Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa
File:                     3230302e302e37332e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          U5GMvIALe6Lz4vRW8cvWaPKLJyJebyg27k5nQtKfU0A=
Subject key identifier:   41:B9:85:4A:19:8D:44:B7:39:89:83:3C:7B:B5:5B:C2:2F:7D:CD:28
Certificate issuer:       /CN=A0D6B1F60A597134F74DED969613691F95B5814F
Certificate serial:       24F193E7C313D8F8C52F9250D858AB6231817D79
Authority key identifier: A0:D6:B1:F6:0A:59:71:34:F7:4D:ED:96:96:13:69:1F:95:B5:81:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0D6B1F60A597134F74DED969613691F95B5814F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:06:03 +0000
ROA not before:           Tue 05 Mar 2024 18:01:03 +0000
ROA not after:            Tue 04 Mar 2025 18:06:03 +0000
asID:                     23031
IP address blocks:        200.0.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/A0D6B1F60A597134F74DED969613691F95B5814F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/A0D6B1F60A597134F74DED969613691F95B5814F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0D6B1F60A597134F74DED969613691F95B5814F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f1:93:e7:c3:13:d8:f8:c5:2f:92:50:d8:58:ab:62:31:81:7d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D6B1F60A597134F74DED969613691F95B5814F
        Validity
            Not Before: Mar  5 18:01:03 2024 GMT
            Not After : Mar  4 18:06:03 2025 GMT
        Subject: CN=41B9854A198D44B73989833C7BB55BC22F7DCD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:4f:0d:d5:7f:51:7a:d7:e2:38:16:aa:ad:
                    ab:ff:c7:d6:f5:52:e3:06:42:fc:b5:9c:3b:25:71:
                    5d:89:8f:6a:30:1e:3b:88:97:5c:52:fa:ec:bd:b4:
                    92:ef:7d:64:71:c0:bc:a0:d4:93:78:c9:39:ca:ee:
                    ec:94:77:c1:ca:c2:e6:a4:29:71:f7:18:8f:1a:9f:
                    63:c8:fc:8c:7d:dd:c7:1f:02:b2:0b:17:07:80:97:
                    92:8d:d5:8e:18:ef:5f:ca:03:55:69:82:68:74:f4:
                    2e:79:a8:3b:33:e7:c4:95:1a:b9:03:bc:1b:26:02:
                    48:a0:99:c5:16:96:f5:ff:db:b3:5a:71:62:ea:d9:
                    4d:65:d1:e4:ec:40:06:b1:a1:6b:54:7f:c1:6b:16:
                    f4:9e:07:6e:7a:69:68:32:01:88:28:c9:4a:42:d4:
                    18:e6:33:e2:3d:ac:32:6b:9a:cc:80:bf:e3:92:0b:
                    c3:59:f0:18:a5:12:8a:f9:6f:12:5c:e7:e4:5a:a5:
                    65:ec:be:58:ac:a0:3b:e1:77:69:c7:d3:e9:6e:9c:
                    44:9a:bf:68:0b:04:38:57:8e:6e:62:af:07:ac:92:
                    70:54:86:07:50:41:87:1f:ca:3e:8a:a6:91:41:8b:
                    57:83:1c:6b:f5:02:f0:34:b9:59:b8:f4:d0:a5:90:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:85:4A:19:8D:44:B7:39:89:83:3C:7B:B5:5B:C2:2F:7D:CD:28
            X509v3 Authority Key Identifier:
                keyid:A0:D6:B1:F6:0A:59:71:34:F7:4D:ED:96:96:13:69:1F:95:B5:81:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/A0D6B1F60A597134F74DED969613691F95B5814F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0D6B1F60A597134F74DED969613691F95B5814F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B6BAE81785BE67F543498A64753A5477043B0C157D26C4F2790D52F63FE8C14/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:a6:c1:7b:93:0d:7a:64:4e:f3:83:d7:6b:b2:76:41:31:
         37:7a:8e:48:a8:00:cb:15:b3:10:43:e7:5d:7b:f4:f7:a8:e0:
         28:0f:c4:4c:9b:3a:53:75:14:90:d9:60:37:b9:29:46:cb:5c:
         5f:a0:d9:8e:e6:de:1e:0e:27:9e:25:68:e5:8b:89:90:61:de:
         69:e2:45:b5:53:f2:7c:d9:07:b0:cf:2d:aa:a1:a4:94:c7:07:
         df:12:5e:b3:4e:c4:73:08:b6:f0:5a:1a:0d:2e:57:e9:8d:dd:
         14:c2:26:82:50:80:81:e0:03:9c:e2:c0:df:94:70:6a:2b:75:
         c4:42:48:6d:c5:d8:d1:30:05:58:3e:87:55:7b:60:a6:8f:98:
         5d:57:36:ce:78:8c:57:e8:3d:6d:3c:02:7a:d9:1b:26:49:31:
         c2:67:1a:20:98:1f:6a:86:1b:c0:9d:52:27:e2:ea:bb:2f:3b:
         55:65:73:2a:24:1b:d9:74:94:3e:c2:e8:aa:25:33:8f:db:c1:
         70:20:b0:a8:4f:0a:71:15:50:c7:ac:2b:c6:3b:a2:d8:50:e9:
         8c:ca:1d:66:f3:ce:e4:18:5c:63:b0:74:a9:15:b1:15:6e:59:
         76:ac:90:74:bc:d2:27:bd:07:08:1c:5c:39:47:33:8c:6c:af:
         70:c4:d4:bb
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJPGT58MT2PjFL5JQ2FirYjGBfXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBENkIxRjYwQTU5NzEzNEY3NERFRDk2OTYxMzY5MUY5
NUI1ODE0RjAeFw0yNDAzMDUxODAxMDNaFw0yNTAzMDQxODA2MDNaMDMxMTAvBgNV
BAMTKDQxQjk4NTRBMTk4RDQ0QjczOTg5ODMzQzdCQjU1QkMyMkY3RENEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJE8N1X9RetfiOBaqrav/x9b1
UuMGQvy1nDslcV2Jj2owHjuIl1xS+uy9tJLvfWRxwLyg1JN4yTnK7uyUd8HKwuak
KXH3GI8an2PI/Ix93ccfArILFweAl5KN1Y4Y71/KA1Vpgmh09C55qDsz58SVGrkD
vBsmAkigmcUWlvX/27NacWLq2U1l0eTsQAaxoWtUf8FrFvSeB256aWgyAYgoyUpC
1BjmM+I9rDJrmsyAv+OSC8NZ8BilEor5bxJc5+RapWXsvlisoDvhd2nH0+lunESa
v2gLBDhXjm5irwesknBUhgdQQYcfyj6KppFBi1eDHGv1AvA0uVm49NClkAtTAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUQbmFShmNRLc5iYM8e7Vbwi99zSgwHwYDVR0j
BBgwFoAUoNax9gpZcTT3Te2WlhNpH5W1gU8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQjZCQUU4MTc4NUJFNjdGNTQzNDk4QTY0NzUzQTU0Nzcw
NDNCMEMxNTdEMjZDNEYyNzkwRDUyRjYzRkU4QzE0LzAvQTBENkIxRjYwQTU5NzEz
NEY3NERFRDk2OTYxMzY5MUY5NUI1ODE0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEQ2QjFGNjBBNTk3MTM0Rjc0
REVEOTY5NjEzNjkxRjk1QjU4MTRGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0I2QkFFODE3ODVCRTY3RjU0MzQ5OEE2NDc1M0E1NDc3MDQzQjBDMTU3
RDI2QzRGMjc5MEQ1MkY2M0ZFOEMxNC8wLzMyMzAzMDJlMzAyZTM3MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyABJMA0GCSqG
SIb3DQEBCwUAA4IBAQBNKKbBe5MNemRO84PXa7J2QTE3eo5IqADLFbMQQ+dde/T3
qOAoD8RMmzpTdRSQ2WA3uSlGy1xfoNmO5t4eDieeJWjli4mQYd5p4kW1U/J82Qew
zy2qoaSUxwffEl6zTsRzCLbwWhoNLlfpjd0UwiaCUICB4AOc4sDflHBqK3XEQkht
xdjRMAVYPodVe2Cmj5hdVzbOeIxX6D1tPAJ62RsmSTHCZxogmB9qhhvAnVIn4uq7
LztVZXMqJBvZdJQ+wuiqJTOP28FwILCoTwpxFVDHrCvGO6LYUOmMyh1m887kGFxj
sHSpFbEVbll2rJB0vNInvQcIHFw5RzOMbK9wxNS7
-----END CERTIFICATE-----
Generated at Tue May 7 19:21:57 2024 by rpki-client on console-ams.rpki-client.org