Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa
File:                     3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa (raw, json)
Hash identifier:          oSKOIz8NNhq53LjTBA5Kl9Q3Jcy6A9zoLIdbxBxGvvk=
Subject key identifier:   DA:68:82:FF:B2:DE:B8:08:9B:5F:21:7C:C8:F6:FB:37:8E:DD:1F:B8
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       7C5E44A512DF0131542817C9DE17DE8990407CEF
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa
Signing time:             Tue 05 Mar 2024 18:22:43 +0000
ROA not before:           Tue 05 Mar 2024 18:17:43 +0000
ROA not after:            Tue 04 Mar 2025 18:22:43 +0000
asID:                     52483
IP address blocks:        200.110.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 22:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5e:44:a5:12:df:01:31:54:28:17:c9:de:17:de:89:90:40:7c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Mar  5 18:17:43 2024 GMT
            Not After : Mar  4 18:22:43 2025 GMT
        Subject: CN=DA6882FFB2DEB8089B5F217CC8F6FB378EDD1FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:9f:38:91:b6:8d:26:aa:b1:60:a9:eb:b4:
                    d0:4b:d9:76:06:6c:06:3b:80:6d:e9:6e:94:eb:c0:
                    66:f9:e6:1b:89:2c:14:60:b1:f3:27:17:4a:e1:e0:
                    38:7b:6b:03:a5:fd:ef:b3:54:2f:cb:10:8d:ae:1e:
                    ad:67:05:02:b8:c7:a9:4b:8a:9a:cd:b8:d2:3c:47:
                    d6:89:d8:d5:d6:ea:0e:69:6d:1d:2d:ee:da:2c:ed:
                    b8:ac:c1:d9:1a:4f:e8:b8:a8:b2:99:7f:67:f1:ec:
                    34:dd:56:d4:91:43:d9:e4:bd:92:67:d2:71:ed:e9:
                    89:09:ad:51:05:e6:46:7e:d5:d9:43:5d:aa:a6:ef:
                    3f:a8:7a:36:76:ec:02:68:ec:c0:88:1d:2c:4a:7b:
                    0e:ba:5b:cd:02:4b:4e:df:5d:c6:af:8b:a9:18:f9:
                    46:ee:7a:3a:94:3b:bc:f5:cc:c7:dd:d0:2e:d9:23:
                    76:c8:c5:f1:17:6b:f7:14:53:ad:92:71:14:ae:94:
                    d2:5b:b6:13:48:3e:27:e1:bc:da:c7:0c:69:ee:1a:
                    8f:4f:46:45:43:d4:b2:65:2c:78:e1:54:8d:83:5b:
                    ef:cf:d1:83:c7:65:08:95:3a:e0:00:5c:f6:7f:67:
                    99:ad:0e:d0:83:c8:30:7e:88:90:67:4b:6d:c7:28:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:82:FF:B2:DE:B8:08:9B:5F:21:7C:C8:F6:FB:37:8E:DD:1F:B8
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132302e302f32342d3234203d3e203532343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:8c:9c:f5:a0:ad:43:24:89:db:5b:c4:37:6f:77:e1:1e:
         14:44:79:8a:93:99:b2:8c:80:d2:fb:35:18:2e:fd:13:57:c9:
         67:b5:42:ce:ba:a8:dd:9c:5d:ba:bd:b5:a4:25:72:61:a1:6e:
         06:b7:62:04:ab:f4:09:62:63:76:16:48:64:05:e6:ed:1f:a4:
         12:cb:8c:58:a2:be:f3:15:a4:80:5b:72:8b:51:3e:20:6f:15:
         c7:a5:67:9b:d8:07:2d:47:f6:fb:de:cb:75:7f:cc:39:9a:27:
         83:83:9d:b9:4a:8e:3a:e8:7e:d2:ab:9a:06:dd:a3:2c:9c:e2:
         3a:34:49:8e:64:99:76:e5:a0:5f:88:74:cd:a2:b6:87:5a:de:
         f0:d1:b3:30:ff:a1:9f:43:b4:9f:af:36:88:06:11:59:cc:f8:
         7c:34:45:0d:ab:31:6c:6c:93:78:b9:8e:e3:3b:5a:20:03:03:
         06:18:fe:82:68:95:74:c0:fc:86:14:58:11:c4:43:62:f2:0e:
         8d:e4:31:82:8a:d0:f4:a9:07:3c:e1:42:7a:14:2b:9c:bb:99:
         85:71:5a:f8:8b:cc:5f:69:02:a9:b3:f9:e2:63:88:be:cc:b6:
         44:f4:75:da:a5:80:22:18:41:20:b1:19:22:86:0a:bb:c3:21:
         df:d9:fc:e8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfF5EpRLfATFUKBfJ3hfeiZBAfO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA3NkE0ODQxNzRCNEU1NDg2QTBFMzFDRjdGOURDOTk4
RDBBRkQyQjAeFw0yNDAzMDUxODE3NDNaFw0yNTAzMDQxODIyNDNaMDMxMTAvBgNV
BAMTKERBNjg4MkZGQjJERUI4MDg5QjVGMjE3Q0M4RjZGQjM3OEVERDFGQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Pp84kbaNJqqxYKnrtNBL2XYG
bAY7gG3pbpTrwGb55huJLBRgsfMnF0rh4Dh7awOl/e+zVC/LEI2uHq1nBQK4x6lL
iprNuNI8R9aJ2NXW6g5pbR0t7tos7biswdkaT+i4qLKZf2fx7DTdVtSRQ9nkvZJn
0nHt6YkJrVEF5kZ+1dlDXaqm7z+oejZ27AJo7MCIHSxKew66W80CS07fXcavi6kY
+UbuejqUO7z1zMfd0C7ZI3bIxfEXa/cUU62ScRSulNJbthNIPifhvNrHDGnuGo9P
RkVD1LJlLHjhVI2DW+/P0YPHZQiVOuAAXPZ/Z5mtDtCDyDB+iJBnS23HKF2zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2miC/7LeuAibXyF8yPb7N47dH7gwHwYDVR0j
BBgwFoAUIHakhBdLTlSGoOMc9/ncmY0K/SswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMTMyODNCODU2MTI5NjJFRkEzMTEyQjIxNUMzODdEMzU3
RTRBREFGQ0MzMDEwNDMzRDI5ODkwNjFDNUVEOEQ2LzAvMjA3NkE0ODQxNzRCNEU1
NDg2QTBFMzFDRjdGOURDOTk4RDBBRkQyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDc2QTQ4NDE3NEI0RTU0ODZB
MEUzMUNGN0Y5REM5OThEMEFGRDJCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDEzMjgzQjg1NjEyOTYyRUZBMzExMkIyMTVDMzg3RDM1N0U0QURBRkND
MzAxMDQzM0QyOTg5MDYxQzVFRDhENi8wLzMyMzAzMDJlMzEzMTMwMmUzMTMyMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyG54
MA0GCSqGSIb3DQEBCwUAA4IBAQCSwYyc9aCtQySJ21vEN2934R4URHmKk5myjIDS
+zUYLv0TV8lntULOuqjdnF26vbWkJXJhoW4Gt2IEq/QJYmN2FkhkBebtH6QSy4xY
or7zFaSAW3KLUT4gbxXHpWeb2ActR/b73st1f8w5mieDg525So466H7Sq5oG3aMs
nOI6NEmOZJl25aBfiHTNoraHWt7w0bMw/6GfQ7SfrzaIBhFZzPh8NEUNqzFsbJN4
uY7jO1ogAwMGGP6CaJV0wPyGFFgRxENi8g6N5DGCitD0qQc84UJ6FCucu5mFcVr4
i8xfaQKps/niY4i+zLZE9HXapYAiGEEgsRkihgq7wyHf2fzo
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org