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzcwRENDRjI3NUIxNDcxN0Y2
QTEyNDE0RjFFRTEzREFGQ0U0RTcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREMwRDI0MEJBRjFEOUJCQUE2RTI0MTMyNjQ3RTUzOEUwMTA3RjhGMTQz
NjBBRDExMjczOEZFNzlDMDkwMDExMC8wLzMyMzQyZTMxMzUzMjJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhiYKDAN
BgkqhkiG9w0BAQsFAAOCAQEApeWjnd7pILC161pt5mq+4YR5liSOM825oml3JctK
NgFaOF5rVwymGYFgLwT29lO41Aue0WCNpPO2V0kh+uZ0ZWRXaMgeaGdiwtIvhcqz
3u94XEsN25oBHcTBSZG8FMM4WMScp4txsiJeuy9GDi5p1g1NRMmWe9r6XhaOTre7
Kh8NP4QTav+ukJdeHlgeoEK7iDZlsvTFMPF8GLO/T7tTL/EIjB4Wwa92SQsg2MUE
9XE9jRW+GO2UaZLlVGDXfmR9FnAKAIkEJRqzxv24l729Fac/WZIXHhc58KGizsm0
UZt3P+6dhXCdHelpeJ6N3HuBliB0Ev/E+EQ5J9Q8kfO/uA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org