Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234312e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          ldHVzm7b6GOfV6jYst7uh2opD3VrVNgFHmdfxX54dAM=
Subject key identifier:   D5:F0:1C:62:40:55:ED:21:83:09:4E:F2:BA:6D:9C:D2:8E:2F:84:FC
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       7D8799F6C259F4138D56841F9DFE3838FCC773D2
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
Signing time:             Fri 09 Aug 2024 23:45:00 +0000
ROA not before:           Fri 09 Aug 2024 23:40:00 +0000
ROA not after:            Fri 08 Aug 2025 23:45:00 +0000
asID:                     64120
IP address blocks:        200.49.241.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:87:99:f6:c2:59:f4:13:8d:56:84:1f:9d:fe:38:38:fc:c7:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Aug  9 23:40:00 2024 GMT
            Not After : Aug  8 23:45:00 2025 GMT
        Subject: CN=D5F01C624055ED2183094EF2BA6D9CD28E2F84FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:81:3f:73:bd:95:28:e5:16:d1:4b:ad:9e:
                    47:bb:50:78:43:b4:11:b3:30:b1:eb:82:50:10:1e:
                    87:16:3f:49:1f:99:76:f0:88:7e:11:fa:77:7f:8f:
                    c4:0c:2c:0e:94:b4:21:4c:a1:c3:55:ec:51:ee:a2:
                    3e:a9:6d:ac:61:35:8f:46:4c:97:c0:17:52:44:d6:
                    07:b0:02:4e:97:90:e0:e3:dc:93:32:7d:c2:db:fa:
                    9d:76:f1:32:01:a5:81:7c:7d:c3:83:38:4f:f2:0a:
                    fd:f5:d2:b1:9e:a7:21:4f:74:b0:b9:55:45:89:c4:
                    25:33:69:c4:73:68:e1:33:04:a8:1b:6f:97:ad:8c:
                    30:d1:27:b5:57:f5:65:b5:e0:c6:5f:2f:07:76:b2:
                    a2:06:08:63:d9:28:b1:ff:6d:67:af:10:da:6b:eb:
                    e0:1e:51:6e:b9:76:ea:ca:d5:8a:d7:b8:1b:20:27:
                    bf:9e:ac:a3:ca:51:92:79:64:2f:a5:ef:77:25:14:
                    e7:e2:09:32:50:14:ab:8b:79:f6:6c:7c:5a:1a:07:
                    82:22:44:9e:63:3f:39:81:cb:36:3e:4b:06:0b:b3:
                    e8:df:ab:e6:d3:48:b9:1f:3f:54:db:9f:d2:62:6b:
                    9b:1a:c9:c9:a1:0d:09:e6:77:54:92:e2:f1:36:58:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F0:1C:62:40:55:ED:21:83:09:4E:F2:BA:6D:9C:D2:8E:2F:84:FC
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e5:11:22:05:ca:c2:42:fa:42:13:0e:ef:14:f3:10:72:33:
         0d:1d:28:6e:43:87:42:3c:2f:89:60:c0:39:df:2a:c9:fc:19:
         b3:c2:09:63:d9:b6:a4:57:5e:f2:8d:3b:8a:ea:05:1f:32:4c:
         43:65:e2:0c:9f:00:2f:9d:40:07:b1:90:cd:17:91:3c:fc:8a:
         a2:66:96:b9:5d:3a:32:d3:82:c6:0b:23:13:89:84:17:c0:3d:
         25:64:2e:7d:83:a0:24:2c:40:35:1c:e3:3f:5f:9c:e3:9e:50:
         5a:79:89:4d:92:f6:19:36:64:c9:26:9d:6c:38:53:8c:15:e9:
         6a:40:c9:e8:b4:66:92:52:a0:75:3e:cd:98:df:cf:9e:4e:ce:
         6d:c4:9a:88:04:77:d7:b2:64:d0:cf:51:42:7e:58:a3:02:36:
         47:73:0d:f3:0d:d2:4b:ba:ba:b9:2f:f5:f8:31:9f:bf:44:e9:
         f1:df:e1:2b:f9:5d:9c:5f:df:9d:bf:17:52:4f:f6:bc:94:f6:
         6f:98:1b:02:ce:7e:77:14:27:f2:fa:4b:d7:36:2d:a2:6c:1b:
         de:37:5a:84:62:9b:c3:3d:b3:5b:4b:01:c8:6b:62:ad:2f:0a:
         21:e5:74:9c:7c:15:ac:c0:ce:5d:d1:85:17:0e:05:09:3b:02:
         5f:1e:6c:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfYeZ9sJZ9BONVoQfnf44OPzHc9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNDA4MDkyMzQwMDBaFw0yNTA4MDgyMzQ1MDBaMDMxMTAvBgNV
BAMTKEQ1RjAxQzYyNDA1NUVEMjE4MzA5NEVGMkJBNkQ5Q0QyOEUyRjg0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2oE/c72VKOUW0Uutnke7UHhD
tBGzMLHrglAQHocWP0kfmXbwiH4R+nd/j8QMLA6UtCFMocNV7FHuoj6pbaxhNY9G
TJfAF1JE1gewAk6XkODj3JMyfcLb+p128TIBpYF8fcODOE/yCv310rGepyFPdLC5
VUWJxCUzacRzaOEzBKgbb5etjDDRJ7VX9WW14MZfLwd2sqIGCGPZKLH/bWevENpr
6+AeUW65durK1YrXuBsgJ7+erKPKUZJ5ZC+l73clFOfiCTJQFKuLefZsfFoaB4Ii
RJ5jPzmByzY+SwYLs+jfq+bTSLkfP1Tbn9Jia5saycmhDQnmd1SS4vE2WGE/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1fAcYkBV7SGDCU7yum2c0o4vhPwwHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzAzMDJlMzQzOTJlMzIzNDMxMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgx8TAN
BgkqhkiG9w0BAQsFAAOCAQEAO+URIgXKwkL6QhMO7xTzEHIzDR0obkOHQjwviWDA
Od8qyfwZs8IJY9m2pFde8o07iuoFHzJMQ2XiDJ8AL51AB7GQzReRPPyKomaWuV06
MtOCxgsjE4mEF8A9JWQufYOgJCxANRzjP1+c455QWnmJTZL2GTZkySadbDhTjBXp
akDJ6LRmklKgdT7NmN/Pnk7ObcSaiAR317Jk0M9RQn5YowI2R3MN8w3SS7q6uS/1
+DGfv0Tp8d/hK/ldnF/fnb8XUk/2vJT2b5gbAs5+dxQn8vpL1zYtomwb3jdahGKb
wz2zW0sByGtirS8KIeV0nHwVrMDOXdGFFw4FCTsCXx5sIQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:53:07 2024 by rpki-client on console-ams.rpki-client.org