Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa
File:                     3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa (raw, json)
Hash identifier:          5dtpS72vT3eL4AX8E13lmRfE6376JMuptZ8zjwbdlCA=
Subject key identifier:   85:9C:C9:18:F8:1D:FF:AB:88:EB:B0:77:EA:70:54:18:AD:98:4B:92
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1BF5C2A5967C2263A0C256B233963F71980F88E3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     13682
IP address blocks:        200.119.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f5:c2:a5:96:7c:22:63:a0:c2:56:b2:33:96:3f:71:98:0f:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=859CC918F81DFFAB88EBB077EA705418AD984B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:45:b8:86:c2:76:5a:5b:3b:d8:ad:58:f6:
                    4b:f2:f3:86:ee:cc:ce:2a:6f:c3:a8:d6:cb:0a:2e:
                    25:e4:fe:f2:99:ca:fb:21:f1:aa:8c:78:34:b3:10:
                    bf:57:49:ce:f9:f9:6f:ee:f7:76:1b:ce:04:19:46:
                    6c:32:ee:05:5c:92:d2:33:3e:1c:3f:a3:83:59:96:
                    ba:d5:31:0c:81:f2:19:5f:a2:eb:7c:8f:6e:eb:ca:
                    46:88:bb:24:5b:f1:44:9d:e3:c9:ee:cb:2d:20:cc:
                    99:bc:ec:63:1b:68:a5:a9:b3:0b:28:7d:e0:a0:7a:
                    ee:e8:8b:cd:a8:cf:08:be:f1:ae:a5:6f:68:dc:1b:
                    ba:81:24:85:2e:c6:21:05:f9:48:0d:8d:5d:f9:63:
                    11:e6:39:b6:f0:16:53:44:ce:df:39:05:e2:64:02:
                    34:49:ea:97:03:f7:35:ff:33:95:68:4c:55:34:00:
                    36:64:8e:8b:40:71:8f:37:20:98:c6:fe:5d:bd:a4:
                    6f:99:73:ad:2b:87:f4:0c:15:85:c9:65:b3:fd:07:
                    ce:ce:36:e1:8f:45:a9:dc:13:33:ea:1f:43:9f:68:
                    ec:71:32:48:f9:e2:79:44:f3:ff:ce:07:c7:87:79:
                    e9:0e:d3:4d:2e:89:47:27:22:f3:64:fb:0c:c9:8d:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9C:C9:18:F8:1D:FF:AB:88:EB:B0:77:EA:70:54:18:AD:98:4B:92
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:fe:20:77:ae:d6:f9:58:28:25:d8:e7:58:66:a2:57:bd:
         06:36:ee:1a:2d:02:7c:4e:46:70:8f:f7:36:47:3a:06:5b:fa:
         4f:89:65:db:14:1c:38:04:66:94:a4:63:6c:fe:39:f5:c6:4f:
         86:d7:50:6d:23:a6:ac:a7:dc:1a:20:81:28:34:78:e0:c5:84:
         53:39:e2:1c:ae:d3:80:72:bd:2a:c3:42:3b:80:78:01:fe:7f:
         ed:37:f6:1b:c7:2b:07:33:3f:e4:a0:d4:85:23:e1:10:a9:48:
         9b:6d:99:79:a3:2d:32:ff:f7:dc:aa:67:8c:f2:6f:10:a1:23:
         0b:28:d7:4a:31:58:34:ad:2e:10:72:29:bd:84:16:bf:de:77:
         e6:21:4f:93:be:b4:6f:eb:54:f5:c3:4a:63:10:ae:c9:62:8b:
         57:d7:7d:af:ec:02:d8:6e:09:b3:8e:e5:42:9b:e7:07:ca:f6:
         36:ea:f8:32:93:4e:b0:76:5c:0d:31:d0:7f:5b:ee:bb:4b:71:
         b2:63:01:40:b0:8f:2b:b5:68:d5:ef:ff:d9:8a:6d:3b:3f:c3:
         c3:8f:f9:62:2e:73:4a:e1:18:61:79:32:5c:e1:b9:a2:6c:96:
         a3:69:27:eb:75:7c:e0:cc:77:77:46:14:11:4c:52:19:9e:bb:
         9e:9f:1b:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUG/XCpZZ8ImOgwlayM5Y/cZgPiOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MzlaFw0yNTAzMDQxNzQyMzlaMDMxMTAvBgNV
BAMTKDg1OUNDOTE4RjgxREZGQUI4OEVCQjA3N0VBNzA1NDE4QUQ5ODRCOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gkW4hsJ2Wls72K1Y9kvy84bu
zM4qb8Oo1ssKLiXk/vKZyvsh8aqMeDSzEL9XSc75+W/u93YbzgQZRmwy7gVcktIz
Phw/o4NZlrrVMQyB8hlfout8j27rykaIuyRb8USd48nuyy0gzJm87GMbaKWpswso
feCgeu7oi82ozwi+8a6lb2jcG7qBJIUuxiEF+UgNjV35YxHmObbwFlNEzt85BeJk
AjRJ6pcD9zX/M5VoTFU0ADZkjotAcY83IJjG/l29pG+Zc60rh/QMFYXJZbP9B87O
NuGPRancEzPqH0OfaOxxMkj54nlE8//OB8eHeekO000uiUcnIvNk+wzJjaGXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhZzJGPgd/6uI67B36nBUGK2YS5IwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHeW
MA0GCSqGSIb3DQEBCwUAA4IBAQAM0v4gd67W+VgoJdjnWGaiV70GNu4aLQJ8TkZw
j/c2RzoGW/pPiWXbFBw4BGaUpGNs/jn1xk+G11BtI6asp9waIIEoNHjgxYRTOeIc
rtOAcr0qw0I7gHgB/n/tN/YbxysHMz/koNSFI+EQqUibbZl5oy0y//fcqmeM8m8Q
oSMLKNdKMVg0rS4Qcim9hBa/3nfmIU+TvrRv61T1w0pjEK7JYotX132v7ALYbgmz
juVCm+cHyvY26vgyk06wdlwNMdB/W+67S3GyYwFAsI8rtWjV7//Zim07P8PDj/li
LnNK4RhheTJc4bmibJajaSfrdXzgzHd3RhQRTFIZnruenxvb
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org