Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34382e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          A70MxhuwoexVKLcNr/FfUt/MAHqc5bO1rtjw8CGi/0A=
Subject key identifier:   23:3F:BE:E2:34:B5:C0:DC:2F:FB:5B:AB:BD:78:C6:C2:3B:10:32:79
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       6CF99EB385F446097C86C9EBB39D8380C13005FF
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:55:58 +0000
ROA not before:           Tue 05 Mar 2024 17:50:58 +0000
ROA not after:            Tue 04 Mar 2025 17:55:58 +0000
asID:                     26617
IP address blocks:        200.12.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f9:9e:b3:85:f4:46:09:7c:86:c9:eb:b3:9d:83:80:c1:30:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:50:58 2024 GMT
            Not After : Mar  4 17:55:58 2025 GMT
        Subject: CN=233FBEE234B5C0DC2FFB5BABBD78C6C23B103279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:84:4b:7d:78:cb:86:fe:56:ae:f1:79:b6:
                    d1:e7:2a:39:5e:28:de:bb:f2:2b:2d:b1:d9:7c:54:
                    66:91:d1:b4:b6:ac:82:e6:60:2d:ce:b7:71:0d:0b:
                    b9:76:3d:b1:d2:a5:d6:cd:8b:9b:f1:e1:75:c6:93:
                    49:0b:96:56:b9:d2:27:88:89:03:6d:73:64:49:6f:
                    e8:10:f7:1e:79:25:1d:50:63:2c:05:82:6f:ae:a9:
                    4a:53:32:0a:9a:e9:94:fa:da:9a:28:3f:54:25:e5:
                    9a:23:59:24:27:28:93:fa:3b:96:c3:b3:68:f7:e1:
                    e4:65:bf:ff:74:16:84:6d:32:01:78:4e:71:aa:f7:
                    f1:e7:2d:94:2b:3c:e0:34:3a:e6:b8:47:c9:b9:bb:
                    f5:26:85:9b:ce:c7:80:9b:f6:e2:b1:98:ad:c1:c5:
                    07:35:0a:c5:5e:ee:da:86:49:30:4b:30:94:3d:a7:
                    df:eb:b4:ec:f6:27:47:3f:42:45:3f:73:34:1c:60:
                    ba:3f:8e:44:4f:26:d2:c1:62:c3:bc:41:32:7c:d3:
                    ed:c9:71:95:e5:60:96:1e:80:37:54:fe:cd:4b:25:
                    61:f5:e8:59:2d:3a:46:4c:54:45:71:a0:22:8b:59:
                    41:8d:bf:89:e2:d1:4b:15:0e:6a:6d:12:de:af:39:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:BE:E2:34:B5:C0:DC:2F:FB:5B:AB:BD:78:C6:C2:3B:10:32:79
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:42:a1:07:f9:0e:15:4b:86:7f:34:a6:ef:ce:b2:cd:34:
         e2:28:f5:24:13:e3:59:93:43:08:42:ab:78:80:2a:5a:5c:47:
         39:8a:b4:6e:f7:fd:19:f7:fb:59:d7:59:1f:d6:57:2a:d8:f9:
         03:b3:d3:52:1e:bc:38:92:9c:20:52:2d:13:5f:fb:44:49:b8:
         68:3a:91:d8:91:0c:fd:b1:bd:2a:2c:41:33:8c:7f:14:70:b8:
         f7:25:45:07:f0:98:00:29:16:57:53:95:7f:c4:e3:05:8e:8e:
         c7:d6:ea:2a:b3:b8:8f:e6:68:ea:49:7b:7a:ed:c6:de:d5:2f:
         a4:26:56:d5:1a:49:d4:d2:91:75:7f:72:25:b0:d9:64:3d:bb:
         5d:d8:44:fc:0b:3c:c9:15:5a:48:dd:58:f4:fa:e9:f0:b8:1b:
         74:07:3d:1a:bd:99:07:e5:16:61:cd:de:16:6d:d9:2d:46:07:
         1c:f4:e2:51:32:e8:13:11:a6:39:09:da:ea:51:12:dc:36:b7:
         a5:05:e7:63:ea:b4:b1:b9:cd:9f:b5:ff:f9:88:b9:79:85:12:
         1e:72:c2:a2:39:43:25:e3:86:a6:f0:4a:ef:b2:3a:45:cb:e3:
         a6:a6:98:71:c3:7b:71:07:ad:5c:9a:26:3d:25:2d:bd:55:45:
         59:cd:fc:16
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbPmes4X0Rgl8hsnrs52DgMEwBf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNDAzMDUxNzUwNThaFw0yNTAzMDQxNzU1NThaMDMxMTAvBgNV
BAMTKDIzM0ZCRUUyMzRCNUMwREMyRkZCNUJBQkJENzhDNkMyM0IxMDMyNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC894RLfXjLhv5WrvF5ttHnKjle
KN678istsdl8VGaR0bS2rILmYC3Ot3ENC7l2PbHSpdbNi5vx4XXGk0kLlla50ieI
iQNtc2RJb+gQ9x55JR1QYywFgm+uqUpTMgqa6ZT62pooP1Ql5ZojWSQnKJP6O5bD
s2j34eRlv/90FoRtMgF4TnGq9/HnLZQrPOA0Oua4R8m5u/UmhZvOx4Cb9uKxmK3B
xQc1CsVe7tqGSTBLMJQ9p9/rtOz2J0c/QkU/czQcYLo/jkRPJtLBYsO8QTJ80+3J
cZXlYJYegDdU/s1LJWH16FktOkZMVEVxoCKLWUGNv4ni0UsVDmptEt6vOdWvAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUIz++4jS1wNwv+1urvXjGwjsQMnkwHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMyMzAzMDJlMzEzMjJlMzQzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDDAwDQYJ
KoZIhvcNAQELBQADggEBAFvxQqEH+Q4VS4Z/NKbvzrLNNOIo9SQT41mTQwhCq3iA
KlpcRzmKtG73/Rn3+1nXWR/WVyrY+QOz01IevDiSnCBSLRNf+0RJuGg6kdiRDP2x
vSosQTOMfxRwuPclRQfwmAApFldTlX/E4wWOjsfW6iqzuI/maOpJe3rtxt7VL6Qm
VtUaSdTSkXV/ciWw2WQ9u13YRPwLPMkVWkjdWPT66fC4G3QHPRq9mQflFmHN3hZt
2S1GBxz04lEy6BMRpjkJ2upREtw2t6UF52PqtLG5zZ+1//mIuXmFEh5ywqI5QyXj
hqbwSu+yOkXL46ammHHDe3EHrVyaJj0lLb1VRVnN/BY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org