Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          PPrfCWQUoMPw8xpcDZ5AX1ubSmEOGqvFCzg/YacGadg=
Subject key identifier:   1A:C6:66:DA:AC:14:57:13:AE:DA:8C:6F:54:D8:9E:DB:63:5A:CE:7B
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       7C79D83889839587AB606EAFEB17CF842A4027A4
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:12 +0000
ROA not before:           Tue 05 Mar 2024 18:12:12 +0000
ROA not after:            Tue 04 Mar 2025 18:17:12 +0000
asID:                     13381
IP address blocks:        200.112.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:d8:38:89:83:95:87:ab:60:6e:af:eb:17:cf:84:2a:40:27:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:12 2024 GMT
            Not After : Mar  4 18:17:12 2025 GMT
        Subject: CN=1AC666DAAC145713AEDA8C6F54D89EDB635ACE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:17:07:09:56:08:79:d6:05:57:0f:29:01:
                    82:07:68:af:d9:46:1f:89:26:3b:ea:88:19:6a:06:
                    bd:54:f8:16:9c:32:a4:44:56:6a:67:cc:40:e1:0e:
                    f5:94:e0:cb:1c:27:32:16:79:57:1f:63:1d:b9:90:
                    0e:60:84:6b:2d:12:ea:38:02:8f:38:88:95:8a:0d:
                    25:7c:67:f7:62:fc:f1:9d:55:8d:76:8b:8e:3d:eb:
                    51:3c:1c:d8:11:7b:ce:21:b4:41:59:12:c5:b1:ed:
                    9e:9f:42:ff:26:2a:57:6a:8b:d7:d3:56:82:fd:09:
                    0a:c0:f0:17:cd:e2:eb:d7:1d:47:14:a6:28:e2:ef:
                    7f:d4:a7:64:a4:6b:98:e9:ee:26:5f:70:f1:f0:02:
                    17:7c:e0:e9:e0:c0:0a:1a:32:c5:09:27:d1:a6:0b:
                    fd:a4:de:91:79:ad:ee:2b:70:45:43:ed:9c:44:03:
                    ca:58:89:a5:d6:94:5d:af:79:ed:3d:09:0e:26:fb:
                    2d:e4:7d:2d:5e:c9:4e:d6:1b:92:52:19:ee:d3:7e:
                    33:5c:da:68:5b:c5:21:f8:15:0f:3c:83:5a:57:8f:
                    8d:8b:cf:0a:ae:47:35:c9:2b:70:5f:dc:c6:1f:49:
                    a4:0d:db:a0:18:d6:a8:43:1e:8e:85:b7:28:2b:3a:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:66:DA:AC:14:57:13:AE:DA:8C:6F:54:D8:9E:DB:63:5A:CE:7B
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c7:52:86:ac:51:67:12:e3:4d:60:cd:28:ea:bc:25:0f:5b:
         21:95:e2:a7:c2:ec:c7:50:a7:fc:c3:af:7c:8a:70:6c:c6:cf:
         21:69:cf:99:2a:cb:a3:75:97:c1:86:d8:24:80:65:fd:0b:9a:
         ab:07:6c:29:41:6a:7d:54:f8:56:0e:72:6c:a2:50:f7:ce:f1:
         2e:1e:9c:dc:06:f1:d1:20:84:4b:02:de:cc:a7:a4:44:21:4f:
         4a:1b:7a:62:f0:a6:59:df:31:c9:4d:79:fc:bc:b7:45:0d:30:
         44:3d:d3:73:f5:66:f3:d8:b1:36:e2:07:a6:af:32:2d:98:38:
         78:f0:54:6d:57:69:eb:db:43:38:15:cc:10:36:2a:48:97:61:
         2c:44:b7:2c:c0:c5:b1:a3:e0:43:a5:7b:bd:76:49:b9:6a:62:
         54:19:81:e0:63:f1:b9:c9:38:07:38:a0:c9:25:53:55:49:fb:
         8d:2f:35:65:4d:0f:7a:79:02:8d:bb:bd:fc:45:c7:84:06:18:
         02:2c:06:d0:70:c6:78:4a:fc:8c:23:1a:59:5f:d0:7d:ae:0e:
         b8:99:af:ac:b7:71:a8:aa:33:f7:ab:3e:62:ea:77:6a:36:b2:
         ae:92:15:1d:8c:c6:db:f2:eb:c1:2f:e2:21:04:76:30:98:18:
         03:43:b1:d5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfHnYOImDlYerYG6v6xfPhCpAJ6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMTJaFw0yNTAzMDQxODE3MTJaMDMxMTAvBgNV
BAMTKDFBQzY2NkRBQUMxNDU3MTNBRURBOEM2RjU0RDg5RURCNjM1QUNFN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3hcHCVYIedYFVw8pAYIHaK/Z
Rh+JJjvqiBlqBr1U+BacMqREVmpnzEDhDvWU4MscJzIWeVcfYx25kA5ghGstEuo4
Ao84iJWKDSV8Z/di/PGdVY12i44961E8HNgRe84htEFZEsWx7Z6fQv8mKldqi9fT
VoL9CQrA8BfN4uvXHUcUpiji73/Up2Ska5jp7iZfcPHwAhd84OngwAoaMsUJJ9Gm
C/2k3pF5re4rcEVD7ZxEA8pYiaXWlF2vee09CQ4m+y3kfS1eyU7WG5JSGe7TfjNc
2mhbxSH4FQ88g1pXj42LzwquRzXJK3Bf3MYfSaQN26AY1qhDHo6FtygrOmN9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGsZm2qwUVxOu2oxvVNie22NaznswHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMzMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDn
MA0GCSqGSIb3DQEBCwUAA4IBAQAtx1KGrFFnEuNNYM0o6rwlD1shleKnwuzHUKf8
w698inBsxs8hac+ZKsujdZfBhtgkgGX9C5qrB2wpQWp9VPhWDnJsolD3zvEuHpzc
BvHRIIRLAt7Mp6REIU9KG3pi8KZZ3zHJTXn8vLdFDTBEPdNz9Wbz2LE24gemrzIt
mDh48FRtV2nr20M4FcwQNipIl2EsRLcswMWxo+BDpXu9dkm5amJUGYHgY/G5yTgH
OKDJJVNVSfuNLzVlTQ96eQKNu738RceEBhgCLAbQcMZ4SvyMIxpZX9B9rg64ma+s
t3GoqjP3qz5i6ndqNrKukhUdjMbb8uvBL+IhBHYwmBgDQ7HV
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org