Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa
File:                     3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          J5AP8FFCot/iZSa2nWtgHzFB2Ao27I6NZUEeb9RZVIM=
Subject key identifier:   A2:52:93:24:3E:8B:2D:F4:DA:23:A7:87:A2:A9:B5:CC:F6:2F:60:4A
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       182A1B5773FCF18C2F2F34641AF92BC94A8D6664
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     26505
IP address blocks:        200.124.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:1b:57:73:fc:f1:8c:2f:2f:34:64:1a:f9:2b:c9:4a:8d:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=A25293243E8B2DF4DA23A787A2A9B5CCF62F604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:63:cf:13:0c:a7:87:b5:b8:48:20:8e:d3:57:
                    bb:3e:ad:f0:15:11:be:f1:fc:9b:cb:77:48:7e:87:
                    dd:09:5c:42:28:20:c0:9c:b8:2a:5f:39:a7:f7:d6:
                    da:ae:84:f9:3c:91:18:0e:3e:3b:76:0e:d1:22:b3:
                    37:a6:fb:92:ac:8e:64:c7:dc:e1:44:d7:4a:0a:0b:
                    77:a4:3a:73:b7:14:2c:01:35:55:7e:4e:3f:ba:a1:
                    de:b2:4a:8d:12:93:62:3a:2c:55:84:57:83:2e:e2:
                    f8:0e:6e:0c:d4:11:ff:86:05:2f:50:ec:66:b2:37:
                    52:c7:db:13:e1:c7:8b:e9:d2:65:7b:46:4d:25:79:
                    41:00:ac:c8:83:ce:fa:3e:40:70:75:1c:51:48:28:
                    ac:c2:ca:3b:cd:19:c6:fe:1b:c8:e3:a5:21:6e:e8:
                    ee:f0:b6:a5:97:d6:6a:fd:fe:4a:42:b3:57:a3:4e:
                    80:c2:94:27:24:f3:75:0f:cc:d6:09:aa:fb:b5:0c:
                    59:46:f8:5e:29:13:41:e6:32:1e:ba:e2:08:7c:2f:
                    2c:2b:6b:9e:84:27:d3:70:9a:5f:b6:52:e6:02:79:
                    b8:d3:b9:7a:a2:8e:b0:d2:b3:ba:3b:47:cb:79:55:
                    38:46:e2:05:22:c2:af:c4:44:d0:18:9b:2f:25:92:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:93:24:3E:8B:2D:F4:DA:23:A7:87:A2:A9:B5:CC:F6:2F:60:4A
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:18:7e:f2:6e:91:34:88:50:43:d2:10:a5:dc:64:6f:5a:
         cb:f3:cf:f8:45:ef:55:c8:f2:58:3b:69:ce:9f:81:88:cd:a2:
         35:f7:59:d2:ee:c4:39:09:27:c6:01:23:f8:68:97:c5:03:dd:
         0f:c4:e9:df:c6:7c:c1:f7:7e:ca:34:b4:32:c5:40:1c:3e:7e:
         84:33:26:94:4e:8b:19:a3:98:be:b6:57:42:14:24:cc:d9:f4:
         e2:74:df:fc:91:18:92:b7:cc:61:81:08:27:bd:0c:60:d1:13:
         5e:cb:0e:5a:85:5c:14:72:bc:fa:2a:07:ae:c7:fd:16:6f:a7:
         16:4b:b0:22:bb:5f:5c:a0:53:88:05:85:e3:4e:95:23:25:1f:
         c9:d7:21:eb:80:9d:fe:6a:90:ac:65:b7:bf:13:1f:76:a3:4f:
         62:22:11:19:6c:82:1d:f4:20:c0:64:65:05:7d:e2:74:b4:63:
         90:e2:2e:7c:1d:43:bf:ae:86:0c:38:6f:7b:70:34:8f:ea:09:
         8e:8a:35:8a:23:50:5e:04:c3:1d:4d:9e:b4:f8:5c:f6:d6:bc:
         9b:f2:b0:6d:d7:e3:9d:05:a8:74:9e:90:06:99:77:51:fb:84:
         79:26:3a:06:37:58:c2:58:33:fb:cd:53:fd:49:c5:3d:04:d1:
         70:d6:77:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGCobV3P88YwvLzRkGvkryUqNZmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1NDY0RjQ1RUVCMEVEMDg5NEJCRDY0NjYzMjAzNzAx
RTc2OUExMjAeFw0yNDAzMDUxODEyMDJaFw0yNTAzMDQxODE3MDJaMDMxMTAvBgNV
BAMTKEEyNTI5MzI0M0U4QjJERjREQTIzQTc4N0EyQTlCNUNDRjYyRjYwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Y88TDKeHtbhIII7TV7s+rfAV
Eb7x/JvLd0h+h90JXEIoIMCcuCpfOaf31tquhPk8kRgOPjt2DtEiszem+5KsjmTH
3OFE10oKC3ekOnO3FCwBNVV+Tj+6od6ySo0Sk2I6LFWEV4Mu4vgObgzUEf+GBS9Q
7GayN1LH2xPhx4vp0mV7Rk0leUEArMiDzvo+QHB1HFFIKKzCyjvNGcb+G8jjpSFu
6O7wtqWX1mr9/kpCs1ejToDClCck83UPzNYJqvu1DFlG+F4pE0HmMh664gh8Lywr
a56EJ9Nwml+2UuYCebjTuXqijrDSs7o7R8t5VThG4gUiwq/ERNAYmy8lktIlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUolKTJD6LLfTaI6eHoqm1zPYvYEowHwYDVR0j
BBgwFoAU4FRk9F7rDtCJS71kZjIDcB52mhIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNENERkU3MkMyNzZFQzdBQTE5OTI0OTIzMUYwQTQ1MkQ5
QjRCNUIxMzI0QTU1M0M0ODEwN0Y2NjYyMEQ4N0Q5LzAvRTA1NDY0RjQ1RUVCMEVE
MDg5NEJCRDY0NjYzMjAzNzAxRTc2OUExMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDU0NjRGNDVFRUIwRUQwODk0
QkJENjQ2NjMyMDM3MDFFNzY5QTEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzRDREZFNzJDMjc2RUM3QUExOTkyNDkyMzFGMEE0NTJEOUI0QjVCMTMy
NEE1NTNDNDgxMDdGNjY2MjBEODdEOS8wLzMyMzAzMDJlMzEzMjM0MmUzMTMyMzgy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzUzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyHyA
MA0GCSqGSIb3DQEBCwUAA4IBAQBe+Rh+8m6RNIhQQ9IQpdxkb1rL88/4Re9VyPJY
O2nOn4GIzaI191nS7sQ5CSfGASP4aJfFA90PxOnfxnzB937KNLQyxUAcPn6EMyaU
TosZo5i+tldCFCTM2fTidN/8kRiSt8xhgQgnvQxg0RNeyw5ahVwUcrz6Kgeux/0W
b6cWS7Aiu19coFOIBYXjTpUjJR/J1yHrgJ3+apCsZbe/Ex92o09iIhEZbIId9CDA
ZGUFfeJ0tGOQ4i58HUO/roYMOG97cDSP6gmOijWKI1BeBMMdTZ60+Fz21ryb8rBt
1+OdBah0npAGmXdR+4R5JjoGN1jCWDP7zVP9ScU9BNFw1nd3
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org