Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa
File:                     3230302e32392e3138342e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          asCtyAlciz7Pb/xnzRcNoEAat6kgDQ1Xmu+3Oqqucg0=
Subject key identifier:   0C:B0:77:A6:A2:EE:75:4B:00:EF:D4:54:D3:0D:D6:9E:1A:82:89:CD
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0A773A5746D01EF5AFBD081378B50D318A65222E
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:01 +0000
ROA not before:           Tue 05 Mar 2024 18:12:01 +0000
ROA not after:            Tue 04 Mar 2025 18:17:01 +0000
asID:                     6429
IP address blocks:        200.29.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:3a:57:46:d0:1e:f5:af:bd:08:13:78:b5:0d:31:8a:65:22:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:01 2024 GMT
            Not After : Mar  4 18:17:01 2025 GMT
        Subject: CN=0CB077A6A2EE754B00EFD454D30DD69E1A8289CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:03:48:b3:03:cd:9c:76:70:9d:32:34:dd:
                    49:0a:f9:c1:3f:77:cb:06:87:dd:e8:84:e2:f8:5e:
                    e2:b6:4a:de:a1:90:b6:ec:b9:07:cd:ff:53:0d:8e:
                    f7:26:b3:e4:6a:6f:16:e6:0c:3c:e9:ae:78:11:10:
                    ea:32:b4:8c:c6:86:50:35:1a:43:a0:f6:d2:38:e6:
                    96:5b:13:cd:c1:42:8e:db:58:4c:44:b6:9b:c3:42:
                    8a:a9:75:b7:e7:a7:6b:e2:40:14:1c:0c:bb:e9:24:
                    ac:57:63:69:d4:fa:98:d7:c0:c5:9e:ec:d1:1a:8e:
                    25:2d:04:eb:72:6a:17:49:aa:7d:42:b4:5b:ff:34:
                    e8:b4:6a:04:51:43:a9:a2:05:39:ac:b3:ad:f3:ca:
                    a2:e5:f3:48:06:93:1c:91:be:cd:87:50:1f:c3:0f:
                    fd:0a:84:1d:6a:7b:95:56:4c:3f:44:9c:45:7d:a8:
                    c3:99:bf:1c:2d:d3:df:86:b5:35:77:e2:cc:0a:21:
                    ad:c7:ca:7f:a9:a9:91:d9:1b:15:84:9a:7b:14:df:
                    80:a1:bd:17:5a:3e:37:93:a0:03:44:00:22:48:a7:
                    f8:9a:d3:eb:5f:fb:a5:c9:4c:f9:5d:df:88:2f:09:
                    81:fa:43:af:26:6d:13:d9:4b:b7:72:bf:5f:8a:cc:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:77:A6:A2:EE:75:4B:00:EF:D4:54:D3:0D:D6:9E:1A:82:89:CD
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e32392e3138342e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:9c:01:2f:c3:b1:93:d7:0a:6d:c6:f1:71:7b:55:c0:8d:
         1e:b5:08:14:ce:3d:f1:44:a9:26:f5:80:ab:7b:4a:3f:a5:4b:
         c9:88:2a:e3:36:57:28:41:4a:89:f7:41:ae:a8:d9:1c:55:81:
         a2:45:ec:8e:15:77:f7:23:ef:4b:1f:09:20:ee:01:46:8c:a5:
         62:32:2f:86:c8:4f:50:60:d5:1a:72:15:84:c3:78:01:8b:74:
         c3:94:ce:57:54:46:54:31:28:44:a4:d0:a7:bd:1a:95:48:de:
         ab:19:a9:53:12:71:3d:76:d6:6c:66:6b:73:2f:53:e6:d6:b4:
         c2:c6:b7:04:d9:c1:0e:32:bc:e4:ed:06:59:d9:ce:5e:1a:0a:
         b9:45:11:f4:cb:f8:c6:92:df:6e:02:1a:44:b9:b7:a8:df:b5:
         bc:84:55:e7:7c:4a:ec:64:14:52:3a:57:ab:2a:dd:2d:8a:fc:
         cd:72:43:12:f5:04:ef:f4:d1:69:ab:39:d5:6a:d9:72:d2:10:
         1d:23:90:9b:3c:52:95:12:b2:cc:ef:74:b8:54:2e:70:52:95:
         6d:1d:89:c0:9c:ba:23:d1:11:4e:e3:d2:45:08:58:25:54:33:
         79:82:cb:81:6a:d8:53:a4:15:88:0d:19:ea:0a:ff:54:e7:61:
         87:95:6e:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCnc6V0bQHvWvvQgTeLUNMYplIi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNDAzMDUxODEyMDFaFw0yNTAzMDQxODE3MDFaMDMxMTAvBgNV
BAMTKDBDQjA3N0E2QTJFRTc1NEIwMEVGRDQ1NEQzMERENjlFMUE4Mjg5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IQNIswPNnHZwnTI03UkK+cE/
d8sGh93ohOL4XuK2St6hkLbsuQfN/1MNjvcms+RqbxbmDDzprngREOoytIzGhlA1
GkOg9tI45pZbE83BQo7bWExEtpvDQoqpdbfnp2viQBQcDLvpJKxXY2nU+pjXwMWe
7NEajiUtBOtyahdJqn1CtFv/NOi0agRRQ6miBTmss63zyqLl80gGkxyRvs2HUB/D
D/0KhB1qe5VWTD9EnEV9qMOZvxwt09+GtTV34swKIa3Hyn+pqZHZGxWEmnsU34Ch
vRdaPjeToANEACJIp/ia0+tf+6XJTPld34gvCYH6Q68mbRPZS7dyv1+KzLgxAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDLB3pqLudUsA79RU0w3WnhqCic0wHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzAzMDJlMzIzOTJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIHbgwDQYJ
KoZIhvcNAQELBQADggEBAEbBnAEvw7GT1wptxvFxe1XAjR61CBTOPfFEqSb1gKt7
Sj+lS8mIKuM2VyhBSon3Qa6o2RxVgaJF7I4Vd/cj70sfCSDuAUaMpWIyL4bIT1Bg
1RpyFYTDeAGLdMOUzldURlQxKESk0Ke9GpVI3qsZqVMScT121mxma3MvU+bWtMLG
twTZwQ4yvOTtBlnZzl4aCrlFEfTL+MaS324CGkS5t6jftbyEVed8SuxkFFI6V6sq
3S2K/M1yQxL1BO/00WmrOdVq2XLSEB0jkJs8UpUSsszvdLhULnBSlW0dicCcuiPR
EU7j0kUIWCVUM3mCy4Fq2FOkFYgNGeoK/1TnYYeVbjQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org