Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa
File:                     3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa (raw, json)
Hash identifier:          u052k/DmB0Ct62oF7x6r3ZkdFGXkCSJVo0EwMaBy2ZU=
Subject key identifier:   9B:4F:1A:CB:EC:DA:22:9F:08:E1:F8:D8:8C:93:58:47:AE:5B:B6:78
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2FF0A2B00896CF3D826F7CA82B0B487499A5D7FE
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     13682
IP address blocks:        200.119.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f0:a2:b0:08:96:cf:3d:82:6f:7c:a8:2b:0b:48:74:99:a5:d7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=9B4F1ACBECDA229F08E1F8D88C935847AE5BB678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:f3:a8:f9:c2:57:18:cc:ef:d7:aa:d8:ac:
                    97:b1:c5:30:60:8b:42:26:e8:47:0c:5d:8c:2c:79:
                    57:de:0f:63:0d:0e:f7:a4:58:49:0b:f1:4e:4a:1e:
                    63:40:ed:df:a1:8e:e6:e2:4b:a2:ac:57:d1:89:19:
                    f6:8f:5d:3f:4e:8c:da:28:de:71:fc:eb:bb:b3:cf:
                    f3:be:aa:ee:7f:34:c4:00:1a:57:aa:e7:72:76:5a:
                    69:f7:c0:52:5c:2f:ae:ea:1a:af:0a:6e:c1:e4:52:
                    bb:79:d4:c1:f5:86:3e:fb:0a:65:8a:28:74:74:9b:
                    0e:d0:0f:fb:be:21:5b:60:74:f0:54:97:81:cc:62:
                    5e:b0:51:90:f0:bc:40:81:0f:64:d2:35:16:18:37:
                    8c:45:69:87:93:df:40:af:64:6a:e7:e0:f0:e5:9b:
                    6c:fa:f1:22:2a:eb:fd:cc:78:fe:ef:33:a5:6e:b4:
                    41:b7:c2:79:cf:20:b2:19:22:44:44:ca:73:51:b5:
                    a6:28:ae:e3:3f:c1:75:a7:7e:b0:98:96:4a:ab:51:
                    f7:91:dd:6b:ec:91:f8:c6:1b:3f:fd:0b:65:a1:03:
                    be:7e:45:e7:4e:4b:a4:b6:81:1a:98:86:39:e9:31:
                    84:e6:44:c2:ae:0c:c4:ec:a6:ed:6b:18:c1:86:62:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:1A:CB:EC:DA:22:9F:08:E1:F8:D8:8C:93:58:47:AE:5B:B6:78
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:87:bb:3d:b4:c8:cb:03:42:8f:8c:94:af:0a:9b:4f:cb:df:
         18:cd:dc:90:15:f9:ae:66:83:46:b0:62:20:8c:cf:8b:93:19:
         33:47:4d:ab:79:4f:79:1a:b1:74:74:e2:1e:16:b6:7a:e2:f0:
         eb:6f:1f:42:1f:1b:29:49:10:a7:bf:57:6c:33:d2:86:57:f5:
         e6:6a:8c:52:f0:61:2b:0f:c1:c1:56:2a:e2:d7:d2:af:b4:49:
         da:3b:60:81:ad:34:4a:25:c0:dc:25:ed:8b:ba:42:57:bc:a3:
         a3:2b:05:e2:d9:3c:8d:96:74:2c:28:d6:60:aa:03:2d:64:c9:
         46:25:13:3a:2c:33:33:46:be:da:2b:2c:8e:50:03:1b:7e:94:
         e7:12:5b:e7:d7:0a:3b:39:86:76:ef:bd:70:46:2c:8b:a3:b1:
         2f:ad:a5:cb:4c:ad:f9:f7:05:32:16:7e:ee:4f:d9:3c:dd:39:
         cb:26:e1:53:c4:7f:8c:12:7b:07:d6:38:22:3e:59:29:6d:f9:
         bb:a1:ad:46:6f:d5:a8:87:d8:c1:38:50:f9:02:c7:a1:46:8e:
         f0:2f:4d:b4:01:0a:81:1c:e3:7d:4f:8c:4d:12:46:e4:38:d7:
         97:93:c0:b3:89:1f:c3:fd:58:b3:e3:9b:fd:89:a0:66:1b:0d:
         3b:2c:d2:b9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL/CisAiWzz2Cb3yoKwtIdJml1/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MzlaFw0yNTAzMDQxNzQyMzlaMDMxMTAvBgNV
BAMTKDlCNEYxQUNCRUNEQTIyOUYwOEUxRjhEODhDOTM1ODQ3QUU1QkI2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDi/Oo+cJXGMzv16rYrJexxTBg
i0Im6EcMXYwseVfeD2MNDvekWEkL8U5KHmNA7d+hjubiS6KsV9GJGfaPXT9OjNoo
3nH867uzz/O+qu5/NMQAGleq53J2Wmn3wFJcL67qGq8KbsHkUrt51MH1hj77CmWK
KHR0mw7QD/u+IVtgdPBUl4HMYl6wUZDwvECBD2TSNRYYN4xFaYeT30CvZGrn4PDl
m2z68SIq6/3MeP7vM6VutEG3wnnPILIZIkREynNRtaYoruM/wXWnfrCYlkqrUfeR
3WvskfjGGz/9C2WhA75+RedOS6S2gRqYhjnpMYTmRMKuDMTspu1rGMGGYsQDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUm08ay+zaIp8I4fjYjJNYR65btngwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM0Mzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHeU
MA0GCSqGSIb3DQEBCwUAA4IBAQBYh7s9tMjLA0KPjJSvCptPy98YzdyQFfmuZoNG
sGIgjM+LkxkzR02reU95GrF0dOIeFrZ64vDrbx9CHxspSRCnv1dsM9KGV/XmaoxS
8GErD8HBViri19KvtEnaO2CBrTRKJcDcJe2LukJXvKOjKwXi2TyNlnQsKNZgqgMt
ZMlGJRM6LDMzRr7aKyyOUAMbfpTnElvn1wo7OYZ2771wRiyLo7EvraXLTK359wUy
Fn7uT9k83TnLJuFTxH+MEnsH1jgiPlkpbfm7oa1Gb9Woh9jBOFD5AsehRo7wL020
AQqBHON9T4xNEkbkONeXk8CziR/D/Viz45v9iaBmGw07LNK5
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org