Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa
File:                     3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          a1JXZavG/xb5tISnH1BCuTGGLVWQjLUOLaH6CPuvoAE=
Subject key identifier:   DA:95:03:DF:C6:5A:E9:62:3B:75:0D:61:F9:23:7E:C8:7D:F2:60:AE
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       5A05F10D65EEFB52642D7D827B898B1FB9788EA0
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:10:30 +0000
ROA not before:           Tue 05 Mar 2024 18:05:30 +0000
ROA not after:            Tue 04 Mar 2025 18:10:30 +0000
asID:                     23383
IP address blocks:        200.106.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:05:f1:0d:65:ee:fb:52:64:2d:7d:82:7b:89:8b:1f:b9:78:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:30 2024 GMT
            Not After : Mar  4 18:10:30 2025 GMT
        Subject: CN=DA9503DFC65AE9623B750D61F9237EC87DF260AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:73:60:32:b4:bb:25:3d:b8:ef:e1:72:1c:
                    66:75:77:cd:7f:77:2a:0c:11:17:28:b9:24:96:43:
                    82:61:9a:77:9e:26:cf:24:80:d7:be:75:a6:05:52:
                    f7:a9:8e:9a:c8:4d:3a:07:76:2f:b8:49:5b:c9:72:
                    35:c5:3a:c3:b1:51:81:47:46:47:72:95:a2:ac:6d:
                    9d:e6:1d:b1:cf:c2:1a:e5:c3:12:18:37:8f:ea:54:
                    77:66:00:64:d3:a5:30:16:0b:1b:48:42:7b:ae:81:
                    07:6c:7c:d2:e7:ad:ff:73:e9:e5:00:c5:0e:72:7a:
                    25:8a:89:78:dc:10:c8:fd:1d:3d:fe:37:94:c1:8f:
                    71:48:80:9f:89:9d:79:21:ce:e7:d8:11:15:0f:d4:
                    65:9e:10:c5:7f:fb:3c:8c:20:5d:ce:27:85:f7:64:
                    49:e5:79:83:e9:7b:5e:a8:68:14:14:e2:3d:25:97:
                    de:0b:61:62:19:0f:a3:29:db:c8:fc:28:d6:59:5e:
                    58:b2:ca:40:f9:9b:e0:5f:32:40:bf:ed:29:e9:de:
                    6c:78:f1:fd:0b:c9:36:0b:f2:75:35:55:79:2a:60:
                    77:89:ef:1f:40:31:81:87:04:45:be:3b:33:8f:36:
                    f9:ae:7d:a4:e0:76:fd:31:c7:93:a6:49:4d:06:3b:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:03:DF:C6:5A:E9:62:3B:75:0D:61:F9:23:7E:C8:7D:F2:60:AE
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:85:80:85:67:ec:c9:ea:ff:5d:81:b7:ab:eb:5a:57:06:
         d9:5f:60:e1:aa:8a:6a:63:74:c3:48:0f:6f:70:8f:32:3b:66:
         dd:f6:0e:8a:04:9b:79:11:cb:9d:cf:64:8c:ca:0d:74:b1:ba:
         1e:06:11:c1:fa:68:48:0c:da:a9:15:3d:e1:15:70:f7:b3:ff:
         6b:87:63:9d:df:53:cd:78:dc:e9:0b:94:c9:f0:cb:53:8a:b1:
         62:ae:0b:9d:5b:de:6e:4f:de:69:e1:74:03:ef:2a:a2:a5:69:
         d0:c6:7a:a9:9f:1e:e6:7c:2f:d4:ad:d7:43:d1:3d:ea:00:13:
         ef:ce:5e:56:96:79:06:43:df:c6:a3:0c:04:77:4d:eb:16:9c:
         eb:56:bc:38:f0:cc:d2:9e:f6:19:cb:1d:48:4c:9b:c2:85:84:
         32:92:3d:56:29:87:57:78:89:65:bb:87:5c:1d:48:4f:15:6c:
         3f:bc:d9:ff:27:8c:9c:2b:4b:49:0a:f3:5e:0c:da:23:26:2b:
         9b:45:ad:df:32:d0:44:09:57:f3:b3:2d:75:68:b7:89:f2:6b:
         3a:cf:ad:91:2f:24:1f:00:69:7c:a6:e6:e5:27:46:e5:91:83:
         da:00:c9:02:aa:4e:78:ba:40:6c:93:04:3a:45:d4:e8:b1:5f:
         4f:9e:09:da
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWgXxDWXu+1JkLX2Ce4mLH7l4jqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzBaFw0yNTAzMDQxODEwMzBaMDMxMTAvBgNV
BAMTKERBOTUwM0RGQzY1QUU5NjIzQjc1MEQ2MUY5MjM3RUM4N0RGMjYwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLCnNgMrS7JT247+FyHGZ1d81/
dyoMERcouSSWQ4JhmneeJs8kgNe+daYFUvepjprITToHdi+4SVvJcjXFOsOxUYFH
RkdylaKsbZ3mHbHPwhrlwxIYN4/qVHdmAGTTpTAWCxtIQnuugQdsfNLnrf9z6eUA
xQ5yeiWKiXjcEMj9HT3+N5TBj3FIgJ+JnXkhzufYERUP1GWeEMV/+zyMIF3OJ4X3
ZEnleYPpe16oaBQU4j0ll94LYWIZD6Mp28j8KNZZXliyykD5m+BfMkC/7Snp3mx4
8f0LyTYL8nU1VXkqYHeJ7x9AMYGHBEW+OzOPNvmufaTgdv0xx5OmSU0GOx5bAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2pUD38Za6WI7dQ1h+SN+yH3yYK4wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMyMzAzMDJlMzEzMDM2MmUzMjMyMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzMzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGrj
MA0GCSqGSIb3DQEBCwUAA4IBAQA17YWAhWfsyer/XYG3q+taVwbZX2DhqopqY3TD
SA9vcI8yO2bd9g6KBJt5Ecudz2SMyg10sboeBhHB+mhIDNqpFT3hFXD3s/9rh2Od
31PNeNzpC5TJ8MtTirFirgudW95uT95p4XQD7yqipWnQxnqpnx7mfC/UrddD0T3q
ABPvzl5WlnkGQ9/GowwEd03rFpzrVrw48MzSnvYZyx1ITJvChYQykj1WKYdXeIll
u4dcHUhPFWw/vNn/J4ycK0tJCvNeDNojJiubRa3fMtBECVfzsy11aLeJ8ms6z62R
LyQfAGl8publJ0blkYPaAMkCqk54ukBskwQ6RdTosV9Pngna
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org