Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          QHOA5iPb9hPLrRT3QI8kNKVhfcBhhSH5OT9r7Qt8n6I=
Subject key identifier:   2F:F8:35:F8:9B:E3:31:E0:3A:1A:79:7B:3B:BB:CE:61:A0:C7:06:76
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       4ED70B7E415F00DB93F25F37C5C3AAD73C1A1081
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     13381
IP address blocks:        200.112.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:0b:7e:41:5f:00:db:93:f2:5f:37:c5:c3:aa:d7:3c:1a:10:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=2FF835F89BE331E03A1A797B3BBBCE61A0C70676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:2a:13:10:9a:59:55:51:b1:6f:ac:39:57:
                    57:df:a7:92:9e:2f:6b:98:42:ee:2d:10:85:32:87:
                    29:7e:20:30:fd:68:43:23:d3:2c:cc:78:13:78:44:
                    ba:83:5b:59:1f:f9:e2:d6:2a:95:ee:38:f3:8f:71:
                    e4:a0:ea:35:00:d4:ce:ed:ba:8b:d9:5e:21:64:8a:
                    a1:f7:b5:2f:d0:f5:75:40:e1:3d:45:5b:75:b9:86:
                    fc:dc:d9:57:90:d6:c2:6e:9a:3b:e6:6f:b4:04:fd:
                    8d:28:28:76:a9:c3:e7:58:65:00:ec:3f:3a:48:a5:
                    bd:b8:c1:3f:f7:49:8d:06:67:c4:e9:47:42:12:99:
                    e5:31:78:56:ea:6f:83:ed:2d:da:f2:2c:0c:e0:8d:
                    7e:82:96:47:38:e3:43:74:f6:10:0d:f3:58:22:dc:
                    6b:36:c8:95:69:44:c2:72:c0:7e:1a:6c:3a:f7:ed:
                    b7:67:d7:fa:5c:92:f8:d0:46:92:7e:ef:9e:29:fa:
                    91:45:c4:33:d1:1e:d1:6c:9e:2d:20:9e:b5:de:67:
                    f9:ac:fb:ea:42:a8:4f:15:5e:8a:a9:66:7b:48:90:
                    e7:26:81:9c:ec:29:f6:41:70:17:53:d8:be:fb:86:
                    5d:8c:bb:b4:70:5d:f5:3e:26:71:b0:7f:1b:c6:31:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F8:35:F8:9B:E3:31:E0:3A:1A:79:7B:3B:BB:CE:61:A0:C7:06:76
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:43:ed:9a:b0:31:ce:09:47:0b:c9:74:56:c4:86:7c:8a:
         b9:34:8c:55:36:29:91:b7:e0:18:12:04:99:63:15:9b:1d:ed:
         fa:da:ee:ad:72:fc:4d:2b:81:3d:71:17:d9:2e:f7:4c:30:75:
         59:e6:cc:30:8f:b5:09:61:5c:37:9f:33:9f:61:11:93:96:cb:
         0c:f7:ee:69:51:82:78:22:26:88:97:e8:0d:00:ff:1b:ff:28:
         d9:e9:5d:c4:5a:96:1b:33:21:86:60:c2:e8:98:85:e9:ea:dd:
         c4:5b:8a:17:af:77:ac:0e:28:b1:6e:2d:13:a6:69:d7:39:31:
         00:4c:0d:74:25:52:0b:e6:48:74:c7:b6:ba:5f:81:0a:4e:64:
         b0:43:f3:0d:fb:e3:7c:84:aa:2c:e9:91:01:30:69:42:8a:b0:
         0b:cc:df:7d:61:ec:70:66:f5:9f:9d:39:ad:0f:39:8c:37:3b:
         7c:7a:17:73:1c:37:be:14:ed:1c:6c:b8:1c:e0:30:64:fa:9f:
         0b:ef:be:1b:a0:ca:56:a1:ad:67:5b:6c:29:67:b4:c2:09:f7:
         a8:7f:62:14:e5:4b:87:6a:af:25:04:2a:2c:76:8e:b8:4b:04:
         92:b3:87:76:2b:fd:0c:bd:ef:22:e6:ba:78:d1:6a:51:9f:b2:
         4c:71:4e:e0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTtcLfkFfANuT8l83xcOq1zwaEIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMTBaFw0yNTAzMDQxODE3MTBaMDMxMTAvBgNV
BAMTKDJGRjgzNUY4OUJFMzMxRTAzQTFBNzk3QjNCQkJDRTYxQTBDNzA2NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2myoTEJpZVVGxb6w5V1ffp5Ke
L2uYQu4tEIUyhyl+IDD9aEMj0yzMeBN4RLqDW1kf+eLWKpXuOPOPceSg6jUA1M7t
uovZXiFkiqH3tS/Q9XVA4T1FW3W5hvzc2VeQ1sJumjvmb7QE/Y0oKHapw+dYZQDs
PzpIpb24wT/3SY0GZ8TpR0ISmeUxeFbqb4PtLdryLAzgjX6Clkc440N09hAN81gi
3Gs2yJVpRMJywH4abDr37bdn1/pckvjQRpJ+754p+pFFxDPRHtFsni0gnrXeZ/ms
++pCqE8VXoqpZntIkOcmgZzsKfZBcBdT2L77hl2Mu7RwXfU+JnGwfxvGMcKLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUL/g1+JvjMeA6Gnl7O7vOYaDHBnYwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDw
MA0GCSqGSIb3DQEBCwUAA4IBAQAB4UPtmrAxzglHC8l0VsSGfIq5NIxVNimRt+AY
EgSZYxWbHe362u6tcvxNK4E9cRfZLvdMMHVZ5swwj7UJYVw3nzOfYRGTlssM9+5p
UYJ4IiaIl+gNAP8b/yjZ6V3EWpYbMyGGYMLomIXp6t3EW4oXr3esDiixbi0TpmnX
OTEATA10JVIL5kh0x7a6X4EKTmSwQ/MN++N8hKos6ZEBMGlCirALzN99YexwZvWf
nTmtDzmMNzt8ehdzHDe+FO0cbLgc4DBk+p8L774boMpWoa1nW2wpZ7TCCfeof2IU
5UuHaq8lBCosdo64SwSSs4d2K/0Mve8i5rp40WpRn7JMcU7g
-----END CERTIFICATE-----
Generated at Thu May 2 23:18:25 2024 by rpki-client on console-ams.rpki-client.org