Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa
File:                     3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa (raw, json)
Hash identifier:          RXPwcXiMFCqgJ3dQP5u7ssC02ypPkcrsWaaS7gp/tY0=
Subject key identifier:   42:25:4B:A8:D3:21:49:A2:D4:23:FB:BC:6D:B6:F3:5E:CC:EB:52:26
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       08B4CF887689EF8BD74C4A7230BD15F6DBC4DC9D
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa
Signing time:             Tue 05 Mar 2024 18:16:26 +0000
ROA not before:           Tue 05 Mar 2024 18:11:26 +0000
ROA not after:            Tue 04 Mar 2025 18:16:26 +0000
asID:                     25620
IP address blocks:        200.119.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:cf:88:76:89:ef:8b:d7:4c:4a:72:30:bd:15:f6:db:c4:dc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar  5 18:11:26 2024 GMT
            Not After : Mar  4 18:16:26 2025 GMT
        Subject: CN=42254BA8D32149A2D423FBBC6DB6F35ECCEB5226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:b5:8a:82:5c:50:2a:26:45:03:40:9a:56:
                    7b:c2:d9:7d:06:96:d5:ad:7d:12:6a:ce:0c:33:13:
                    c5:05:19:67:70:11:99:12:07:d6:a4:4e:c4:a7:21:
                    e6:b4:4b:15:df:81:bc:6a:3e:0b:1f:b3:01:c0:6d:
                    43:5d:83:63:4b:99:9c:4b:6b:d7:79:ae:b7:ba:39:
                    79:55:f1:da:d8:15:31:c4:05:44:d7:70:44:99:35:
                    00:ed:c0:45:79:eb:c7:49:16:96:09:3f:c3:42:e5:
                    fb:f8:23:59:97:31:47:b8:6d:cd:00:a7:f6:4e:71:
                    43:24:09:c6:22:ae:a0:87:a7:32:c4:69:08:a7:b7:
                    ec:0b:1b:0f:bc:23:26:71:c4:d5:6f:6c:47:da:28:
                    15:f3:f6:d9:9c:37:9d:e6:57:dc:4c:79:1d:fe:64:
                    43:ac:4e:77:dc:82:49:60:80:ff:b3:55:1a:86:63:
                    f1:bf:ce:e9:9c:df:27:9e:af:7d:e4:0b:57:2b:d5:
                    b1:9e:ac:bf:d6:f7:2c:fc:6a:d3:78:ca:66:85:f1:
                    5d:44:c6:04:36:9d:9b:5e:73:e5:a2:12:c1:09:be:
                    b8:64:ba:55:13:e2:52:ed:66:19:75:5e:55:b4:6d:
                    27:e8:45:a6:80:86:38:31:85:1a:0a:ec:25:f5:fe:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:4B:A8:D3:21:49:A2:D4:23:FB:BC:6D:B6:F3:5E:CC:EB:52:26
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:84:5a:66:69:02:46:24:a7:3c:e9:4b:99:af:b7:a5:de:
         ed:71:4e:8c:b3:88:46:ae:ab:5d:27:6b:30:72:2e:c2:8b:d5:
         5e:5a:a0:99:f9:a9:99:3f:c9:e3:e5:98:77:f8:2e:d2:44:f2:
         55:4e:6f:1f:6e:b1:04:87:15:f8:26:25:25:4f:4f:b1:9b:13:
         45:30:b7:03:3d:38:2d:7d:32:43:e0:2c:4a:83:c4:f8:01:e1:
         73:27:60:a5:c1:c5:80:8a:3f:59:e5:f8:4e:9a:e2:07:23:36:
         04:6e:70:cc:b7:54:67:20:45:c0:70:e0:8e:a5:37:33:48:4e:
         3e:a1:b8:3b:5e:b0:4e:0a:76:0b:71:63:1f:cb:91:30:06:90:
         32:02:d4:75:d2:dd:b4:16:46:fb:95:b8:c4:b0:14:ec:0c:da:
         3f:c4:ef:d5:6b:fa:24:95:92:77:a6:af:54:2d:be:ad:90:46:
         8c:49:85:a1:9f:08:b2:ca:6d:14:54:8f:8a:6b:e5:85:8c:64:
         d0:b4:ac:ce:99:1d:cb:5e:37:f3:55:6b:fa:a8:63:60:63:14:
         86:d2:b6:5c:6d:33:f0:fb:33:c2:59:1d:9e:f8:c5:76:3b:fb:
         4d:65:4e:4c:dd:b4:18:f4:c6:1b:2d:c2:16:fe:8c:38:cb:de:
         3b:d6:cc:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCLTPiHaJ74vXTEpyML0V9tvE3J0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0NjY1NEQ2RjAyQ0VDNDFFQUE0MzM5NDk4NDg2QzYw
OUJGMzRFQzAeFw0yNDAzMDUxODExMjZaFw0yNTAzMDQxODE2MjZaMDMxMTAvBgNV
BAMTKDQyMjU0QkE4RDMyMTQ5QTJENDIzRkJCQzZEQjZGMzVFQ0NFQjUyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXLWKglxQKiZFA0CaVnvC2X0G
ltWtfRJqzgwzE8UFGWdwEZkSB9akTsSnIea0SxXfgbxqPgsfswHAbUNdg2NLmZxL
a9d5rre6OXlV8drYFTHEBUTXcESZNQDtwEV568dJFpYJP8NC5fv4I1mXMUe4bc0A
p/ZOcUMkCcYirqCHpzLEaQint+wLGw+8IyZxxNVvbEfaKBXz9tmcN53mV9xMeR3+
ZEOsTnfcgklggP+zVRqGY/G/zumc3yeer33kC1cr1bGerL/W9yz8atN4ymaF8V1E
xgQ2nZtec+WiEsEJvrhkulUT4lLtZhl1XlW0bSfoRaaAhjgxhRoK7CX1/rKfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQiVLqNMhSaLUI/u8bbbzXszrUiYwHwYDVR0j
BBgwFoAUOkZlTW8CzsQeqkM5SYSGxgm/NOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEYxQjg1NTI5ODhBQzdCMjk5QzI3MDU2RjQ3MzNDMjMw
MzIxMkNBMkJBMDZCMkEyQ0YyQzVDODAzOENGRjJDLzAvM0E0NjY1NEQ2RjAyQ0VD
NDFFQUE0MzM5NDk4NDg2QzYwOUJGMzRFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQ2NjU0RDZGMDJDRUM0MUVB
QTQzMzk0OTg0ODZDNjA5QkYzNEVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGMUI4NTUyOTg4QUM3QjI5OUMyNzA1NkY0NzMzQzIzMDMyMTJDQTJC
QTA2QjJBMkNGMkM1QzgwMzhDRkYyQy8wLzMyMzAzMDJlMzEzMTM5MmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM1MzYzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHfA
MA0GCSqGSIb3DQEBCwUAA4IBAQBDP4RaZmkCRiSnPOlLma+3pd7tcU6Ms4hGrqtd
J2swci7Ci9VeWqCZ+amZP8nj5Zh3+C7SRPJVTm8fbrEEhxX4JiUlT0+xmxNFMLcD
PTgtfTJD4CxKg8T4AeFzJ2ClwcWAij9Z5fhOmuIHIzYEbnDMt1RnIEXAcOCOpTcz
SE4+obg7XrBOCnYLcWMfy5EwBpAyAtR10t20Fkb7lbjEsBTsDNo/xO/Va/oklZJ3
pq9ULb6tkEaMSYWhnwiyym0UVI+Ka+WFjGTQtKzOmR3LXjfzVWv6qGNgYxSG0rZc
bTPw+zPCWR2e+MV2O/tNZU5M3bQY9MYbLcIW/ow4y9471swG
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org