Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232382e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39352e3232382e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          t9FHeitubALnhYgWTtiYOoK2Ikz8WqCY1c/brFD3IAY=
Subject key identifier:   FA:88:3F:0F:01:F5:AB:5A:91:A5:CD:60:43:ED:4B:4C:98:CD:C7:04
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       70E7A1EA4EBEC1A95C88E76E4399DCA8E0FCEBCF
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232382e302f32342d3234203d3e20323632393136.roa
Signing time:             Mon 27 May 2024 20:00:00 +0000
ROA not before:           Mon 27 May 2024 19:55:00 +0000
ROA not after:            Mon 26 May 2025 20:00:00 +0000
asID:                     262916
IP address blocks:        200.95.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jul 2024 04:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e7:a1:ea:4e:be:c1:a9:5c:88:e7:6e:43:99:dc:a8:e0:fc:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 27 19:55:00 2024 GMT
            Not After : May 26 20:00:00 2025 GMT
        Subject: CN=FA883F0F01F5AB5A91A5CD6043ED4B4C98CDC704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:b0:a5:e9:92:cd:fe:3e:d8:f3:7e:ff:e9:
                    fa:d7:13:cf:38:d9:34:6b:7d:6d:b6:1d:2a:d9:ef:
                    fa:2c:7e:89:56:9b:c0:a4:ab:83:ba:d8:1b:7f:9b:
                    24:9f:b8:27:de:f4:63:b6:2e:17:0b:ed:11:09:54:
                    c0:22:e7:22:84:d7:d3:6d:4c:36:83:cb:b2:bd:88:
                    1b:a0:74:f8:84:16:d8:f4:6e:a4:f7:84:07:03:50:
                    bb:ba:4c:41:60:3c:e9:71:16:7e:cf:fd:90:a2:5e:
                    7e:1f:33:eb:d2:47:0f:32:d6:31:6c:d9:c1:82:e2:
                    29:8b:03:c6:6f:8b:5b:6b:ce:73:c8:c6:bd:43:ed:
                    31:1c:62:11:75:c3:4f:ea:04:c0:c7:cb:b4:e1:73:
                    92:d1:61:d1:30:e3:8b:56:59:80:f5:d7:aa:65:14:
                    d3:69:cd:52:45:3b:5c:72:56:99:b0:56:7d:24:a6:
                    60:52:73:a7:23:e6:e4:64:9a:ee:72:00:f9:e0:f1:
                    28:3e:fb:9d:e0:a0:39:62:22:0f:f3:0e:72:97:b8:
                    fa:45:a6:51:82:bc:2d:a1:c1:59:bb:d2:1c:19:58:
                    24:91:34:8d:d8:39:19:53:4b:b4:de:fa:ac:fa:65:
                    f1:d8:5c:fc:3b:2c:76:c4:37:54:81:79:1e:07:46:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:3F:0F:01:F5:AB:5A:91:A5:CD:60:43:ED:4B:4C:98:CD:C7:04
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232382e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:22:78:45:aa:71:30:66:af:a0:11:4b:ea:1c:d9:44:e6:
         15:bc:c0:81:77:5e:ec:65:4e:90:c6:00:eb:96:08:9b:10:d1:
         f6:22:c3:9b:36:57:ab:44:7f:0c:3d:2b:d5:99:b9:2a:95:2b:
         53:b8:aa:ad:31:c8:41:01:ce:83:fc:1b:62:5a:d0:07:c4:01:
         f9:58:23:e4:49:f7:a7:4b:60:3d:c6:5f:19:97:34:be:cc:dd:
         5c:c1:84:b7:86:5a:08:73:6b:d3:2f:1c:c0:ce:23:61:bd:f2:
         6c:85:22:bb:b6:40:ef:21:0a:9a:2c:e4:e4:88:c7:50:6e:79:
         38:9d:87:23:12:b5:03:9a:4b:54:51:b2:ee:8b:3f:18:a5:ff:
         98:4a:95:66:c5:0e:5e:c7:99:41:2b:e6:36:94:59:6a:e7:5f:
         27:52:d2:72:91:2e:3a:f1:f4:50:be:2c:6d:06:ff:c9:f4:fa:
         a4:c3:70:d0:be:5b:c9:47:2b:a8:ec:86:a6:7b:54:75:e9:51:
         38:6d:3e:3c:b8:da:78:6b:8b:42:e4:fd:25:fc:17:df:d5:c6:
         bd:93:26:10:b8:80:e8:5b:2b:fb:0f:4c:e0:8f:03:09:1b:fc:
         71:c5:db:38:a7:27:95:43:07:44:fd:99:64:12:3f:7d:2d:93:
         58:fd:2c:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcOeh6k6+walciOduQ5ncqOD8688wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU3OEIzMTA3NEUwQjU3NDU5QjFDMkE2OTBCODkyNjE4
NjBFQTk0QzAeFw0yNDA1MjcxOTU1MDBaFw0yNTA1MjYyMDAwMDBaMDMxMTAvBgNV
BAMTKEZBODgzRjBGMDFGNUFCNUE5MUE1Q0Q2MDQzRUQ0QjRDOThDREM3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9LCl6ZLN/j7Y837/6frXE884
2TRrfW22HSrZ7/osfolWm8Ckq4O62Bt/mySfuCfe9GO2LhcL7REJVMAi5yKE19Nt
TDaDy7K9iBugdPiEFtj0bqT3hAcDULu6TEFgPOlxFn7P/ZCiXn4fM+vSRw8y1jFs
2cGC4imLA8Zvi1trznPIxr1D7TEcYhF1w0/qBMDHy7Thc5LRYdEw44tWWYD116pl
FNNpzVJFO1xyVpmwVn0kpmBSc6cj5uRkmu5yAPng8Sg++53goDliIg/zDnKXuPpF
plGCvC2hwVm70hwZWCSRNI3YORlTS7Te+qz6ZfHYXPw7LHbEN1SBeR4HRmNdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+og/DwH1q1qRpc1gQ+1LTJjNxwQwHwYDVR0j
BBgwFoAUhXizEHTgtXRZscKmkLiSYYYOqUwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvODU3OEIzMTA3NEUwQjU3
NDU5QjFDMkE2OTBCODkyNjE4NjBFQTk0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTc4QjMxMDc0RTBCNTc0NTlC
MUMyQTY5MEI4OTI2MTg2MEVBOTRDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzkzNTJlMzIzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyF/k
MA0GCSqGSIb3DQEBCwUAA4IBAQA30CJ4RapxMGavoBFL6hzZROYVvMCBd17sZU6Q
xgDrlgibENH2IsObNlerRH8MPSvVmbkqlStTuKqtMchBAc6D/BtiWtAHxAH5WCPk
SfenS2A9xl8ZlzS+zN1cwYS3hloIc2vTLxzAziNhvfJshSK7tkDvIQqaLOTkiMdQ
bnk4nYcjErUDmktUUbLuiz8Ypf+YSpVmxQ5ex5lBK+Y2lFlq518nUtJykS468fRQ
vixtBv/J9Pqkw3DQvlvJRyuo7Iame1R16VE4bT48uNp4a4tC5P0l/Bff1ca9kyYQ
uIDoWyv7D0zgjwMJG/xxxds4pyeVQwdE/ZlkEj99LZNY/SyR
-----END CERTIFICATE-----
Generated at Mon Jul 1 04:25:38 2024 by rpki-client on console-fra.rpki-client.org