Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
File:                     3230302e39312e302e302f31392d3234203d3e2037303034.roa (raw, json)
Hash identifier:          bUWsZdjD016j7fO4eD9uuz0SfRGMpgjUCZYGwTAs++U=
Subject key identifier:   75:87:00:AE:CF:96:6E:8A:13:0F:B1:E3:27:48:47:D7:36:7C:B8:7F
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       3EE5C15450A03AA174D70FE9EADE6878D7FF9CA6
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     7004
IP address blocks:        200.91.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e5:c1:54:50:a0:3a:a1:74:d7:0f:e9:ea:de:68:78:d7:ff:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=758700AECF966E8A130FB1E3274847D7367CB87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:72:ba:60:00:1a:b6:7e:59:ba:28:99:6c:
                    dc:7a:50:22:12:9b:23:4a:b2:2b:1d:7f:60:bd:a7:
                    07:33:23:af:f5:f0:58:7d:3a:ec:02:14:20:a2:62:
                    43:5d:e6:51:f1:93:9e:01:75:8d:a5:af:58:bb:ea:
                    d0:9f:0b:32:e3:d6:9b:8f:b0:04:91:bf:6d:13:28:
                    f1:73:ed:09:49:fc:a8:45:eb:98:f0:76:65:d5:33:
                    1d:95:e4:08:9e:22:78:1b:a3:25:c2:5e:ac:de:e7:
                    e2:c7:2e:62:b8:a7:f7:07:b4:ae:c7:aa:35:1b:b9:
                    df:6e:48:a8:f5:1f:a1:69:5a:43:3e:7f:71:8c:a4:
                    76:1a:1a:d1:27:78:47:57:f7:45:a7:1e:98:80:2f:
                    11:60:ab:88:40:40:24:5c:36:09:70:c3:ef:a4:fa:
                    e0:97:7e:4a:83:d0:bd:e3:2f:e2:be:98:c3:a9:dc:
                    20:05:2b:b7:04:db:62:72:07:3c:f9:40:e6:00:7e:
                    d2:40:ec:a6:7f:e2:69:a7:de:8d:39:b6:29:6d:a3:
                    cd:c0:3a:21:b6:e9:25:32:13:8a:62:be:2d:f8:40:
                    2e:ca:fb:a2:f0:ee:1c:c6:b1:6c:e2:6f:9a:6f:f9:
                    99:98:7a:a7:62:10:ca:51:4d:70:0b:4e:21:13:77:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:00:AE:CF:96:6E:8A:13:0F:B1:E3:27:48:47:D7:36:7C:B8:7F
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:ed:de:fc:ed:93:a8:f7:6c:46:46:6d:56:27:0c:65:08:aa:
         28:23:48:27:f9:a1:f2:cf:2d:47:a3:96:89:03:f5:7b:ad:73:
         cc:fa:98:cf:49:de:a7:65:ee:9e:81:62:35:ef:ef:ec:0d:ce:
         54:8d:03:f2:4c:64:bd:0a:d2:6c:66:16:ba:37:de:fc:c6:c8:
         89:3c:4d:34:6d:c8:21:25:27:a1:6c:ba:63:4c:a8:7a:f9:9b:
         80:f7:cf:fd:5b:86:26:50:a0:4d:87:81:8f:f0:8d:1f:32:fd:
         20:a1:64:8e:0c:96:0c:99:2f:f0:c6:c9:13:06:e2:59:00:e4:
         84:79:7e:4b:f1:5a:95:bf:0a:50:a3:4b:30:09:07:84:e8:61:
         c3:c9:d1:12:12:87:0c:b1:3f:ff:82:8c:f8:db:b5:56:7b:c0:
         f3:8b:ef:22:c6:0a:c1:6a:84:a9:06:4f:70:29:0f:8e:48:b2:
         cd:c9:db:2e:c8:a9:1a:6f:55:1d:b0:7f:6c:af:62:67:52:36:
         47:fb:6a:9a:49:46:02:d1:12:e1:e4:63:79:ff:5c:5e:4c:cd:
         fb:a7:b1:05:ae:17:e9:cb:da:57:f4:13:06:e1:d5:0c:e3:70:
         ef:96:04:d9:1d:b8:cb:64:72:60:48:ea:27:e8:4f:7b:05:4a:
         2e:7c:13:7a
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUPuXBVFCgOqF01w/p6t5oeNf/nKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBRUNGMUFEM0IwRTMwNzZBOTk1Qjg5OTlFNjIzREFF
MjgxOUMxQTAeFw0yNDAzMDUxNzM5MjlaFw0yNTAzMDQxNzQ0MjlaMDMxMTAvBgNV
BAMTKDc1ODcwMEFFQ0Y5NjZFOEExMzBGQjFFMzI3NDg0N0Q3MzY3Q0I4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVXK6YAAatn5ZuiiZbNx6UCIS
myNKsisdf2C9pwczI6/18Fh9OuwCFCCiYkNd5lHxk54BdY2lr1i76tCfCzLj1puP
sASRv20TKPFz7QlJ/KhF65jwdmXVMx2V5AieIngboyXCXqze5+LHLmK4p/cHtK7H
qjUbud9uSKj1H6FpWkM+f3GMpHYaGtEneEdX90WnHpiALxFgq4hAQCRcNglww++k
+uCXfkqD0L3jL+K+mMOp3CAFK7cE22JyBzz5QOYAftJA7KZ/4mmn3o05tilto83A
OiG26SUyE4pivi34QC7K+6Lw7hzGsWzib5pv+ZmYeqdiEMpRTXALTiETdx1bAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUdYcArs+WbooTD7HjJ0hH1zZ8uH8wHwYDVR0j
BBgwFoAUCK7PGtOw4wdqmVuJmeYj2uKBnBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREY4MjY1OENBMjMwQjM1M0JDMzBGNjA1Qzg0MERDMTdF
NDExRTlBNTdFQjAxREQ2MzdFMTVBRjIxMEQwNkY5LzAvMDhBRUNGMUFEM0IwRTMw
NzZBOTk1Qjg5OTlFNjIzREFFMjgxOUMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFFQ0YxQUQzQjBFMzA3NkE5
OTVCODk5OUU2MjNEQUUyODE5QzFBLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMERGODI2NThDQTIzMEIzNTNCQzMwRjYwNUM4NDBEQzE3RTQxMUU5QTU3
RUIwMURENjM3RTE1QUYyMTBEMDZGOS8wLzMyMzAzMDJlMzkzMTJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchbADANBgkqhkiG
9w0BAQsFAAOCAQEAP+3e/O2TqPdsRkZtVicMZQiqKCNIJ/mh8s8tR6OWiQP1e61z
zPqYz0nep2XunoFiNe/v7A3OVI0D8kxkvQrSbGYWujfe/MbIiTxNNG3IISUnoWy6
Y0yoevmbgPfP/VuGJlCgTYeBj/CNHzL9IKFkjgyWDJkv8MbJEwbiWQDkhHl+S/Fa
lb8KUKNLMAkHhOhhw8nREhKHDLE//4KM+Nu1VnvA84vvIsYKwWqEqQZPcCkPjkiy
zcnbLsipGm9VHbB/bK9iZ1I2R/tqmklGAtES4eRjef9cXkzN+6exBa4X6cvaV/QT
BuHVDONw75YE2R24y2RyYEjqJ+hPewVKLnwTeg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org