Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32342d3234203d3e20323731383636.roa
File:                     3230302e33362e3135362e302f32342d3234203d3e20323731383636.roa (raw, json)
Hash identifier:          O6mw8crFWFgpzspI9OZEX8JztOSfAQhIeVibQFBkuVU=
Subject key identifier:   99:C5:D4:D2:A6:AC:97:A9:5E:93:1E:D1:C3:13:38:CB:EF:5A:FC:AD
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       4B90F015B6F82314BD0CE1D61AFD453E254D6F29
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32342d3234203d3e20323731383636.roa
Signing time:             Tue 05 Mar 2024 18:12:02 +0000
ROA not before:           Tue 05 Mar 2024 18:07:02 +0000
ROA not after:            Tue 04 Mar 2025 18:12:02 +0000
asID:                     271866
IP address blocks:        200.36.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:90:f0:15:b6:f8:23:14:bd:0c:e1:d6:1a:fd:45:3e:25:4d:6f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:02 2024 GMT
            Not After : Mar  4 18:12:02 2025 GMT
        Subject: CN=99C5D4D2A6AC97A95E931ED1C31338CBEF5AFCAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:ea:eb:20:c8:8a:c7:19:f0:24:ee:09:1c:
                    e3:69:40:5c:25:8c:6d:f9:c9:ef:18:34:30:9e:ae:
                    41:27:82:63:06:26:fa:a3:21:e2:24:f4:80:d4:c2:
                    b1:7c:8c:88:04:d2:f8:18:61:30:f0:89:46:0e:6b:
                    f9:46:ae:a9:c6:85:a1:bd:da:7f:e7:f7:9f:a8:5b:
                    c5:2f:aa:f5:36:a6:be:0b:67:e1:57:9b:6e:62:98:
                    4f:d1:18:41:14:23:55:c6:3a:a1:02:ef:88:f3:28:
                    ee:68:54:a9:26:95:84:05:4d:50:2d:63:2c:1e:ed:
                    00:37:07:26:15:e0:48:44:f1:63:ad:85:25:a6:54:
                    05:de:1b:a7:4e:16:3e:11:3e:c9:c2:bc:37:96:1d:
                    ae:18:d2:7b:e3:d5:0c:0e:0e:d3:51:b6:82:98:e5:
                    cc:1d:b1:9f:73:ba:1b:b9:11:03:56:04:0e:54:9f:
                    53:0e:4c:32:40:fa:a8:c1:45:bf:fb:71:7c:5d:73:
                    b6:23:c6:80:62:8b:10:ed:94:35:7b:91:f5:5f:48:
                    b2:d6:ae:d9:9c:47:8c:25:b7:d6:0e:c1:81:a5:6c:
                    72:c0:1f:af:02:ed:4f:bf:d6:7e:dc:cb:f8:b6:58:
                    d8:53:22:65:32:c4:d0:b8:67:43:35:bd:ea:5e:2e:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:D4:D2:A6:AC:97:A9:5E:93:1E:D1:C3:13:38:CB:EF:5A:FC:AD
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32342d3234203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:e1:d0:12:31:f6:9e:ff:9d:e3:ee:bc:c3:5b:10:e6:f5:
         33:e9:b8:a2:8a:f3:e0:cf:9a:16:b0:33:26:62:2f:ee:a3:59:
         c5:af:60:fc:a6:5b:00:40:c1:8f:44:63:5c:61:3c:75:71:34:
         c5:5e:bd:a5:9b:eb:5b:d4:da:c4:a5:ae:c8:ac:cc:01:63:ff:
         41:b7:72:47:3b:70:33:33:aa:ce:b4:2a:c6:12:25:93:27:11:
         ad:b5:64:83:bc:23:c3:e5:a7:fd:eb:12:0a:f2:e5:e7:0a:22:
         5c:ae:f1:56:40:49:41:a0:fd:b5:40:75:8f:36:58:27:f8:d4:
         5e:24:5a:a7:4a:b5:12:88:73:9c:d7:2e:fe:7a:83:8f:5d:50:
         72:6a:42:85:5d:3a:f0:61:64:04:38:46:f5:72:c7:bf:ad:96:
         02:8c:26:10:65:11:e3:1b:16:f4:93:32:0e:f9:b4:aa:a2:65:
         bd:6d:7c:2a:30:30:75:80:cd:4f:e0:65:c3:ba:4e:6e:9c:a1:
         12:b4:25:85:16:dc:00:ca:86:ca:82:e9:07:9d:c5:0f:bf:5e:
         67:68:a1:3e:ee:bd:7f:c0:59:f6:15:0b:b4:30:2a:42:92:1b:
         39:58:c2:9e:fc:7a:e0:3d:89:20:38:01:92:da:fe:36:49:b4:
         7a:fa:da:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUS5DwFbb4IxS9DOHWGv1FPiVNbykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNDAzMDUxODA3MDJaFw0yNTAzMDQxODEyMDJaMDMxMTAvBgNV
BAMTKDk5QzVENEQyQTZBQzk3QTk1RTkzMUVEMUMzMTMzOENCRUY1QUZDQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ourrIMiKxxnwJO4JHONpQFwl
jG35ye8YNDCerkEngmMGJvqjIeIk9IDUwrF8jIgE0vgYYTDwiUYOa/lGrqnGhaG9
2n/n95+oW8UvqvU2pr4LZ+FXm25imE/RGEEUI1XGOqEC74jzKO5oVKkmlYQFTVAt
Yywe7QA3ByYV4EhE8WOthSWmVAXeG6dOFj4RPsnCvDeWHa4Y0nvj1QwODtNRtoKY
5cwdsZ9zuhu5EQNWBA5Un1MOTDJA+qjBRb/7cXxdc7YjxoBiixDtlDV7kfVfSLLW
rtmcR4wlt9YOwYGlbHLAH68C7U+/1n7cy/i2WNhTImUyxNC4Z0M1vepeLv43AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmcXU0qasl6lekx7RwxM4y+9a/K0wHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzAzMDJlMzMzNjJlMzEzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCSc
MA0GCSqGSIb3DQEBCwUAA4IBAQBOE+HQEjH2nv+d4+68w1sQ5vUz6biiivPgz5oW
sDMmYi/uo1nFr2D8plsAQMGPRGNcYTx1cTTFXr2lm+tb1NrEpa7IrMwBY/9Bt3JH
O3AzM6rOtCrGEiWTJxGttWSDvCPD5af96xIK8uXnCiJcrvFWQElBoP21QHWPNlgn
+NReJFqnSrUSiHOc1y7+eoOPXVByakKFXTrwYWQEOEb1cse/rZYCjCYQZRHjGxb0
kzIO+bSqomW9bXwqMDB1gM1P4GXDuk5unKEStCWFFtwAyobKgukHncUPv15naKE+
7r1/wFn2FQu0MCpCkhs5WMKe/HrgPYkgOAGS2v42SbR6+tqz
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org