Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa
File:                     3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa (raw, json)
Hash identifier:          VS3MBUXoFlouKfFRelIm9GROpRnGMhV2mu3NOJMOU10=
Subject key identifier:   FD:FC:31:42:E5:56:AB:F0:A5:C7:B5:E2:D2:CA:00:4D:91:32:FE:7A
Certificate issuer:       /CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
Certificate serial:       728580D0494B83E68062C03D0BE1F37CBBC8DB80
Authority key identifier: 62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa
Signing time:             Thu 19 Sep 2024 21:40:00 +0000
ROA not before:           Thu 19 Sep 2024 21:35:00 +0000
ROA not after:            Thu 18 Sep 2025 21:40:00 +0000
asID:                     267682
IP address blocks:        201.219.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:85:80:d0:49:4b:83:e6:80:62:c0:3d:0b:e1:f3:7c:bb:c8:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC
        Validity
            Not Before: Sep 19 21:35:00 2024 GMT
            Not After : Sep 18 21:40:00 2025 GMT
        Subject: CN=FDFC3142E556ABF0A5C7B5E2D2CA004D9132FE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:0e:c3:de:49:78:d0:f5:18:b4:c2:15:6d:
                    6c:f0:3a:5f:3a:71:6e:89:3b:2e:36:2a:7c:18:f0:
                    df:02:29:a9:47:a2:38:59:39:be:d3:25:fc:cb:f6:
                    e5:02:03:a0:2c:c8:de:b7:98:32:77:ca:34:77:b4:
                    00:21:59:c7:76:77:04:6e:d8:71:ef:34:8a:78:2a:
                    87:c7:5f:bd:ce:8e:44:24:13:02:9b:b4:9d:b2:04:
                    95:ca:62:2b:a4:76:2c:68:4a:28:67:31:e7:2d:44:
                    cc:bc:87:f0:64:fe:74:d9:d6:e2:cc:a2:9f:68:d0:
                    f3:f6:43:4b:ab:73:ac:95:99:c9:f5:75:6f:09:43:
                    06:43:4c:5d:a5:6b:ee:0d:3f:93:dc:44:72:1a:bb:
                    4e:24:d3:e8:d6:b6:a8:b3:4b:b8:21:c9:a5:7a:b7:
                    5d:a1:4e:ca:b7:f5:8a:1e:d1:c0:c0:bd:19:06:aa:
                    84:b3:e4:ab:ee:15:59:7e:a8:ed:c9:70:8c:61:71:
                    41:cb:b8:12:2e:b1:45:eb:81:c1:a7:2e:02:a1:c7:
                    2f:5e:99:4a:1f:c1:f7:5e:8e:8c:60:05:9b:75:b6:
                    0e:9c:03:b4:9a:e5:8e:f0:33:e2:7d:d7:62:75:23:
                    4b:25:f7:5c:fb:b0:db:a2:06:19:53:08:4f:d3:8b:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:31:42:E5:56:AB:F0:A5:C7:B5:E2:D2:CA:00:4D:91:32:FE:7A
            X509v3 Authority Key Identifier:
                keyid:62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/3230312e3231392e3139322e302f32342d3234203d3e20323637363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:83:53:8d:8a:d9:eb:71:00:51:e0:1e:4c:85:d1:89:3d:
         2b:51:ba:a9:e8:f0:2c:0a:99:54:dc:16:21:c3:c0:8a:d0:28:
         cf:03:0a:eb:ff:7d:2b:25:06:ad:7d:56:8b:c8:6a:73:92:1b:
         fc:1a:d3:80:fd:53:7c:87:0d:f1:70:c0:49:fc:f8:33:b1:54:
         0d:a6:de:71:38:9c:5a:0d:44:e8:ab:51:e5:ab:3a:a6:ea:a2:
         e9:af:05:a5:df:26:48:4b:7b:0d:7d:43:39:9b:4b:65:08:f4:
         f0:5c:6d:0c:b0:5b:96:a0:ee:a7:cc:16:13:d2:ea:94:bc:97:
         07:18:de:30:10:91:a9:e4:6b:31:3d:7a:02:24:46:43:d6:a1:
         2c:59:60:1f:f5:b8:f1:94:b2:2c:90:af:9c:3c:c8:37:e8:2c:
         c3:99:fb:39:87:fc:46:dc:7b:ad:22:63:ad:d9:4f:33:72:40:
         c3:01:b9:6d:92:52:d9:19:f4:7d:bf:df:1e:90:36:de:ec:76:
         7b:e1:8b:2a:32:89:13:3c:5e:da:79:85:9a:ad:78:8a:e4:3e:
         3a:af:9e:d8:ce:3e:49:c1:0e:d2:2b:74:01:36:4f:dd:1e:bb:
         6a:7f:c8:b9:e8:3c:d3:ff:96:4e:00:f7:a6:91:53:ef:4f:24:
         09:65:95:23
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcoWA0ElLg+aAYsA9C+HzfLvI24AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJBNUFFRUY2QjlEMDE4RTRCN0Y3Rjg3RUUyM0JGRkM4
MzM3RDJFQzAeFw0yNDA5MTkyMTM1MDBaFw0yNTA5MTgyMTQwMDBaMDMxMTAvBgNV
BAMTKEZERkMzMTQyRTU1NkFCRjBBNUM3QjVFMkQyQ0EwMDREOTEzMkZFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoA7D3kl40PUYtMIVbWzwOl86
cW6JOy42KnwY8N8CKalHojhZOb7TJfzL9uUCA6AsyN63mDJ3yjR3tAAhWcd2dwRu
2HHvNIp4KofHX73OjkQkEwKbtJ2yBJXKYiukdixoSihnMectRMy8h/Bk/nTZ1uLM
op9o0PP2Q0urc6yVmcn1dW8JQwZDTF2la+4NP5PcRHIau04k0+jWtqizS7ghyaV6
t12hTsq39Yoe0cDAvRkGqoSz5KvuFVl+qO3JcIxhcUHLuBIusUXrgcGnLgKhxy9e
mUofwfdejoxgBZt1tg6cA7Sa5Y7wM+J912J1I0sl91z7sNuiBhlTCE/Ti781AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU/fwxQuVWq/Clx7Xi0soATZEy/nowHwYDVR0j
BBgwFoAUYqWu72udAY5Lf3+H7iO//IM30uwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzAxRjE0MTYwOEIwODYyQzE3MkIxNkU0NTZFMTExMjFC
RjYxM0M0RUU3RjYxQjE0MjhGMjM3QTVCRkQ2Njk5LzAvNjJBNUFFRUY2QjlEMDE4
RTRCN0Y3Rjg3RUUyM0JGRkM4MzM3RDJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MkE1QUVFRjZCOUQwMThFNEI3
RjdGODdFRTIzQkZGQzgzMzdEMkVDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjMwMUYxNDE2MDhCMDg2MkMxNzJCMTZFNDU2RTExMTIxQkY2MTNDNEVF
N0Y2MUIxNDI4RjIzN0E1QkZENjY5OS8wLzMyMzAzMTJlMzIzMTM5MmUzMTM5MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczNjM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
28AwDQYJKoZIhvcNAQELBQADggEBAAs7g1ONitnrcQBR4B5MhdGJPStRuqno8CwK
mVTcFiHDwIrQKM8DCuv/fSslBq19VovIanOSG/wa04D9U3yHDfFwwEn8+DOxVA2m
3nE4nFoNROirUeWrOqbqoumvBaXfJkhLew19QzmbS2UI9PBcbQywW5ag7qfMFhPS
6pS8lwcY3jAQkankazE9egIkRkPWoSxZYB/1uPGUsiyQr5w8yDfoLMOZ+zmH/Ebc
e60iY63ZTzNyQMMBuW2SUtkZ9H2/3x6QNt7sdnvhiyoyiRM8Xtp5hZqteIrkPjqv
ntjOPknBDtIrdAE2T90eu2p/yLnoPNP/lk4A96aRU+9PJAlllSM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org