Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233372e302f32342d3234203d3e203532323632.roa
File:                     3230302e3130362e3233372e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          KPj4amO1tCp3ifjI47KE9QskoBT+ICiI+OWsDe/0vkM=
Subject key identifier:   B2:74:85:00:8F:5D:A7:D0:21:45:F0:22:43:FA:FF:AE:D1:ED:B3:7B
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1E54235BD9BED7860A25A6751FC755A39D9A440E
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233372e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 18:10:36 +0000
ROA not before:           Tue 05 Mar 2024 18:05:36 +0000
ROA not after:            Tue 04 Mar 2025 18:10:36 +0000
asID:                     52262
IP address blocks:        200.106.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:54:23:5b:d9:be:d7:86:0a:25:a6:75:1f:c7:55:a3:9d:9a:44:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:36 2024 GMT
            Not After : Mar  4 18:10:36 2025 GMT
        Subject: CN=B27485008F5DA7D02145F02243FAFFAED1EDB37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:66:49:86:d9:78:53:b1:d6:04:d0:c8:59:
                    8c:64:b8:4f:2d:27:85:7b:2d:97:b9:c3:df:d7:96:
                    1e:00:c5:bd:8f:af:b6:bc:e8:ec:0d:cb:d7:67:bf:
                    17:4f:d2:b9:34:2f:ec:30:ff:db:a5:58:b9:41:66:
                    7a:f7:eb:85:25:5f:37:df:c4:38:51:27:ea:ff:b7:
                    09:26:7c:a6:60:4b:b5:c6:be:08:e8:78:05:ae:60:
                    b8:46:37:ba:72:24:32:68:c5:bf:12:b1:78:96:c3:
                    c3:fb:8f:53:f4:45:dd:7e:bf:14:90:fe:52:75:11:
                    75:8d:92:41:28:e7:03:65:12:8e:c0:e0:1d:4a:13:
                    b3:ed:81:79:5a:f0:9a:f0:c2:ba:19:b8:4e:f3:c1:
                    d0:44:3b:15:6f:1c:80:7d:9b:27:fd:88:02:cd:70:
                    bf:c9:17:e3:10:55:93:8a:40:e2:ce:17:cf:f8:a3:
                    d2:0f:73:f2:c2:cc:9e:45:28:ee:fb:2a:4a:72:a4:
                    5b:03:b3:30:c4:1c:cf:81:e6:cc:c3:3d:93:d2:da:
                    5b:4f:f4:74:4e:fc:5f:00:f7:ce:cd:ea:d3:0c:80:
                    70:99:ec:94:c8:9f:b8:92:f7:86:38:27:6b:0a:e9:
                    c1:67:75:e6:57:1b:2c:f0:7f:1d:f1:c6:11:06:ad:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:74:85:00:8F:5D:A7:D0:21:45:F0:22:43:FA:FF:AE:D1:ED:B3:7B
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233372e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:c2:5a:11:f2:07:e0:b8:91:12:64:bd:f3:78:4a:aa:32:
         12:68:49:02:6c:ce:3c:a0:fb:2f:68:5e:2f:c9:75:f6:6b:c3:
         a0:aa:44:8a:1e:e2:34:02:16:c3:cf:82:5a:a1:85:24:2a:72:
         eb:a0:7f:74:e5:2a:36:fb:52:ea:2f:00:91:63:b5:ec:b6:bb:
         fc:81:fe:d8:75:87:df:d1:de:9c:af:f2:3c:e1:ff:4d:e7:af:
         cb:2a:89:d5:9f:9a:a4:47:b1:b7:b2:44:66:71:00:c4:3b:f9:
         02:1f:a2:56:0e:32:85:0b:33:84:c5:71:ed:40:88:5c:86:83:
         b0:36:4a:60:69:24:ca:e6:51:b2:93:f7:83:11:a6:9e:e2:74:
         45:11:71:aa:c0:4e:b6:ef:a7:4a:84:11:bc:af:0f:05:78:37:
         42:3e:c4:83:57:1e:5c:d6:f2:0d:d8:e7:c3:22:72:45:18:cd:
         bb:be:0a:35:e2:08:07:f7:c1:a0:a9:45:5b:a2:be:a2:83:25:
         c1:21:17:24:7d:b4:c2:85:47:d6:49:4f:eb:f9:00:80:1c:c1:
         84:ea:72:5a:d7:f3:8c:f2:56:29:7c:56:38:41:2e:f6:ac:17:
         0a:68:a3:02:dc:c0:cc:ed:0c:06:97:9f:b7:ae:2f:ba:8d:b1:
         0a:d6:cd:78
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHlQjW9m+14YKJaZ1H8dVo52aRA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzZaFw0yNTAzMDQxODEwMzZaMDMxMTAvBgNV
BAMTKEIyNzQ4NTAwOEY1REE3RDAyMTQ1RjAyMjQzRkFGRkFFRDFFREIzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5GZJhtl4U7HWBNDIWYxkuE8t
J4V7LZe5w9/Xlh4Axb2Pr7a86OwNy9dnvxdP0rk0L+ww/9ulWLlBZnr364UlXzff
xDhRJ+r/twkmfKZgS7XGvgjoeAWuYLhGN7pyJDJoxb8SsXiWw8P7j1P0Rd1+vxSQ
/lJ1EXWNkkEo5wNlEo7A4B1KE7PtgXla8JrwwroZuE7zwdBEOxVvHIB9myf9iALN
cL/JF+MQVZOKQOLOF8/4o9IPc/LCzJ5FKO77KkpypFsDszDEHM+B5szDPZPS2ltP
9HRO/F8A987N6tMMgHCZ7JTIn7iS94Y4J2sK6cFndeZXGyzwfx3xxhEGrQNXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsnSFAI9dp9AhRfAiQ/r/rtHts3swHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMyMzAzMDJlMzEzMDM2MmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGrt
MA0GCSqGSIb3DQEBCwUAA4IBAQBm5cJaEfIH4LiREmS983hKqjISaEkCbM48oPsv
aF4vyXX2a8OgqkSKHuI0AhbDz4JaoYUkKnLroH905So2+1LqLwCRY7Xstrv8gf7Y
dYff0d6cr/I84f9N56/LKonVn5qkR7G3skRmcQDEO/kCH6JWDjKFCzOExXHtQIhc
hoOwNkpgaSTK5lGyk/eDEaae4nRFEXGqwE6276dKhBG8rw8FeDdCPsSDVx5c1vIN
2OfDInJFGM27vgo14ggH98GgqUVbor6igyXBIRckfbTChUfWSU/r+QCAHMGE6nJa
1/OM8lYpfFY4QS72rBcKaKMC3MDM7QwGl5+3ri+6jbEK1s14
-----END CERTIFICATE-----
Generated at Thu May 2 01:04:48 2024 by rpki-client on console-fra.rpki-client.org