Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa
File:                     3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa (raw, json)
Hash identifier:          AOenG7eOP+czoNIqdSqGoUPtMtZbCRbn7mzqDjPzhgc=
Subject key identifier:   76:70:A1:30:F2:C5:1D:3E:4B:50:06:8E:A6:7D:40:2B:49:9A:3A:6E
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       16692F8147AD1B846C05EF9EA69AF6D35311B268
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     28114
IP address blocks:        200.114.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:2f:81:47:ad:1b:84:6c:05:ef:9e:a6:9a:f6:d3:53:11:b2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=7670A130F2C51D3E4B50068EA67D402B499A3A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:0e:20:aa:2e:60:f3:57:56:83:4e:3d:b1:
                    e5:2e:91:7c:dc:9a:72:f6:ff:18:ea:63:13:28:e4:
                    67:9e:38:cd:d1:c4:5a:0f:0b:aa:8a:e2:4e:81:06:
                    1d:0a:40:63:c7:1c:0b:1e:f7:33:c3:68:d3:74:eb:
                    51:96:0d:ac:b7:ad:6e:12:bc:95:ab:91:36:4e:6d:
                    ad:c2:4a:a4:95:0a:1d:ca:5e:99:7a:70:68:6f:da:
                    2e:de:19:ed:00:84:2f:ee:9d:f2:ca:63:1c:32:51:
                    b0:65:2e:db:24:8a:5d:f6:aa:75:94:cb:0b:94:84:
                    b8:d1:ca:1b:a2:01:8d:ad:bf:5f:38:5e:26:89:0f:
                    a6:08:f6:8f:d5:b4:6d:79:89:21:d5:f8:e9:ef:e4:
                    39:8f:1c:45:3a:cd:fb:b5:4d:55:33:97:80:75:4d:
                    a7:2d:1a:c3:70:5c:d1:5d:4b:8f:5a:4e:5c:40:40:
                    fa:72:23:1e:d7:b6:00:3b:80:de:e6:7f:09:ee:9d:
                    f6:af:20:5f:f7:69:e1:06:0b:83:10:6c:70:9b:80:
                    8c:84:f6:bf:e0:a1:f1:ac:1e:8c:29:3c:e6:55:3d:
                    e9:fc:cf:8f:7e:10:f6:6a:9a:31:ec:6d:fa:41:fa:
                    f6:fd:d8:f8:09:c0:f4:34:a2:81:ff:ec:47:33:91:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:70:A1:30:F2:C5:1D:3E:4B:50:06:8E:A6:7D:40:2B:49:9A:3A:6E
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:67:a2:45:5b:8f:a7:1e:db:9c:07:73:db:f7:bf:c6:d7:
         85:b6:b1:4c:99:29:0a:d6:45:39:22:15:d6:9b:e8:8b:1b:2d:
         37:49:91:69:d8:c4:db:98:90:e3:d7:56:0e:aa:1f:32:ee:8c:
         2b:73:89:1e:cf:08:f4:ba:81:90:44:30:ea:34:72:62:c7:30:
         56:2b:5a:4c:96:91:f7:c0:5f:32:f6:4d:4e:c6:d5:e9:d7:35:
         aa:0c:4b:0f:45:75:c1:21:62:91:14:e2:81:d7:80:3d:4b:7c:
         53:b3:31:8d:f3:23:16:e9:1c:7b:29:72:7c:7d:73:a3:09:38:
         c4:76:5f:bd:c6:a4:98:c5:c9:6f:a8:74:02:9c:59:2e:ae:e4:
         13:23:c5:01:13:41:77:ae:d6:f0:0a:62:38:76:9e:b3:3e:9d:
         26:23:40:06:cb:4b:8d:8e:50:d5:f7:0c:5d:11:33:0d:ea:fb:
         ac:6a:61:cf:36:86:fd:ea:fa:ae:ff:71:9c:e2:39:c1:ac:ea:
         fa:b7:ab:c0:b0:ed:e9:a2:30:d1:2c:01:3c:41:dd:2e:3e:f0:
         2e:92:6f:90:6d:23:7f:72:95:c4:03:5a:35:3a:b3:c4:c5:55:
         4f:ae:a6:22:94:5a:8a:f4:9f:7b:17:b2:38:98:b4:d1:07:7b:
         5f:37:e0:84
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFmkvgUetG4RsBe+eppr201MRsmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTRaFw0yNTAzMDQxNzU4MTRaMDMxMTAvBgNV
BAMTKDc2NzBBMTMwRjJDNTFEM0U0QjUwMDY4RUE2N0Q0MDJCNDk5QTNBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgQ4gqi5g81dWg049seUukXzc
mnL2/xjqYxMo5GeeOM3RxFoPC6qK4k6BBh0KQGPHHAse9zPDaNN061GWDay3rW4S
vJWrkTZOba3CSqSVCh3KXpl6cGhv2i7eGe0AhC/unfLKYxwyUbBlLtskil32qnWU
ywuUhLjRyhuiAY2tv184XiaJD6YI9o/VtG15iSHV+Onv5DmPHEU6zfu1TVUzl4B1
TactGsNwXNFdS49aTlxAQPpyIx7XtgA7gN7mfwnunfavIF/3aeEGC4MQbHCbgIyE
9r/gofGsHowpPOZVPen8z49+EPZqmjHsbfpB+vb92PgJwPQ0ooH/7EczkUWLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUdnChMPLFHT5LUAaOpn1AK0maOm4wHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzAzMDJlMzEzMTM0MmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyHJ4
MA0GCSqGSIb3DQEBCwUAA4IBAQBvRWeiRVuPpx7bnAdz2/e/xteFtrFMmSkK1kU5
IhXWm+iLGy03SZFp2MTbmJDj11YOqh8y7owrc4kezwj0uoGQRDDqNHJixzBWK1pM
lpH3wF8y9k1OxtXp1zWqDEsPRXXBIWKRFOKB14A9S3xTszGN8yMW6Rx7KXJ8fXOj
CTjEdl+9xqSYxclvqHQCnFkuruQTI8UBE0F3rtbwCmI4dp6zPp0mI0AGy0uNjlDV
9wxdETMN6vusamHPNob96vqu/3Gc4jnBrOr6t6vAsO3pojDRLAE8Qd0uPvAukm+Q
bSN/cpXEA1o1OrPExVVPrqYilFqK9J97F7I4mLTRB3tfN+CE
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org