Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/3230302e3130362e3139362e302f32322d3232203d3e20323731383039.roa
File:                     3230302e3130362e3139362e302f32322d3232203d3e20323731383039.roa (raw, json)
Hash identifier:          nsk01BJMAkt3YwHIoSBZqLwRyJ7/7AprfStiads6ZAw=
Subject key identifier:   9C:A3:6E:98:69:7B:DB:5B:D5:8A:60:38:7F:37:4B:49:96:FF:6F:89
Certificate issuer:       /CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F
Certificate serial:       73C1F6CF537FB46201F08CE86B6F75D1283BB676
Authority key identifier: A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/3230302e3130362e3139362e302f32322d3232203d3e20323731383039.roa
Signing time:             Tue 05 Mar 2024 17:57:37 +0000
ROA not before:           Tue 05 Mar 2024 17:52:37 +0000
ROA not after:            Tue 04 Mar 2025 17:57:37 +0000
asID:                     271809
IP address blocks:        200.106.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:f6:cf:53:7f:b4:62:01:f0:8c:e8:6b:6f:75:d1:28:3b:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F
        Validity
            Not Before: Mar  5 17:52:37 2024 GMT
            Not After : Mar  4 17:57:37 2025 GMT
        Subject: CN=9CA36E98697BDB5BD58A60387F374B4996FF6F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:07:55:36:38:59:0a:e8:b4:f8:65:ca:9c:
                    40:c3:e4:21:3a:d3:42:ef:71:0f:07:6d:ed:a3:d5:
                    f8:7a:e4:62:f4:23:5d:1c:38:f4:78:49:d6:38:e5:
                    bc:ae:83:d1:76:98:f8:29:e3:e8:97:a8:72:61:a0:
                    6c:b6:a5:9f:76:68:ca:3a:93:3c:de:37:f7:67:df:
                    10:0b:eb:f8:6d:78:4f:1f:67:06:b9:9e:db:32:08:
                    e9:ba:60:a3:a7:9f:b2:c5:6c:c3:27:75:4c:a4:6d:
                    1c:0c:17:14:b2:e6:72:3a:e2:42:70:8c:0f:ba:85:
                    24:a4:ed:ec:b8:5f:a4:00:f7:f8:f9:07:1a:3c:29:
                    e3:3d:63:16:34:16:a2:4a:6b:ee:ae:88:89:31:97:
                    e4:0a:6c:07:68:ab:a9:1d:ac:e9:df:30:af:96:7d:
                    19:53:52:52:b6:62:21:9b:d3:e1:0c:48:91:fb:20:
                    de:44:12:c2:1e:4f:1f:55:a6:3d:54:a9:fa:36:04:
                    43:fc:2f:be:86:39:73:7f:86:1e:9f:c9:ef:c0:8a:
                    cf:cc:cc:c4:79:47:9c:8c:51:2a:a2:78:e6:e4:d0:
                    e3:41:70:ff:ac:ff:4a:54:4d:82:51:35:fa:b9:55:
                    46:6c:38:a1:93:9f:04:8c:b7:7b:af:63:3d:d9:bc:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:6E:98:69:7B:DB:5B:D5:8A:60:38:7F:37:4B:49:96:FF:6F:89
            X509v3 Authority Key Identifier:
                keyid:A0:6A:7E:C0:BF:96:06:15:9C:BA:1D:61:C3:A5:1C:CC:BA:54:1A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06A7EC0BF9606159CBA1D61C3A51CCCBA541A4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FD53FE5A0D912F24C163EAEC38E2066886AEB132D7CC98B732A614CE2ED4B28/0/3230302e3130362e3139362e302f32322d3232203d3e20323731383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:1a:1d:06:0d:2c:95:e7:7b:74:9f:46:0c:39:75:f8:6d:
         17:3c:7c:51:e2:4b:2e:b3:86:cc:d8:9f:0f:c9:4e:d2:47:8b:
         6d:8a:f2:d5:ea:9e:64:94:c2:3e:92:20:24:75:5e:31:be:9c:
         4a:fa:99:7f:78:74:96:38:f4:3a:90:e5:00:78:b6:99:c7:5e:
         e9:3f:0a:5e:53:a1:5c:04:02:ab:76:d5:76:7a:18:54:92:65:
         21:d6:1b:6b:5e:ea:92:ed:76:72:49:c2:25:8d:95:05:94:db:
         40:52:aa:58:61:ea:d3:dd:53:62:02:66:cb:25:2c:3c:12:09:
         a6:7d:22:70:67:77:02:00:b0:a2:81:23:59:6a:a9:ad:2b:1a:
         85:42:70:aa:8b:52:6c:1a:d2:17:84:1a:1c:6d:bb:5b:5f:9c:
         ec:0c:67:08:70:5d:37:f1:22:48:75:0f:da:f3:14:8c:7a:b4:
         b1:6e:1a:11:c0:35:9e:2a:08:71:72:29:28:af:ad:9e:4f:c9:
         45:d5:f8:24:51:00:b3:a4:55:64:2e:62:1a:93:1e:0d:f1:b0:
         bd:c6:88:7d:fa:11:fb:83:8f:f5:66:58:e4:a1:8f:99:f1:fa:
         e1:db:68:e5:f9:5e:80:11:5f:8d:e1:cf:e3:47:81:4e:9f:bc:
         72:7f:4e:19
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUc8H2z1N/tGIB8Izoa2910Sg7tnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA2QTdFQzBCRjk2MDYxNTlDQkExRDYxQzNBNTFDQ0NC
QTU0MUE0RjAeFw0yNDAzMDUxNzUyMzdaFw0yNTAzMDQxNzU3MzdaMDMxMTAvBgNV
BAMTKDlDQTM2RTk4Njk3QkRCNUJENThBNjAzODdGMzc0QjQ5OTZGRjZGODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTAdVNjhZCui0+GXKnEDD5CE6
00LvcQ8Hbe2j1fh65GL0I10cOPR4SdY45byug9F2mPgp4+iXqHJhoGy2pZ92aMo6
kzzeN/dn3xAL6/hteE8fZwa5ntsyCOm6YKOnn7LFbMMndUykbRwMFxSy5nI64kJw
jA+6hSSk7ey4X6QA9/j5Bxo8KeM9YxY0FqJKa+6uiIkxl+QKbAdoq6kdrOnfMK+W
fRlTUlK2YiGb0+EMSJH7IN5EEsIeTx9Vpj1Uqfo2BEP8L76GOXN/hh6fye/Ais/M
zMR5R5yMUSqieObk0ONBcP+s/0pUTYJRNfq5VUZsOKGTnwSMt3uvYz3ZvP8pAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUnKNumGl721vVimA4fzdLSZb/b4kwHwYDVR0j
BBgwFoAUoGp+wL+WBhWcuh1hw6UczLpUGk8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkQ1M0ZFNUEwRDkxMkYyNEMxNjNFQUVDMzhFMjA2Njg4
NkFFQjEzMkQ3Q0M5OEI3MzJBNjE0Q0UyRUQ0QjI4LzAvQTA2QTdFQzBCRjk2MDYx
NTlDQkExRDYxQzNBNTFDQ0NCQTU0MUE0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDZBN0VDMEJGOTYwNjE1OUNC
QTFENjFDM0E1MUNDQ0JBNTQxQTRGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZENTNGRTVBMEQ5MTJGMjRDMTYzRUFFQzM4RTIwNjY4ODZBRUIxMzJE
N0NDOThCNzMyQTYxNENFMkVENEIyOC8wLzMyMzAzMDJlMzEzMDM2MmUzMTM5MzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzEzODMwMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
asQwDQYJKoZIhvcNAQELBQADggEBAECjGh0GDSyV53t0n0YMOXX4bRc8fFHiSy6z
hszYnw/JTtJHi22K8tXqnmSUwj6SICR1XjG+nEr6mX94dJY49DqQ5QB4tpnHXuk/
Cl5ToVwEAqt21XZ6GFSSZSHWG2te6pLtdnJJwiWNlQWU20BSqlhh6tPdU2ICZssl
LDwSCaZ9InBndwIAsKKBI1lqqa0rGoVCcKqLUmwa0heEGhxtu1tfnOwMZwhwXTfx
Ikh1D9rzFIx6tLFuGhHANZ4qCHFyKSivrZ5PyUXV+CRRALOkVWQuYhqTHg3xsL3G
iH36EfuDj/VmWOShj5nx+uHbaOX5XoARX43hz+NHgU6fvHJ/Thk=
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org