Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/3133322e3235352e3230302e302f32322d3234203d3e20323633373230.roa
File:                     3133322e3235352e3230302e302f32322d3234203d3e20323633373230.roa (raw, json)
Hash identifier:          w8QxyGXrIWupq2frmc6cSSATzty1xBCqNFiqTYwVrv0=
Subject key identifier:   DB:12:28:FE:B9:CE:89:8A:51:87:DD:D2:25:4D:BD:C1:5A:F8:1F:04
Certificate issuer:       /CN=54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0
Certificate serial:       2315AD087FCD64C691683FA45A730AD52A0D4C88
Authority key identifier: 54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/3133322e3235352e3230302e302f32322d3234203d3e20323633373230.roa
Signing time:             Tue 05 Mar 2024 18:08:43 +0000
ROA not before:           Tue 05 Mar 2024 18:03:43 +0000
ROA not after:            Tue 04 Mar 2025 18:08:43 +0000
asID:                     263720
IP address blocks:        132.255.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:15:ad:08:7f:cd:64:c6:91:68:3f:a4:5a:73:0a:d5:2a:0d:4c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0
        Validity
            Not Before: Mar  5 18:03:43 2024 GMT
            Not After : Mar  4 18:08:43 2025 GMT
        Subject: CN=DB1228FEB9CE898A5187DDD2254DBDC15AF81F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:91:fe:4e:32:04:b5:c5:5a:0f:d9:65:c2:1b:
                    de:7d:0c:da:e7:29:e6:d8:9a:cc:3e:19:97:28:f4:
                    c9:77:f2:5a:66:a6:74:3e:68:2c:d0:2a:08:16:b7:
                    c9:bb:2f:35:62:87:98:06:ba:71:27:79:a1:6a:75:
                    d1:af:98:45:24:b3:88:25:f5:6a:7c:44:72:f5:70:
                    76:c8:10:30:5c:16:ae:c0:6f:f4:99:d1:31:31:cd:
                    aa:90:96:b6:f8:5b:48:c8:18:fa:08:46:7b:e8:cf:
                    7d:e0:cb:41:39:3d:4d:ba:cb:ae:a9:83:69:b9:78:
                    cb:89:de:a6:9e:59:86:9c:d3:f3:95:96:12:94:50:
                    01:17:1d:f5:81:96:c9:fb:2b:60:b4:7f:d9:56:af:
                    e2:02:f6:df:c7:1d:c2:9b:97:e5:06:3d:31:f4:e9:
                    f9:27:ba:c7:66:6e:9d:69:64:87:0c:42:d3:9b:c1:
                    05:19:2b:da:cf:98:c4:08:f7:b2:d3:46:4d:f1:d8:
                    ea:c0:51:30:ec:a3:76:63:2e:7b:69:de:80:7c:d5:
                    52:ad:33:b9:45:13:19:c6:6c:65:aa:43:c2:09:e7:
                    52:e4:04:a6:ec:5b:83:2b:1c:4a:7e:05:d8:a0:86:
                    2a:eb:f2:7a:44:1f:bf:1b:bd:5c:6c:ad:75:60:01:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:12:28:FE:B9:CE:89:8A:51:87:DD:D2:25:4D:BD:C1:5A:F8:1F:04
            X509v3 Authority Key Identifier:
                keyid:54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/3133322e3235352e3230302e302f32322d3234203d3e20323633373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:74:6d:65:4f:43:33:b5:b5:72:ad:f6:38:88:5d:6b:48:
         c6:f1:39:1f:27:9c:be:dc:00:f0:9e:09:44:70:9f:73:8f:c4:
         e2:49:3b:29:ae:64:fc:96:85:e0:46:29:79:d3:7f:ce:e5:47:
         a7:40:9c:f6:df:27:f0:3b:6d:87:3c:90:76:d9:9a:93:3d:cf:
         49:78:3e:1d:ac:74:3a:35:2a:9c:65:e3:68:1f:45:47:c1:85:
         d2:2c:2c:ca:fb:c1:a4:4d:f8:79:9c:c1:42:83:14:e2:c6:7d:
         f1:62:33:2f:e9:1a:54:39:80:2f:1b:d7:d6:c9:de:7b:e2:7e:
         2c:c3:37:0c:5b:47:3e:7b:2f:19:ff:be:67:5f:02:47:10:0a:
         23:fa:9d:ee:b4:54:61:84:35:93:e3:d1:87:8d:16:75:e4:1e:
         13:1e:39:be:ef:61:a1:63:30:2b:83:26:81:b5:e9:34:68:ff:
         1b:55:a2:3f:6a:d3:bf:fe:91:be:88:cb:a7:a9:f9:31:14:da:
         e4:75:5c:f5:09:31:f7:75:2d:e9:f2:e6:c6:63:ed:01:2c:a2:
         34:98:70:ae:9c:0b:8e:9c:38:db:87:21:e0:f7:42:4a:35:b7:
         4a:c8:94:43:54:31:ad:9b:ad:b7:ed:fa:c7:cf:37:f5:b8:3f:
         1c:0a:a1:f6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIxWtCH/NZMaRaD+kWnMK1SoNTIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCRjAxRThGRUZDNDRGODdFMkZEOUNDODI5NzdFMkQ2
M0U2M0VDMDAeFw0yNDAzMDUxODAzNDNaFw0yNTAzMDQxODA4NDNaMDMxMTAvBgNV
BAMTKERCMTIyOEZFQjlDRTg5OEE1MTg3REREMjI1NERCREMxNUFGODFGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkf5OMgS1xVoP2WXCG959DNrn
KebYmsw+GZco9Ml38lpmpnQ+aCzQKggWt8m7LzVih5gGunEneaFqddGvmEUks4gl
9Wp8RHL1cHbIEDBcFq7Ab/SZ0TExzaqQlrb4W0jIGPoIRnvoz33gy0E5PU26y66p
g2m5eMuJ3qaeWYac0/OVlhKUUAEXHfWBlsn7K2C0f9lWr+IC9t/HHcKbl+UGPTH0
6fknusdmbp1pZIcMQtObwQUZK9rPmMQI97LTRk3x2OrAUTDso3ZjLntp3oB81VKt
M7lFExnGbGWqQ8IJ51LkBKbsW4MrHEp+Bdighirr8npEH78bvVxsrXVgAdLdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU2xIo/rnOiYpRh93SJU29wVr4HwQwHwYDVR0j
BBgwFoAUVL8B6P78RPh+L9nMgpd+LWPmPsAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTExQjg0Q0Q2MUQ5MDJDRTI4MjEzRDBDMzk5MTgxMDJG
Q0I1NjgyMkFGNjc3N0JDOUIyNEIxMDM3RDZCRjFFLzAvNTRCRjAxRThGRUZDNDRG
ODdFMkZEOUNDODI5NzdFMkQ2M0U2M0VDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEJGMDFFOEZFRkM0NEY4N0Uy
RkQ5Q0M4Mjk3N0UyRDYzRTYzRUMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUxMUI4NENENjFEOTAyQ0UyODIxM0QwQzM5OTE4MTAyRkNCNTY4MjJB
RjY3NzdCQzlCMjRCMTAzN0Q2QkYxRS8wLzMxMzMzMjJlMzIzNTM1MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMyMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKE
/8gwDQYJKoZIhvcNAQELBQADggEBALfwdG1lT0MztbVyrfY4iF1rSMbxOR8nnL7c
APCeCURwn3OPxOJJOymuZPyWheBGKXnTf87lR6dAnPbfJ/A7bYc8kHbZmpM9z0l4
Ph2sdDo1Kpxl42gfRUfBhdIsLMr7waRN+HmcwUKDFOLGffFiMy/pGlQ5gC8b19bJ
3nvifizDNwxbRz57Lxn/vmdfAkcQCiP6ne60VGGENZPj0YeNFnXkHhMeOb7vYaFj
MCuDJoG16TRo/xtVoj9q07/+kb6Iy6ep+TEU2uR1XPUJMfd1Leny5sZj7QEsojSY
cK6cC46cONuHIeD3Qko1t0rIlENUMa2brbft+sfPN/W4PxwKofY=
-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:06 2024 by rpki-client on console-fra.rpki-client.org