Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa
File:                     3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa (raw, json)
Hash identifier:          zwxZnwrcC/PP0ufxQMXowyWponYBtf3DCjTR7M45bb4=
Subject key identifier:   E0:74:16:7A:F1:58:8C:57:1C:C8:33:CE:3E:AE:5B:2C:5E:2A:7D:70
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       7246CA13921E04FE5DE804B43281F0F9D3EFC6E1
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa
Signing time:             Tue 12 Mar 2024 17:15:00 +0000
ROA not before:           Tue 12 Mar 2024 17:10:00 +0000
ROA not after:            Tue 11 Mar 2025 17:15:00 +0000
asID:                     22080
IP address blocks:        200.112.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:46:ca:13:92:1e:04:fe:5d:e8:04:b4:32:81:f0:f9:d3:ef:c6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Mar 12 17:10:00 2024 GMT
            Not After : Mar 11 17:15:00 2025 GMT
        Subject: CN=E074167AF1588C571CC833CE3EAE5B2C5E2A7D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:86:fd:d0:99:1e:da:76:30:44:16:3a:dd:
                    d7:00:27:ee:69:d7:e4:52:9e:9c:fc:07:91:c1:6c:
                    45:a0:a3:e8:ba:19:85:59:f4:0d:49:51:2c:59:4d:
                    e2:cc:cc:fb:38:8c:42:f8:4f:a5:5f:23:81:8e:27:
                    7f:3c:54:6a:0e:5f:ad:a8:13:44:68:bf:0a:9d:f7:
                    29:99:09:55:f7:e6:58:16:dc:22:07:12:d0:ed:6a:
                    2d:3c:66:80:b0:46:72:bd:e9:a3:4d:38:e9:32:18:
                    a6:c2:5c:e4:d0:be:55:14:6f:3e:42:8c:ce:3f:a0:
                    37:96:9b:04:55:2c:e1:d0:0c:98:ae:09:f2:86:36:
                    c1:5a:83:ce:fc:33:f9:61:d6:68:c0:ae:d3:7d:24:
                    66:ff:f8:a0:13:a8:ba:51:80:9e:ef:ec:53:d4:04:
                    69:83:ef:01:dc:77:bf:b7:a0:3b:23:42:7f:43:36:
                    9a:71:a6:e4:e0:7c:6f:fe:7b:5b:0f:5b:cd:3f:9d:
                    e7:eb:51:34:f6:43:ad:c8:3a:37:e0:a9:e5:49:81:
                    51:04:53:ab:0c:f6:5c:7d:f3:c7:c8:3a:12:41:fd:
                    57:d4:23:98:a0:a0:e4:48:75:f7:0c:a4:fa:27:1f:
                    57:79:a1:37:20:67:da:63:0d:69:ca:15:83:ba:bf:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:74:16:7A:F1:58:8C:57:1C:C8:33:CE:3E:AE:5B:2C:5E:2A:7D:70
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132382e302f31382d3234203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:fa:eb:5e:ef:a3:20:3f:fe:fc:f1:3a:df:ec:38:9c:32:
         08:e7:13:cd:c8:90:cf:ed:22:df:3c:31:ed:94:32:d3:5c:f8:
         23:49:65:0a:58:b9:34:76:0c:e0:dd:e9:02:e1:b6:29:4a:41:
         3b:61:06:6f:18:43:b1:00:0a:78:f2:32:6d:24:a6:f0:b8:81:
         c8:09:5f:d0:c7:fe:0c:87:b6:9a:94:c0:49:f0:60:a2:57:14:
         02:90:c3:d9:c6:32:28:b1:de:c1:2d:1a:43:fe:95:a0:27:a6:
         6a:01:cc:74:62:93:dd:5b:c9:ac:7a:2d:b8:c5:61:10:17:ff:
         e4:77:43:de:3c:8f:a2:7e:7e:c6:13:21:af:ee:54:23:31:0d:
         c2:68:c5:64:1f:bb:e6:ec:2d:92:5f:23:35:2d:7c:80:9d:91:
         54:62:e9:0c:5c:81:34:a1:a5:f0:75:aa:b0:78:3c:96:d4:b0:
         b0:70:6c:1d:bf:62:30:89:97:83:10:48:27:e1:92:62:66:cb:
         5e:a4:fa:dc:d6:74:64:27:ed:15:9d:72:2c:99:90:0a:df:50:
         70:d8:ce:7b:29:4a:8d:a6:a9:8f:5d:e8:c4:80:d0:79:7b:58:
         9f:bd:ec:a3:cf:56:b0:f5:0b:34:e4:74:b7:30:10:61:1a:45:
         46:59:f9:eb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUckbKE5IeBP5d6AS0MoHw+dPvxuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4NzlGQTc4QTNGNkMxOUYwRDFERDIxRjE4MUI5OTMy
NkEwNUNFRTAeFw0yNDAzMTIxNzEwMDBaFw0yNTAzMTExNzE1MDBaMDMxMTAvBgNV
BAMTKEUwNzQxNjdBRjE1ODhDNTcxQ0M4MzNDRTNFQUU1QjJDNUUyQTdENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR7Yb90Jke2nYwRBY63dcAJ+5p
1+RSnpz8B5HBbEWgo+i6GYVZ9A1JUSxZTeLMzPs4jEL4T6VfI4GOJ388VGoOX62o
E0Rovwqd9ymZCVX35lgW3CIHEtDtai08ZoCwRnK96aNNOOkyGKbCXOTQvlUUbz5C
jM4/oDeWmwRVLOHQDJiuCfKGNsFag878M/lh1mjArtN9JGb/+KATqLpRgJ7v7FPU
BGmD7wHcd7+3oDsjQn9DNppxpuTgfG/+e1sPW80/nefrUTT2Q63IOjfgqeVJgVEE
U6sM9lx988fIOhJB/VfUI5igoORIdfcMpPonH1d5oTcgZ9pjDWnKFYO6v/rBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4HQWevFYjFccyDPOPq5bLF4qfXAwHwYDVR0j
BBgwFoAU/Iefp4o/bBnw0d0h8YG5kyagXO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDQ2Q0I3REZBMTYwQjk2NDY3RjdCREJFMjc2N0Q4NzQz
NDVDN0FDMDU1M0VDMDg1NUY0RjZBRTQ3NEZCMzRELzAvRkM4NzlGQTc4QTNGNkMx
OUYwRDFERDIxRjE4MUI5OTMyNkEwNUNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzg3OUZBNzhBM0Y2QzE5RjBE
MUREMjFGMTgxQjk5MzI2QTA1Q0VFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q0NkNCN0RGQTE2MEI5NjQ2N0Y3QkRCRTI3NjdEODc0MzQ1QzdBQzA1
NTNFQzA4NTVGNEY2QUU0NzRGQjM0RC8wLzMyMzAzMDJlMzEzMTMyMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjMyMzAzODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyHCA
MA0GCSqGSIb3DQEBCwUAA4IBAQCzbfrrXu+jID/+/PE63+w4nDII5xPNyJDP7SLf
PDHtlDLTXPgjSWUKWLk0dgzg3ekC4bYpSkE7YQZvGEOxAAp48jJtJKbwuIHICV/Q
x/4Mh7aalMBJ8GCiVxQCkMPZxjIosd7BLRpD/pWgJ6ZqAcx0YpPdW8msei24xWEQ
F//kd0PePI+ifn7GEyGv7lQjMQ3CaMVkH7vm7C2SXyM1LXyAnZFUYukMXIE0oaXw
daqweDyW1LCwcGwdv2IwiZeDEEgn4ZJiZstepPrc1nRkJ+0VnXIsmZAK31Bw2M57
KUqNpqmPXejEgNB5e1ifveyjz1aw9Qs05HS3MBBhGkVGWfnr
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org