Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa
File:                     3230302e33322e36352e302f32342d3234203d3e203133353931.roa (raw, json)
Hash identifier:          rBpWvGZKxggb6TJUZm4pVDMWkXXLDoDEaOkqsunxLeg=
Subject key identifier:   77:EF:31:6C:33:CA:E3:0F:03:B8:28:0B:95:D3:D1:9D:6D:F5:D6:A6
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1C341576509AB494ECBDA34943CDFCDCA8FE2153
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa
Signing time:             Tue 05 Mar 2024 18:00:35 +0000
ROA not before:           Tue 05 Mar 2024 17:55:35 +0000
ROA not after:            Tue 04 Mar 2025 18:00:35 +0000
asID:                     13591
IP address blocks:        200.32.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:34:15:76:50:9a:b4:94:ec:bd:a3:49:43:cd:fc:dc:a8:fe:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:35 2024 GMT
            Not After : Mar  4 18:00:35 2025 GMT
        Subject: CN=77EF316C33CAE30F03B8280B95D3D19D6DF5D6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:d9:3e:fb:0d:7b:ae:5b:f2:4b:35:a7:db:
                    ca:ff:69:cf:f5:00:ac:07:23:16:cb:68:f2:ee:c5:
                    f3:95:3c:df:7c:c6:58:10:c2:d2:d9:65:7e:1f:57:
                    33:50:50:9a:ef:22:af:bc:22:af:05:a1:b6:fa:d1:
                    2f:68:d6:ba:63:42:8b:b6:40:6f:ac:a6:85:f7:b1:
                    f1:86:30:85:23:46:fe:db:08:5a:4d:ac:c4:d1:32:
                    6d:fb:22:19:69:14:fc:fd:0e:8e:38:d3:04:89:9f:
                    57:dc:cb:b5:4b:01:5b:fe:e6:e1:83:ca:34:e9:65:
                    2c:2e:8a:43:9c:7f:2a:cf:fb:57:74:47:19:be:26:
                    4a:1b:23:7f:7e:dd:28:66:60:4c:fd:5c:90:e1:b1:
                    d5:80:52:5c:56:c6:bb:9f:4e:af:d4:e6:51:a8:97:
                    bc:1c:d7:97:29:43:19:1e:3f:4d:09:63:0e:58:5d:
                    01:1a:a8:2d:48:a2:f5:42:08:8c:9f:5b:5e:80:68:
                    00:07:3b:00:ba:4a:bd:ba:c8:86:1a:13:d7:3e:90:
                    10:58:f8:ae:ce:5f:d7:85:e4:65:b7:e3:32:2f:be:
                    24:e0:f6:11:d9:1f:c2:e0:cc:9c:63:31:d5:9f:06:
                    1f:65:1f:97:8d:db:41:67:f8:df:a7:a7:83:31:9a:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EF:31:6C:33:CA:E3:0F:03:B8:28:0B:95:D3:D1:9D:6D:F5:D6:A6
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:66:b4:91:12:a5:83:ab:b7:7f:22:89:7d:c2:be:38:bd:6e:
         58:d4:f9:76:77:70:f3:a6:f5:35:da:f0:8f:02:92:a6:6d:70:
         03:dd:1a:34:1d:f6:7d:a0:a9:35:a7:25:11:9d:62:dc:d8:e8:
         f1:eb:06:23:51:bf:03:18:11:6f:76:de:d8:57:00:b1:ba:ec:
         99:39:a2:ea:1d:ec:4b:1d:d2:63:08:8e:64:91:da:26:d6:54:
         72:e4:4e:15:c9:c2:57:e7:0c:fe:c8:4c:c4:55:0d:0b:f3:1a:
         49:59:13:fb:a1:74:b2:27:02:b3:36:1c:1c:99:9b:4a:44:5f:
         ad:57:fc:9e:48:2b:8f:b8:fe:dc:a2:60:f2:07:4c:8b:01:b0:
         1d:55:a8:6c:82:32:fb:9a:6e:14:7f:63:b2:0f:7d:b2:b0:53:
         ef:c7:b2:ec:73:4a:a3:7b:81:76:d9:97:6f:c5:06:fb:c8:33:
         99:5f:c2:18:56:78:c9:9c:41:ba:30:fd:40:be:d8:13:8c:69:
         f8:d8:84:77:1a:11:32:06:1c:62:9b:6e:c9:a2:87:a5:bf:71:
         ce:42:1a:53:c0:db:60:2d:f9:13:b4:ad:ea:e0:63:19:3a:4a:
         33:6a:24:95:5b:66:d9:ed:6b:ff:0b:87:00:b8:73:4f:e8:ee:
         48:28:c4:2d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHDQVdlCatJTsvaNJQ8383Kj+IVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1MzVaFw0yNTAzMDQxODAwMzVaMDMxMTAvBgNV
BAMTKDc3RUYzMTZDMzNDQUUzMEYwM0I4MjgwQjk1RDNEMTlENkRGNUQ2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCog9k++w17rlvySzWn28r/ac/1
AKwHIxbLaPLuxfOVPN98xlgQwtLZZX4fVzNQUJrvIq+8Iq8Fobb60S9o1rpjQou2
QG+spoX3sfGGMIUjRv7bCFpNrMTRMm37IhlpFPz9Do440wSJn1fcy7VLAVv+5uGD
yjTpZSwuikOcfyrP+1d0Rxm+JkobI39+3ShmYEz9XJDhsdWAUlxWxrufTq/U5lGo
l7wc15cpQxkeP00JYw5YXQEaqC1IovVCCIyfW16AaAAHOwC6Sr26yIYaE9c+kBBY
+K7OX9eF5GW34zIvviTg9hHZH8LgzJxjMdWfBh9lH5eN20Fn+N+np4Mxmk/BAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUd+8xbDPK4w8DuCgLldPRnW311qYwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzMzMjJlMzYzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIEEwDQYJ
KoZIhvcNAQELBQADggEBAEBmtJESpYOrt38iiX3Cvji9bljU+XZ3cPOm9TXa8I8C
kqZtcAPdGjQd9n2gqTWnJRGdYtzY6PHrBiNRvwMYEW923thXALG67Jk5ouod7Esd
0mMIjmSR2ibWVHLkThXJwlfnDP7ITMRVDQvzGklZE/uhdLInArM2HByZm0pEX61X
/J5IK4+4/tyiYPIHTIsBsB1VqGyCMvuabhR/Y7IPfbKwU+/HsuxzSqN7gXbZl2/F
BvvIM5lfwhhWeMmcQbow/UC+2BOMafjYhHcaETIGHGKbbsmih6W/cc5CGlPA22At
+RO0rergYxk6SjNqJJVbZtnta/8LhwC4c0/o7kgoxC0=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org