Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e382e302f32312d3234203d3e2037303034.roa
File:                     3230302e39312e382e302f32312d3234203d3e2037303034.roa (raw, json)
Hash identifier:          w4wI2QX46Ulzot/arVON1bVV2H9PstpYI6Va9ZdhLBw=
Subject key identifier:   E5:99:DE:5D:E8:BA:6E:3F:3A:E2:2C:B7:8F:6A:A6:94:D0:71:FD:BF
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       179043492A2876A6F31F817E989C7DD7E7AF780A
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e382e302f32312d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     7004
IP address blocks:        200.91.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:43:49:2a:28:76:a6:f3:1f:81:7e:98:9c:7d:d7:e7:af:78:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=E599DE5DE8BA6E3F3AE22CB78F6AA694D071FDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:04:94:65:71:57:44:d7:92:f3:0d:33:ee:
                    9b:26:66:c6:95:44:c0:e4:a2:82:94:ce:e2:54:10:
                    82:51:57:8a:bc:8b:63:1a:3c:1c:36:68:0f:77:cd:
                    3d:52:e0:d1:05:ca:e0:81:09:6d:2d:dc:04:ef:8a:
                    60:5a:ef:07:b6:9c:d2:6a:7b:cc:c6:39:49:ef:09:
                    ac:1e:a6:09:d0:3a:1b:b8:f3:74:aa:c4:ae:4a:38:
                    7a:28:94:95:95:a0:e4:16:1f:57:b2:a4:9f:73:0d:
                    a0:e7:dd:0f:93:08:66:ed:25:c8:9f:9a:b8:e9:42:
                    80:8d:6f:07:67:fc:8c:bb:46:54:b9:55:83:62:4c:
                    df:38:11:e3:86:43:86:a9:6f:00:f2:1c:31:1e:da:
                    5b:51:f7:3d:63:e8:bb:34:c1:cf:66:0f:45:cd:15:
                    0c:f2:95:19:bc:42:bf:b9:18:63:76:ec:c3:0e:08:
                    e6:56:f6:01:36:31:56:0b:7c:90:b1:68:57:78:a0:
                    cc:8f:93:f2:f2:f3:d8:5c:e4:db:8e:d7:63:67:49:
                    28:14:0c:b4:4d:e4:3a:59:b6:84:c1:5e:72:c4:af:
                    37:0b:b7:d3:6b:12:55:15:22:75:aa:1d:ad:f9:21:
                    7a:93:3a:2c:e9:55:9e:e2:a0:10:c2:66:e5:c6:54:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:DE:5D:E8:BA:6E:3F:3A:E2:2C:B7:8F:6A:A6:94:D0:71:FD:BF
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e382e302f32312d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:f3:80:9c:2d:81:44:f2:c6:e0:1c:fa:c4:79:e5:ab:d0:
         5a:91:71:8c:20:9f:ca:f1:55:24:3e:ae:04:0b:1a:8e:18:6b:
         c8:17:15:b6:00:99:05:bc:6b:67:c6:aa:8f:5b:c0:31:3d:72:
         04:a1:9a:97:05:57:da:f8:78:5b:ad:6b:c7:d8:fd:4f:2b:32:
         2a:6b:0a:e2:ea:65:ff:4e:c2:fd:12:b8:60:32:05:90:e1:48:
         6b:6e:36:0b:62:05:67:da:c7:ac:bf:af:e4:62:24:32:69:fc:
         bc:f3:55:85:e1:ae:ee:a9:cb:97:16:ca:b4:9b:57:c4:79:f1:
         be:f8:a7:42:68:0c:43:6c:1b:01:cc:ae:42:3a:c7:b3:c7:db:
         e7:4b:56:9b:4c:e4:3d:ce:4f:10:d7:1e:ca:5a:13:be:e4:e4:
         82:e6:51:a4:2c:8a:68:de:42:cc:6e:98:6d:72:ac:c5:f6:a1:
         a4:8f:fa:70:99:8e:36:ae:87:93:72:9f:d0:ce:4c:58:a5:40:
         2a:d5:9e:74:76:4e:43:e0:18:80:48:fc:e0:bb:ce:fc:74:cd:
         b0:ca:5e:70:86:df:dd:64:2e:a6:0a:a5:fb:c6:72:f2:cd:10:
         b0:67:7f:f6:4f:c3:ab:f8:4a:68:05:a4:55:31:e0:be:42:df:
         e7:9c:8e:73
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUF5BDSSoodqbzH4F+mJx91+eveAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBRUNGMUFEM0IwRTMwNzZBOTk1Qjg5OTlFNjIzREFF
MjgxOUMxQTAeFw0yNDAzMDUxNzM5MjlaFw0yNTAzMDQxNzQ0MjlaMDMxMTAvBgNV
BAMTKEU1OTlERTVERThCQTZFM0YzQUUyMkNCNzhGNkFBNjk0RDA3MUZEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eQSUZXFXRNeS8w0z7psmZsaV
RMDkooKUzuJUEIJRV4q8i2MaPBw2aA93zT1S4NEFyuCBCW0t3ATvimBa7we2nNJq
e8zGOUnvCawepgnQOhu483SqxK5KOHoolJWVoOQWH1eypJ9zDaDn3Q+TCGbtJcif
mrjpQoCNbwdn/Iy7RlS5VYNiTN84EeOGQ4apbwDyHDEe2ltR9z1j6Ls0wc9mD0XN
FQzylRm8Qr+5GGN27MMOCOZW9gE2MVYLfJCxaFd4oMyPk/Ly89hc5NuO12NnSSgU
DLRN5DpZtoTBXnLErzcLt9NrElUVInWqHa35IXqTOizpVZ7ioBDCZuXGVGQ1AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU5ZneXei6bj864iy3j2qmlNBx/b8wHwYDVR0j
BBgwFoAUCK7PGtOw4wdqmVuJmeYj2uKBnBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREY4MjY1OENBMjMwQjM1M0JDMzBGNjA1Qzg0MERDMTdF
NDExRTlBNTdFQjAxREQ2MzdFMTVBRjIxMEQwNkY5LzAvMDhBRUNGMUFEM0IwRTMw
NzZBOTk1Qjg5OTlFNjIzREFFMjgxOUMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOEFFQ0YxQUQzQjBFMzA3NkE5
OTVCODk5OUU2MjNEQUUyODE5QzFBLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMERGODI2NThDQTIzMEIzNTNCQzMwRjYwNUM4NDBEQzE3RTQxMUU5QTU3
RUIwMURENjM3RTE1QUYyMTBEMDZGOS8wLzMyMzAzMDJlMzkzMTJlMzgyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hbCDANBgkqhkiG
9w0BAQsFAAOCAQEAKbvzgJwtgUTyxuAc+sR55avQWpFxjCCfyvFVJD6uBAsajhhr
yBcVtgCZBbxrZ8aqj1vAMT1yBKGalwVX2vh4W61rx9j9TysyKmsK4upl/07C/RK4
YDIFkOFIa242C2IFZ9rHrL+v5GIkMmn8vPNVheGu7qnLlxbKtJtXxHnxvvinQmgM
Q2wbAcyuQjrHs8fb50tWm0zkPc5PENceyloTvuTkguZRpCyKaN5CzG6YbXKsxfah
pI/6cJmONq6Hk3Kf0M5MWKVAKtWedHZOQ+AYgEj84LvO/HTNsMpecIbf3WQupgql
+8Zy8s0QsGd/9k/Dq/hKaAWkVTHgvkLf55yOcw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org