Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31332e38332e302f32342d3234203d3e203532333234.roa
File:                     3230302e31332e38332e302f32342d3234203d3e203532333234.roa (raw, json)
Hash identifier:          H17A5mUpLrEstWAWJQ1SSoANmYIrL+QJRagM2wE5mCA=
Subject key identifier:   6F:8D:35:36:70:C9:FB:C5:D3:8B:D4:CA:0F:A5:A1:F1:F3:3A:7F:EB
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       0555069A89BECEDECA536830B906ED23FA953970
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31332e38332e302f32342d3234203d3e203532333234.roa
Signing time:             Tue 05 Mar 2024 18:15:55 +0000
ROA not before:           Tue 05 Mar 2024 18:10:55 +0000
ROA not after:            Tue 04 Mar 2025 18:15:55 +0000
asID:                     52324
IP address blocks:        200.13.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:55:06:9a:89:be:ce:de:ca:53:68:30:b9:06:ed:23:fa:95:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:55 2024 GMT
            Not After : Mar  4 18:15:55 2025 GMT
        Subject: CN=6F8D353670C9FBC5D38BD4CA0FA5A1F1F33A7FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:1c:1a:ff:51:12:04:64:21:03:ba:c3:69:
                    34:d9:99:bc:60:1f:66:8d:b5:79:37:27:3a:48:a2:
                    02:f5:a4:18:f9:a6:fe:4b:9e:34:28:d1:fc:36:6a:
                    ba:1f:65:d2:be:f8:bc:34:b4:53:a1:d3:6f:db:6b:
                    09:69:bb:5b:23:20:63:74:58:fa:8a:37:f8:0f:66:
                    fc:3a:ac:2b:9f:06:d7:a7:df:9e:e4:7d:5f:d1:1c:
                    ea:0c:3c:13:d6:c9:72:9b:5a:86:7c:a1:92:99:a9:
                    54:67:77:19:eb:c5:7a:33:d7:8c:13:93:67:a6:0f:
                    6f:91:11:79:42:17:28:8c:5c:a1:f1:9d:fc:b3:95:
                    78:5f:14:94:a4:e4:39:16:10:f7:01:2c:1b:d8:ad:
                    b3:d1:ef:4f:de:3c:5c:48:7c:7f:c6:71:00:cc:9f:
                    f0:58:1b:9b:6a:0f:bd:97:39:1a:45:22:83:f3:61:
                    48:7f:f2:4e:4e:a2:fd:52:e3:5a:06:0c:74:05:d5:
                    62:9f:9e:82:6a:42:ab:06:cd:a7:55:db:d4:5e:f4:
                    cf:21:da:5b:eb:5d:6a:e6:b0:44:29:fa:ac:d2:06:
                    8c:1f:09:aa:76:80:66:fc:c5:79:04:6f:9e:a2:73:
                    b0:6b:f4:90:60:c2:32:7f:b3:f6:9b:69:fc:ad:ad:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:35:36:70:C9:FB:C5:D3:8B:D4:CA:0F:A5:A1:F1:F3:3A:7F:EB
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31332e38332e302f32342d3234203d3e203532333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:04:45:d8:21:2b:58:1d:be:f6:b3:bd:a7:cf:83:61:17:
         c7:dc:57:40:0a:cc:1b:e4:20:55:b4:00:bb:0a:11:f9:98:9b:
         90:62:fe:29:31:5b:57:a1:5f:1b:12:24:34:de:05:b5:0a:54:
         4a:8c:d5:75:ab:fa:5a:5b:0d:9a:e9:91:94:d4:93:4f:76:09:
         93:8e:28:60:10:b4:29:96:f0:cb:68:64:3b:eb:d9:9b:04:ee:
         9e:f6:f0:c1:78:ee:f4:8f:ee:f3:3b:df:d3:f1:61:db:b9:3f:
         76:23:18:8c:e3:8d:fa:b6:b3:f4:8e:e2:a0:fc:2d:97:41:3c:
         23:8b:bc:db:3d:e4:29:9e:51:cb:f9:06:58:2c:01:26:58:2e:
         5b:64:3c:c3:6b:6d:03:93:9d:ec:51:df:f0:51:22:0d:ec:2f:
         0a:f0:cb:37:c3:89:23:e0:99:81:ab:69:2b:4d:f4:7e:6c:26:
         c8:70:af:5d:7b:32:14:2a:6e:16:23:58:9f:e6:16:c2:98:87:
         0b:eb:df:96:65:17:8a:4e:6a:ca:70:a0:57:ed:88:66:44:c4:
         97:d8:10:18:f5:22:8c:45:ad:d3:75:7f:c1:7b:e9:5d:40:dc:
         31:ea:9c:cf:58:db:5d:c6:5b:bf:4a:fe:47:b1:38:ec:26:30:
         04:90:74:9d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBVUGmom+zt7KU2gwuQbtI/qVOXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNDAzMDUxODEwNTVaFw0yNTAzMDQxODE1NTVaMDMxMTAvBgNV
BAMTKDZGOEQzNTM2NzBDOUZCQzVEMzhCRDRDQTBGQTVBMUYxRjMzQTdGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwBwa/1ESBGQhA7rDaTTZmbxg
H2aNtXk3JzpIogL1pBj5pv5LnjQo0fw2arofZdK++Lw0tFOh02/bawlpu1sjIGN0
WPqKN/gPZvw6rCufBten357kfV/RHOoMPBPWyXKbWoZ8oZKZqVRndxnrxXoz14wT
k2emD2+REXlCFyiMXKHxnfyzlXhfFJSk5DkWEPcBLBvYrbPR70/ePFxIfH/GcQDM
n/BYG5tqD72XORpFIoPzYUh/8k5Oov1S41oGDHQF1WKfnoJqQqsGzadV29Re9M8h
2lvrXWrmsEQp+qzSBowfCap2gGb8xXkEb56ic7Br9JBgwjJ/s/abafytrQeTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUb401NnDJ+8XTi9TKD6Wh8fM6f+swHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMDJlMzEzMzJlMzgzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDVMwDQYJ
KoZIhvcNAQELBQADggEBACP5BEXYIStYHb72s72nz4NhF8fcV0AKzBvkIFW0ALsK
EfmYm5Bi/ikxW1ehXxsSJDTeBbUKVEqM1XWr+lpbDZrpkZTUk092CZOOKGAQtCmW
8MtoZDvr2ZsE7p728MF47vSP7vM739PxYdu5P3YjGIzjjfq2s/SO4qD8LZdBPCOL
vNs95CmeUcv5BlgsASZYLltkPMNrbQOTnexR3/BRIg3sLwrwyzfDiSPgmYGraStN
9H5sJshwr117MhQqbhYjWJ/mFsKYhwvr35ZlF4pOaspwoFftiGZExJfYEBj1IoxF
rdN1f8F76V1A3DHqnM9Y213GW79K/kexOOwmMASQdJ0=
-----END CERTIFICATE-----
Generated at Mon Apr 29 17:46:53 2024 by rpki-client on console-fra.rpki-client.org