Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135372e302f32342d3234203d3e20323731383636.roa
File:                     3230302e33362e3135372e302f32342d3234203d3e20323731383636.roa (raw, json)
Hash identifier:          ihQJxAqcPniS202hYOBvj8LBFcw4IELNgxtiarQWZvg=
Subject key identifier:   C1:75:BA:7E:99:E1:2C:66:A1:31:2B:6A:B2:4D:3C:E9:B0:71:33:E7
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       4DD57716F35005313EE857CEA76A37E64BAC54E7
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135372e302f32342d3234203d3e20323731383636.roa
Signing time:             Tue 05 Mar 2024 18:12:00 +0000
ROA not before:           Tue 05 Mar 2024 18:07:00 +0000
ROA not after:            Tue 04 Mar 2025 18:12:00 +0000
asID:                     271866
IP address blocks:        200.36.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d5:77:16:f3:50:05:31:3e:e8:57:ce:a7:6a:37:e6:4b:ac:54:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:00 2024 GMT
            Not After : Mar  4 18:12:00 2025 GMT
        Subject: CN=C175BA7E99E12C66A1312B6AB24D3CE9B07133E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:58:ce:fb:c6:a1:76:13:94:3d:52:c7:89:
                    b0:89:30:93:2a:1c:55:1d:8f:8e:9c:2c:31:d0:66:
                    e3:92:9e:47:5d:cc:3c:e7:66:55:2e:ad:60:cb:75:
                    9f:bf:d6:2b:fa:e9:2c:91:e1:0a:da:6c:1a:8d:0a:
                    41:2b:c7:8f:1b:ba:46:4f:24:9f:4f:26:c8:32:0d:
                    01:df:04:db:a7:8f:16:94:58:e2:6b:97:78:e7:9a:
                    c0:55:18:ac:76:0a:ef:07:2b:5b:81:a2:e8:99:28:
                    c6:d9:e0:f4:35:40:93:27:64:c6:6c:91:82:49:b7:
                    41:4a:63:b2:f8:a3:9f:86:8f:ac:ec:13:e6:9f:eb:
                    af:e6:1f:71:7f:af:35:e2:48:87:92:37:0d:b8:06:
                    8b:a8:a6:a4:26:81:09:0f:bb:5a:f9:c5:4c:bb:d4:
                    69:0d:3f:4c:54:94:44:4d:d6:e1:5c:55:cf:2d:9e:
                    4c:06:84:28:ef:4c:f2:3f:77:98:47:34:fa:46:95:
                    ed:c4:9f:d4:19:45:bf:36:ce:56:55:81:73:7f:e3:
                    6e:6d:90:cf:43:6e:56:bc:39:1b:8e:b4:50:07:a3:
                    5d:76:1a:b5:0e:9d:fa:83:3b:b8:f4:37:41:e7:f5:
                    2e:72:53:04:12:24:e1:0a:a8:d6:66:12:ed:84:20:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:75:BA:7E:99:E1:2C:66:A1:31:2B:6A:B2:4D:3C:E9:B0:71:33:E7
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135372e302f32342d3234203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:8b:7c:84:76:fc:62:bf:ae:0b:53:46:40:dd:69:31:d1:
         ac:c7:b9:f6:2d:16:4e:22:ac:29:03:cb:eb:a8:4c:c9:c3:31:
         66:e6:2d:8b:e0:1e:e1:6e:bf:bd:1f:ff:51:96:2d:a8:a3:06:
         14:03:d5:01:b1:34:2b:a5:70:f3:2c:8a:ef:0a:42:52:9f:e6:
         d0:e8:40:a5:a0:6d:72:cf:f7:ce:05:3a:24:62:25:82:b6:ee:
         60:e8:84:a0:d5:08:b1:78:4b:f6:05:79:02:09:81:95:94:be:
         db:cd:cb:00:da:18:84:96:a3:54:ad:3a:5f:e0:b5:9f:b0:dd:
         f5:e7:9d:86:08:74:f9:3b:4f:32:a0:0c:f1:75:24:30:db:25:
         87:1c:c4:6a:6b:c6:37:2e:fa:be:4c:2b:74:58:66:e9:64:94:
         7f:32:8b:c4:c1:f3:3f:62:8b:7c:c0:f7:3e:09:2e:d5:6c:c1:
         39:b2:9a:77:1f:85:03:27:7f:ad:0d:39:0a:2b:01:be:45:7e:
         90:ff:72:e1:64:0d:6a:d9:f8:a3:49:19:c9:9f:a2:39:51:6e:
         28:c9:9f:3d:eb:df:5d:57:be:11:cf:8e:0c:59:4e:c0:aa:93:
         16:2f:eb:c1:b8:c2:76:99:b8:af:31:bd:74:a2:d7:cc:6a:14:
         9b:a4:49:b2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTdV3FvNQBTE+6FfOp2o35kusVOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNDAzMDUxODA3MDBaFw0yNTAzMDQxODEyMDBaMDMxMTAvBgNV
BAMTKEMxNzVCQTdFOTlFMTJDNjZBMTMxMkI2QUIyNEQzQ0U5QjA3MTMzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQVjO+8ahdhOUPVLHibCJMJMq
HFUdj46cLDHQZuOSnkddzDznZlUurWDLdZ+/1iv66SyR4QrabBqNCkErx48bukZP
JJ9PJsgyDQHfBNunjxaUWOJrl3jnmsBVGKx2Cu8HK1uBouiZKMbZ4PQ1QJMnZMZs
kYJJt0FKY7L4o5+Gj6zsE+af66/mH3F/rzXiSIeSNw24BouopqQmgQkPu1r5xUy7
1GkNP0xUlERN1uFcVc8tnkwGhCjvTPI/d5hHNPpGle3En9QZRb82zlZVgXN/425t
kM9Dbla8ORuOtFAHo112GrUOnfqDO7j0N0Hn9S5yUwQSJOEKqNZmEu2EIAtpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwXW6fpnhLGahMStqsk086bBxM+cwHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzAzMDJlMzMzNjJlMzEzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCSd
MA0GCSqGSIb3DQEBCwUAA4IBAQAgLot8hHb8Yr+uC1NGQN1pMdGsx7n2LRZOIqwp
A8vrqEzJwzFm5i2L4B7hbr+9H/9Rli2oowYUA9UBsTQrpXDzLIrvCkJSn+bQ6ECl
oG1yz/fOBTokYiWCtu5g6ISg1QixeEv2BXkCCYGVlL7bzcsA2hiElqNUrTpf4LWf
sN31552GCHT5O08yoAzxdSQw2yWHHMRqa8Y3Lvq+TCt0WGbpZJR/MovEwfM/Yot8
wPc+CS7VbME5spp3H4UDJ3+tDTkKKwG+RX6Q/3LhZA1q2fijSRnJn6I5UW4oyZ89
699dV74Rz44MWU7AqpMWL+vBuMJ2mbivMb10otfMahSbpEmy
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org