Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa
File:                     3230302e32392e3134332e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          O1QNkAXt3CFzZeifCDCHamsA0kdP8kRLQR04T/C+ETA=
Subject key identifier:   02:43:8C:B9:92:5B:BD:62:65:5C:CF:47:9C:C9:09:9F:0F:8C:D7:9C
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       45A922E267C3E3DE16C6B1364D56F91DECAE9054
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     6429
IP address blocks:        200.29.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a9:22:e2:67:c3:e3:de:16:c6:b1:36:4d:56:f9:1d:ec:ae:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=02438CB9925BBD62655CCF479CC9099F0F8CD79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:a9:55:ea:2a:4e:bc:8b:37:ae:af:4b:64:
                    9b:46:03:d5:ef:b5:bc:e2:ab:09:36:bc:ad:8f:67:
                    d7:64:89:6c:af:17:b9:ba:ca:36:74:7c:09:ec:a7:
                    78:d1:cf:79:99:82:64:e6:8d:6f:35:be:4b:0d:36:
                    43:d8:4c:28:2e:5c:a6:7a:f3:ac:38:80:50:3d:50:
                    80:7d:31:0c:ac:06:d5:b6:0a:32:be:39:f1:be:81:
                    33:87:36:08:e3:75:65:46:91:57:8e:a8:0a:73:ba:
                    9a:5e:e3:2e:91:57:2a:f8:72:7c:3d:3a:a4:b8:f9:
                    6d:2b:53:10:33:b6:1e:f6:89:ef:e0:86:30:5a:db:
                    3e:37:74:66:92:00:e5:ce:76:dc:76:37:47:2f:62:
                    c0:35:a3:39:af:ec:9c:c0:12:6b:4b:a6:56:dc:cc:
                    d7:29:56:c8:0c:e6:cb:64:4b:d6:c5:b5:81:fc:a2:
                    60:8c:23:f2:fb:f3:86:42:3a:e4:18:63:79:50:de:
                    b3:9b:4f:72:1e:69:0e:de:a1:9f:0d:ab:96:c6:eb:
                    84:7e:5e:83:21:7a:0f:74:c4:4c:14:56:0e:ee:18:
                    f5:1e:b1:2f:91:c2:24:ff:a2:76:35:0f:25:d2:cc:
                    aa:ea:3e:49:9a:0b:7e:f5:fb:da:2d:47:80:ff:52:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:8C:B9:92:5B:BD:62:65:5C:CF:47:9C:C9:09:9F:0F:8C:D7:9C
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3134332e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c2:31:9e:69:ac:65:a5:8a:58:86:b6:0e:2d:62:40:94:19:
         ea:e8:94:fd:af:25:bf:e3:52:32:83:4c:7d:71:90:39:27:40:
         1e:50:c7:e1:03:b4:60:86:b8:7d:83:18:34:a3:dd:06:55:39:
         ca:84:3d:f1:f3:2b:85:bb:ef:94:e2:e9:3b:50:41:33:30:b1:
         06:fc:98:63:93:90:c5:d9:5c:cd:59:59:a0:be:bd:98:31:ac:
         9d:d9:15:89:32:e1:59:4c:2c:63:35:ac:63:04:07:55:a2:98:
         56:39:f3:9d:a0:b6:24:e6:73:90:b9:a1:49:8d:83:d5:d7:c5:
         a7:ad:95:86:d2:c0:2c:e3:52:9e:bf:68:64:ff:c9:9d:85:95:
         8b:b7:17:5d:26:fc:b3:75:e9:de:08:92:d0:7a:ee:31:28:ca:
         8e:d2:a6:e9:fc:19:cd:4d:6d:7f:f5:24:8d:cc:88:bd:7d:16:
         f8:dc:35:cc:4f:38:d0:e0:64:b7:d0:61:63:4e:08:11:49:55:
         16:48:c0:aa:7c:c1:c0:ae:88:53:7e:02:20:d3:fe:e6:88:39:
         41:ac:60:0a:4e:9e:fe:68:b6:d3:61:7a:82:8f:12:e1:74:61:
         08:0b:26:1a:54:91:85:c1:12:45:1d:ea:75:ff:dc:2a:d2:8e:
         29:fe:a9:a2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURaki4mfD494WxrE2TVb5HeyukFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNDAzMDUxODEyMTBaFw0yNTAzMDQxODE3MTBaMDMxMTAvBgNV
BAMTKDAyNDM4Q0I5OTI1QkJENjI2NTVDQ0Y0NzlDQzkwOTlGMEY4Q0Q3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAqlV6ipOvIs3rq9LZJtGA9Xv
tbziqwk2vK2PZ9dkiWyvF7m6yjZ0fAnsp3jRz3mZgmTmjW81vksNNkPYTCguXKZ6
86w4gFA9UIB9MQysBtW2CjK+OfG+gTOHNgjjdWVGkVeOqApzuppe4y6RVyr4cnw9
OqS4+W0rUxAzth72ie/ghjBa2z43dGaSAOXOdtx2N0cvYsA1ozmv7JzAEmtLplbc
zNcpVsgM5stkS9bFtYH8omCMI/L784ZCOuQYY3lQ3rObT3IeaQ7eoZ8Nq5bG64R+
XoMheg90xEwUVg7uGPUesS+RwiT/onY1DyXSzKrqPkmaC371+9otR4D/Ut53AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUAkOMuZJbvWJlXM9HnMkJnw+M15wwHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzAzMDJlMzIzOTJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIHY8wDQYJ
KoZIhvcNAQELBQADggEBAAbCMZ5prGWliliGtg4tYkCUGerolP2vJb/jUjKDTH1x
kDknQB5Qx+EDtGCGuH2DGDSj3QZVOcqEPfHzK4W775Ti6TtQQTMwsQb8mGOTkMXZ
XM1ZWaC+vZgxrJ3ZFYky4VlMLGM1rGMEB1WimFY5852gtiTmc5C5oUmNg9XXxaet
lYbSwCzjUp6/aGT/yZ2FlYu3F10m/LN16d4IktB67jEoyo7Spun8Gc1NbX/1JI3M
iL19FvjcNcxPONDgZLfQYWNOCBFJVRZIwKp8wcCuiFN+AiDT/uaIOUGsYApOnv5o
ttNheoKPEuF0YQgLJhpUkYXBEkUd6nX/3CrSjin+qaI=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org