Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa
File:                     3230372e3234382e39322e302f32322d3232203d3e203238313030.roa (raw, json)
Hash identifier:          9AIf3BTKEvJEEazvVcn/23uLABh8p8Osj2O7rPejuNE=
Subject key identifier:   20:6D:79:E5:BD:6D:C4:CB:A3:86:85:F3:CB:76:8A:AD:F7:05:B3:C8
Certificate issuer:       /CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
Certificate serial:       6BEE1F62300875358E1113629AA22EDC2DB3CF6B
Authority key identifier: 1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 18:05:02 +0000
ROA not before:           Tue 05 Mar 2024 18:00:02 +0000
ROA not after:            Tue 04 Mar 2025 18:05:02 +0000
asID:                     28100
IP address blocks:        207.248.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ee:1f:62:30:08:75:35:8e:11:13:62:9a:a2:2e:dc:2d:b3:cf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0CF1C10818178B49B44D9A26FFBAD3C1F75271
        Validity
            Not Before: Mar  5 18:00:02 2024 GMT
            Not After : Mar  4 18:05:02 2025 GMT
        Subject: CN=206D79E5BD6DC4CBA38685F3CB768AADF705B3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:b4:7c:d7:b8:fa:05:26:20:f3:79:d8:67:
                    a0:ba:ce:8c:71:e4:5d:e9:80:81:e0:d1:b3:07:dd:
                    cc:b9:31:19:e9:0a:f2:20:da:5a:37:67:74:fa:4f:
                    f1:49:3d:4f:74:5f:45:1f:bc:24:9c:d7:a4:ef:3a:
                    1e:a2:4e:0b:74:94:39:b3:c9:ba:79:36:62:27:81:
                    3f:f2:32:f4:b5:fb:cd:93:cf:21:ef:c2:11:d9:35:
                    d8:c4:a9:db:fe:4a:b0:a9:83:38:d8:2f:2f:a5:29:
                    de:c0:d5:1e:30:a3:ef:e2:bf:59:3e:ba:83:59:c6:
                    2b:ae:bd:96:fc:54:d1:08:1c:c9:95:c0:d5:4a:4d:
                    63:5f:2f:a9:a5:a8:54:0c:bf:45:92:94:c6:07:d9:
                    88:84:1d:b5:5f:38:73:68:f2:89:9f:32:c7:81:7d:
                    aa:de:ed:18:09:45:b1:e2:be:d1:6d:26:0c:7a:7f:
                    03:e8:7c:84:3c:4a:17:24:54:52:73:17:cd:96:d7:
                    9d:2c:e9:02:e9:de:9a:f4:3d:a7:75:d3:4f:73:73:
                    e1:82:d9:1c:7e:bb:a0:02:bc:da:41:84:d6:56:42:
                    ab:a6:b9:1f:d2:83:84:2b:1d:7b:45:c3:c9:99:6e:
                    69:bf:71:02:df:7c:b6:31:10:5d:e6:18:b7:29:37:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6D:79:E5:BD:6D:C4:CB:A3:86:85:F3:CB:76:8A:AD:F7:05:B3:C8
            X509v3 Authority Key Identifier:
                keyid:1C:0C:F1:C1:08:18:17:8B:49:B4:4D:9A:26:FF:BA:D3:C1:F7:52:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C0CF1C10818178B49B44D9A26FFBAD3C1F75271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C75CD5B006D3EF5130746AA5BA9ACF64EE3993DD37F779FF9A27684B7100964/0/3230372e3234382e39322e302f32322d3232203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:93:fb:7f:da:f6:ce:ad:d2:51:9d:68:bb:7a:27:c0:7c:
         e0:07:80:c3:78:09:68:8e:c2:c7:71:60:91:8f:5b:8b:7f:04:
         c5:39:c0:80:ff:96:a6:32:5e:32:5d:cd:50:34:0f:c0:a1:20:
         71:42:be:99:b6:bd:ce:a9:9d:f1:7f:41:08:48:f1:55:ef:97:
         d1:50:f3:f6:c2:79:16:2b:db:a0:5b:15:40:75:e0:48:30:e2:
         2b:e2:2d:88:20:99:5a:c0:fd:00:c9:1e:99:64:1d:ab:ee:04:
         55:27:2e:5f:85:fb:be:c7:8c:d1:da:38:e3:b0:9d:5a:f4:7a:
         9d:3f:ea:03:ed:48:dd:2d:6d:47:61:fe:52:a8:4b:df:65:56:
         e3:45:0a:72:83:de:68:b6:02:ef:4d:1e:b8:52:d9:93:36:6f:
         f5:58:25:f2:91:0d:3a:71:69:9f:a2:3b:fa:ae:c3:ee:bf:56:
         3e:f8:60:cd:a3:90:f9:7b:6c:6e:c7:6e:33:55:80:6b:cf:f7:
         cb:c8:e6:d0:1e:df:47:2c:85:4b:6d:0c:ad:0c:b5:04:03:8e:
         0a:4c:87:25:7a:8e:4c:eb:2e:53:9c:79:d5:2d:2d:5c:87:16:
         ac:ee:e4:b6:03:08:8e:e7:a0:19:8f:39:d5:93:08:f2:07:73:
         4f:38:09:d1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUa+4fYjAIdTWOERNimqIu3C2zz2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMwQ0YxQzEwODE4MTc4QjQ5QjQ0RDlBMjZGRkJBRDND
MUY3NTI3MTAeFw0yNDAzMDUxODAwMDJaFw0yNTAzMDQxODA1MDJaMDMxMTAvBgNV
BAMTKDIwNkQ3OUU1QkQ2REM0Q0JBMzg2ODVGM0NCNzY4QUFERjcwNUIzQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LrR817j6BSYg83nYZ6C6zoxx
5F3pgIHg0bMH3cy5MRnpCvIg2lo3Z3T6T/FJPU90X0UfvCSc16TvOh6iTgt0lDmz
ybp5NmIngT/yMvS1+82TzyHvwhHZNdjEqdv+SrCpgzjYLy+lKd7A1R4wo+/iv1k+
uoNZxiuuvZb8VNEIHMmVwNVKTWNfL6mlqFQMv0WSlMYH2YiEHbVfOHNo8omfMseB
fare7RgJRbHivtFtJgx6fwPofIQ8ShckVFJzF82W150s6QLp3pr0Pad1009zc+GC
2Rx+u6ACvNpBhNZWQqumuR/Sg4QrHXtFw8mZbmm/cQLffLYxEF3mGLcpN8YJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIG155b1txMujhoXzy3aKrfcFs8gwHwYDVR0j
BBgwFoAUHAzxwQgYF4tJtE2aJv+608H3UnEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzc1Q0Q1QjAwNkQzRUY1MTMwNzQ2QUE1QkE5QUNGNjRF
RTM5OTNERDM3Rjc3OUZGOUEyNzY4NEI3MTAwOTY0LzAvMUMwQ0YxQzEwODE4MTc4
QjQ5QjQ0RDlBMjZGRkJBRDNDMUY3NTI3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQzBDRjFDMTA4MTgxNzhCNDlC
NDREOUEyNkZGQkFEM0MxRjc1MjcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM3NUNENUIwMDZEM0VGNTEzMDc0NkFBNUJBOUFDRjY0RUUzOTkzREQz
N0Y3NzlGRjlBMjc2ODRCNzEwMDk2NC8wLzMyMzAzNzJlMzIzNDM4MmUzOTMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs/4XDAN
BgkqhkiG9w0BAQsFAAOCAQEAC0+T+3/a9s6t0lGdaLt6J8B84AeAw3gJaI7Cx3Fg
kY9bi38ExTnAgP+WpjJeMl3NUDQPwKEgcUK+mba9zqmd8X9BCEjxVe+X0VDz9sJ5
FivboFsVQHXgSDDiK+ItiCCZWsD9AMkemWQdq+4EVScuX4X7vseM0do447CdWvR6
nT/qA+1I3S1tR2H+UqhL32VW40UKcoPeaLYC700euFLZkzZv9Vgl8pENOnFpn6I7
+q7D7r9WPvhgzaOQ+XtsbsduM1WAa8/3y8jm0B7fRyyFS20MrQy1BAOOCkyHJXqO
TOsuU5x51S0tXIcWrO7ktgMIjuegGY851ZMI8gdzTzgJ0Q==
-----END CERTIFICATE-----
Generated at Sun May 5 16:43:21 2024 by rpki-client on console-ams.rpki-client.org