Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa
File:                     3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (raw, json)
Hash identifier:          GfOAlyOSdn2Jl0MqhQ8ptjnhfmEIru4nZ5N88UHJhWE=
Subject key identifier:   96:3A:D1:77:C7:0C:13:33:62:57:DA:54:40:C3:47:EF:D9:DE:32:2C
Certificate issuer:       /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
Certificate serial:       11D5F5832463034C5F8369E6E6EE383B7F0C5689
Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa
Signing time:             Tue 05 Mar 2024 18:06:59 +0000
ROA not before:           Tue 05 Mar 2024 18:01:59 +0000
ROA not after:            Tue 04 Mar 2025 18:06:59 +0000
asID:                     270028
IP address blocks:        200.11.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d5:f5:83:24:63:03:4c:5f:83:69:e6:e6:ee:38:3b:7f:0c:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
        Validity
            Not Before: Mar  5 18:01:59 2024 GMT
            Not After : Mar  4 18:06:59 2025 GMT
        Subject: CN=963AD177C70C13336257DA5440C347EFD9DE322C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:b3:25:e1:fd:21:ab:39:0c:30:4b:cb:93:
                    9f:e3:71:bd:c9:e3:1a:73:69:57:d9:04:e6:45:fb:
                    e0:08:27:79:eb:81:d7:99:0a:29:91:81:50:7e:41:
                    a0:82:ca:9f:2c:f4:33:f6:11:f9:cf:88:21:18:54:
                    44:5e:b0:44:a4:eb:e5:3e:34:d7:b7:83:a5:0f:34:
                    e9:16:9a:ce:9d:bb:32:68:3d:25:3e:c9:2d:92:4d:
                    9d:ec:80:c5:c8:96:3f:aa:c2:98:1a:17:1e:07:e2:
                    20:f3:a6:ac:8a:1f:b7:0c:66:40:18:62:09:80:29:
                    4e:0f:82:3f:65:75:8a:fa:e1:46:43:19:d2:90:ae:
                    a8:b0:90:2b:34:64:3d:ea:78:e2:39:2c:aa:0c:bd:
                    6b:c0:40:18:60:96:4d:03:9b:5c:d7:12:d5:65:1d:
                    31:ba:18:85:ae:39:d9:ca:51:40:4e:32:b1:b8:ca:
                    a6:70:7b:93:1c:ef:04:e3:13:94:b8:1f:11:d5:29:
                    ab:0d:0f:72:b7:c6:51:69:19:b9:fc:93:b7:43:33:
                    86:86:1b:57:8e:ce:6c:a0:f7:6b:f2:02:48:55:5c:
                    bc:fe:99:32:49:10:69:b5:7b:da:56:d6:13:6b:33:
                    91:6f:75:39:d2:7f:0d:83:2f:04:62:10:87:02:8c:
                    5e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:D1:77:C7:0C:13:33:62:57:DA:54:40:C3:47:EF:D9:DE:32:2C
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/3230302e31312e33332e302f32342d3234203d3e20323730303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:c8:4b:0e:28:15:14:76:47:a6:68:54:48:00:fd:d7:8d:
         95:15:5d:6d:9d:6b:7f:6a:bd:ec:b4:b6:37:20:80:3a:11:4b:
         96:d5:ea:c0:63:2e:1d:ad:2c:a7:72:52:4b:1d:98:69:e5:04:
         a9:8f:00:ff:53:5e:a7:de:5e:12:d2:fc:7e:a0:79:e9:aa:40:
         28:ae:b1:42:2c:d6:89:7e:68:fa:a7:85:13:b1:cd:be:01:71:
         4e:d1:ce:56:b1:dc:23:62:3e:ea:7b:30:6b:dd:f9:22:6b:0f:
         1f:d4:bc:c5:6b:fb:c6:f5:2c:e2:1e:22:77:85:4a:b8:12:90:
         ad:88:2a:f3:bf:14:5a:59:78:1a:3d:e0:e6:e7:3b:2b:69:c8:
         ff:25:6f:23:28:bc:3f:c2:74:d2:bd:95:0a:f2:bc:c6:ab:3c:
         14:b3:34:9a:7b:c2:3b:dd:1b:f7:59:97:06:53:fd:e5:66:2d:
         08:45:7e:c8:0f:c5:f2:1e:44:1f:f4:e2:fe:6f:84:e8:2b:34:
         06:5f:10:9c:3c:f2:f0:d5:3b:cf:0e:75:d7:09:96:e0:63:0f:
         13:d7:65:0f:59:f2:a8:f6:d2:7d:d6:05:a2:b4:c9:54:0b:eb:
         67:ad:e8:cb:a7:06:1f:cf:f4:e7:48:f5:6b:d6:6b:47:ac:39:
         ee:86:11:ec
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEdX1gyRjA0xfg2nm5u44O38MVokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQ0Q2MkE2MkNBRkJEOTlEMUFDNkNCQjZFMDczQTU1
MTg0NUYyNzAeFw0yNDAzMDUxODAxNTlaFw0yNTAzMDQxODA2NTlaMDMxMTAvBgNV
BAMTKDk2M0FEMTc3QzcwQzEzMzM2MjU3REE1NDQwQzM0N0VGRDlERTMyMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXLMl4f0hqzkMMEvLk5/jcb3J
4xpzaVfZBOZF++AIJ3nrgdeZCimRgVB+QaCCyp8s9DP2EfnPiCEYVEResESk6+U+
NNe3g6UPNOkWms6duzJoPSU+yS2STZ3sgMXIlj+qwpgaFx4H4iDzpqyKH7cMZkAY
YgmAKU4Pgj9ldYr64UZDGdKQrqiwkCs0ZD3qeOI5LKoMvWvAQBhglk0Dm1zXEtVl
HTG6GIWuOdnKUUBOMrG4yqZwe5Mc7wTjE5S4HxHVKasND3K3xlFpGbn8k7dDM4aG
G1eOzmyg92vyAkhVXLz+mTJJEGm1e9pW1hNrM5FvdTnSfw2DLwRiEIcCjF6PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUljrRd8cMEzNiV9pUQMNH79neMiwwHwYDVR0j
BBgwFoAUzTzWKmLK+9mdGsbLtuBzpVGEXycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUI3MDdCM0E1QjNDQjQ2QTgxMjZBMDNBN0Y0QjlFMTVG
MEQzNTY0NDhENUJGQkM0NEQxMTRENENBQTMwOEMyLzAvQ0QzQ0Q2MkE2MkNBRkJE
OTlEMUFDNkNCQjZFMDczQTU1MTg0NUYyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNDRDYyQTYyQ0FGQkQ5OUQx
QUM2Q0JCNkUwNzNBNTUxODQ1RjI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCNzA3QjNBNUIzQ0I0NkE4MTI2QTAzQTdGNEI5RTE1RjBEMzU2NDQ4
RDVCRkJDNDREMTE0RDRDQUEzMDhDMi8wLzMyMzAzMDJlMzEzMTJlMzMzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgLITAN
BgkqhkiG9w0BAQsFAAOCAQEAXs/ISw4oFRR2R6ZoVEgA/deNlRVdbZ1rf2q97LS2
NyCAOhFLltXqwGMuHa0sp3JSSx2YaeUEqY8A/1Nep95eEtL8fqB56apAKK6xQizW
iX5o+qeFE7HNvgFxTtHOVrHcI2I+6nswa935ImsPH9S8xWv7xvUs4h4id4VKuBKQ
rYgq878UWll4Gj3g5uc7K2nI/yVvIyi8P8J00r2VCvK8xqs8FLM0mnvCO90b91mX
BlP95WYtCEV+yA/F8h5EH/Ti/m+E6Cs0Bl8QnDzy8NU7zw511wmW4GMPE9dlD1ny
qPbSfdYForTJVAvrZ63oy6cGH8/050j1a9ZrR6w57oYR7A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org