Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa
File:                     3230312e3231382e302e302f31382d3234203d3e203139313639.roa (raw, json)
Hash identifier:          BYj6ePD7O1Ptu9Cy4J8pmJOINLfvewflu/9QR7qUP6w=
Subject key identifier:   E6:3F:78:5E:D9:E9:EB:42:BC:6B:64:BE:B6:70:CF:D5:E0:A5:B9:BE
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       4A57AE44BB5A3DF51FBFACCB6567B440CCE6C66A
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:31 +0000
ROA not before:           Tue 05 Mar 2024 18:05:31 +0000
ROA not after:            Tue 04 Mar 2025 18:10:31 +0000
asID:                     19169
IP address blocks:        201.218.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:57:ae:44:bb:5a:3d:f5:1f:bf:ac:cb:65:67:b4:40:cc:e6:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:31 2024 GMT
            Not After : Mar  4 18:10:31 2025 GMT
        Subject: CN=E63F785ED9E9EB42BC6B64BEB670CFD5E0A5B9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:ab:75:50:32:92:49:81:88:da:fb:d7:a4:
                    be:a7:98:a7:ff:e3:4b:81:92:32:e5:cd:1d:34:19:
                    ac:43:7e:f5:83:a1:7d:8c:bc:84:dc:88:fa:6a:3f:
                    0e:f6:16:c8:ef:bf:d3:fe:42:53:ef:3c:79:40:29:
                    af:6a:c8:a1:31:f6:4f:76:dd:b9:f2:ec:c5:7a:c8:
                    38:68:a3:73:28:ff:3c:b8:c1:45:f7:44:55:bf:0f:
                    5a:31:74:10:e0:13:a7:95:81:f0:a2:61:69:e4:a9:
                    1a:48:78:e3:71:87:e7:9a:7c:d4:43:8a:11:2c:d0:
                    f2:18:a4:31:a6:35:61:79:2e:06:bc:ca:2f:7b:7e:
                    9d:b5:3b:2b:db:e2:fe:33:61:57:45:9e:1e:a6:94:
                    9d:d2:79:b2:4a:88:81:f6:4b:cc:bb:4d:37:e7:25:
                    5c:92:0d:9e:29:35:e3:12:fa:52:fa:b6:35:43:cf:
                    c7:0f:f5:5d:a1:81:a3:d9:14:1a:e8:58:25:71:92:
                    82:b5:95:cb:b0:dc:3e:b0:c9:a2:5b:87:87:5d:64:
                    99:72:fe:85:69:d4:b4:a1:26:ab:92:38:e0:66:36:
                    fd:37:72:c5:48:0d:de:be:13:5f:0b:34:b2:db:a5:
                    c8:25:10:83:1f:de:11:78:10:37:4c:8d:a9:ca:b3:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:78:5E:D9:E9:EB:42:BC:6B:64:BE:B6:70:CF:D5:E0:A5:B9:BE
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:39:ec:36:e3:dc:3f:79:20:79:8d:49:1a:64:80:25:cb:
         63:d8:c5:9b:b6:1d:08:c0:cc:43:a0:f0:fb:87:a7:12:f9:98:
         45:a5:11:70:32:1c:4c:8b:f5:72:c4:4a:1e:b2:fe:c7:f7:a8:
         55:52:5c:44:6b:02:ea:3c:7f:e6:bd:98:36:19:33:91:85:74:
         38:21:13:fa:bc:25:36:e6:e8:36:e3:54:05:be:b0:51:59:18:
         65:ae:1e:5d:34:31:e4:bb:a9:51:5b:89:0f:87:09:17:e1:6c:
         51:2c:e9:95:7b:99:d8:00:74:55:c6:e5:55:00:7b:cf:69:80:
         f9:20:e3:6a:65:a2:bc:d9:f9:b1:6e:6c:3b:c5:cf:35:59:73:
         8b:0a:34:2f:ee:46:48:ad:d1:55:08:78:b5:8b:1b:94:6b:7b:
         4b:45:1c:50:1b:fe:15:7f:09:9b:a3:70:18:12:c5:4f:ab:f3:
         ee:bb:d7:4e:39:9d:fb:6f:a5:bf:af:06:dc:1f:c0:03:79:0a:
         e7:c1:35:cf:f7:62:89:29:fd:4a:56:a1:08:3e:11:59:29:11:
         eb:50:6d:c3:02:88:67:3a:62:d1:7e:81:33:b0:ad:43:fb:ea:
         7f:2f:eb:83:10:ae:0f:b0:ce:0c:b2:0c:21:ad:1e:1f:80:0e:
         87:ad:d5:29
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSleuRLtaPfUfv6zLZWe0QMzmxmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MzFaFw0yNTAzMDQxODEwMzFaMDMxMTAvBgNV
BAMTKEU2M0Y3ODVFRDlFOUVCNDJCQzZCNjRCRUI2NzBDRkQ1RTBBNUI5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFat1UDKSSYGI2vvXpL6nmKf/
40uBkjLlzR00GaxDfvWDoX2MvITciPpqPw72Fsjvv9P+QlPvPHlAKa9qyKEx9k92
3bny7MV6yDhoo3Mo/zy4wUX3RFW/D1oxdBDgE6eVgfCiYWnkqRpIeONxh+eafNRD
ihEs0PIYpDGmNWF5Lga8yi97fp21Oyvb4v4zYVdFnh6mlJ3SebJKiIH2S8y7TTfn
JVySDZ4pNeMS+lL6tjVDz8cP9V2hgaPZFBroWCVxkoK1lcuw3D6wyaJbh4ddZJly
/oVp1LShJquSOOBmNv03csVIDd6+E18LNLLbpcglEIMf3hF4EDdMjanKs9GHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5j94Xtnp60K8a2S+tnDP1eClub4wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMyMzAzMTJlMzIzMTM4MmUzMDJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzkzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbJ2gAwDQYJ
KoZIhvcNAQELBQADggEBAH2XOew249w/eSB5jUkaZIAly2PYxZu2HQjAzEOg8PuH
pxL5mEWlEXAyHEyL9XLESh6y/sf3qFVSXERrAuo8f+a9mDYZM5GFdDghE/q8JTbm
6DbjVAW+sFFZGGWuHl00MeS7qVFbiQ+HCRfhbFEs6ZV7mdgAdFXG5VUAe89pgPkg
42plorzZ+bFubDvFzzVZc4sKNC/uRkit0VUIeLWLG5Rre0tFHFAb/hV/CZujcBgS
xU+r8+671045nftvpb+vBtwfwAN5CufBNc/3Yokp/UpWoQg+EVkpEetQbcMCiGc6
YtF+gTOwrUP76n8v64MQrg+wzgyyDCGtHh+ADoet1Sk=
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:33 2024 by rpki-client on console-ams.rpki-client.org