Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e20323632313732.roa
File:                     3230302e3131392e3136302e302f32302d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          qjkRq21YdAUZ8vsz1z7abylF/ZNvgOEUD2hOC1aJYQU=
Subject key identifier:   E7:9E:0E:2A:0A:FD:FD:F0:BF:67:50:DE:CE:90:75:A4:F4:4D:F8:FA
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2BC2C2C42B0D383EB3ED471EEC2BA583FF66B2F4
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e20323632313732.roa
Signing time:             Tue 05 Mar 2024 17:42:34 +0000
ROA not before:           Tue 05 Mar 2024 17:37:34 +0000
ROA not after:            Tue 04 Mar 2025 17:42:34 +0000
asID:                     262172
IP address blocks:        200.119.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c2:c2:c4:2b:0d:38:3e:b3:ed:47:1e:ec:2b:a5:83:ff:66:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:34 2024 GMT
            Not After : Mar  4 17:42:34 2025 GMT
        Subject: CN=E79E0E2A0AFDFDF0BF6750DECE9075A4F44DF8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:52:29:02:4c:3e:3a:4d:d4:d5:7a:31:95:
                    24:69:f7:1e:13:33:df:ba:f9:36:0c:5a:a4:49:f9:
                    9b:56:e1:02:a7:61:ef:05:02:92:a2:31:4f:6a:e3:
                    bd:f5:b0:ec:a3:30:83:21:90:b6:b0:de:36:26:07:
                    d1:b4:71:f9:c0:31:3d:23:fa:d5:50:bf:cd:ab:7e:
                    51:f8:18:42:88:31:ed:c8:06:84:95:e2:78:8d:ff:
                    f5:a0:68:17:41:0b:f8:22:32:b0:87:b9:c8:84:da:
                    1e:80:b5:da:1e:bd:99:0a:ad:55:54:9c:f5:f6:fd:
                    02:c6:cb:e5:7a:32:fd:1d:35:b3:25:7c:ac:8e:01:
                    54:42:e3:95:b3:dc:9b:89:a9:ed:90:90:97:98:31:
                    1a:72:8b:c0:67:ba:18:ab:67:57:11:64:dc:4a:5b:
                    e9:3d:5a:57:fe:62:b0:a5:47:28:c3:2a:47:c1:21:
                    12:c1:62:e8:45:8b:f0:c4:e1:be:d4:36:84:5a:66:
                    6b:cc:28:2b:c9:d4:34:96:e2:fe:14:3b:c4:68:e0:
                    15:cc:98:56:04:5a:7b:7d:01:1f:26:9a:d9:44:9b:
                    65:81:f1:ee:2e:27:6c:45:df:fb:cc:4c:af:ba:c0:
                    cc:f0:92:96:0f:5a:27:86:04:a0:2a:9e:27:7c:f3:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9E:0E:2A:0A:FD:FD:F0:BF:67:50:DE:CE:90:75:A4:F4:4D:F8:FA
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:31:ed:bd:31:9c:2c:d6:d1:7b:5b:f0:0b:45:86:d8:c0:
         67:43:a7:ca:35:18:56:5b:5c:28:99:a0:5b:0d:33:e2:56:55:
         e7:e9:3e:0e:51:ee:be:ea:11:ea:db:32:71:df:2d:9c:ca:55:
         27:d8:be:48:a0:45:b3:34:f2:17:e5:55:fe:f6:73:14:0d:c4:
         da:a0:16:ad:12:05:01:7a:8e:62:cf:3b:e8:e8:53:1d:78:21:
         d2:ec:37:e8:d9:42:b5:e1:e4:a9:07:45:2e:fc:48:08:14:22:
         5e:50:4f:ed:6c:44:16:96:c2:b8:f9:f5:8c:1d:43:90:41:cc:
         60:33:fb:b3:0f:ae:2c:ee:a0:72:68:74:c3:fd:f1:d7:36:b5:
         76:1c:97:3d:90:1a:82:99:52:29:ec:97:5c:c8:ff:a6:6d:08:
         bd:58:76:56:39:d1:73:8d:da:b3:54:91:6a:0b:a0:d4:27:d6:
         0b:a4:50:dd:ed:3c:b5:8d:38:f6:0e:9e:80:ed:f7:bf:f8:b5:
         27:71:ac:9f:06:5c:1b:9a:4f:eb:c6:9d:87:73:05:2a:03:33:
         a2:13:25:dc:4c:eb:58:8b:68:59:e2:52:f7:ac:c7:41:8b:65:
         35:cf:87:23:ab:b7:b0:15:11:c4:d2:b2:54:27:8a:e2:0b:8a:
         03:69:53:79
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUK8LCxCsNOD6z7Uce7Culg/9msvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MzRaFw0yNTAzMDQxNzQyMzRaMDMxMTAvBgNV
BAMTKEU3OUUwRTJBMEFGREZERjBCRjY3NTBERUNFOTA3NUE0RjQ0REY4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp1IpAkw+Ok3U1XoxlSRp9x4T
M9+6+TYMWqRJ+ZtW4QKnYe8FApKiMU9q4731sOyjMIMhkLaw3jYmB9G0cfnAMT0j
+tVQv82rflH4GEKIMe3IBoSV4niN//WgaBdBC/giMrCHuciE2h6AtdoevZkKrVVU
nPX2/QLGy+V6Mv0dNbMlfKyOAVRC45Wz3JuJqe2QkJeYMRpyi8BnuhirZ1cRZNxK
W+k9Wlf+YrClRyjDKkfBIRLBYuhFi/DE4b7UNoRaZmvMKCvJ1DSW4v4UO8Ro4BXM
mFYEWnt9AR8mmtlEm2WB8e4uJ2xF3/vMTK+6wMzwkpYPWieGBKAqnid887MrAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU554OKgr9/fC/Z1DezpB1pPRN+PowHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM3MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATI
d6AwDQYJKoZIhvcNAQELBQADggEBACmnMe29MZws1tF7W/ALRYbYwGdDp8o1GFZb
XCiZoFsNM+JWVefpPg5R7r7qEerbMnHfLZzKVSfYvkigRbM08hflVf72cxQNxNqg
Fq0SBQF6jmLPO+joUx14IdLsN+jZQrXh5KkHRS78SAgUIl5QT+1sRBaWwrj59Ywd
Q5BBzGAz+7MPrizuoHJodMP98dc2tXYclz2QGoKZUinsl1zI/6ZtCL1YdlY50XON
2rNUkWoLoNQn1gukUN3tPLWNOPYOnoDt97/4tSdxrJ8GXBuaT+vGnYdzBSoDM6IT
JdxM61iLaFniUvesx0GLZTXPhyOrt7AVEcTSslQniuILigNpU3k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org