Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233372e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233372e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          4f5YP3HWcELG7YPpiEqFu8D8+FxMedZpH2Q4TfGDmVc=
Subject key identifier:   DC:58:A1:13:58:6E:EC:21:AC:33:9C:65:8B:CE:26:5C:92:D7:51:88
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       5AA037D8BE8649B7A34C9AE91E637A96A247F3EC
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233372e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:18 +0000
ROA not before:           Tue 05 Mar 2024 18:12:18 +0000
ROA not after:            Tue 04 Mar 2025 18:17:18 +0000
asID:                     13381
IP address blocks:        200.112.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a0:37:d8:be:86:49:b7:a3:4c:9a:e9:1e:63:7a:96:a2:47:f3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:18 2024 GMT
            Not After : Mar  4 18:17:18 2025 GMT
        Subject: CN=DC58A113586EEC21AC339C658BCE265C92D75188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:a7:d4:cf:4a:ff:6b:03:fd:96:c3:65:af:
                    8b:b2:fe:18:b1:6f:73:d2:a7:ca:71:10:e2:2c:16:
                    82:e2:94:b8:b1:f7:38:bb:91:91:1c:ea:14:25:b5:
                    27:18:ab:53:30:cd:68:32:65:c1:d0:e7:0c:8f:37:
                    d5:f8:f3:81:e2:34:95:7b:d2:c6:af:8e:e0:aa:b2:
                    ad:54:a3:21:6e:e4:8c:b1:1e:12:0c:eb:fc:b3:62:
                    41:f1:a0:23:eb:78:8d:dd:9d:70:af:93:74:3c:bd:
                    fe:4a:9f:c1:d3:9c:84:e4:8d:ec:21:6e:0c:b9:8f:
                    62:18:e7:c2:07:65:60:20:ce:0c:3e:29:ed:49:65:
                    7c:5e:3b:22:a8:92:18:99:09:90:d4:96:95:6a:c8:
                    2d:3c:ba:5a:70:6e:f3:dc:88:27:cb:64:cc:89:7f:
                    79:f1:d4:97:06:75:32:09:3b:c8:63:d1:a0:d8:13:
                    8b:2e:b0:2e:80:45:1c:8b:19:32:8f:aa:48:4d:83:
                    65:11:39:93:69:8d:d3:5a:a9:ec:41:86:09:23:6f:
                    39:2b:65:ac:df:16:c1:6d:e5:0c:33:be:3d:fa:d0:
                    50:4d:4e:69:21:58:73:be:44:40:90:fa:ab:f0:c2:
                    96:10:f5:e7:bf:d0:12:f2:fe:6f:fa:c2:10:63:41:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:A1:13:58:6E:EC:21:AC:33:9C:65:8B:CE:26:5C:92:D7:51:88
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233372e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:8f:83:65:40:26:03:04:29:fb:b2:ce:10:30:28:7e:13:
         f1:81:b1:7a:3e:fd:05:13:ff:61:5d:02:e7:a0:2b:72:8c:88:
         a1:52:b1:b3:04:08:7a:29:11:65:ba:00:9f:80:20:89:91:54:
         7a:2c:43:f7:67:cd:ac:aa:5e:ba:70:ce:1d:d8:ee:8c:1c:29:
         83:63:db:d8:0a:6b:bc:97:5b:a4:2f:43:f3:5f:f5:d8:4b:25:
         31:5b:b3:82:d8:e1:d8:fe:5d:ea:79:84:ec:08:d3:a5:08:31:
         4f:79:8c:72:e7:46:87:38:9e:92:fb:93:d6:c1:23:66:e1:1a:
         30:43:7c:e5:49:47:cf:e0:57:20:2e:14:f9:8f:5d:26:bb:57:
         35:48:2f:b7:77:8f:a2:55:63:98:a5:41:66:c1:7b:7b:5f:52:
         8a:65:64:2c:0e:c2:c3:87:53:d7:11:7e:b2:c8:35:0c:22:21:
         81:d3:4b:a0:02:b7:da:d4:6f:5a:b2:37:9e:fc:8f:55:dc:da:
         61:80:4b:a6:b1:08:35:e9:7b:38:3c:05:20:61:ec:4f:c8:68:
         5d:46:84:47:c2:9c:b6:42:5c:eb:04:c3:69:ae:1e:27:da:14:
         48:ef:50:8a:44:99:60:26:e1:e1:78:75:ad:ad:69:1c:bd:24:
         73:a2:cd:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWqA32L6GSbejTJrpHmN6lqJH8+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMThaFw0yNTAzMDQxODE3MThaMDMxMTAvBgNV
BAMTKERDNThBMTEzNTg2RUVDMjFBQzMzOUM2NThCQ0UyNjVDOTJENzUxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgKfUz0r/awP9lsNlr4uy/hix
b3PSp8pxEOIsFoLilLix9zi7kZEc6hQltScYq1MwzWgyZcHQ5wyPN9X484HiNJV7
0savjuCqsq1UoyFu5IyxHhIM6/yzYkHxoCPreI3dnXCvk3Q8vf5Kn8HTnITkjewh
bgy5j2IY58IHZWAgzgw+Ke1JZXxeOyKokhiZCZDUlpVqyC08ulpwbvPciCfLZMyJ
f3nx1JcGdTIJO8hj0aDYE4susC6ARRyLGTKPqkhNg2UROZNpjdNaqexBhgkjbzkr
ZazfFsFt5Qwzvj360FBNTmkhWHO+RECQ+qvwwpYQ9ee/0BLy/m/6whBjQTaZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3FihE1hu7CGsM5xli84mXJLXUYgwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDt
MA0GCSqGSIb3DQEBCwUAA4IBAQCloY+DZUAmAwQp+7LOEDAofhPxgbF6Pv0FE/9h
XQLnoCtyjIihUrGzBAh6KRFlugCfgCCJkVR6LEP3Z82sql66cM4d2O6MHCmDY9vY
Cmu8l1ukL0PzX/XYSyUxW7OC2OHY/l3qeYTsCNOlCDFPeYxy50aHOJ6S+5PWwSNm
4RowQ3zlSUfP4FcgLhT5j10mu1c1SC+3d4+iVWOYpUFmwXt7X1KKZWQsDsLDh1PX
EX6yyDUMIiGB00ugArfa1G9asjee/I9V3NphgEumsQg16Xs4PAUgYexPyGhdRoRH
wpy2QlzrBMNprh4n2hRI71CKRJlgJuHheHWtrWkcvSRzos1i
-----END CERTIFICATE-----
Generated at Thu May 2 23:02:08 2024 by rpki-client on console-fra.rpki-client.org