Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa
File:                     3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (raw, json)
Hash identifier:          jZi2qZRhPQMzxBgHo2qadZdgSdgVrgED/tNnUj4PIOs=
Subject key identifier:   17:EA:E5:E0:7A:96:52:F3:67:08:DB:E2:2F:97:91:43:28:6F:0E:DD
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       6BFE5B83B20726BBDEC4DF1F7714BA96FE9521FB
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa
Signing time:             Tue 05 Mar 2024 18:22:26 +0000
ROA not before:           Tue 05 Mar 2024 18:17:26 +0000
ROA not after:            Tue 04 Mar 2025 18:22:26 +0000
asID:                     269963
IP address blocks:        200.14.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:5b:83:b2:07:26:bb:de:c4:df:1f:77:14:ba:96:fe:95:21:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Mar  5 18:17:26 2024 GMT
            Not After : Mar  4 18:22:26 2025 GMT
        Subject: CN=17EAE5E07A9652F36708DBE22F979143286F0EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:ca:8a:01:a1:9e:6b:db:a8:fb:da:71:18:
                    ff:4a:8b:e7:4c:2a:b4:90:b2:4e:7f:f8:c1:9b:76:
                    a4:72:4e:68:9f:6d:99:8d:8f:33:d9:53:11:80:ed:
                    1f:74:9b:d8:44:a3:5f:cb:b8:80:6f:66:69:14:62:
                    e5:74:ea:64:bc:f8:66:e5:50:75:f1:37:e8:35:e9:
                    11:b3:ae:8b:0b:b6:96:ef:23:5d:2e:78:1e:54:00:
                    55:83:74:4a:a4:cc:ff:cc:4e:ba:cc:f4:d9:33:32:
                    35:2e:cd:06:b5:0d:ea:97:a8:6e:6b:77:e2:ba:8b:
                    91:14:00:da:4f:d0:2b:0b:e4:bf:9a:b8:38:80:2e:
                    99:36:7c:2d:1e:54:6c:72:a5:2e:48:1d:67:41:bb:
                    6e:cc:e5:9b:f0:49:7c:7e:68:f5:0a:9a:b5:8f:ac:
                    60:b1:58:eb:8e:ec:63:5c:02:ea:0f:32:74:92:c7:
                    40:ee:83:4a:a2:83:a4:d5:aa:95:e5:0e:00:06:bb:
                    6b:c0:8a:ab:bc:36:0d:14:50:31:98:a0:22:49:b8:
                    56:e3:fa:da:2c:41:54:4e:8b:b4:11:64:cf:e8:8c:
                    3b:b7:83:54:11:58:6a:77:11:00:f1:ed:04:34:0e:
                    74:a9:4d:bd:cd:ac:6c:7d:8b:a6:5a:47:11:86:1e:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:E5:E0:7A:96:52:F3:67:08:DB:E2:2F:97:91:43:28:6F:0E:DD
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:40:73:f3:45:28:fb:66:6a:a7:f6:d2:9a:e3:7b:b5:76:
         1f:99:97:57:d1:f8:cf:3e:50:66:d4:c8:2c:60:21:87:df:fc:
         7d:d1:38:2a:a5:59:b5:9d:34:72:7d:5b:28:35:b6:07:31:2d:
         41:9a:f6:8b:6d:64:a7:77:30:e4:ff:7f:6f:c9:11:65:72:4c:
         18:af:58:25:81:4c:21:54:58:de:95:04:05:ad:76:9a:ad:d6:
         f3:b3:06:8e:c5:79:52:08:b2:0c:39:f7:ab:65:65:f0:b9:7d:
         27:52:52:13:be:1b:99:87:4d:4f:7a:e5:c0:24:cc:79:39:fe:
         75:b4:05:98:6a:ab:30:c6:f7:1b:fb:bc:60:0f:d4:48:f0:aa:
         ff:da:b8:a9:26:80:48:7a:35:6b:4d:a5:85:d3:1e:13:c1:7d:
         54:b7:34:19:e5:7c:b7:d1:b3:e4:c0:19:f5:13:55:67:5e:40:
         1d:10:05:7d:63:d6:53:b7:00:af:79:f2:db:41:74:c3:df:2a:
         4b:8b:12:2d:1a:66:6e:08:08:69:34:e8:44:61:4b:e9:42:16:
         57:2f:fa:c4:5d:52:53:01:01:75:6a:b1:84:29:ce:e1:ba:bb:
         90:b2:56:6f:ff:f7:72:5f:0d:37:8f:ed:fc:18:78:35:de:1d:
         5f:f4:af:f2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUa/5bg7IHJrvexN8fdxS6lv6VIfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVERENCQkI4MTY4Q0FCNDBBNTNEOEI1RDNGOENERjg1
OEQzQTk5QzAeFw0yNDAzMDUxODE3MjZaFw0yNTAzMDQxODIyMjZaMDMxMTAvBgNV
BAMTKDE3RUFFNUUwN0E5NjUyRjM2NzA4REJFMjJGOTc5MTQzMjg2RjBFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRlcqKAaGea9uo+9pxGP9Ki+dM
KrSQsk5/+MGbdqRyTmifbZmNjzPZUxGA7R90m9hEo1/LuIBvZmkUYuV06mS8+Gbl
UHXxN+g16RGzrosLtpbvI10ueB5UAFWDdEqkzP/MTrrM9NkzMjUuzQa1DeqXqG5r
d+K6i5EUANpP0CsL5L+auDiALpk2fC0eVGxypS5IHWdBu27M5ZvwSXx+aPUKmrWP
rGCxWOuO7GNcAuoPMnSSx0Dug0qig6TVqpXlDgAGu2vAiqu8Ng0UUDGYoCJJuFbj
+tosQVROi7QRZM/ojDu3g1QRWGp3EQDx7QQ0DnSpTb3NrGx9i6ZaRxGGHuPLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUF+rl4HqWUvNnCNviL5eRQyhvDt0wHwYDVR0j
BBgwFoAUNd3Lu4FoyrQKU9i10/jN+FjTqZwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDEyN0JCREYxMjg4Q0QwQkE1MzkwMTIyMTJDNkY1QUMw
NUYxQTMyQkRDOUE4MkZBRDAxQ0Y5NDM1QzE2MTVDLzAvMzVERENCQkI4MTY4Q0FC
NDBBNTNEOEI1RDNGOENERjg1OEQzQTk5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUREQ0JCQjgxNjhDQUI0MEE1
M0Q4QjVEM0Y4Q0RGODU4RDNBOTlDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxMjdCQkRGMTI4OENEMEJBNTM5MDEyMjEyQzZGNUFDMDVGMUEzMkJE
QzlBODJGQUQwMUNGOTQzNUMxNjE1Qy8wLzMyMzAzMDJlMzEzNDJlMzYzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgOPDAN
BgkqhkiG9w0BAQsFAAOCAQEAE1pAc/NFKPtmaqf20prje7V2H5mXV9H4zz5QZtTI
LGAhh9/8fdE4KqVZtZ00cn1bKDW2BzEtQZr2i21kp3cw5P9/b8kRZXJMGK9YJYFM
IVRY3pUEBa12mq3W87MGjsV5UgiyDDn3q2Vl8Ll9J1JSE74bmYdNT3rlwCTMeTn+
dbQFmGqrMMb3G/u8YA/USPCq/9q4qSaASHo1a02lhdMeE8F9VLc0GeV8t9Gz5MAZ
9RNVZ15AHRAFfWPWU7cAr3ny20F0w98qS4sSLRpmbggIaTToRGFL6UIWVy/6xF1S
UwEBdWqxhCnO4bq7kLJWb//3cl8NN4/t/Bh4Nd4dX/Sv8g==
-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:36 2024 by rpki-client on console-fra.rpki-client.org