Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa
File:                     3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa (raw, json)
Hash identifier:          g+ROTuFy7Im3igO87sG2DDMHo54z9yxanQ4dbZDf9Pk=
Subject key identifier:   4E:4D:12:A3:05:8E:E4:B7:38:95:51:94:FE:23:69:BA:EB:56:D8:70
Certificate issuer:       /CN=B905CE8CB484116258141F2BAF5032F468106BF3
Certificate serial:       059143089D28C204AB52F8F292C0220229589157
Authority key identifier: B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa
Signing time:             Tue 05 Mar 2024 17:48:06 +0000
ROA not before:           Tue 05 Mar 2024 17:43:06 +0000
ROA not after:            Tue 04 Mar 2025 17:48:06 +0000
asID:                     265811
IP address blocks:        201.182.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:91:43:08:9d:28:c2:04:ab:52:f8:f2:92:c0:22:02:29:58:91:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B905CE8CB484116258141F2BAF5032F468106BF3
        Validity
            Not Before: Mar  5 17:43:06 2024 GMT
            Not After : Mar  4 17:48:06 2025 GMT
        Subject: CN=4E4D12A3058EE4B738955194FE2369BAEB56D870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:fc:3a:9b:30:4b:94:65:b6:f4:4f:09:32:
                    c0:c8:5e:43:4a:e7:9a:24:42:6c:54:64:82:92:96:
                    78:1a:45:f2:91:04:0d:e2:19:4a:2f:1d:c1:c5:71:
                    c2:9e:5e:19:dc:52:76:a4:d1:f5:94:26:12:a8:f5:
                    f9:cd:fc:62:dd:fe:02:22:77:63:da:9d:53:80:e2:
                    ae:7c:25:6a:ad:7b:a8:e9:03:c7:7b:f3:3f:d5:26:
                    40:ba:1a:54:7e:0e:d5:75:01:45:62:4e:9c:b0:91:
                    34:b0:08:32:90:6a:96:df:08:a5:9b:8d:a1:24:f7:
                    90:d4:75:8d:c1:89:d2:75:22:29:44:a5:51:7b:86:
                    f2:e7:37:e3:22:26:50:19:44:43:05:71:29:fe:b1:
                    a7:00:95:2d:4c:87:d1:80:26:a9:2e:e9:15:7d:8a:
                    2b:7d:1e:f2:b6:6d:ed:00:ac:0d:ad:88:b0:74:f9:
                    ea:bf:73:0f:bb:ba:b7:51:6d:48:51:e6:3d:b6:80:
                    6f:ab:49:55:89:5d:39:10:7b:2f:b7:c2:5b:ab:07:
                    89:66:3a:1c:10:c0:4b:a6:93:00:4e:43:28:f8:ad:
                    2c:70:b6:1b:a8:0e:33:d2:e5:d0:3b:d0:43:cf:1a:
                    ce:1a:27:7a:5e:f5:52:09:e9:31:00:b3:82:c9:c9:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4D:12:A3:05:8E:E4:B7:38:95:51:94:FE:23:69:BA:EB:56:D8:70
            X509v3 Authority Key Identifier:
                keyid:B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32362e302f32342d3234203d3e20323635383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:e8:a2:ae:5d:5f:40:69:23:ab:f9:3c:e4:70:9a:45:5b:
         35:14:47:99:68:37:93:c8:a1:23:4e:00:14:f8:d0:eb:fb:ca:
         4a:cc:3f:50:2a:bf:85:32:fb:0e:b1:3f:e9:67:c4:91:0d:d8:
         b3:6b:88:28:dd:a3:24:c7:1f:4e:25:78:f4:dd:31:e8:b8:d4:
         54:f3:44:0e:76:29:4e:50:2f:b7:81:24:fe:7a:6a:46:e8:b6:
         9e:21:92:98:f5:64:77:f6:25:5f:b1:b0:8e:4e:2c:68:db:c7:
         72:7e:13:44:ea:c9:3c:86:f4:8e:e4:41:bf:db:eb:c1:49:14:
         29:4a:92:da:43:9a:40:ad:d1:7a:fe:35:f1:ef:e4:7c:92:79:
         c6:2b:6f:c5:b2:7e:0b:bd:7f:6a:57:d1:e6:d3:3c:1a:1d:52:
         86:10:22:9d:4d:66:fd:38:8d:0f:e9:4f:2b:88:f4:7f:d9:45:
         90:8b:df:97:14:32:17:e4:0e:51:36:4c:c8:35:a7:9e:f3:0b:
         02:20:7e:19:d8:00:93:6e:97:54:b5:0e:9e:2d:a2:75:79:86:
         09:99:34:2b:09:20:77:a0:df:4b:2e:b3:65:f7:c4:91:7c:88:
         18:62:36:a7:03:68:cf:b4:8b:c7:d8:40:04:36:f0:aa:90:7f:
         43:9a:62:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBZFDCJ0owgSrUvjyksAiAilYkVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkwNUNFOENCNDg0MTE2MjU4MTQxRjJCQUY1MDMyRjQ2
ODEwNkJGMzAeFw0yNDAzMDUxNzQzMDZaFw0yNTAzMDQxNzQ4MDZaMDMxMTAvBgNV
BAMTKDRFNEQxMkEzMDU4RUU0QjczODk1NTE5NEZFMjM2OUJBRUI1NkQ4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOPw6mzBLlGW29E8JMsDIXkNK
55okQmxUZIKSlngaRfKRBA3iGUovHcHFccKeXhncUnak0fWUJhKo9fnN/GLd/gIi
d2PanVOA4q58JWqte6jpA8d78z/VJkC6GlR+DtV1AUViTpywkTSwCDKQapbfCKWb
jaEk95DUdY3BidJ1IilEpVF7hvLnN+MiJlAZREMFcSn+sacAlS1Mh9GAJqku6RV9
iit9HvK2be0ArA2tiLB0+eq/cw+7urdRbUhR5j22gG+rSVWJXTkQey+3wlurB4lm
OhwQwEumkwBOQyj4rSxwthuoDjPS5dA70EPPGs4aJ3pe9VIJ6TEAs4LJyfprAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTk0SowWO5Lc4lVGU/iNpuutW2HAwHwYDVR0j
BBgwFoAUuQXOjLSEEWJYFB8rr1Ay9GgQa/MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GODM0QkQ5RkMwMkRDN0IyNkUyNEEyMjdCQjEyNEI2NEVD
Q0Q5MkE1Mjg2NDFENDU2QTEyMUQ0MzJBRkRERDE3LzAvQjkwNUNFOENCNDg0MTE2
MjU4MTQxRjJCQUY1MDMyRjQ2ODEwNkJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTA1Q0U4Q0I0ODQxMTYyNTgx
NDFGMkJBRjUwMzJGNDY4MTA2QkYzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjgzNEJEOUZDMDJEQzdCMjZFMjRBMjI3QkIxMjRCNjRFQ0NEOTJBNTI4
NjQxRDQ1NkExMjFENDMyQUZEREQxNy8wLzMyMzAzMTJlMzEzODMyMmUzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAybYa
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ4+iirl1fQGkjq/k85HCaRVs1FEeZaDeTyKEj
TgAU+NDr+8pKzD9QKr+FMvsOsT/pZ8SRDdiza4go3aMkxx9OJXj03THouNRU80QO
dilOUC+3gST+empG6LaeIZKY9WR39iVfsbCOTixo28dyfhNE6sk8hvSO5EG/2+vB
SRQpSpLaQ5pArdF6/jXx7+R8knnGK2/Fsn4LvX9qV9Hm0zwaHVKGECKdTWb9OI0P
6U8riPR/2UWQi9+XFDIX5A5RNkzINaee8wsCIH4Z2ACTbpdUtQ6eLaJ1eYYJmTQr
CSB3oN9LLrNl98SRfIgYYjanA2jPtIvH2EAENvCqkH9DmmLO
-----END CERTIFICATE-----
Generated at Tue Jun 25 07:04:56 2024 by rpki-client on console-fra.rpki-client.org