Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32342d3234203d3e203532333939.roa
File:                     3230302e372e3135322e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          AFL1ThLWOLW5k4LJZsBtB/4xghWr28lBufVcVzY1bf4=
Subject key identifier:   D8:FD:F8:00:E6:B3:4F:2C:49:F3:87:48:B8:60:50:CA:FB:9D:A8:1F
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       14084560B307C385975018794DB1B0475C9ABEF0
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:43:00 +0000
ROA not before:           Tue 05 Mar 2024 17:38:00 +0000
ROA not after:            Tue 04 Mar 2025 17:43:00 +0000
asID:                     52399
IP address blocks:        200.7.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:08:45:60:b3:07:c3:85:97:50:18:79:4d:b1:b0:47:5c:9a:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:38:00 2024 GMT
            Not After : Mar  4 17:43:00 2025 GMT
        Subject: CN=D8FDF800E6B34F2C49F38748B86050CAFB9DA81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:b9:de:28:70:70:50:ba:31:d0:7b:62:b5:
                    f3:dc:c8:69:d3:2e:57:bc:d4:35:45:02:96:b3:31:
                    26:4b:c9:66:ea:47:88:a7:05:35:49:02:4d:a3:ab:
                    45:d9:48:75:2e:48:60:71:19:4b:51:26:76:a8:a7:
                    71:3f:eb:f8:42:8d:45:12:b8:7d:41:47:57:e8:df:
                    e1:bf:0e:3f:4f:06:26:9e:d8:37:96:ab:5c:80:c9:
                    8b:5b:d8:dd:a6:ea:6e:86:bf:61:9b:d8:73:0b:b1:
                    e9:d2:10:b5:71:7c:ce:b7:7e:39:4c:d9:2b:33:7f:
                    51:3d:96:86:66:e2:b3:0d:bd:a8:6e:8c:a0:8e:4e:
                    b2:59:62:fe:4f:0f:8f:ea:7b:c8:11:2e:af:be:76:
                    da:29:ec:10:44:fa:cf:ab:bc:98:1f:3b:48:4c:e4:
                    86:96:c8:91:8b:91:f1:41:6d:51:e6:6b:1a:cb:75:
                    cd:da:e6:3e:5d:4e:87:90:bf:c4:87:5d:88:01:e2:
                    92:94:d5:16:b5:8a:97:e7:af:e2:ad:fb:41:f9:bc:
                    90:e2:36:9d:f4:3c:d5:e2:d1:c7:82:77:10:9b:bf:
                    40:c1:f0:c0:02:70:e1:af:07:18:0b:39:13:ab:fd:
                    a2:78:a3:9d:23:1a:4e:bb:ac:a4:14:86:5b:c5:95:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:F8:00:E6:B3:4F:2C:49:F3:87:48:B8:60:50:CA:FB:9D:A8:1F
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135322e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:6a:02:07:5b:ab:b4:ed:0c:43:65:ec:3b:53:ca:cd:71:
         c5:f9:d2:8c:6f:d9:46:cd:17:2d:ae:d5:58:53:83:9f:8c:73:
         0c:64:1b:1c:03:2b:f1:0d:66:51:fa:1b:ac:f6:7b:cd:1a:d8:
         09:4b:89:e3:ef:94:90:f7:52:f9:3f:6b:25:26:46:4a:fd:5a:
         d4:a7:53:63:65:ed:5c:e8:0b:90:12:17:86:1f:88:0c:1e:12:
         1b:2a:7e:ef:9e:b6:2c:43:6b:fc:af:ab:7a:e5:d6:8f:b9:8a:
         2a:d7:14:c4:d9:d4:b0:b6:49:44:d2:aa:c9:f5:cb:61:95:d6:
         a8:fe:75:9f:3b:fc:1a:8a:0a:20:cd:ed:c7:07:86:ba:be:be:
         3f:01:5b:a1:5c:6b:f7:10:c1:8f:69:d0:c4:01:a8:99:49:1e:
         31:d0:ab:4a:5f:99:d0:13:08:f2:25:5c:19:24:1f:d5:e3:ee:
         f5:55:d7:bc:a3:67:e4:72:68:7c:74:f1:4b:12:68:0d:1f:8c:
         cf:c6:06:77:42:7d:95:61:20:f9:2e:81:84:4e:cb:18:dd:ed:
         36:3c:49:7b:38:45:94:6b:10:c6:58:c0:4a:ce:59:f2:80:e5:
         14:b0:f3:21:ea:c6:3b:39:b3:cf:4b:84:c7:69:ab:7b:62:3f:
         19:fb:d8:3c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFAhFYLMHw4WXUBh5TbGwR1yavvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCN0EyODg1OTk0N0M1MkEzODdCQjYyODc2NEY5MUFB
QTFEMDVCOTAeFw0yNDAzMDUxNzM4MDBaFw0yNTAzMDQxNzQzMDBaMDMxMTAvBgNV
BAMTKEQ4RkRGODAwRTZCMzRGMkM0OUYzODc0OEI4NjA1MENBRkI5REE4MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkbneKHBwULox0HtitfPcyGnT
Lle81DVFApazMSZLyWbqR4inBTVJAk2jq0XZSHUuSGBxGUtRJnaop3E/6/hCjUUS
uH1BR1fo3+G/Dj9PBiae2DeWq1yAyYtb2N2m6m6Gv2Gb2HMLsenSELVxfM63fjlM
2Sszf1E9loZm4rMNvahujKCOTrJZYv5PD4/qe8gRLq++dtop7BBE+s+rvJgfO0hM
5IaWyJGLkfFBbVHmaxrLdc3a5j5dToeQv8SHXYgB4pKU1Ra1ipfnr+Kt+0H5vJDi
Np30PNXi0ceCdxCbv0DB8MACcOGvBxgLOROr/aJ4o50jGk67rKQUhlvFlToVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU2P34AOazTyxJ84dIuGBQyvudqB8wHwYDVR0j
BBgwFoAUwreiiFmUfFKjh7tih2T5GqodBbkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDJBQjQ4REYyNEY0RDg1REFBNDlCREFCNzc2MDlFNURC
NUIzNzcxMkNGRDlERTdBNUNFOUY5ODA3NjAxMEYyLzAvQzJCN0EyODg1OTk0N0M1
MkEzODdCQjYyODc2NEY5MUFBQTFEMDVCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI3QTI4ODU5OTQ3QzUyQTM4
N0JCNjI4NzY0RjkxQUFBMUQwNUI5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQyQUI0OERGMjRGNEQ4NURBQTQ5QkRBQjc3NjA5RTVEQjVCMzc3MTJD
RkQ5REU3QTVDRTlGOTgwNzYwMTBGMi8wLzMyMzAzMDJlMzcyZTMxMzUzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB5gwDQYJ
KoZIhvcNAQELBQADggEBAAvfagIHW6u07QxDZew7U8rNccX50oxv2UbNFy2u1VhT
g5+McwxkGxwDK/ENZlH6G6z2e80a2AlLiePvlJD3Uvk/ayUmRkr9WtSnU2Nl7Vzo
C5ASF4YfiAweEhsqfu+etixDa/yvq3rl1o+5iirXFMTZ1LC2SUTSqsn1y2GV1qj+
dZ87/BqKCiDN7ccHhrq+vj8BW6Fca/cQwY9p0MQBqJlJHjHQq0pfmdATCPIlXBkk
H9Xj7vVV17yjZ+RyaHx08UsSaA0fjM/GBndCfZVhIPkugYROyxjd7TY8SXs4RZRr
EMZYwErOWfKA5RSw8yHqxjs5s89LhMdpq3tiPxn72Dw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org