Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203333333932.roa
File:                     3137302e3233332e37322e302f32332d3233203d3e203333333932.roa (raw, json)
Hash identifier:          4YPEutU0yaBB84EKESHBwHFMUr+Zewf0E9ASuxbx2xg=
Subject key identifier:   7F:49:BE:CF:9C:45:5F:18:09:37:78:A2:AD:C1:6D:F5:36:65:62:81
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       5EEDE0FD33099FAE68738B3DC4172FD92A6E0456
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203333333932.roa
Signing time:             Thu 18 Jul 2024 19:55:00 +0000
ROA not before:           Thu 18 Jul 2024 19:50:00 +0000
ROA not after:            Thu 17 Jul 2025 19:55:00 +0000
asID:                     33392
IP address blocks:        170.233.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ed:e0:fd:33:09:9f:ae:68:73:8b:3d:c4:17:2f:d9:2a:6e:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Jul 18 19:50:00 2024 GMT
            Not After : Jul 17 19:55:00 2025 GMT
        Subject: CN=7F49BECF9C455F18093778A2ADC16DF536656281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:38:da:3d:b8:86:d7:6b:fa:c2:8f:0b:f3:
                    34:65:c3:4e:16:0f:8b:76:aa:b1:b2:c7:e5:ec:c7:
                    a1:83:f9:fc:d8:49:6e:14:db:18:e1:ad:66:a4:62:
                    0a:06:cc:3f:d5:e8:3e:69:cf:0a:5a:b9:9d:08:a7:
                    45:d2:1e:d6:5b:a1:80:d0:9e:61:8c:69:ae:69:e8:
                    a0:b8:eb:38:76:88:6e:5c:a8:21:01:18:81:10:e7:
                    04:52:df:94:32:b8:02:9c:12:b8:37:0b:ee:a2:1e:
                    e2:15:99:ff:d4:ff:08:0a:00:34:de:b7:ed:fb:48:
                    73:bd:55:bf:82:9d:58:fd:82:00:a8:5e:3f:2b:bd:
                    48:82:e3:72:b7:df:10:15:7a:cb:a8:d6:d3:6a:fd:
                    7b:92:1a:16:5a:61:0d:97:fe:77:86:91:b2:0c:8f:
                    18:5f:fa:6c:9e:0b:fa:3a:3b:03:e5:94:c5:7f:da:
                    e3:dc:dd:8b:e8:cf:3d:98:b4:da:88:c1:b1:01:87:
                    e1:3d:67:f0:21:f1:76:51:57:4d:84:27:d1:02:b8:
                    80:f1:dc:d8:ba:46:e6:4e:2b:ec:07:a5:1c:c8:91:
                    e2:b2:72:8d:d1:4e:a0:7b:b9:64:f1:78:4d:c8:17:
                    27:ce:98:0b:2d:55:74:21:f5:3d:64:14:68:b2:1f:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:BE:CF:9C:45:5F:18:09:37:78:A2:AD:C1:6D:F5:36:65:62:81
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32332d3233203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:50:e2:22:1f:ce:9d:f6:bc:d8:2e:e2:e3:0e:6a:eb:4b:35:
         d1:5d:68:b7:ac:f3:c3:19:e7:3b:cc:83:ee:72:7c:37:f3:6f:
         e4:f1:45:1e:cb:07:11:f0:70:5d:5f:a8:5b:58:7f:c6:f9:ee:
         47:89:20:29:f8:87:43:56:2b:33:0a:fb:54:80:bd:ba:2e:47:
         5c:4b:24:fe:a4:43:d9:9f:c6:12:76:62:19:e4:db:66:d0:7b:
         7a:c9:98:e4:31:15:4a:4e:fe:4f:50:f9:52:93:35:71:95:69:
         8b:d2:07:43:c7:a3:e0:0f:a7:77:92:50:d3:bb:3d:a8:39:e0:
         3f:bb:90:f7:40:e9:7d:62:a3:00:4a:1c:95:05:33:47:60:e9:
         b3:24:57:be:fa:aa:53:94:13:44:76:60:30:5d:1d:1a:2b:1f:
         a1:f6:a8:cc:d4:d7:9b:a9:68:9d:73:28:9b:55:22:2b:e7:5e:
         b0:56:3e:a3:99:b4:11:19:95:96:ec:75:ff:4a:a0:17:a4:89:
         a0:22:d3:ed:10:fb:39:80:bd:8e:15:23:be:73:87:5f:0b:dc:
         00:62:36:84:1f:44:b2:cf:e0:f2:ad:48:7d:09:64:7e:af:aa:
         61:b4:6f:49:c1:95:ed:04:5d:29:b8:14:b0:b9:0b:78:8c:96:
         ac:56:1c:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXu3g/TMJn65oc4s9xBcv2SpuBFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNDA3MTgxOTUwMDBaFw0yNTA3MTcxOTU1MDBaMDMxMTAvBgNV
BAMTKDdGNDlCRUNGOUM0NTVGMTgwOTM3NzhBMkFEQzE2REY1MzY2NTYyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8DjaPbiG12v6wo8L8zRlw04W
D4t2qrGyx+Xsx6GD+fzYSW4U2xjhrWakYgoGzD/V6D5pzwpauZ0Ip0XSHtZboYDQ
nmGMaa5p6KC46zh2iG5cqCEBGIEQ5wRS35QyuAKcErg3C+6iHuIVmf/U/wgKADTe
t+37SHO9Vb+CnVj9ggCoXj8rvUiC43K33xAVesuo1tNq/XuSGhZaYQ2X/neGkbIM
jxhf+myeC/o6OwPllMV/2uPc3Yvozz2YtNqIwbEBh+E9Z/Ah8XZRV02EJ9ECuIDx
3Ni6RuZOK+wHpRzIkeKyco3RTqB7uWTxeE3IFyfOmAstVXQh9T1kFGiyHxi7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUf0m+z5xFXxgJN3iircFt9TZlYoEwHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMxMzczMDJlMzIzMzMzMmUzNzMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzMzMzMzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpSDAN
BgkqhkiG9w0BAQsFAAOCAQEAZFDiIh/Onfa82C7i4w5q60s10V1ot6zzwxnnO8yD
7nJ8N/Nv5PFFHssHEfBwXV+oW1h/xvnuR4kgKfiHQ1YrMwr7VIC9ui5HXEsk/qRD
2Z/GEnZiGeTbZtB7esmY5DEVSk7+T1D5UpM1cZVpi9IHQ8ej4A+nd5JQ07s9qDng
P7uQ90DpfWKjAEoclQUzR2DpsyRXvvqqU5QTRHZgMF0dGisfofaozNTXm6lonXMo
m1UiK+desFY+o5m0ERmVlux1/0qgF6SJoCLT7RD7OYC9jhUjvnOHXwvcAGI2hB9E
ss/g8q1IfQlkfq+qYbRvScGV7QRdKbgUsLkLeIyWrFYclA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org