Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
File:                     3230302e302e32382e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          VKBaXDv8iKzUY1x0A+YDPX/p5pWXnLRX65Y3TCSuLmU=
Subject key identifier:   99:EE:DE:C1:6E:FA:E7:E4:35:27:04:D5:99:91:25:A3:64:02:DA:4E
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       1A5B5DD8B58D21F342D2BA94048DC7C0F158A9F8
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:20:35 +0000
ROA not before:           Tue 05 Mar 2024 18:15:35 +0000
ROA not after:            Tue 04 Mar 2025 18:20:35 +0000
asID:                     61468
IP address blocks:        200.0.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5b:5d:d8:b5:8d:21:f3:42:d2:ba:94:04:8d:c7:c0:f1:58:a9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:35 2024 GMT
            Not After : Mar  4 18:20:35 2025 GMT
        Subject: CN=99EEDEC16EFAE7E4352704D5999125A36402DA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:75:15:e7:a7:d3:77:fe:8f:6e:5a:d5:c7:
                    a4:02:32:4f:1b:7c:5c:65:c4:89:aa:d7:4c:e5:a2:
                    7f:72:46:f3:58:ff:72:5d:40:83:ee:77:0c:29:d7:
                    4a:81:35:10:f5:4f:86:31:b1:57:59:9d:19:76:24:
                    4a:79:cc:32:68:58:9c:7e:1f:6b:ab:5d:db:96:a1:
                    cb:50:e3:0c:94:30:89:f4:3f:4b:18:d3:61:78:29:
                    87:28:ae:60:a6:9f:d1:18:20:99:bc:f9:ac:aa:3e:
                    20:19:93:8a:67:33:e6:cc:04:4c:fa:f4:60:26:65:
                    3e:96:ed:b1:ce:d9:e9:a0:b0:e0:5c:8c:52:c1:38:
                    97:bf:7c:ae:6a:ea:6e:1b:85:9d:42:ce:72:16:55:
                    e8:66:73:fa:dc:0d:9f:6f:b6:20:b0:e1:00:8f:9f:
                    d2:5e:78:13:ac:31:71:7e:12:92:4d:a3:72:07:8a:
                    b0:e7:61:66:cb:ee:28:73:8a:89:57:75:1a:bd:ba:
                    e6:e9:e2:ba:81:3e:e5:ec:0c:0e:6b:66:62:80:4b:
                    8d:b4:bd:a4:ab:49:49:de:da:d2:4f:79:4d:35:fd:
                    83:cf:72:8b:1a:15:69:b9:9f:5b:a0:e6:2f:86:24:
                    ab:ef:3e:56:0d:27:3c:11:89:3a:7c:51:0b:15:3b:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:DE:C1:6E:FA:E7:E4:35:27:04:D5:99:91:25:A3:64:02:DA:4E
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:02:00:bf:a4:40:e9:9a:c8:32:20:c7:40:c2:bc:24:15:0a:
         f2:89:0c:e7:1c:42:3f:19:6b:e8:03:c4:85:9b:6c:6f:45:6d:
         32:19:46:32:70:b3:e1:dc:f1:71:d4:91:a6:e4:f5:32:55:77:
         00:61:82:0e:e6:37:23:83:d7:5f:e9:19:76:80:9c:10:4a:b1:
         c6:dd:26:03:58:fd:7c:e9:40:e5:c5:c3:b6:5f:83:b2:c1:4e:
         25:02:4e:3d:b0:aa:00:a2:81:6c:1e:c5:26:ca:de:0f:7f:bd:
         1b:6e:29:21:36:0e:d5:1d:98:06:4f:be:4a:e6:3d:15:3e:1b:
         be:e2:f1:f5:f5:2c:2b:3c:4a:57:b0:7b:4e:8c:8c:9e:35:d1:
         bb:12:f1:d6:4c:df:ce:1a:3e:5b:2f:f2:35:91:5d:e6:00:48:
         02:87:99:22:60:f9:8b:0e:50:f4:9c:5b:00:21:82:6a:08:e8:
         89:97:0d:68:6c:70:05:41:ed:6d:f2:61:fb:42:c4:4b:17:7c:
         55:cb:5e:44:58:f1:12:a8:e8:b9:89:b8:9f:5f:21:41:c2:ad:
         25:57:d4:26:4f:62:91:8c:5d:d6:6a:2f:cc:9c:c7:43:fc:b9:
         a7:16:19:53:29:89:e8:93:a9:bd:33:cb:df:fd:89:be:21:43:
         e3:97:1c:2c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUGltd2LWNIfNC0rqUBI3HwPFYqfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA0Qzc4RjM3MjkyMDc1MzQxMThGRkUwMDJFMjE4NkZD
NTM3NTkwMTAeFw0yNDAzMDUxODE1MzVaFw0yNTAzMDQxODIwMzVaMDMxMTAvBgNV
BAMTKDk5RUVERUMxNkVGQUU3RTQzNTI3MDRENTk5OTEyNUEzNjQwMkRBNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3XUV56fTd/6PblrVx6QCMk8b
fFxlxImq10zlon9yRvNY/3JdQIPudwwp10qBNRD1T4YxsVdZnRl2JEp5zDJoWJx+
H2urXduWoctQ4wyUMIn0P0sY02F4KYcormCmn9EYIJm8+ayqPiAZk4pnM+bMBEz6
9GAmZT6W7bHO2emgsOBcjFLBOJe/fK5q6m4bhZ1CznIWVehmc/rcDZ9vtiCw4QCP
n9JeeBOsMXF+EpJNo3IHirDnYWbL7ihziolXdRq9uubp4rqBPuXsDA5rZmKAS420
vaSrSUne2tJPeU01/YPPcosaFWm5n1ug5i+GJKvvPlYNJzwRiTp8UQsVO9SBAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUme7ewW765+Q1JwTVmZElo2QC2k4wHwYDVR0j
BBgwFoAUAEx483KSB1NBGP/gAuIYb8U3WQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTYyREMyRENCRTg2NjAyQUU2QTJFNDIzOTM0ODdFNTJB
RjVDNjgxNUQxMjM2Q0FEMTEwQzhBNkM4NzgyMzNELzAvMDA0Qzc4RjM3MjkyMDc1
MzQxMThGRkUwMDJFMjE4NkZDNTM3NTkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDRDNzhGMzcyOTIwNzUzNDEx
OEZGRTAwMkUyMTg2RkM1Mzc1OTAxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2MkRDMkRDQkU4NjYwMkFFNkEyRTQyMzkzNDg3RTUyQUY1QzY4MTVE
MTIzNkNBRDExMEM4QTZDODc4MjMzRC8wLzMyMzAzMDJlMzAyZTMyMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNjMxMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyAAcMA0GCSqG
SIb3DQEBCwUAA4IBAQDLAgC/pEDpmsgyIMdAwrwkFQryiQznHEI/GWvoA8SFm2xv
RW0yGUYycLPh3PFx1JGm5PUyVXcAYYIO5jcjg9df6Rl2gJwQSrHG3SYDWP186UDl
xcO2X4OywU4lAk49sKoAooFsHsUmyt4Pf70bbikhNg7VHZgGT75K5j0VPhu+4vH1
9SwrPEpXsHtOjIyeNdG7EvHWTN/OGj5bL/I1kV3mAEgCh5kiYPmLDlD0nFsAIYJq
COiJlw1obHAFQe1t8mH7QsRLF3xVy15EWPESqOi5ibifXyFBwq0lV9QmT2KRjF3W
ai/MnMdD/LmnFhlTKYnok6m9M8vf/Ym+IUPjlxws
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org