Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa
File:                     3230302e34392e3131322e302f32312d3234203d3e203237393530.roa (raw, json)
Hash identifier:          hSZs5XHQlNvCTLbAXhxQpklM5ZtbYFBqqZz8y4oTKMI=
Subject key identifier:   22:95:1C:7B:EC:10:AD:F3:09:7B:DB:3E:33:06:86:38:D4:F3:BE:F4
Certificate issuer:       /CN=569A65DAE1BF90949ECA52CA93D76778B05E6189
Certificate serial:       4C892076EF0025989E30FDE21FCB981448048096
Authority key identifier: 56:9A:65:DA:E1:BF:90:94:9E:CA:52:CA:93:D7:67:78:B0:5E:61:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa
Signing time:             Tue 05 Mar 2024 17:40:29 +0000
ROA not before:           Tue 05 Mar 2024 17:35:29 +0000
ROA not after:            Tue 04 Mar 2025 17:40:29 +0000
asID:                     27950
IP address blocks:        200.49.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:20:76:ef:00:25:98:9e:30:fd:e2:1f:cb:98:14:48:04:80:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569A65DAE1BF90949ECA52CA93D76778B05E6189
        Validity
            Not Before: Mar  5 17:35:29 2024 GMT
            Not After : Mar  4 17:40:29 2025 GMT
        Subject: CN=22951C7BEC10ADF3097BDB3E33068638D4F3BEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:55:3d:1b:1b:48:9d:dc:0c:6d:a4:bf:ef:
                    40:ee:4d:89:ff:df:19:ed:bf:52:05:58:e9:eb:2f:
                    19:99:00:7e:32:77:71:30:31:54:d4:2b:2b:5e:b6:
                    8f:b6:8c:5c:92:e0:f3:99:6a:ed:e1:46:03:54:be:
                    58:8d:d6:f2:67:83:4d:a6:8d:78:ed:66:b6:01:a9:
                    6f:75:d3:8b:86:03:60:08:e8:08:67:8f:90:8d:9d:
                    a2:15:f2:30:ae:14:9e:38:e5:53:89:dc:91:63:5d:
                    50:4b:f1:2c:c8:b6:d6:fe:b2:71:01:93:d3:6a:77:
                    ba:f8:f9:89:a5:5e:5e:82:3e:ed:20:65:cc:3e:0c:
                    05:58:b3:b5:4e:62:58:a0:ce:fd:09:9f:24:7c:ec:
                    31:ab:13:af:ab:9a:a5:39:d2:c1:e3:cf:db:86:8e:
                    09:83:0c:14:00:30:66:39:b8:d3:31:cf:d8:3f:09:
                    dd:8d:9c:07:7c:49:6f:e8:f3:a4:01:7f:45:91:96:
                    89:38:f1:ea:f3:b2:bb:ef:76:9b:c6:d8:ca:b5:52:
                    ac:fe:73:e3:13:91:d2:35:d9:a0:fa:9d:54:01:0f:
                    e9:8d:02:82:a4:10:e6:87:70:ee:a0:4c:67:6c:cd:
                    5f:18:33:6e:f8:81:4c:b0:76:10:ce:3b:02:a6:c6:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:1C:7B:EC:10:AD:F3:09:7B:DB:3E:33:06:86:38:D4:F3:BE:F4
            X509v3 Authority Key Identifier:
                keyid:56:9A:65:DA:E1:BF:90:94:9E:CA:52:CA:93:D7:67:78:B0:5E:61:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/569A65DAE1BF90949ECA52CA93D76778B05E6189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1E913D68212B735A2036385F3E0A6944680DDD553EEB94399A1269EEA9909F/0/3230302e34392e3131322e302f32312d3234203d3e203237393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:04:96:8f:61:ed:97:40:8d:7c:d4:6e:61:e8:48:5c:f6:
         ff:60:f8:fb:23:03:f1:5b:d9:01:8d:6d:53:14:14:9e:a4:fb:
         1b:8f:2b:32:e3:5e:83:33:f0:b4:24:67:67:42:56:b8:49:7c:
         57:9a:09:53:17:26:66:1c:c9:af:2a:fb:e1:0e:b6:fb:b8:55:
         15:ca:67:ae:de:65:55:34:9b:34:1a:6e:9b:f9:6d:e2:88:95:
         72:f1:78:30:fb:f2:54:bf:3a:e9:93:f6:7c:8d:76:3e:31:cd:
         ef:f0:5a:e4:50:1a:32:57:2b:56:37:9c:d4:45:2e:a9:6d:7b:
         14:39:18:75:c4:e9:8b:29:f5:6d:c8:8a:c1:74:3a:82:44:f9:
         1c:ac:22:91:d3:18:98:4e:33:5f:3d:76:1f:e4:4f:a8:ca:fe:
         84:43:42:59:07:4c:6f:27:26:43:9b:e9:b2:8b:bf:24:fe:3d:
         c1:0c:d0:cf:79:d6:6e:c5:1d:ae:7a:c5:43:f4:14:47:93:03:
         b8:47:ab:d9:0c:e4:71:fe:89:80:c2:33:c0:dc:b0:b6:01:cb:
         4d:10:02:1a:1d:52:99:61:38:b9:93:c7:1b:e9:00:cb:a1:3c:
         1e:44:d4:fd:49:06:c2:8b:83:0a:2e:1c:59:4b:c1:57:d2:f2:
         20:f6:0b:c3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTIkgdu8AJZieMP3iH8uYFEgEgJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5QTY1REFFMUJGOTA5NDlFQ0E1MkNBOTNENzY3NzhC
MDVFNjE4OTAeFw0yNDAzMDUxNzM1MjlaFw0yNTAzMDQxNzQwMjlaMDMxMTAvBgNV
BAMTKDIyOTUxQzdCRUMxMEFERjMwOTdCREIzRTMzMDY4NjM4RDRGM0JFRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BFU9GxtIndwMbaS/70DuTYn/
3xntv1IFWOnrLxmZAH4yd3EwMVTUKyteto+2jFyS4POZau3hRgNUvliN1vJng02m
jXjtZrYBqW9104uGA2AI6Ahnj5CNnaIV8jCuFJ445VOJ3JFjXVBL8SzIttb+snEB
k9Nqd7r4+YmlXl6CPu0gZcw+DAVYs7VOYligzv0JnyR87DGrE6+rmqU50sHjz9uG
jgmDDBQAMGY5uNMxz9g/Cd2NnAd8SW/o86QBf0WRlok48erzsrvvdpvG2Mq1Uqz+
c+MTkdI12aD6nVQBD+mNAoKkEOaHcO6gTGdszV8YM274gUywdhDOOwKmxpTtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIpUce+wQrfMJe9s+MwaGONTzvvQwHwYDVR0j
BBgwFoAUVppl2uG/kJSeylLKk9dneLBeYYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjFFOTEzRDY4MjEyQjczNUEyMDM2Mzg1RjNFMEE2OTQ0
NjgwRERENTUzRUVCOTQzOTlBMTI2OUVFQTk5MDlGLzAvNTY5QTY1REFFMUJGOTA5
NDlFQ0E1MkNBOTNENzY3NzhCMDVFNjE4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NjlBNjVEQUUxQkY5MDk0OUVD
QTUyQ0E5M0Q3Njc3OEIwNUU2MTg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YxRTkxM0Q2ODIxMkI3MzVBMjAzNjM4NUYzRTBBNjk0NDY4MERERDU1
M0VFQjk0Mzk5QTEyNjlFRUE5OTA5Ri8wLzMyMzAzMDJlMzQzOTJlMzEzMTMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gxcDAN
BgkqhkiG9w0BAQsFAAOCAQEAil4Elo9h7ZdAjXzUbmHoSFz2/2D4+yMD8VvZAY1t
UxQUnqT7G48rMuNegzPwtCRnZ0JWuEl8V5oJUxcmZhzJryr74Q62+7hVFcpnrt5l
VTSbNBpum/lt4oiVcvF4MPvyVL866ZP2fI12PjHN7/Ba5FAaMlcrVjec1EUuqW17
FDkYdcTpiyn1bciKwXQ6gkT5HKwikdMYmE4zXz12H+RPqMr+hENCWQdMbycmQ5vp
sou/JP49wQzQz3nWbsUdrnrFQ/QUR5MDuEer2Qzkcf6JgMIzwNywtgHLTRACGh1S
mWE4uZPHG+kAy6E8HkTU/UkGwouDCi4cWUvBV9LyIPYLww==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org