Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/3230302e33342e3137312e302f32342d3234203d3e203631343633.roa
File:                     3230302e33342e3137312e302f32342d3234203d3e203631343633.roa (raw, json)
Hash identifier:          kPIqQXI2ZWKJL0/GFS3K8wwrTqnDV9MOMDwptWBgFFE=
Subject key identifier:   0F:B0:91:66:E5:C5:FB:D7:F0:B7:43:9F:A3:A5:A3:77:79:00:F9:10
Certificate issuer:       /CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB
Certificate serial:       5B3E435DA7E84F1CE90ACA43D4931635BA275AF0
Authority key identifier: 12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/3230302e33342e3137312e302f32342d3234203d3e203631343633.roa
Signing time:             Tue 05 Mar 2024 17:43:56 +0000
ROA not before:           Tue 05 Mar 2024 17:38:56 +0000
ROA not after:            Tue 04 Mar 2025 17:43:56 +0000
asID:                     61463
IP address blocks:        200.34.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3e:43:5d:a7:e8:4f:1c:e9:0a:ca:43:d4:93:16:35:ba:27:5a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB
        Validity
            Not Before: Mar  5 17:38:56 2024 GMT
            Not After : Mar  4 17:43:56 2025 GMT
        Subject: CN=0FB09166E5C5FBD7F0B7439FA3A5A3777900F910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:c3:eb:e2:58:cc:16:1a:95:b5:26:1a:34:
                    5d:bf:8d:8f:98:5c:20:11:b7:13:f5:e9:0a:ab:76:
                    1f:a2:21:71:6b:26:50:d3:7b:d7:f7:1f:cf:f2:ca:
                    98:a5:c9:2b:9c:95:c5:41:b4:23:6b:c8:f4:64:50:
                    fe:26:02:13:89:e3:47:be:bd:08:7c:b5:0c:90:88:
                    10:45:e5:45:9a:44:29:08:de:54:25:57:5e:cf:8c:
                    e5:42:bd:59:13:f5:e4:c1:e4:da:92:b4:58:21:36:
                    f4:40:ae:53:c1:61:86:e9:0b:5a:4e:f6:c4:dc:e2:
                    03:f2:7a:4e:dd:1c:f9:37:47:84:94:51:26:d8:73:
                    47:60:63:d8:dc:de:b6:9c:a9:14:48:3d:43:c7:5a:
                    a9:25:26:1c:a3:38:d5:8c:b6:16:3f:93:f7:35:57:
                    34:31:2f:bf:6c:45:b2:69:e1:3c:55:c5:d6:93:b7:
                    ef:f2:23:d5:56:d0:47:eb:7f:27:81:9d:a9:74:09:
                    ae:7c:8e:ee:42:5a:4a:03:e4:8c:cb:77:08:08:4f:
                    ef:6c:9f:cb:d6:ed:55:29:4f:c9:5d:16:ae:09:04:
                    da:a4:50:b5:ed:4b:89:b7:48:d8:df:1b:c0:33:b3:
                    7b:4e:9f:45:dc:92:86:5e:2c:e9:34:9a:bf:f1:37:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B0:91:66:E5:C5:FB:D7:F0:B7:43:9F:A3:A5:A3:77:79:00:F9:10
            X509v3 Authority Key Identifier:
                keyid:12:BF:AA:7C:91:F4:EB:76:B9:0D:5D:65:B9:B1:AD:DD:70:4D:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12BFAA7C91F4EB76B90D5D65B9B1ADDD704DB0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B30EBAEDCD528F4283152A95242C5DE5EA4850C69747EDE1CEE862AF9A615AF/0/3230302e33342e3137312e302f32342d3234203d3e203631343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:54:21:0b:7c:d9:8d:3d:ea:9b:22:e7:c8:0d:25:40:e7:4a:
         b5:e6:56:ca:79:0c:b3:78:09:8d:c9:b9:dc:ac:b5:6a:7a:83:
         cf:e9:8f:c4:3e:08:60:1e:6a:3c:13:1f:2f:47:e3:48:b0:9b:
         35:72:ec:9b:7e:63:9e:67:6a:9a:97:aa:fb:70:4b:92:dc:8b:
         25:62:8e:cf:9f:71:ae:2f:4e:cb:23:3c:71:de:7c:ec:c0:b3:
         07:4a:bf:3d:0d:fb:f0:cb:07:35:27:22:cc:ff:ff:b7:1f:a4:
         49:05:bf:54:90:49:a1:cd:8c:3a:27:3e:e7:41:ec:61:f0:3e:
         b2:06:c0:9a:ed:5e:44:d7:5c:aa:bb:49:91:b6:c1:1a:b4:b9:
         5e:25:76:57:7a:5c:a0:cf:73:a5:e5:1b:97:40:39:1f:5e:0f:
         d5:64:71:8c:24:f5:d5:3f:3b:42:01:dc:47:44:9c:3f:bd:aa:
         8b:1f:c8:a3:11:cc:30:27:90:8b:b6:fe:2c:64:85:71:83:fd:
         2f:ef:2e:d4:67:c0:15:99:cd:fd:d3:5b:7d:ac:a0:44:bf:c8:
         60:1d:ee:99:e9:d5:4c:56:2f:d5:b8:07:21:5e:95:77:86:3e:
         09:b2:9d:23:22:93:48:f0:56:26:f0:82:d8:94:c1:b6:a9:31:
         fd:84:ae:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWz5DXafoTxzpCspD1JMWNbonWvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJCRkFBN0M5MUY0RUI3NkI5MEQ1RDY1QjlCMUFEREQ3
MDREQjBBQjAeFw0yNDAzMDUxNzM4NTZaFw0yNTAzMDQxNzQzNTZaMDMxMTAvBgNV
BAMTKDBGQjA5MTY2RTVDNUZCRDdGMEI3NDM5RkEzQTVBMzc3NzkwMEY5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1C8Pr4ljMFhqVtSYaNF2/jY+Y
XCARtxP16Qqrdh+iIXFrJlDTe9f3H8/yypilySuclcVBtCNryPRkUP4mAhOJ40e+
vQh8tQyQiBBF5UWaRCkI3lQlV17PjOVCvVkT9eTB5NqStFghNvRArlPBYYbpC1pO
9sTc4gPyek7dHPk3R4SUUSbYc0dgY9jc3racqRRIPUPHWqklJhyjONWMthY/k/c1
VzQxL79sRbJp4TxVxdaTt+/yI9VW0EfrfyeBnal0Ca58ju5CWkoD5IzLdwgIT+9s
n8vW7VUpT8ldFq4JBNqkULXtS4m3SNjfG8Azs3tOn0XckoZeLOk0mr/xN5ElAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUD7CRZuXF+9fwt0Ofo6Wjd3kA+RAwHwYDVR0j
BBgwFoAUEr+qfJH063a5DV1lubGt3XBNsKswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQjMwRUJBRURDRDUyOEY0MjgzMTUyQTk1MjQyQzVERTVF
QTQ4NTBDNjk3NDdFREUxQ0VFODYyQUY5QTYxNUFGLzAvMTJCRkFBN0M5MUY0RUI3
NkI5MEQ1RDY1QjlCMUFEREQ3MDREQjBBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMkJGQUE3QzkxRjRFQjc2Qjkw
RDVENjVCOUIxQURERDcwNERCMEFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0IzMEVCQUVEQ0Q1MjhGNDI4MzE1MkE5NTI0MkM1REU1RUE0ODUwQzY5
NzQ3RURFMUNFRTg2MkFGOUE2MTVBRi8wLzMyMzAzMDJlMzMzNDJlMzEzNzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgiqzAN
BgkqhkiG9w0BAQsFAAOCAQEAR1QhC3zZjT3qmyLnyA0lQOdKteZWynkMs3gJjcm5
3Ky1anqDz+mPxD4IYB5qPBMfL0fjSLCbNXLsm35jnmdqmpeq+3BLktyLJWKOz59x
ri9OyyM8cd587MCzB0q/PQ378MsHNScizP//tx+kSQW/VJBJoc2MOic+50HsYfA+
sgbAmu1eRNdcqrtJkbbBGrS5XiV2V3pcoM9zpeUbl0A5H14P1WRxjCT11T87QgHc
R0ScP72qix/IoxHMMCeQi7b+LGSFcYP9L+8u1GfAFZnN/dNbfaygRL/IYB3umenV
TFYv1bgHIV6Vd4Y+CbKdIyKTSPBWJvCC2JTBtqkx/YSuQg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org