Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa
File:                     3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa (raw, json)
Hash identifier:          dGG53S2dg9+8htmfhk2lsPskCCN3lgSNK7Ykz0GYO0s=
Subject key identifier:   C5:F5:E3:85:3D:DA:12:C5:B7:0C:F7:91:D6:CB:96:7C:93:41:54:A9
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       5E3FEE17DF4597C0FBE7D8F2DB63A80E12AE4475
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa
Signing time:             Wed 04 Sep 2024 22:20:00 +0000
ROA not before:           Wed 04 Sep 2024 22:15:00 +0000
ROA not after:            Wed 03 Sep 2025 22:20:00 +0000
asID:                     23031
IP address blocks:        200.112.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3f:ee:17:df:45:97:c0:fb:e7:d8:f2:db:63:a8:0e:12:ae:44:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Sep  4 22:15:00 2024 GMT
            Not After : Sep  3 22:20:00 2025 GMT
        Subject: CN=C5F5E3853DDA12C5B70CF791D6CB967C934154A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:3b:02:11:2f:1f:cb:b8:9b:fa:cb:8f:67:
                    4d:08:e7:0e:ae:c2:1b:88:c4:6a:67:80:5f:66:26:
                    6b:f8:ad:54:3d:b6:1c:3f:ce:fe:ff:e2:a1:70:f4:
                    fe:7a:f3:82:25:ab:a6:44:46:ae:9b:0c:8b:58:51:
                    99:d8:8b:61:f0:63:f1:94:b9:ea:87:79:d0:8f:e3:
                    21:49:83:fa:a4:4c:7b:74:1c:7c:00:bc:bd:01:6f:
                    38:e8:48:47:b6:e6:c8:02:99:0d:fc:28:b4:e9:03:
                    b9:62:13:3a:ff:8e:05:d3:83:88:80:ab:b3:fe:2d:
                    5d:7c:42:cc:ad:e3:fb:78:d6:e7:72:31:59:12:ee:
                    27:09:b9:91:be:51:b7:31:9b:21:f3:f8:3b:40:5c:
                    e5:cd:05:54:43:28:a8:99:cb:2a:76:7d:e5:26:34:
                    f9:07:15:b7:cb:bd:5a:ac:bb:34:06:62:91:f5:95:
                    ff:72:9c:10:33:38:f2:52:17:d5:64:ba:ae:f2:be:
                    c7:f7:79:e2:85:f6:10:0b:2d:ed:5d:df:57:a6:a8:
                    63:f6:ab:d7:be:5a:31:4e:ce:86:69:c7:af:18:55:
                    77:aa:f6:f5:2b:3c:19:6e:31:0e:36:1b:85:a7:da:
                    9b:d2:2e:8d:8a:47:76:b8:04:f0:ed:8c:63:9e:04:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F5:E3:85:3D:DA:12:C5:B7:0C:F7:91:D6:CB:96:7C:93:41:54:A9
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:42:bb:ff:36:91:fb:2e:20:03:b0:1c:68:7a:52:6c:06:c3:
         6d:48:1f:19:71:62:40:18:d8:a5:72:35:b6:21:3a:db:67:6c:
         54:ca:c8:61:08:d4:72:b3:51:20:56:e1:23:d7:fd:50:bc:76:
         e4:76:3f:2a:02:97:de:46:b1:2d:b0:2c:bb:01:1c:8f:88:b0:
         5e:01:8b:a2:4e:1f:ff:19:de:c9:cb:cc:a2:15:f4:f3:df:d5:
         59:e5:c9:f6:90:b5:3c:c5:08:d7:42:98:cd:c3:d2:9c:6c:8c:
         b3:ba:82:29:c9:05:a7:16:06:6e:50:a2:b3:f9:62:f1:91:a6:
         eb:30:6d:ff:cd:ec:66:92:04:33:04:f4:7d:22:e6:83:1e:17:
         71:78:23:d9:b0:e2:30:5d:6f:57:be:7d:a9:db:3c:c1:47:ae:
         12:42:af:78:80:54:18:36:ef:fb:56:ff:47:3c:c2:49:3b:85:
         6a:3e:dc:14:83:92:a3:c7:a8:32:e2:dc:f3:85:58:91:2e:7d:
         b2:c3:8d:80:7b:f4:50:a7:65:7c:8f:3b:a6:75:da:e9:f8:52:
         b5:0a:21:e6:21:b5:46:23:33:29:3a:fa:a8:8c:8e:42:bc:a2:
         f6:cd:61:49:2e:08:a1:63:ce:91:fb:4f:e8:ad:79:26:41:68:
         54:4b:39:b4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXj/uF99Fl8D759jy22OoDhKuRHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJGMkVBNzAwNjRDNTkzRjI1NjcwRDY1QkQyQzE0MjVF
QUU0MjRBMTAeFw0yNDA5MDQyMjE1MDBaFw0yNTA5MDMyMjIwMDBaMDMxMTAvBgNV
BAMTKEM1RjVFMzg1M0REQTEyQzVCNzBDRjc5MUQ2Q0I5NjdDOTM0MTU0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQTsCES8fy7ib+suPZ00I5w6u
whuIxGpngF9mJmv4rVQ9thw/zv7/4qFw9P5684Ilq6ZERq6bDItYUZnYi2HwY/GU
ueqHedCP4yFJg/qkTHt0HHwAvL0BbzjoSEe25sgCmQ38KLTpA7liEzr/jgXTg4iA
q7P+LV18Qsyt4/t41udyMVkS7icJuZG+UbcxmyHz+DtAXOXNBVRDKKiZyyp2feUm
NPkHFbfLvVqsuzQGYpH1lf9ynBAzOPJSF9Vkuq7yvsf3eeKF9hALLe1d31emqGP2
q9e+WjFOzoZpx68YVXeq9vUrPBluMQ42G4Wn2pvSLo2KR3a4BPDtjGOeBG3zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxfXjhT3aEsW3DPeR1suWfJNBVKkwHwYDVR0j
BBgwFoAUK/LqcAZMWT8lZw1lvSwUJerkJKEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTdCRUFGMkRBMTYyMjY2OEQ3M0JEQzU5MEQ2NjQxRDg0
MkQ4NUQ3QUI3OTdFNjU1MzQyOTM2RDhDOUMyNTEyLzAvMkJGMkVBNzAwNjRDNTkz
RjI1NjcwRDY1QkQyQzE0MjVFQUU0MjRBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkYyRUE3MDA2NEM1OTNGMjU2
NzBENjVCRDJDMTQyNUVBRTQyNEExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDE3QkVBRjJEQTE2MjI2NjhENzNCREM1OTBENjY0MUQ4NDJEODVEN0FC
Nzk3RTY1NTM0MjkzNkQ4QzlDMjUxMi8wLzMyMzAzMDJlMzEzMTMyMmUzMjMxMzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMzMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHDa
MA0GCSqGSIb3DQEBCwUAA4IBAQAFQrv/NpH7LiADsBxoelJsBsNtSB8ZcWJAGNil
cjW2ITrbZ2xUyshhCNRys1EgVuEj1/1QvHbkdj8qApfeRrEtsCy7ARyPiLBeAYui
Th//Gd7Jy8yiFfTz39VZ5cn2kLU8xQjXQpjNw9KcbIyzuoIpyQWnFgZuUKKz+WLx
kabrMG3/zexmkgQzBPR9IuaDHhdxeCPZsOIwXW9Xvn2p2zzBR64SQq94gFQYNu/7
Vv9HPMJJO4VqPtwUg5Kjx6gy4tzzhViRLn2yw42Ae/RQp2V8jzumddrp+FK1CiHm
IbVGIzMpOvqojI5CvKL2zWFJLgihY86R+0/orXkmQWhUSzm0
-----END CERTIFICATE-----
Generated at Mon Sep 16 20:59:17 2024 by rpki-client on console-fra.rpki-client.org