Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3134352e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          46mleoYBal6ByV/6reEw5dlWfl79scuKC0YZOtAAfqE=
Subject key identifier:   63:07:59:6D:18:BF:C2:FB:85:7D:E1:59:7C:BF:55:A2:4E:59:52:83
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       1EAC77804D1310C5F582C11DE7C6231E78CB18A3
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
Signing time:             Wed 15 May 2024 13:15:04 +0000
ROA not before:           Wed 15 May 2024 13:10:04 +0000
ROA not after:            Wed 14 May 2025 13:15:04 +0000
asID:                     13999
IP address blocks:        200.77.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ac:77:80:4d:13:10:c5:f5:82:c1:1d:e7:c6:23:1e:78:cb:18:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:04 2024 GMT
            Not After : May 14 13:15:04 2025 GMT
        Subject: CN=6307596D18BFC2FB857DE1597CBF55A24E595283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:d1:f9:1c:91:86:7e:dd:2e:ea:33:35:d5:
                    23:f7:21:a1:da:c8:c3:f2:4d:52:a5:5a:dc:eb:cb:
                    49:4d:18:44:74:17:dc:6e:c7:12:47:08:6f:6d:24:
                    4e:f4:0e:d0:7c:bf:63:44:a1:d0:87:da:f1:e8:e2:
                    66:72:c5:6a:d1:8d:be:68:22:ae:e4:07:be:bd:c5:
                    c5:06:49:89:8d:db:19:42:13:b1:0f:29:47:af:d2:
                    cb:29:a9:f2:3c:f2:33:42:ba:20:ff:d4:33:8d:b9:
                    cf:a5:7e:91:d7:49:77:af:bb:1d:f2:60:f1:14:81:
                    4b:07:4e:32:57:11:bd:64:0c:f5:28:a0:ce:6e:f8:
                    80:2e:53:4e:38:bb:6b:44:b0:df:cb:3b:d6:4d:1f:
                    6b:49:2b:14:20:f7:d2:4f:e8:34:10:94:c7:79:ea:
                    50:a6:ed:75:52:35:f3:33:07:20:00:18:c6:45:43:
                    f3:4e:17:c3:55:82:1d:d4:aa:1d:58:a7:4d:05:66:
                    e9:26:d5:9d:46:11:09:64:b4:ce:9e:d4:57:37:38:
                    99:6d:00:7f:1a:88:87:77:87:9d:db:54:72:ae:13:
                    70:e4:12:14:e4:72:6f:9d:84:9b:a4:0d:1e:fe:0b:
                    c5:19:a6:8a:45:1a:17:78:1e:c6:ca:84:b8:11:9c:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:59:6D:18:BF:C2:FB:85:7D:E1:59:7C:BF:55:A2:4E:59:52:83
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:91:b8:d9:0e:03:f6:35:ed:af:08:b9:e6:ad:40:cb:ca:51:
         50:94:8b:8f:b9:20:8c:73:a0:3b:a7:84:c6:92:58:e1:f5:c1:
         a9:9b:d6:aa:0c:4d:71:32:86:c5:78:fe:30:2f:b3:af:81:e0:
         40:c2:29:1a:d8:f6:d1:3b:07:02:77:e9:9c:91:46:68:e4:40:
         45:b6:a3:50:c8:ec:bf:a7:80:93:1c:ab:0f:c7:fc:76:3a:03:
         f4:11:f4:18:c4:7e:d6:d2:2d:0a:88:c6:58:5f:2b:7b:54:d2:
         a8:24:32:66:b8:3f:2e:ac:cb:65:56:a0:08:b3:09:a6:51:18:
         21:29:91:76:c0:1b:a5:29:21:71:d4:a0:39:96:44:e4:d5:20:
         67:c1:22:ed:5c:33:47:c0:fb:fa:c9:ff:a8:e7:5f:ed:a7:ad:
         75:96:0c:e2:7f:f2:a7:d7:7d:b8:d6:f5:d9:e7:8b:76:26:2a:
         97:34:64:5e:d4:0c:01:52:7b:e5:f5:5b:53:d7:69:7b:35:84:
         fa:c6:94:aa:b7:74:f3:09:93:86:77:31:d1:a7:d2:6f:98:51:
         de:d3:8f:32:5f:34:1f:22:f3:4d:cb:d0:68:18:a6:cb:b2:06:
         59:32:88:74:a1:c5:61:86:8a:b1:b6:3d:59:20:64:c3:ca:b7:
         25:da:8d:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHqx3gE0TEMX1gsEd58YjHnjLGKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU3OEIzMTA3NEUwQjU3NDU5QjFDMkE2OTBCODkyNjE4
NjBFQTk0QzAeFw0yNDA1MTUxMzEwMDRaFw0yNTA1MTQxMzE1MDRaMDMxMTAvBgNV
BAMTKDYzMDc1OTZEMThCRkMyRkI4NTdERTE1OTdDQkY1NUEyNEU1OTUyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCds9H5HJGGft0u6jM11SP3IaHa
yMPyTVKlWtzry0lNGER0F9xuxxJHCG9tJE70DtB8v2NEodCH2vHo4mZyxWrRjb5o
Iq7kB769xcUGSYmN2xlCE7EPKUev0sspqfI88jNCuiD/1DONuc+lfpHXSXevux3y
YPEUgUsHTjJXEb1kDPUooM5u+IAuU044u2tEsN/LO9ZNH2tJKxQg99JP6DQQlMd5
6lCm7XVSNfMzByAAGMZFQ/NOF8NVgh3Uqh1Yp00FZukm1Z1GEQlktM6e1Fc3OJlt
AH8aiId3h53bVHKuE3DkEhTkcm+dhJukDR7+C8UZpopFGhd4HsbKhLgRnIb/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYwdZbRi/wvuFfeFZfL9Vok5ZUoMwHwYDVR0j
BBgwFoAUhXizEHTgtXRZscKmkLiSYYYOqUwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvODU3OEIzMTA3NEUwQjU3
NDU5QjFDMkE2OTBCODkyNjE4NjBFQTk0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTc4QjMxMDc0RTBCNTc0NTlC
MUMyQTY5MEI4OTI2MTg2MEVBOTRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzczNzJlMzEzNDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhNkTAN
BgkqhkiG9w0BAQsFAAOCAQEAWZG42Q4D9jXtrwi55q1Ay8pRUJSLj7kgjHOgO6eE
xpJY4fXBqZvWqgxNcTKGxXj+MC+zr4HgQMIpGtj20TsHAnfpnJFGaORARbajUMjs
v6eAkxyrD8f8djoD9BH0GMR+1tItCojGWF8re1TSqCQyZrg/LqzLZVagCLMJplEY
ISmRdsAbpSkhcdSgOZZE5NUgZ8Ei7VwzR8D7+sn/qOdf7aetdZYM4n/yp9d9uNb1
2eeLdiYqlzRkXtQMAVJ75fVbU9dpezWE+saUqrd08wmThncx0afSb5hR3tOPMl80
HyLzTcvQaBimy7IGWTKIdKHFYYaKsbY9WSBkw8q3JdqNkQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:50 2024 by rpki-client on console-ams.rpki-client.org