Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa
File:                     3230302e33312e31382e302f32342d3234203d3e203232363938.roa (raw, json)
Hash identifier:          6Nvwau0QN/QHHQB1lk8qx43ow+Cbye6ORpMo54EL1rw=
Subject key identifier:   44:46:AE:4D:BC:F0:FD:A7:C6:69:74:49:5B:64:7B:5C:AD:76:22:E2
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       65A517CE97FDBE7B4310FD0E4DA3E80B931138CA
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     22698
IP address blocks:        200.31.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:17:ce:97:fd:be:7b:43:10:fd:0e:4d:a3:e8:0b:93:11:38:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=4446AE4DBCF0FDA7C66974495B647B5CAD7622E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:57:4f:57:d4:f5:0c:36:d4:3e:40:67:5d:
                    aa:37:5a:f2:c6:52:bb:48:c1:90:4d:d8:85:cf:fa:
                    e7:8a:80:ac:4f:16:d0:f7:73:bd:08:00:72:f8:9e:
                    c6:b2:7c:ac:1a:75:4c:c6:33:1c:60:52:0a:dd:c9:
                    55:90:e6:1e:1e:aa:25:d6:f3:84:12:40:77:8e:48:
                    db:fa:4c:c5:2d:e6:c1:f8:33:dd:60:b4:23:24:ed:
                    0d:67:1a:a6:92:f7:34:21:9b:2c:61:cb:5a:a5:8d:
                    63:20:f2:70:6c:c6:dc:c3:51:c7:42:5a:18:42:c8:
                    86:8a:cc:b1:54:d8:8f:8c:29:e3:d3:2c:a0:8c:94:
                    7c:cd:20:bd:c5:12:a8:89:72:d2:7e:9a:17:dc:81:
                    3f:83:b9:4b:f0:9d:96:4b:35:3a:fa:ae:b7:f3:5e:
                    b8:a3:3a:71:6b:59:21:56:11:9e:77:11:2c:a3:58:
                    9e:b9:13:54:38:46:aa:97:0c:d7:cf:5d:44:d8:5a:
                    e7:51:bf:f3:26:17:2a:02:e3:06:a1:3b:76:48:c8:
                    71:15:7d:b5:59:b0:1b:d8:9a:62:31:06:42:69:79:
                    55:98:33:b4:91:0b:0c:43:27:c1:c3:8b:04:5c:4d:
                    0d:d6:c2:92:4d:cc:cc:62:71:0b:62:4d:c1:72:0a:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:46:AE:4D:BC:F0:FD:A7:C6:69:74:49:5B:64:7B:5C:AD:76:22:E2
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:8b:ca:cd:d4:99:50:52:48:06:da:4a:2c:a2:a8:70:e0:
         9c:ef:36:12:20:e9:37:e6:58:01:b5:8e:d6:4e:5a:1d:f5:67:
         7e:b7:5d:0b:88:ce:ea:45:d5:06:31:8d:ff:e3:19:35:6a:9a:
         68:14:3a:23:f8:ae:ab:87:d2:d4:88:b4:b2:db:75:0c:89:42:
         f1:a8:00:29:54:f9:3c:08:4f:ca:a2:f5:6b:df:1a:ee:34:c9:
         0a:7e:82:e2:60:98:32:98:1a:23:30:4b:7a:5b:a6:40:40:56:
         86:f9:b8:12:ed:fb:5e:50:ba:fb:9f:45:c7:02:2e:77:f5:f7:
         1a:27:22:14:31:20:cd:02:81:c3:0a:11:cd:b5:23:6b:14:a4:
         25:16:c8:60:3f:a1:d5:da:97:a0:f1:59:d3:74:01:b4:14:c4:
         9c:2d:84:a3:3c:b7:d2:90:49:bc:a4:0d:3f:92:57:56:6d:6d:
         59:9e:e0:23:a0:e9:6a:34:9f:cf:d6:52:4b:01:c7:42:8c:9c:
         3f:47:fc:55:5e:5b:ba:e9:6c:78:39:93:16:b6:9c:e3:8d:cc:
         6c:07:29:84:85:58:e3:2e:17:5d:1f:2e:b7:30:57:79:af:3b:
         fc:1d:df:d1:84:36:e0:50:95:ee:8f:4e:3d:77:2e:5b:fe:8a:
         4a:cc:ff:cc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZaUXzpf9vntDEP0OTaPoC5MROMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NDBaFw0yNTAzMDQxODAwNDBaMDMxMTAvBgNV
BAMTKDQ0NDZBRTREQkNGMEZEQTdDNjY5NzQ0OTVCNjQ3QjVDQUQ3NjIyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyldPV9T1DDbUPkBnXao3WvLG
UrtIwZBN2IXP+ueKgKxPFtD3c70IAHL4nsayfKwadUzGMxxgUgrdyVWQ5h4eqiXW
84QSQHeOSNv6TMUt5sH4M91gtCMk7Q1nGqaS9zQhmyxhy1qljWMg8nBsxtzDUcdC
WhhCyIaKzLFU2I+MKePTLKCMlHzNIL3FEqiJctJ+mhfcgT+DuUvwnZZLNTr6rrfz
XrijOnFrWSFWEZ53ESyjWJ65E1Q4RqqXDNfPXUTYWudRv/MmFyoC4wahO3ZIyHEV
fbVZsBvYmmIxBkJpeVWYM7SRCwxDJ8HDiwRcTQ3WwpJNzMxicQtiTcFyCrnHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUREauTbzw/afGaXRJW2R7XK12IuIwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzMzMTJlMzEzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzNjM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIHxIwDQYJ
KoZIhvcNAQELBQADggEBAGFKi8rN1JlQUkgG2kosoqhw4JzvNhIg6TfmWAG1jtZO
Wh31Z363XQuIzupF1QYxjf/jGTVqmmgUOiP4rquH0tSItLLbdQyJQvGoAClU+TwI
T8qi9WvfGu40yQp+guJgmDKYGiMwS3pbpkBAVob5uBLt+15QuvufRccCLnf19xon
IhQxIM0CgcMKEc21I2sUpCUWyGA/odXal6DxWdN0AbQUxJwthKM8t9KQSbykDT+S
V1ZtbVme4COg6Wo0n8/WUksBx0KMnD9H/FVeW7rpbHg5kxa2nOONzGwHKYSFWOMu
F10fLrcwV3mvO/wd39GENuBQle6PTj13Llv+ikrM/8w=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org