Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
File:                     3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa (raw, json)
Hash identifier:          9XLhOEmgsnNUE/2a3Uq2VXr6QDXWZWWpAiUlDOoNVOo=
Subject key identifier:   BF:D7:BA:07:22:A3:73:81:76:0D:15:29:F7:24:5B:6A:AE:27:98:A6
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       7FD56503C7C341427E6627C5458444C250D4E72A
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:12 +0000
ROA not before:           Tue 05 Mar 2024 17:53:12 +0000
ROA not after:            Tue 04 Mar 2025 17:58:12 +0000
asID:                     28114
IP address blocks:        200.114.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d5:65:03:c7:c3:41:42:7e:66:27:c5:45:84:44:c2:50:d4:e7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:12 2024 GMT
            Not After : Mar  4 17:58:12 2025 GMT
        Subject: CN=BFD7BA0722A37381760D1529F7245B6AAE2798A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:d6:a7:47:47:a3:1a:d0:56:2b:da:8d:4d:
                    e4:a1:25:83:76:a3:87:4a:05:91:ac:bc:b3:c0:1b:
                    99:cd:cb:97:26:27:05:f4:b7:35:80:4c:cb:0f:a0:
                    4b:65:72:33:1a:42:d2:82:99:2a:a0:c4:9f:60:6b:
                    9e:f2:1e:bd:5a:06:6e:5a:84:f2:f6:10:a3:a7:ac:
                    f9:ed:5d:fc:8f:3c:c3:61:6a:ec:93:c3:57:8b:4a:
                    34:ea:68:a6:91:38:0e:75:0e:70:ec:af:fa:28:9f:
                    d1:1b:0d:36:71:68:09:99:a1:0a:f5:d4:3a:33:75:
                    7d:0c:15:7e:d1:30:06:c3:95:1f:10:be:bb:5b:a3:
                    58:99:6f:d9:2c:b8:66:e7:a0:85:be:33:cf:38:16:
                    bb:7c:8e:bf:59:15:72:39:58:f7:56:98:1b:1b:c5:
                    9b:7c:5a:89:09:eb:18:f3:d6:93:ec:7b:ca:ed:1a:
                    04:a7:35:c8:65:26:2b:d3:7c:57:7c:b7:08:86:fc:
                    43:a9:a0:cf:1d:01:4e:f5:d1:54:13:a6:6d:2b:6e:
                    9e:86:e7:31:46:a6:1c:bf:fa:39:81:56:82:4d:43:
                    95:1f:62:3a:04:ca:e3:5f:91:f9:80:19:fb:15:92:
                    f1:2e:25:7c:a7:c4:de:08:b1:2e:39:ec:d6:42:f5:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:BA:07:22:A3:73:81:76:0D:15:29:F7:24:5B:6A:AE:27:98:A6
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:0b:f0:7c:88:69:55:5d:5a:55:86:ac:9b:fe:4b:26:3c:
         1c:ef:2e:c4:e7:f2:a5:98:4e:ff:f8:0c:9d:89:d3:f9:20:04:
         e5:d2:fa:d9:c4:1d:23:f5:fb:ba:a0:c2:f3:64:69:25:15:25:
         a1:8c:63:23:7f:60:4d:a4:1d:6e:9c:57:4f:b3:f8:b6:ba:d0:
         98:d7:11:87:52:1c:bd:bd:ed:f0:6b:ce:b2:0f:5d:4b:93:32:
         67:b4:ca:97:11:24:cf:ad:ac:15:85:e5:ee:c5:89:34:3d:81:
         c0:94:c5:91:99:b6:f9:20:6f:fd:db:fe:af:a5:2c:15:67:f3:
         ab:13:06:63:8a:36:50:51:3f:50:f0:36:67:4a:3c:aa:1d:b6:
         6d:bc:ec:57:c3:2d:9e:c1:90:a3:97:cf:1c:8a:f9:e4:d6:6b:
         9d:c7:2f:dc:af:42:77:5d:fa:ab:77:ff:40:ba:62:d4:cf:2e:
         50:3e:93:8e:33:58:06:cf:3d:e6:bd:f6:e6:3e:eb:60:eb:3d:
         47:5f:f6:c0:51:b3:1b:65:9b:07:b0:02:d4:6c:62:c6:14:f4:
         f6:1c:fa:46:aa:be:cc:78:80:2b:ba:94:aa:08:04:b7:88:fc:
         14:7b:92:fe:3b:ac:69:e6:2c:98:4a:db:40:f5:2a:60:55:9e:
         8d:0e:55:2c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUf9VlA8fDQUJ+ZifFRYREwlDU5yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTJaFw0yNTAzMDQxNzU4MTJaMDMxMTAvBgNV
BAMTKEJGRDdCQTA3MjJBMzczODE3NjBEMTUyOUY3MjQ1QjZBQUUyNzk4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQ9anR0ejGtBWK9qNTeShJYN2
o4dKBZGsvLPAG5nNy5cmJwX0tzWATMsPoEtlcjMaQtKCmSqgxJ9ga57yHr1aBm5a
hPL2EKOnrPntXfyPPMNhauyTw1eLSjTqaKaROA51DnDsr/oon9EbDTZxaAmZoQr1
1DozdX0MFX7RMAbDlR8Qvrtbo1iZb9ksuGbnoIW+M884Frt8jr9ZFXI5WPdWmBsb
xZt8WokJ6xjz1pPse8rtGgSnNchlJivTfFd8twiG/EOpoM8dAU710VQTpm0rbp6G
5zFGphy/+jmBVoJNQ5UfYjoEyuNfkfmAGfsVkvEuJXynxN4IsS457NZC9asNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUv9e6ByKjc4F2DRUp9yRbaq4nmKYwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzAzMDJlMzEzMTM0MmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyHJ4
MA0GCSqGSIb3DQEBCwUAA4IBAQBgGwvwfIhpVV1aVYasm/5LJjwc7y7E5/KlmE7/
+AydidP5IATl0vrZxB0j9fu6oMLzZGklFSWhjGMjf2BNpB1unFdPs/i2utCY1xGH
Uhy9ve3wa86yD11LkzJntMqXESTPrawVheXuxYk0PYHAlMWRmbb5IG/92/6vpSwV
Z/OrEwZjijZQUT9Q8DZnSjyqHbZtvOxXwy2ewZCjl88civnk1mudxy/cr0J3Xfqr
d/9AumLUzy5QPpOOM1gGzz3mvfbmPutg6z1HX/bAUbMbZZsHsALUbGLGFPT2HPpG
qr7MeIArupSqCAS3iPwUe5L+O6xp5iyYSttA9SpgVZ6NDlUs
-----END CERTIFICATE-----
Generated at Thu May 2 04:19:23 2024 by rpki-client on console-ams.rpki-client.org