Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136372e3234392e3230302e302f32322d3232203d3e203532343439.roa
File:                     3136372e3234392e3230302e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          qewpGFLEK4epF4P2FQ6avmPgoos+FdDW/YG8qh/4PB4=
Subject key identifier:   DA:A8:28:75:BD:2F:C8:71:6C:2E:F0:59:0B:B5:88:D6:40:A4:62:9A
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       5D238C5BE2A235F1FF34716C35C5686A760DF95A
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136372e3234392e3230302e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 05 Mar 2024 18:06:42 +0000
ROA not before:           Tue 05 Mar 2024 18:01:42 +0000
ROA not after:            Tue 04 Mar 2025 18:06:42 +0000
asID:                     52449
IP address blocks:        167.249.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:23:8c:5b:e2:a2:35:f1:ff:34:71:6c:35:c5:68:6a:76:0d:f9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Mar  5 18:01:42 2024 GMT
            Not After : Mar  4 18:06:42 2025 GMT
        Subject: CN=DAA82875BD2FC8716C2EF0590BB588D640A4629A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:6c:f9:e3:07:29:cb:1b:3f:db:ee:81:15:
                    0c:8f:fd:5f:8f:98:04:6a:76:ea:85:95:10:e9:53:
                    b5:8b:4b:ea:4a:0f:8c:c7:dc:61:22:67:3f:54:c2:
                    98:1a:74:1c:ec:3a:db:d9:b4:ac:0b:05:60:94:2c:
                    5f:62:b2:b3:f2:d7:5e:98:b2:35:6c:47:55:7b:f5:
                    8a:50:37:c7:dc:c6:14:56:4d:ee:e9:77:31:5d:9b:
                    91:38:a5:db:30:a1:8f:37:88:35:80:db:b6:41:da:
                    4d:7e:6a:b3:f1:25:18:f7:2f:be:e6:41:f9:14:cc:
                    ea:6d:8b:de:8f:d7:f0:56:41:9f:42:35:51:93:91:
                    4a:97:11:c9:ac:ce:98:c5:d7:bc:dd:1c:d5:d0:8f:
                    91:ba:54:ce:94:e5:e2:c3:6f:01:88:68:5b:ab:5e:
                    63:81:ef:08:cd:89:a8:2a:09:5e:a9:ed:e0:9e:a9:
                    4f:28:07:1b:7b:59:39:31:6a:8a:f1:b6:73:ba:0b:
                    73:b6:04:9b:52:af:8c:4d:4d:f9:ee:2f:0e:04:06:
                    a3:66:77:dd:d8:33:14:d1:ef:84:1b:2d:71:f2:ae:
                    75:80:ad:4c:a2:a0:68:41:5b:81:73:66:1f:ee:cc:
                    6d:9d:0f:d5:9a:4c:f6:d1:e8:48:81:e2:e6:9d:1b:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A8:28:75:BD:2F:C8:71:6C:2E:F0:59:0B:B5:88:D6:40:A4:62:9A
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136372e3234392e3230302e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:e3:2e:0a:1c:1e:5a:ec:d1:d9:9d:03:10:df:7e:01:7d:
         29:c0:76:7c:0a:ea:63:fa:cc:25:c5:40:e1:c4:d3:24:61:de:
         ed:dd:d9:a1:7c:86:4b:45:17:4a:47:1e:dc:4b:56:0b:16:1b:
         b4:09:80:22:d7:5b:c4:02:3b:2c:74:b1:4d:95:d4:1f:42:c0:
         e5:e3:3a:5f:c1:72:4b:61:42:cc:b8:3e:e6:5e:a5:d3:7c:ce:
         48:8e:cd:35:25:da:bc:15:88:c3:50:59:a6:77:23:d3:b3:92:
         ce:bc:27:25:52:c5:47:97:01:80:8e:3e:69:b6:1d:f8:6e:e3:
         c8:28:e6:c5:b7:d8:7f:d8:27:65:fb:8d:a0:84:6d:f3:5a:49:
         ff:3f:ca:cc:e0:db:0d:0f:77:76:ad:00:94:e3:17:18:f3:11:
         52:1b:41:72:b3:e8:f4:bb:7e:0d:6c:b0:5e:79:5e:1a:cf:95:
         74:55:a8:d3:89:4b:cd:4e:cd:29:58:94:8f:48:c1:4b:ee:65:
         ea:3c:5f:84:3c:5f:4d:9d:04:62:1e:86:1d:9b:28:1e:03:01:
         02:1e:9d:92:ee:c0:d7:b3:93:b7:d1:6a:98:49:b7:5a:c9:29:
         6d:48:4a:dc:04:a3:02:bb:14:93:17:1c:29:07:83:fa:73:5d:
         ee:96:91:9b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXSOMW+KiNfH/NHFsNcVoanYN+VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTJDQTZERjA0NDgzNzQxMzdERTg5MEFCNTg0RDk2
MUMxMDI4RTAeFw0yNDAzMDUxODAxNDJaFw0yNTAzMDQxODA2NDJaMDMxMTAvBgNV
BAMTKERBQTgyODc1QkQyRkM4NzE2QzJFRjA1OTBCQjU4OEQ2NDBBNDYyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEWz54wcpyxs/2+6BFQyP/V+P
mARqduqFlRDpU7WLS+pKD4zH3GEiZz9UwpgadBzsOtvZtKwLBWCULF9isrPy116Y
sjVsR1V79YpQN8fcxhRWTe7pdzFdm5E4pdswoY83iDWA27ZB2k1+arPxJRj3L77m
QfkUzOpti96P1/BWQZ9CNVGTkUqXEcmszpjF17zdHNXQj5G6VM6U5eLDbwGIaFur
XmOB7wjNiagqCV6p7eCeqU8oBxt7WTkxaorxtnO6C3O2BJtSr4xNTfnuLw4EBqNm
d93YMxTR74QbLXHyrnWArUyioGhBW4FzZh/uzG2dD9WaTPbR6EiB4uadG3dxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2qgodb0vyHFsLvBZC7WI1kCkYpowHwYDVR0j
BBgwFoAUpgkspt8ESDdBN96JCrWE2WHBAo4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTI1RjgwOUE2REVEREU2RDEwQUIwNkFGQTNEMzZFNzlB
NzM3OTU5MTJDOTBGNDdGQ0U3ODE3QTU0Q0E0MUM5LzAvQTYwOTJDQTZERjA0NDgz
NzQxMzdERTg5MEFCNTg0RDk2MUMxMDI4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjA5MkNBNkRGMDQ0ODM3NDEz
N0RFODkwQUI1ODREOTYxQzEwMjhFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEyNUY4MDlBNkRFRERFNkQxMEFCMDZBRkEzRDM2RTc5QTczNzk1OTEy
QzkwRjQ3RkNFNzgxN0E1NENBNDFDOS8wLzMxMzYzNzJlMzIzNDM5MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzQzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/nI
MA0GCSqGSIb3DQEBCwUAA4IBAQAZn+MuChweWuzR2Z0DEN9+AX0pwHZ8Cupj+swl
xUDhxNMkYd7t3dmhfIZLRRdKRx7cS1YLFhu0CYAi11vEAjssdLFNldQfQsDl4zpf
wXJLYULMuD7mXqXTfM5Ijs01Jdq8FYjDUFmmdyPTs5LOvCclUsVHlwGAjj5pth34
buPIKObFt9h/2Cdl+42ghG3zWkn/P8rM4NsND3d2rQCU4xcY8xFSG0Fys+j0u34N
bLBeeV4az5V0VajTiUvNTs0pWJSPSMFL7mXqPF+EPF9NnQRiHoYdmygeAwECHp2S
7sDXs5O30WqYSbdaySltSErcBKMCuxSTFxwpB4P6c13ulpGb
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org