Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234302e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          JpcuZuJabEhUE2SE2C/uyIDwF1KYgUO9IZGQm6yIzm8=
Subject key identifier:   63:C8:B9:35:E0:3B:74:84:30:AB:55:17:B1:03:62:D1:80:E2:05:34
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       0AB2F90BCE33E070837B26B28F7BFE45BC56B421
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa
Signing time:             Fri 09 Aug 2024 23:45:00 +0000
ROA not before:           Fri 09 Aug 2024 23:40:00 +0000
ROA not after:            Fri 08 Aug 2025 23:45:00 +0000
asID:                     64120
IP address blocks:        200.49.240.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:f9:0b:ce:33:e0:70:83:7b:26:b2:8f:7b:fe:45:bc:56:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Aug  9 23:40:00 2024 GMT
            Not After : Aug  8 23:45:00 2025 GMT
        Subject: CN=63C8B935E03B748430AB5517B10362D180E20534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:65:ab:31:51:6d:65:d5:2f:64:d9:db:62:
                    ed:41:80:86:2b:25:fe:37:1f:42:3e:cc:1c:2a:ee:
                    a1:a8:7b:6f:cb:67:b8:ea:23:a1:c5:d4:9e:69:e7:
                    1a:3e:1e:e2:d6:50:e7:c9:aa:23:72:07:37:2d:89:
                    fb:85:af:20:fd:39:6c:72:7c:ba:e2:41:fe:fb:e7:
                    69:40:33:9b:17:6c:fc:38:1b:f4:7b:10:10:2d:99:
                    0c:40:3e:bd:17:f3:e0:3b:68:d1:bf:c6:26:94:90:
                    c4:7e:07:c5:4f:0c:3f:57:a2:0e:2c:e1:d3:02:3b:
                    64:fa:da:b1:80:5e:6a:e6:00:18:f5:1c:19:07:71:
                    7c:98:16:fb:05:20:bf:c4:82:fa:23:d3:c8:73:68:
                    29:65:78:79:28:c5:7e:49:d3:c9:4a:46:1b:46:23:
                    91:69:75:0b:9d:39:2e:c6:83:5e:0b:03:f2:b6:10:
                    e2:92:dc:ca:77:37:43:22:5d:10:c8:34:62:c0:bb:
                    88:78:03:15:4e:b2:ad:c0:8f:00:07:ed:09:18:dc:
                    31:14:1b:17:d0:84:a2:83:37:90:84:2d:17:a1:94:
                    16:92:0a:62:c1:f2:ed:a9:6a:7b:1b:90:f0:19:cb:
                    54:21:e9:9f:3b:63:30:0e:16:32:1f:52:58:0b:fa:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:B9:35:E0:3B:74:84:30:AB:55:17:B1:03:62:D1:80:E2:05:34
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:1c:ad:f5:87:1d:d5:0f:e2:76:6d:3e:9c:47:45:09:bc:
         7d:3b:36:82:2c:52:89:cd:ca:50:68:d9:53:b1:39:44:10:40:
         13:9b:7b:86:d0:cb:b2:30:31:57:1d:32:83:7f:d3:54:2e:15:
         69:c7:b2:d3:8b:90:e8:43:85:28:de:d7:2b:c8:49:e7:d5:3a:
         00:f0:65:72:c7:d3:60:0f:b4:0e:29:51:54:29:df:4e:08:0a:
         3b:e2:33:e3:7e:a0:24:47:c6:24:1f:51:bf:a8:88:a5:ec:0b:
         28:4c:a5:53:6c:e1:f4:43:36:9e:d3:ce:5b:a8:8d:15:f6:11:
         93:98:a3:f4:f8:50:63:0c:cd:f3:b3:b2:b3:4d:35:99:8c:55:
         47:b6:f3:82:cd:a4:46:4b:a1:ab:ae:2b:a4:4b:d2:51:a1:19:
         ab:6d:a1:a9:38:96:41:e8:fd:75:7f:09:76:4f:1d:6a:f1:6c:
         2f:ab:f9:c4:dd:8c:a1:4f:db:59:c0:52:82:39:b5:b7:9f:c7:
         94:3b:30:5a:78:82:f1:0e:5d:16:af:83:1b:73:ed:66:09:f0:
         db:5c:31:dd:26:06:67:f3:ba:74:5e:d6:bd:b2:f7:a2:a9:30:
         39:d3:4b:f7:cf:78:a5:84:8e:e1:7b:98:ee:fc:a7:ec:1b:50:
         50:47:be:6d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCrL5C84z4HCDeyayj3v+RbxWtCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNDA4MDkyMzQwMDBaFw0yNTA4MDgyMzQ1MDBaMDMxMTAvBgNV
BAMTKDYzQzhCOTM1RTAzQjc0ODQzMEFCNTUxN0IxMDM2MkQxODBFMjA1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRa2WrMVFtZdUvZNnbYu1BgIYr
Jf43H0I+zBwq7qGoe2/LZ7jqI6HF1J5p5xo+HuLWUOfJqiNyBzctifuFryD9OWxy
fLriQf7752lAM5sXbPw4G/R7EBAtmQxAPr0X8+A7aNG/xiaUkMR+B8VPDD9Xog4s
4dMCO2T62rGAXmrmABj1HBkHcXyYFvsFIL/Egvoj08hzaClleHkoxX5J08lKRhtG
I5FpdQudOS7Gg14LA/K2EOKS3Mp3N0MiXRDINGLAu4h4AxVOsq3AjwAH7QkY3DEU
GxfQhKKDN5CELRehlBaSCmLB8u2pansbkPAZy1Qh6Z87YzAOFjIfUlgL+le3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUY8i5NeA7dIQwq1UXsQNi0YDiBTQwHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzAzMDJlMzQzOTJlMzIzNDMwMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgx8DAN
BgkqhkiG9w0BAQsFAAOCAQEALNwcrfWHHdUP4nZtPpxHRQm8fTs2gixSic3KUGjZ
U7E5RBBAE5t7htDLsjAxVx0yg3/TVC4Vacey04uQ6EOFKN7XK8hJ59U6APBlcsfT
YA+0DilRVCnfTggKO+Iz436gJEfGJB9Rv6iIpewLKEylU2zh9EM2ntPOW6iNFfYR
k5ij9PhQYwzN87Oys001mYxVR7bzgs2kRkuhq64rpEvSUaEZq22hqTiWQej9dX8J
dk8davFsL6v5xN2MoU/bWcBSgjm1t5/HlDswWniC8Q5dFq+DG3PtZgnw21wx3SYG
Z/O6dF7WvbL3oqkwOdNL9894pYSO4XuY7vyn7BtQUEe+bQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:48:29 2024 by rpki-client on console-fra.rpki-client.org