Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34302e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          //a9IOIe78/CrrGvQGcuvcLHMdIV4iwBn8GKWVHZMLk=
Subject key identifier:   B2:9B:6C:8A:52:31:0B:6D:7E:DD:09:3B:F6:2B:F1:43:1C:5B:B5:1B
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       7D0F8906D4F6F691CEC591216CEA41F8C0A69807
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     26617
IP address blocks:        200.12.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 09:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:89:06:d4:f6:f6:91:ce:c5:91:21:6c:ea:41:f8:c0:a6:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=B29B6C8A52310B6D7EDD093BF62BF1431C5BB51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:df:87:86:f6:2a:47:0c:7b:d7:e5:3e:03:
                    eb:b0:34:7b:9d:a7:ad:42:04:2a:a3:62:6b:fc:3d:
                    ba:75:aa:91:a3:b5:da:52:74:33:ea:00:53:2a:06:
                    79:78:af:07:c0:86:24:e0:56:36:37:4c:84:2d:12:
                    ff:1d:ec:a2:ef:ed:dd:b4:ef:a5:87:6a:0a:75:49:
                    df:0e:26:03:5f:09:3e:a1:61:45:63:f7:bb:2f:80:
                    4f:20:c5:69:a7:a5:a3:14:f4:77:0f:f7:c4:86:51:
                    76:54:bf:6f:d1:a8:27:5d:35:73:c0:6e:37:96:5a:
                    3f:13:58:89:f9:70:17:ca:ff:a4:f9:e4:f0:b6:d6:
                    54:02:bc:cb:d9:34:3f:08:d4:1f:e8:6f:f7:63:66:
                    85:80:0b:c2:fc:73:85:c3:b6:a7:29:03:04:f4:d4:
                    1a:78:d7:a8:9f:ad:82:7f:dd:a7:a7:77:42:e5:a4:
                    af:69:1d:05:d3:c4:f2:d5:73:ab:47:ad:c7:81:54:
                    b8:94:35:8e:b4:63:12:cf:65:be:d3:f0:6c:cd:c2:
                    c7:2b:2b:a4:1d:79:c9:c1:72:ef:ff:67:cb:bc:63:
                    50:72:37:0d:03:b0:63:1b:69:23:45:76:e0:c8:72:
                    50:ea:c4:69:66:db:9f:b7:25:af:0f:8a:7e:6d:9c:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9B:6C:8A:52:31:0B:6D:7E:DD:09:3B:F6:2B:F1:43:1C:5B:B5:1B
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:30:0d:f2:9c:ab:e2:ed:5f:0f:06:8e:0e:c0:5c:b8:03:
         d6:57:85:c1:2d:03:89:32:52:39:42:6f:49:6d:fc:68:af:8f:
         98:ec:85:46:85:9c:09:a1:25:8a:5d:52:1f:74:0b:ab:5b:74:
         98:2c:37:53:17:85:c8:17:13:e7:0d:d5:e8:ee:f8:60:29:c0:
         f3:9b:a3:81:43:b6:06:ec:9f:b0:d2:b5:06:8e:e8:8d:13:f4:
         ee:56:a0:eb:fc:04:48:be:7c:1a:ab:02:a1:8f:5f:1b:9a:01:
         cc:f5:24:36:9a:9d:87:b3:a5:b7:5c:26:a4:be:fe:81:e8:09:
         4f:69:1d:68:ed:2b:2b:52:58:96:d1:0f:03:48:f5:16:2b:fe:
         76:78:de:05:0d:c5:65:68:60:77:32:69:b0:de:69:f5:fe:c3:
         7b:ce:40:16:a3:a2:30:ba:61:ab:11:cb:17:78:17:18:04:52:
         cb:8f:f4:e0:99:d7:75:d7:69:57:d5:c7:c4:bd:36:92:89:84:
         5c:ca:5f:6f:68:5e:91:10:16:97:1a:78:57:ea:71:81:af:fb:
         8e:08:5a:65:a0:b0:06:35:e2:5f:22:c4:54:ad:16:0b:8b:8c:
         20:1c:2a:55:02:d3:bc:f5:90:9f:f7:b1:08:c4:9c:14:21:8b:
         76:e8:34:08
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUfQ+JBtT29pHOxZEhbOpB+MCmmAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNDAzMDUxNzUxMDRaFw0yNTAzMDQxNzU2MDRaMDMxMTAvBgNV
BAMTKEIyOUI2QzhBNTIzMTBCNkQ3RUREMDkzQkY2MkJGMTQzMUM1QkI1MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGt+HhvYqRwx71+U+A+uwNHud
p61CBCqjYmv8Pbp1qpGjtdpSdDPqAFMqBnl4rwfAhiTgVjY3TIQtEv8d7KLv7d20
76WHagp1Sd8OJgNfCT6hYUVj97svgE8gxWmnpaMU9HcP98SGUXZUv2/RqCddNXPA
bjeWWj8TWIn5cBfK/6T55PC21lQCvMvZND8I1B/ob/djZoWAC8L8c4XDtqcpAwT0
1Bp416ifrYJ/3aend0LlpK9pHQXTxPLVc6tHrceBVLiUNY60YxLPZb7T8GzNwscr
K6QdecnBcu//Z8u8Y1ByNw0DsGMbaSNFduDIclDqxGlm25+3Ja8Pin5tnLBlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsptsilIxC21+3Qk79ivxQxxbtRswHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMyMzAzMDJlMzEzMjJlMzQzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDCgwDQYJ
KoZIhvcNAQELBQADggEBAJuiMA3ynKvi7V8PBo4OwFy4A9ZXhcEtA4kyUjlCb0lt
/Givj5jshUaFnAmhJYpdUh90C6tbdJgsN1MXhcgXE+cN1eju+GApwPObo4FDtgbs
n7DStQaO6I0T9O5WoOv8BEi+fBqrAqGPXxuaAcz1JDaanYezpbdcJqS+/oHoCU9p
HWjtKytSWJbRDwNI9RYr/nZ43gUNxWVoYHcyabDeafX+w3vOQBajojC6YasRyxd4
FxgEUsuP9OCZ13XXaVfVx8S9NpKJhFzKX29oXpEQFpcaeFfqcYGv+44IWmWgsAY1
4l8ixFStFguLjCAcKlUC07z1kJ/3sQjEnBQhi3boNAg=
-----END CERTIFICATE-----
Generated at Thu May 2 04:01:25 2024 by rpki-client on console-fra.rpki-client.org