Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa
File:                     3230302e39312e3132382e302f31382d3234203d3e20323032.roa (raw, json)
Hash identifier:          fx0RdSBA1CwjACGTslmntZ7IDzFMH7M4pEetlXfW9qY=
Subject key identifier:   C0:C2:4E:F7:3B:53:60:9F:24:32:C6:53:69:FE:04:73:57:52:D9:DC
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       018B79015C212CE41982EA50B90899EF0C489186
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:47 +0000
ROA not before:           Tue 05 Mar 2024 17:57:47 +0000
ROA not after:            Tue 04 Mar 2025 18:02:47 +0000
asID:                     202
IP address blocks:        200.91.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:79:01:5c:21:2c:e4:19:82:ea:50:b9:08:99:ef:0c:48:91:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:47 2024 GMT
            Not After : Mar  4 18:02:47 2025 GMT
        Subject: CN=C0C24EF73B53609F2432C65369FE04735752D9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:49:6c:04:91:2a:37:5b:a8:77:78:18:26:
                    c5:15:28:d2:16:c4:2c:2b:b7:1b:39:80:18:45:80:
                    0d:b2:29:4d:10:61:0b:b5:f2:76:25:7a:c2:df:57:
                    60:07:df:de:35:0e:a9:c6:8e:bb:14:73:1b:0c:58:
                    74:1c:3f:66:27:0b:19:7a:1c:02:8d:be:4b:02:27:
                    28:52:88:66:23:91:d0:0b:76:e5:45:a7:28:ab:f4:
                    9d:2b:4b:48:89:49:d0:8f:c2:c9:f1:01:58:8d:23:
                    f7:97:07:60:2b:c2:bf:4f:e1:04:b7:10:38:3a:f9:
                    e0:b9:12:72:ab:dd:58:40:62:dc:08:bc:01:98:52:
                    f5:78:e1:f6:0c:43:24:2e:26:80:a1:24:c8:41:aa:
                    14:02:ef:48:38:7f:fc:e1:22:23:f0:7f:2a:fa:35:
                    89:69:cb:b3:30:54:5a:0b:2a:2f:21:12:4d:97:77:
                    75:50:b8:d0:fa:04:96:aa:89:b4:ca:1d:92:b4:ce:
                    da:90:92:c9:f2:12:bd:17:0f:cc:fd:81:29:8a:f1:
                    1f:0d:3d:68:1f:34:2b:4e:86:6c:c4:47:a3:e1:18:
                    ec:c2:91:bb:5e:ab:9d:d7:68:64:cc:b4:0b:4f:59:
                    48:c2:8a:ef:2f:74:65:b8:66:2d:d7:1c:33:48:03:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C2:4E:F7:3B:53:60:9F:24:32:C6:53:69:FE:04:73:57:52:D9:DC
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e3132382e302f31382d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b6:a5:ac:94:09:27:8a:fa:90:e1:7f:40:96:e9:a0:43:39:05:
         68:fd:2d:d6:a8:b9:f9:20:0a:97:09:3c:61:da:c5:4d:7b:d3:
         a9:39:f2:82:14:bd:36:e6:67:c3:95:97:53:a2:8c:43:cf:98:
         93:36:bb:05:d3:d2:86:45:cf:6f:5e:cd:16:97:9f:90:5f:6c:
         94:e1:0e:43:ca:54:9a:6d:ce:40:e4:a4:96:fc:7f:f1:27:81:
         23:b0:69:17:0b:be:f1:8b:67:13:59:d0:2d:47:e0:2d:10:a4:
         7a:4f:55:77:b8:2a:7b:e9:07:f4:9b:b8:f1:ba:20:65:a3:6f:
         e4:f7:60:53:9b:ea:82:b6:6e:a6:ae:59:49:8a:9b:6e:85:f9:
         88:4b:1c:b9:14:6b:4f:28:86:40:bc:59:df:28:5e:eb:01:8d:
         13:aa:b0:85:58:b2:70:49:0c:76:69:c6:e1:bc:58:f3:01:6e:
         aa:70:91:8c:4e:a6:b4:8a:5a:65:b3:04:42:26:83:d5:a6:c3:
         3c:58:dc:89:f1:7c:b9:5d:b8:d1:c9:0d:56:bc:aa:59:13:b1:
         dd:15:6b:5b:d6:a7:a6:7e:73:9a:92:1d:17:b2:59:74:df:20:
         4e:5e:2d:b9:f8:59:2a:1c:df:f6:5d:a9:5a:2f:31:e0:15:7c:
         21:8d:3c:71
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUAYt5AVwhLOQZgupQuQiZ7wxIkYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNDAzMDUxNzU3NDdaFw0yNTAzMDQxODAyNDdaMDMxMTAvBgNV
BAMTKEMwQzI0RUY3M0I1MzYwOUYyNDMyQzY1MzY5RkUwNDczNTc1MkQ5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBklsBJEqN1uod3gYJsUVKNIW
xCwrtxs5gBhFgA2yKU0QYQu18nYlesLfV2AH3941DqnGjrsUcxsMWHQcP2YnCxl6
HAKNvksCJyhSiGYjkdALduVFpyir9J0rS0iJSdCPwsnxAViNI/eXB2Arwr9P4QS3
EDg6+eC5EnKr3VhAYtwIvAGYUvV44fYMQyQuJoChJMhBqhQC70g4f/zhIiPwfyr6
NYlpy7MwVFoLKi8hEk2Xd3VQuND6BJaqibTKHZK0ztqQksnyEr0XD8z9gSmK8R8N
PWgfNCtOhmzER6PhGOzCkbteq53XaGTMtAtPWUjCiu8vdGW4Zi3XHDNIA2FhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUwMJO9ztTYJ8kMsZTaf4Ec1dS2dwwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMDJlMzkzMTJlMzEzMjM4MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyFuAMA0GCSqG
SIb3DQEBCwUAA4IBAQC2payUCSeK+pDhf0CW6aBDOQVo/S3WqLn5IAqXCTxh2sVN
e9OpOfKCFL025mfDlZdTooxDz5iTNrsF09KGRc9vXs0Wl5+QX2yU4Q5DylSabc5A
5KSW/H/xJ4EjsGkXC77xi2cTWdAtR+AtEKR6T1V3uCp76Qf0m7jxuiBlo2/k92BT
m+qCtm6mrllJiptuhfmISxy5FGtPKIZAvFnfKF7rAY0TqrCFWLJwSQx2acbhvFjz
AW6qcJGMTqa0ilplswRCJoPVpsM8WNyJ8Xy5XbjRyQ1WvKpZE7HdFWtb1qemfnOa
kh0Xsll03yBOXi25+FkqHN/2XalaLzHgFXwhjTxx
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org