Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33312e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e33312e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          5wKuT/IAsqljO6idgQOjcKaQpzO7G9rtSEauvEpIOW0=
Subject key identifier:   5D:E4:73:D8:B0:B2:DE:70:CA:C3:8F:2C:10:85:BD:D8:AB:B0:E8:D6
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       083C027BCEF42F801C8E1D33BEBDC5FFC7612641
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33312e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 09 Aug 2024 20:45:00 +0000
ROA not before:           Fri 09 Aug 2024 20:40:00 +0000
ROA not after:            Fri 08 Aug 2025 20:45:00 +0000
asID:                     266877
IP address blocks:        152.231.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3c:02:7b:ce:f4:2f:80:1c:8e:1d:33:be:bd:c5:ff:c7:61:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Aug  9 20:40:00 2024 GMT
            Not After : Aug  8 20:45:00 2025 GMT
        Subject: CN=5DE473D8B0B2DE70CAC38F2C1085BDD8ABB0E8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:52:46:cb:3f:66:8a:0f:fc:f6:95:e5:80:
                    8f:bb:3b:d4:d0:b2:1c:17:de:57:d5:f3:34:ae:3a:
                    58:12:c0:cb:e3:fd:51:bf:4e:de:c8:cc:69:da:38:
                    f8:ec:17:4e:51:41:c9:b5:22:c9:91:eb:e2:f9:ae:
                    39:0c:1f:6d:96:21:d1:37:83:76:53:9b:7b:dc:d0:
                    3b:fc:2b:5a:f8:b4:df:fb:d2:1a:e9:12:68:27:e3:
                    59:99:51:d3:38:4e:08:d1:bb:e9:6d:57:7a:08:da:
                    88:97:3d:a7:b7:14:76:0e:2d:fd:66:d9:d0:5f:a3:
                    e2:e4:64:e3:1f:b4:fd:74:16:42:b4:da:6d:01:34:
                    65:3e:49:6a:64:d1:3f:fc:b5:c7:ad:79:6f:f5:05:
                    2c:ae:18:a3:d7:e3:1b:12:e0:ed:a2:51:28:fc:62:
                    ed:5c:0f:3e:39:c5:e1:39:c1:f4:8e:53:f7:fc:6d:
                    73:11:21:6d:a6:26:b8:7c:04:a0:73:2f:f4:4f:1b:
                    40:f1:be:49:04:26:5e:9e:12:29:23:53:05:bf:de:
                    0e:c3:29:53:ae:2d:ee:3c:12:ae:2c:7e:55:1f:1e:
                    24:72:bc:2e:b4:da:f9:97:96:4d:66:1f:b3:70:eb:
                    3c:96:4b:5c:fe:70:f9:bf:1d:28:f9:cc:b7:4d:f7:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E4:73:D8:B0:B2:DE:70:CA:C3:8F:2C:10:85:BD:D8:AB:B0:E8:D6
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e33312e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:a6:b4:95:23:4b:f9:6c:c6:13:e7:69:b3:00:19:26:9d:
         de:18:c1:a8:cd:fd:b1:da:a8:13:a6:ae:54:41:7d:54:e6:54:
         a3:c5:c0:41:bf:aa:78:7e:2f:86:f1:91:75:84:e6:d9:bd:53:
         eb:47:6c:33:3b:fa:e0:4f:9e:b8:4e:7a:b0:5c:1b:1e:74:d5:
         ef:2b:71:7e:5d:ff:21:6e:0e:40:4c:ea:b1:48:27:66:08:ad:
         17:d7:74:8e:d0:fd:c3:db:2e:59:b9:66:71:c0:2b:2f:da:75:
         b4:48:3f:bf:95:2e:0a:4c:04:7d:33:db:01:23:ee:37:f4:d3:
         d3:2f:c2:ce:a7:1e:89:ec:b6:83:4f:b9:b5:a5:d9:cc:42:fe:
         d1:52:4f:96:25:97:33:ce:55:78:d1:01:f9:a3:be:12:96:2d:
         ea:96:57:c7:d1:8b:92:b3:d9:85:9b:87:9d:dd:7a:b8:a3:6b:
         3c:3b:1a:a7:94:f7:2b:fc:5a:18:19:a0:69:00:5b:76:3f:fc:
         c9:c3:67:41:72:2f:02:92:28:44:5b:4b:d5:67:66:aa:f2:e5:
         ec:c2:b4:14:9d:b2:13:24:36:fb:69:23:5f:d7:fe:32:c7:2f:
         72:c5:6b:22:43:d2:dd:99:eb:a1:e8:9b:b4:74:b0:91:e3:66:
         00:11:de:41
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCDwCe870L4Acjh0zvr3F/8dhJkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxQUREMzZBM0EwNzFCNTRBOThFMjY2NDY2MkQ2Q0RD
RDE0NjRGQTAeFw0yNDA4MDkyMDQwMDBaFw0yNTA4MDgyMDQ1MDBaMDMxMTAvBgNV
BAMTKDVERTQ3M0Q4QjBCMkRFNzBDQUMzOEYyQzEwODVCREQ4QUJCMEU4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFFJGyz9mig/89pXlgI+7O9TQ
shwX3lfV8zSuOlgSwMvj/VG/Tt7IzGnaOPjsF05RQcm1IsmR6+L5rjkMH22WIdE3
g3ZTm3vc0Dv8K1r4tN/70hrpEmgn41mZUdM4TgjRu+ltV3oI2oiXPae3FHYOLf1m
2dBfo+LkZOMftP10FkK02m0BNGU+SWpk0T/8tceteW/1BSyuGKPX4xsS4O2iUSj8
Yu1cDz45xeE5wfSOU/f8bXMRIW2mJrh8BKBzL/RPG0DxvkkEJl6eEikjUwW/3g7D
KVOuLe48Eq4sflUfHiRyvC602vmXlk1mH7Nw6zyWS1z+cPm/HSj5zLdN9w83AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXeRz2LCy3nDKw48sEIW92Kuw6NYwHwYDVR0j
BBgwFoAUYxrdNqOgcbVKmOJmRmLWzc0UZPowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTIzNDFERjU0MjhGNjY3RDcyRDI1OEU5MjY5QUUxRDA2
M0E5MjhFOTFGMkZFMUE2MzFCODlEOTgwOEUwMEI3LzAvNjMxQUREMzZBM0EwNzFC
NTRBOThFMjY2NDY2MkQ2Q0RDRDE0NjRGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzFBREQzNkEzQTA3MUI1NEE5
OEUyNjY0NjYyRDZDRENEMTQ2NEZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjkyMzQxREY1NDI4RjY2N0Q3MkQyNThFOTI2OUFFMUQwNjNBOTI4RTkx
RjJGRTFBNjMxQjg5RDk4MDhFMDBCNy8wLzMxMzUzMjJlMzIzMzMxMmUzMzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOcf
MA0GCSqGSIb3DQEBCwUAA4IBAQBnS6a0lSNL+WzGE+dpswAZJp3eGMGozf2x2qgT
pq5UQX1U5lSjxcBBv6p4fi+G8ZF1hObZvVPrR2wzO/rgT564TnqwXBsedNXvK3F+
Xf8hbg5ATOqxSCdmCK0X13SO0P3D2y5ZuWZxwCsv2nW0SD+/lS4KTAR9M9sBI+43
9NPTL8LOpx6J7LaDT7m1pdnMQv7RUk+WJZczzlV40QH5o74Sli3qllfH0YuSs9mF
m4ed3Xq4o2s8OxqnlPcr/FoYGaBpAFt2P/zJw2dBci8CkihEW0vVZ2aq8uXswrQU
nbITJDb7aSNf1/4yxy9yxWsiQ9Ldmeuh6Ju0dLCR42YAEd5B
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org