Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323032.roa
File:                     3230302e312e3137352e302f32342d3234203d3e20323032.roa (raw, json)
Hash identifier:          lg4VnSpy5AIdwkf5Pw1bR0/DOh9tq8ZSejEp6JFQBp8=
Subject key identifier:   3F:74:C6:03:2F:31:CE:6C:E8:3E:3A:CC:6C:B9:E6:A9:AA:8F:6E:8E
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       1F49DD1955B68654EC797C8EA81C4F6FC91CBC72
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 17:54:17 +0000
ROA not before:           Tue 05 Mar 2024 17:49:17 +0000
ROA not after:            Tue 04 Mar 2025 17:54:17 +0000
asID:                     202
IP address blocks:        200.1.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:49:dd:19:55:b6:86:54:ec:79:7c:8e:a8:1c:4f:6f:c9:1c:bc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:17 2024 GMT
            Not After : Mar  4 17:54:17 2025 GMT
        Subject: CN=3F74C6032F31CE6CE83E3ACC6CB9E6A9AA8F6E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:02:f7:3e:a6:1c:58:aa:7d:f8:01:56:99:
                    5e:77:a0:e6:5c:c5:05:b5:fb:70:77:f2:16:0d:49:
                    8a:3f:b3:42:a7:26:71:17:7e:32:78:4f:a2:63:43:
                    a4:3e:bf:52:9c:91:70:0e:db:55:21:88:b9:2b:b9:
                    47:4c:c4:47:de:80:77:da:7e:33:60:3b:53:77:d0:
                    0a:06:17:6c:b0:b6:e4:8d:84:30:81:79:dd:5f:c6:
                    97:c4:c6:bc:9a:13:c7:27:42:a8:a8:59:fd:1c:36:
                    11:45:cf:f0:59:dd:e5:9b:e1:6f:c9:7f:38:fe:ed:
                    5d:52:c8:cd:9e:ee:2b:3c:8b:5e:d1:45:20:d6:bc:
                    c1:13:e8:a8:c8:63:50:b1:8f:e8:da:6a:4b:91:e7:
                    d8:f9:b6:a0:3a:71:c9:8c:79:b8:06:3a:18:c6:14:
                    39:b8:0f:a0:e7:fe:d2:f2:56:29:07:9d:bc:a7:e2:
                    3e:32:08:d5:7f:7e:8e:ed:9f:da:b1:64:cf:cb:60:
                    28:57:1a:e9:f5:d2:32:2f:c4:82:97:d9:1f:54:8f:
                    a0:02:c2:37:ea:84:ad:f6:4d:ac:24:0b:78:5d:3f:
                    cf:29:7a:8d:1c:1c:47:d7:b0:32:11:1d:8a:d7:31:
                    cc:f2:1a:e5:49:55:c7:15:4b:0e:f1:ba:a1:9b:49:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:74:C6:03:2F:31:CE:6C:E8:3E:3A:CC:6C:B9:E6:A9:AA:8F:6E:8E
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:42:0b:1c:ec:18:70:f4:81:49:3c:75:9b:dd:ad:6b:50:f3:
         5b:23:ec:e7:ac:a8:94:73:f8:f3:52:c8:75:1e:54:e3:57:2f:
         b8:28:b3:1e:72:64:8f:3b:63:fb:96:6e:d3:a6:fa:bd:ec:93:
         a5:04:2b:16:cd:39:ef:93:64:31:6c:80:a1:02:90:6c:c7:4e:
         73:b8:41:67:5e:21:41:53:a1:c7:bd:0d:ba:15:a0:54:86:0b:
         a1:8e:e0:29:64:02:3d:96:e7:da:29:85:41:cf:c6:74:0a:e3:
         d6:a9:ea:8c:8b:0f:66:af:58:97:31:92:a8:65:8b:7d:7a:9f:
         c6:c5:09:25:84:12:c5:bf:b6:0a:2a:d7:6a:0a:76:f7:8a:cc:
         3a:dd:f4:fa:c7:c3:c8:fb:c2:88:be:bd:56:86:35:b1:36:a7:
         a4:c3:ab:80:3b:92:ac:83:cc:96:94:6b:77:fa:a6:ab:f7:22:
         fc:4e:5f:27:60:f5:6c:7b:7f:25:5e:12:25:5b:57:0f:33:5b:
         81:5c:d0:05:9d:4a:77:0d:ff:7e:8c:b2:16:76:8c:61:fa:a5:
         0d:39:ee:30:bc:95:f5:fb:7c:c2:40:d7:82:2a:95:2e:f7:d0:
         b2:cb:6c:3e:69:90:ed:84:ae:a9:2c:45:ee:99:e8:21:e7:81:
         c7:8b:56:40
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUH0ndGVW2hlTseXyOqBxPb8kcvHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNDAzMDUxNzQ5MTdaFw0yNTAzMDQxNzU0MTdaMDMxMTAvBgNV
BAMTKDNGNzRDNjAzMkYzMUNFNkNFODNFM0FDQzZDQjlFNkE5QUE4RjZFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEQL3PqYcWKp9+AFWmV53oOZc
xQW1+3B38hYNSYo/s0KnJnEXfjJ4T6JjQ6Q+v1KckXAO21UhiLkruUdMxEfegHfa
fjNgO1N30AoGF2ywtuSNhDCBed1fxpfExryaE8cnQqioWf0cNhFFz/BZ3eWb4W/J
fzj+7V1SyM2e7is8i17RRSDWvMET6KjIY1Cxj+jaakuR59j5tqA6ccmMebgGOhjG
FDm4D6Dn/tLyVikHnbyn4j4yCNV/fo7tn9qxZM/LYChXGun10jIvxIKX2R9Uj6AC
wjfqhK32TawkC3hdP88peo0cHEfXsDIRHYrXMczyGuVJVccVSw7xuqGbSaMdAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUP3TGAy8xzmzoPjrMbLnmqaqPbo4wHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMyMzAzMDJlMzEyZTMxMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgBrzANBgkqhkiG
9w0BAQsFAAOCAQEAkkILHOwYcPSBSTx1m92ta1DzWyPs56yolHP481LIdR5U41cv
uCizHnJkjztj+5Zu06b6veyTpQQrFs0575NkMWyAoQKQbMdOc7hBZ14hQVOhx70N
uhWgVIYLoY7gKWQCPZbn2imFQc/GdArj1qnqjIsPZq9YlzGSqGWLfXqfxsUJJYQS
xb+2CirXagp294rMOt30+sfDyPvCiL69VoY1sTanpMOrgDuSrIPMlpRrd/qmq/ci
/E5fJ2D1bHt/JV4SJVtXDzNbgVzQBZ1Kdw3/foyyFnaMYfqlDTnuMLyV9ft8wkDX
giqVLvfQsstsPmmQ7YSuqSxF7pnoIeeBx4tWQA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org