Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          6YAwXwyV61kEhT9nhM45mAQ06dIstNFSSBwXMEIA6r8=
Subject key identifier:   48:96:F6:6D:06:64:98:77:43:87:A5:05:27:1D:C3:5B:79:B6:67:D1
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       10B18B7E6B820B173BE78991747867A2296284E6
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     13381
IP address blocks:        200.112.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:8b:7e:6b:82:0b:17:3b:e7:89:91:74:78:67:a2:29:62:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=4896F66D066498774387A505271DC35B79B667D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:79:ba:ca:81:06:5f:f1:94:c5:e4:ec:4b:
                    92:5f:7b:35:4f:47:4d:49:53:cc:61:df:57:dd:a0:
                    66:23:96:22:2a:ee:e8:19:c5:52:43:a9:59:bb:c0:
                    36:2d:08:49:86:21:37:85:3a:44:9d:cf:ef:8f:47:
                    aa:ac:00:51:66:cc:77:72:a2:d4:96:c7:a6:c2:76:
                    b6:3a:39:aa:44:91:40:8b:20:b7:88:83:5e:e3:db:
                    23:a1:72:98:6d:65:6f:51:a0:e1:d5:13:43:47:08:
                    7b:a3:dd:47:fa:95:87:35:0e:81:be:b6:c1:46:90:
                    c1:0a:b3:81:15:2d:45:ba:15:d8:ef:b1:45:76:04:
                    c4:f9:d0:82:23:6a:cd:38:a3:d1:56:82:e3:8f:fe:
                    5e:28:69:6d:70:30:9d:3c:c8:01:92:5b:7f:20:a3:
                    28:4e:36:d2:bd:d0:b5:9a:3a:a1:e5:60:74:19:a1:
                    37:91:9f:ef:a1:03:ba:aa:1e:c0:b7:76:64:cf:78:
                    0a:57:3a:43:af:13:05:7f:7b:29:f2:af:5a:3c:40:
                    e1:68:b7:14:25:3f:d2:b7:95:ef:d6:4a:07:8d:79:
                    bf:84:76:68:45:b5:10:68:8f:76:56:c1:54:e3:74:
                    c7:74:3d:1d:52:d6:5a:08:68:2e:48:cb:44:f0:5f:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:F6:6D:06:64:98:77:43:87:A5:05:27:1D:C3:5B:79:B6:67:D1
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234372e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:d3:92:0c:7c:25:79:21:fe:a3:06:c0:e0:97:05:c2:ed:
         ce:4f:87:83:31:2f:68:a7:4e:dc:65:28:6a:dd:bf:f2:c7:8a:
         71:5f:7b:74:0e:10:90:d7:c6:18:b3:c4:56:27:d4:04:70:e1:
         e0:7a:77:27:19:18:74:85:eb:1a:f9:38:19:10:f8:3f:77:ef:
         88:24:62:d8:8f:14:d9:84:97:e2:87:8b:c8:7e:a5:6c:5a:61:
         b1:d1:ab:ed:7b:f6:e3:8f:87:29:28:70:56:20:e2:77:fe:09:
         76:41:b2:26:89:c8:68:c6:09:c5:c1:07:fd:4f:a3:3c:95:ad:
         1e:4b:7a:57:51:14:f4:6c:8d:bf:45:98:0a:3b:91:8f:12:6f:
         f9:27:9c:98:03:9f:be:1c:ec:99:b2:bd:d2:9a:f0:fc:04:72:
         46:1f:46:38:57:4b:62:8b:38:2f:78:f0:aa:d4:21:00:34:d8:
         52:e8:9a:82:78:db:cb:12:ec:3f:0c:c0:21:bb:21:2b:e3:07:
         0b:06:8f:b7:45:d0:3c:9e:88:24:9f:4b:94:b0:dd:9a:40:ce:
         f0:88:af:75:b6:f0:6f:c5:f8:18:57:8a:88:f1:89:b6:f2:a2:
         01:07:59:06:cb:1b:e9:b7:2f:ba:a1:6f:40:f2:43:70:e3:4f:
         67:5a:d6:56
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUELGLfmuCCxc754mRdHhnoilihOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMTVaFw0yNTAzMDQxODE3MTVaMDMxMTAvBgNV
BAMTKDQ4OTZGNjZEMDY2NDk4Nzc0Mzg3QTUwNTI3MURDMzVCNzlCNjY3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJHm6yoEGX/GUxeTsS5JfezVP
R01JU8xh31fdoGYjliIq7ugZxVJDqVm7wDYtCEmGITeFOkSdz++PR6qsAFFmzHdy
otSWx6bCdrY6OapEkUCLILeIg17j2yOhcphtZW9RoOHVE0NHCHuj3Uf6lYc1DoG+
tsFGkMEKs4EVLUW6FdjvsUV2BMT50IIjas04o9FWguOP/l4oaW1wMJ08yAGSW38g
oyhONtK90LWaOqHlYHQZoTeRn++hA7qqHsC3dmTPeApXOkOvEwV/eynyr1o8QOFo
txQlP9K3le/WSgeNeb+EdmhFtRBoj3ZWwVTjdMd0PR1S1loIaC5Iy0TwX6TzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSJb2bQZkmHdDh6UFJx3DW3m2Z9EwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHD3
MA0GCSqGSIb3DQEBCwUAA4IBAQCBndOSDHwleSH+owbA4JcFwu3OT4eDMS9op07c
ZShq3b/yx4pxX3t0DhCQ18YYs8RWJ9QEcOHgencnGRh0hesa+TgZEPg/d++IJGLY
jxTZhJfih4vIfqVsWmGx0avte/bjj4cpKHBWIOJ3/gl2QbImichoxgnFwQf9T6M8
la0eS3pXURT0bI2/RZgKO5GPEm/5J5yYA5++HOyZsr3SmvD8BHJGH0Y4V0tiizgv
ePCq1CEANNhS6JqCeNvLEuw/DMAhuyEr4wcLBo+3RdA8nogkn0uUsN2aQM7wiK91
tvBvxfgYV4qI8Ym28qIBB1kGyxvpty+6oW9A8kNw409nWtZW
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org