Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
File:                     3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa (raw, json)
Hash identifier:          /K9MxD40HXaujC9xo+cAPcrwxgxLVxf81xBHcS6z/EI=
Subject key identifier:   0A:72:1F:04:50:75:34:A4:E0:47:7D:05:B9:D5:BD:C1:FC:37:BC:9A
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       57EA71E713D227A6550E43FA950FD6537B0762DB
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
Signing time:             Tue 05 Mar 2024 18:22:03 +0000
ROA not before:           Tue 05 Mar 2024 18:17:03 +0000
ROA not after:            Tue 04 Mar 2025 18:22:03 +0000
asID:                     272885
IP address blocks:        200.123.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ea:71:e7:13:d2:27:a6:55:0e:43:fa:95:0f:d6:53:7b:07:62:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:03 2024 GMT
            Not After : Mar  4 18:22:03 2025 GMT
        Subject: CN=0A721F04507534A4E0477D05B9D5BDC1FC37BC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:4c:7e:c5:24:b0:41:42:44:08:1b:74:70:
                    b2:f5:09:f2:81:bf:c7:c2:83:5c:e2:c2:5b:82:90:
                    33:0b:b2:d0:93:6c:06:0e:0c:fb:db:38:f6:b7:81:
                    17:f0:bd:95:a7:33:a0:a8:f4:10:38:5e:b5:e3:41:
                    ac:0b:9f:93:94:35:d4:62:55:24:8d:d4:b5:61:e3:
                    35:f2:4a:e9:be:b6:4e:00:7a:50:e8:71:ec:5c:a5:
                    32:54:67:57:56:13:3d:5e:86:db:e7:8b:d0:0d:b3:
                    68:0b:7b:62:89:c3:a1:90:b0:09:d1:9e:25:9b:66:
                    80:3a:3d:bc:bd:43:75:97:aa:74:f0:0a:90:d0:42:
                    a9:16:c3:ed:5f:c0:e0:ce:7a:92:e3:e0:e8:71:37:
                    c7:0e:99:4f:cb:68:c0:a6:da:c1:cd:2a:c7:05:f1:
                    85:5b:e2:34:e6:3a:83:15:8c:32:15:9e:a6:e7:df:
                    4f:90:63:00:2c:0a:f9:bd:20:f4:39:bb:22:e7:aa:
                    e6:67:b8:55:60:7a:4f:60:e7:9f:05:67:74:0f:d5:
                    75:d2:ca:e7:5f:da:07:26:8e:06:87:63:dc:c8:59:
                    cc:e6:d6:d5:dc:25:d6:76:8f:80:0b:f0:04:85:6c:
                    3e:50:4f:d5:f3:84:fb:06:c0:57:cd:dd:1e:27:46:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:1F:04:50:75:34:A4:E0:47:7D:05:B9:D5:BD:C1:FC:37:BC:9A
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:1d:7c:19:af:30:11:7d:75:3c:1f:95:75:9a:fc:30:f9:
         07:6d:a3:ae:5d:24:62:0f:e0:2f:e6:87:17:7c:c9:b3:7f:1d:
         6e:f0:89:99:bd:18:50:b5:c6:31:6b:11:c5:92:6b:e5:66:62:
         33:1f:b0:aa:d8:36:42:38:bc:8c:92:cf:f9:b6:eb:f0:23:1f:
         2c:28:73:13:04:7f:35:e1:12:d5:e1:57:7b:8f:91:d4:b6:db:
         e3:9c:60:53:98:92:bd:ff:f5:3f:82:6e:b3:9b:c5:d1:37:42:
         7e:72:2d:2d:cf:ab:89:54:24:c1:15:4d:fb:5a:8c:d1:24:89:
         19:6c:7c:2f:bd:7b:5b:f1:e7:93:29:73:e1:2d:19:3d:d5:b3:
         16:b4:63:01:e0:93:87:b4:42:8a:0b:f4:d2:17:2c:64:60:95:
         ee:06:5d:de:ed:04:f5:7e:c2:be:0d:35:ea:de:86:a6:66:c2:
         3c:14:2c:28:2e:e8:1b:e0:1b:b4:b1:f8:c0:8c:32:10:57:e1:
         60:1e:a8:a9:ad:cc:84:0c:51:b1:84:fc:b0:a7:13:ce:9e:b4:
         9a:da:00:f5:72:bc:35:d2:36:96:ea:37:74:b9:ca:01:29:af:
         6b:1d:b3:42:8d:cf:68:50:e0:17:41:c1:e1:f8:92:d5:c3:06:
         0d:74:f2:c3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUV+px5xPSJ6ZVDkP6lQ/WU3sHYtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNDAzMDUxODE3MDNaFw0yNTAzMDQxODIyMDNaMDMxMTAvBgNV
BAMTKDBBNzIxRjA0NTA3NTM0QTRFMDQ3N0QwNUI5RDVCREMxRkMzN0JDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDav0x+xSSwQUJECBt0cLL1CfKB
v8fCg1ziwluCkDMLstCTbAYODPvbOPa3gRfwvZWnM6Co9BA4XrXjQawLn5OUNdRi
VSSN1LVh4zXySum+tk4AelDocexcpTJUZ1dWEz1ehtvni9ANs2gLe2KJw6GQsAnR
niWbZoA6Pby9Q3WXqnTwCpDQQqkWw+1fwODOepLj4OhxN8cOmU/LaMCm2sHNKscF
8YVb4jTmOoMVjDIVnqbn30+QYwAsCvm9IPQ5uyLnquZnuFVgek9g558FZ3QP1XXS
yudf2gcmjgaHY9zIWczm1tXcJdZ2j4AL8ASFbD5QT9XzhPsGwFfN3R4nRpAJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCnIfBFB1NKTgR30FudW9wfw3vJowHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzMzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHsi
MA0GCSqGSIb3DQEBCwUAA4IBAQAN0R18Ga8wEX11PB+VdZr8MPkHbaOuXSRiD+Av
5ocXfMmzfx1u8ImZvRhQtcYxaxHFkmvlZmIzH7Cq2DZCOLyMks/5tuvwIx8sKHMT
BH814RLV4Vd7j5HUttvjnGBTmJK9//U/gm6zm8XRN0J+ci0tz6uJVCTBFU37WozR
JIkZbHwvvXtb8eeTKXPhLRk91bMWtGMB4JOHtEKKC/TSFyxkYJXuBl3e7QT1fsK+
DTXq3oamZsI8FCwoLugb4Bu0sfjAjDIQV+FgHqiprcyEDFGxhPywpxPOnrSa2gD1
crw10jaW6jd0ucoBKa9rHbNCjc9oUOAXQcHh+JLVwwYNdPLD
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org