Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          eq74DQyJ6agE8kea1tvsunasN8eoqlTp2bRjVOsrvo0=
Subject key identifier:   56:E7:4B:F5:4B:E1:B0:B0:29:AD:4C:84:8D:BF:75:60:11:65:B0:66
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       6F4E3DB60447E599E8A3A6B5022E6D4D1FFEDD82
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     13381
IP address blocks:        200.112.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4e:3d:b6:04:47:e5:99:e8:a3:a6:b5:02:2e:6d:4d:1f:fe:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=56E74BF54BE1B0B029AD4C848DBF75601165B066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:eb:8c:0d:9d:5e:35:7a:f7:3a:8b:6a:e1:
                    40:27:10:ea:e4:26:c1:7b:d0:ae:93:c3:49:ce:10:
                    4b:53:9f:05:3f:7f:3b:a1:fc:77:da:ab:46:04:2e:
                    70:d9:8a:55:6a:e4:02:b1:4f:ae:9f:9d:8b:93:80:
                    7f:14:24:aa:50:93:13:2c:d4:5a:12:b5:33:f4:4f:
                    88:27:e4:83:3c:99:5f:20:77:38:b9:e9:7e:25:a1:
                    56:9c:51:a1:ce:5e:f5:c2:b1:c4:03:77:74:2f:d2:
                    74:00:dc:b7:59:06:bf:cf:b3:6c:08:4a:97:10:6c:
                    e5:b4:82:c1:9b:94:06:9b:fb:38:5b:d2:6b:22:97:
                    29:fd:20:c0:e4:cf:56:3c:6a:64:1f:fe:0c:88:17:
                    d1:13:0f:dd:9a:3c:3d:c9:e5:e0:97:6c:98:a7:ff:
                    26:66:a9:37:35:d4:c0:79:8e:99:cb:86:3a:3d:00:
                    b7:f0:3a:0b:92:31:36:b8:18:3b:87:ea:93:51:c8:
                    18:d1:02:fd:8c:26:dc:8a:25:b5:31:dc:9e:ba:f7:
                    d3:6f:77:40:f1:d3:ea:67:10:5c:d3:f1:47:03:6b:
                    d4:a4:cb:aa:82:7a:60:86:b7:30:32:1f:a2:b8:16:
                    0a:97:94:54:a6:a0:92:38:d7:4b:8a:e5:ab:d7:e3:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:4B:F5:4B:E1:B0:B0:29:AD:4C:84:8D:BF:75:60:11:65:B0:66
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233362e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:75:d2:a9:86:e4:c4:c5:1a:4d:0e:0f:7b:f5:59:7a:1f:4b:
         a5:67:93:dd:22:f3:af:b0:1c:ee:70:b2:93:5a:b8:27:55:f1:
         80:ae:8e:ff:bf:b7:31:b9:9e:ba:fc:7f:ca:e0:76:9a:37:c5:
         e8:bd:fd:4b:82:da:6d:81:25:4d:44:2f:43:47:c1:09:f6:44:
         60:43:99:a1:9d:08:d3:5d:1a:dc:a4:54:d7:fe:fc:e1:f2:b3:
         73:9b:91:67:0f:48:38:a6:60:16:a9:9c:dc:3b:2a:71:bc:6c:
         50:4d:e6:d3:86:8d:c0:74:bb:a6:ae:07:25:a2:1b:fb:8b:56:
         15:8b:00:8c:10:98:e8:f4:c3:62:77:ea:93:c1:17:28:64:fc:
         ed:d8:37:84:b2:bb:98:f3:2c:d7:96:ae:54:57:c8:76:8a:dc:
         48:65:18:5c:71:34:9b:e4:ac:37:b4:5f:d5:d0:bd:ed:0d:8e:
         64:b6:9f:ab:66:02:40:2e:1c:7d:ca:ac:8c:47:6a:13:70:aa:
         ce:24:e5:85:be:c2:04:ca:43:96:a1:4f:04:43:34:c2:ed:1a:
         51:66:7d:b4:54:86:6e:d0:0c:4d:cd:f5:84:86:17:a5:cb:86:
         38:7a:2c:9c:87:d0:52:7e:8a:07:f3:e3:8d:00:c9:e4:64:95:
         c6:a3:d4:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb049tgRH5Znoo6a1Ai5tTR/+3YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMTFaFw0yNTAzMDQxODE3MTFaMDMxMTAvBgNV
BAMTKDU2RTc0QkY1NEJFMUIwQjAyOUFENEM4NDhEQkY3NTYwMTE2NUIwNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGOuMDZ1eNXr3Ootq4UAnEOrk
JsF70K6Tw0nOEEtTnwU/fzuh/Hfaq0YELnDZilVq5AKxT66fnYuTgH8UJKpQkxMs
1FoStTP0T4gn5IM8mV8gdzi56X4loVacUaHOXvXCscQDd3Qv0nQA3LdZBr/Ps2wI
SpcQbOW0gsGblAab+zhb0msilyn9IMDkz1Y8amQf/gyIF9ETD92aPD3J5eCXbJin
/yZmqTc11MB5jpnLhjo9ALfwOguSMTa4GDuH6pNRyBjRAv2MJtyKJbUx3J6699Nv
d0Dx0+pnEFzT8UcDa9Sky6qCemCGtzAyH6K4FgqXlFSmoJI410uK5avX4zxbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVudL9UvhsLAprUyEjb91YBFlsGYwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMzMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDs
MA0GCSqGSIb3DQEBCwUAA4IBAQDlddKphuTExRpNDg979Vl6H0ulZ5PdIvOvsBzu
cLKTWrgnVfGAro7/v7cxuZ66/H/K4HaaN8Xovf1LgtptgSVNRC9DR8EJ9kRgQ5mh
nQjTXRrcpFTX/vzh8rNzm5FnD0g4pmAWqZzcOypxvGxQTebTho3AdLumrgclohv7
i1YViwCMEJjo9MNid+qTwRcoZPzt2DeEsruY8yzXlq5UV8h2itxIZRhccTSb5Kw3
tF/V0L3tDY5ktp+rZgJALhx9yqyMR2oTcKrOJOWFvsIEykOWoU8EQzTC7RpRZn20
VIZu0AxNzfWEhhely4Y4eiych9BSfooH8+ONAMnkZJXGo9S7
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org