Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa
File:                     3230302e31332e3139302e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          vHJ6CV62LCyFDgQi5CmqgqCREeeqrtj9fYAhkh01SLM=
Subject key identifier:   0A:3B:EF:92:B7:F7:86:55:4E:0A:B6:0F:05:B5:12:9C:04:10:EB:CF
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       2584F3017007ED60F1B22167CE8C1D57189B7A2C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:35 +0000
ROA not before:           Tue 05 Mar 2024 18:05:35 +0000
ROA not after:            Tue 04 Mar 2025 18:10:35 +0000
asID:                     27773
IP address blocks:        200.13.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:84:f3:01:70:07:ed:60:f1:b2:21:67:ce:8c:1d:57:18:9b:7a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:35 2024 GMT
            Not After : Mar  4 18:10:35 2025 GMT
        Subject: CN=0A3BEF92B7F786554E0AB60F05B5129C0410EBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:0e:3f:7e:59:f2:f0:d4:73:0b:ef:98:2b:
                    95:4c:25:88:8f:62:9e:5a:66:25:7d:1c:7f:74:a9:
                    82:ef:68:e7:ae:00:15:a3:d0:b3:8c:ff:2c:67:35:
                    2e:59:32:3a:a2:13:63:69:a2:bf:39:56:91:17:2a:
                    55:96:f5:68:5e:f8:cd:c6:7b:74:ad:42:e8:22:e5:
                    f9:43:cb:82:4c:6c:6b:6d:35:39:63:d4:96:82:53:
                    8b:1a:e2:2e:0e:8c:e1:4a:3b:a1:c2:43:a8:16:39:
                    4c:85:f9:6b:43:12:f6:db:76:e4:ee:08:67:33:d6:
                    a1:a1:77:41:11:e0:e0:b4:9a:a0:40:18:57:73:b6:
                    29:67:2c:86:9c:52:25:00:53:a3:88:c8:46:07:85:
                    7a:39:13:1c:ed:2a:0e:66:11:dc:91:4f:3d:f8:e3:
                    18:5a:78:63:fc:c5:08:ad:36:04:85:f5:79:80:b8:
                    83:59:ba:bd:dc:2e:f0:80:66:ad:e6:c3:72:ff:18:
                    b3:e3:e3:e6:c7:8f:41:64:32:b1:48:f6:b9:fd:e6:
                    b4:9a:c2:c7:4b:c2:33:ca:13:05:a0:13:53:0f:1c:
                    6a:76:ee:8f:8b:f8:a1:4d:4a:56:8b:af:54:49:d0:
                    10:f5:14:27:c5:b7:83:30:82:4e:f6:ee:14:46:81:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3B:EF:92:B7:F7:86:55:4E:0A:B6:0F:05:B5:12:9C:04:10:EB:CF
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e5:cb:e7:c0:99:93:64:0b:d9:c2:49:97:43:0e:cc:b0:f7:
         b6:96:7b:af:92:1d:86:23:c8:56:d9:45:4c:c7:7d:55:77:c7:
         d7:3c:dd:cd:1c:cf:cc:f6:92:40:e3:40:5c:43:26:6a:23:08:
         41:13:7c:c4:cb:56:42:10:07:4b:e7:24:3c:48:55:5f:0d:22:
         7b:f4:79:a4:78:fe:05:34:d3:77:42:f0:8c:b9:a1:76:a0:40:
         1f:ae:35:55:5d:d2:98:78:8f:20:ec:0c:1d:64:f7:03:b8:39:
         f1:64:e8:ca:d3:f3:c6:8a:f0:10:aa:0e:62:3d:43:27:e1:b4:
         e4:0b:3c:52:29:d5:b4:20:44:f2:7d:a0:9b:7d:82:9b:b1:71:
         0c:84:e4:b0:d6:91:64:f6:9f:6f:c2:75:47:1e:57:b4:b3:a6:
         90:00:52:f4:67:e3:66:21:60:4c:d7:d1:a1:b2:23:c9:5e:95:
         d2:12:89:58:d6:45:b1:09:f3:0d:a6:57:5d:49:8f:fd:36:41:
         1a:9c:88:07:00:7b:f5:13:73:be:6d:85:f6:dc:10:e9:f4:99:
         b9:18:ac:2c:80:7c:c8:62:e9:3f:22:25:d2:c4:8a:ea:9d:71:
         f8:4c:cd:ce:82:c9:44:c7:0e:99:7e:d0:fa:6d:60:b2:2d:54:
         07:2c:db:90
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJYTzAXAH7WDxsiFnzowdVxibeiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzVaFw0yNTAzMDQxODEwMzVaMDMxMTAvBgNV
BAMTKDBBM0JFRjkyQjdGNzg2NTU0RTBBQjYwRjA1QjUxMjlDMDQxMEVCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWw4/flny8NRzC++YK5VMJYiP
Yp5aZiV9HH90qYLvaOeuABWj0LOM/yxnNS5ZMjqiE2Npor85VpEXKlWW9Whe+M3G
e3StQugi5flDy4JMbGttNTlj1JaCU4sa4i4OjOFKO6HCQ6gWOUyF+WtDEvbbduTu
CGcz1qGhd0ER4OC0mqBAGFdztilnLIacUiUAU6OIyEYHhXo5ExztKg5mEdyRTz34
4xhaeGP8xQitNgSF9XmAuINZur3cLvCAZq3mw3L/GLPj4+bHj0FkMrFI9rn95rSa
wsdLwjPKEwWgE1MPHGp27o+L+KFNSlaLr1RJ0BD1FCfFt4Mwgk727hRGgQ/3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCjvvkrf3hlVOCrYPBbUSnAQQ688wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMyMzAzMDJlMzEzMzJlMzEzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNvjAN
BgkqhkiG9w0BAQsFAAOCAQEAL+XL58CZk2QL2cJJl0MOzLD3tpZ7r5IdhiPIVtlF
TMd9VXfH1zzdzRzPzPaSQONAXEMmaiMIQRN8xMtWQhAHS+ckPEhVXw0ie/R5pHj+
BTTTd0LwjLmhdqBAH641VV3SmHiPIOwMHWT3A7g58WToytPzxorwEKoOYj1DJ+G0
5As8UinVtCBE8n2gm32Cm7FxDITksNaRZPafb8J1Rx5XtLOmkABS9GfjZiFgTNfR
obIjyV6V0hKJWNZFsQnzDaZXXUmP/TZBGpyIBwB79RNzvm2F9twQ6fSZuRisLIB8
yGLpPyIl0sSK6p1x+EzNzoLJRMcOmX7Q+m1gsi1UByzbkA==
-----END CERTIFICATE-----
Generated at Thu May 16 21:44:38 2024 by rpki-client on console-fra.rpki-client.org