Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          LHy8gFd5X9LL56vakSz9B4qSRqG0YHiYsz5hfmKyQj0=
Subject key identifier:   30:DD:B1:82:D7:24:E5:75:ED:08:92:15:45:94:2F:81:BF:7B:CE:68
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       3CC0045F91A1E87C1EEF76234108BEA9A894F5C2
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     13381
IP address blocks:        200.112.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c0:04:5f:91:a1:e8:7c:1e:ef:76:23:41:08:be:a9:a8:94:f5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=30DDB182D724E575ED08921545942F81BF7BCE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:5c:58:ff:80:96:8b:2f:a6:a2:2f:2d:4c:
                    fa:51:a1:f6:ce:fb:0b:14:48:19:af:a1:e2:7c:ab:
                    8f:de:73:08:5c:6f:7f:86:60:83:8b:6b:89:59:8b:
                    e1:55:da:10:4c:41:0b:2c:0d:e7:9c:7b:58:15:2b:
                    23:bc:2e:cf:8c:4b:8c:b4:ba:55:2f:2c:bb:47:5d:
                    03:f4:6f:39:64:38:dc:10:2a:fa:66:aa:2d:c3:19:
                    3d:99:2c:d5:14:2a:f8:74:3e:5f:b9:15:21:94:5b:
                    5a:67:d9:50:e8:8e:0d:52:22:0c:c5:11:e5:09:b1:
                    68:03:3a:0c:6d:84:bd:db:60:a7:a3:f6:88:6f:86:
                    16:ab:31:46:01:c5:6c:6e:a7:2b:89:5e:16:13:b2:
                    6d:8c:9d:97:b4:3f:2e:06:6c:cd:a3:07:44:3d:0e:
                    de:c8:26:2d:b6:ea:0a:b4:2d:06:44:8d:90:f9:08:
                    09:16:c1:9a:e2:58:bf:0a:5f:76:1f:bd:28:96:8e:
                    a9:a5:c0:44:18:64:66:1c:ad:ed:ee:14:61:e6:dc:
                    c1:bb:59:87:8e:78:ab:7f:8d:6d:c9:ad:61:6c:c3:
                    6e:79:e5:c9:ec:e7:c5:4c:0a:5f:f0:7b:f1:3c:e3:
                    a6:7d:8d:09:c8:bd:cc:c8:e4:94:11:31:6c:86:53:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:B1:82:D7:24:E5:75:ED:08:92:15:45:94:2F:81:BF:7B:CE:68
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:36:9d:2d:24:9b:1a:87:cf:51:f0:f0:28:4e:81:dd:5e:
         b8:34:ea:0c:56:34:00:1c:3e:1b:63:96:a0:b1:9e:94:c8:90:
         6e:dc:58:ec:7d:35:44:19:a6:a1:c9:b8:bd:d9:a6:05:0a:8c:
         91:98:96:98:ce:1b:9a:b8:d0:c6:53:03:ed:21:f3:b3:bd:8c:
         6c:45:d1:36:a9:8b:5a:b4:68:67:c4:3a:0f:76:25:de:c4:33:
         df:2d:44:a1:c0:c7:e7:76:a5:77:2c:c4:cc:78:43:c9:a0:96:
         f9:8d:64:e9:2e:3f:93:04:5d:46:1e:a5:49:a8:8c:d0:9c:1e:
         57:f7:8f:b6:64:c6:2c:8f:9a:1e:ab:33:b9:dc:db:86:1c:73:
         e0:53:e5:76:59:2a:6e:26:02:34:2f:a1:44:de:1d:47:a7:bb:
         a9:d3:42:ec:80:c4:05:3b:4a:9c:40:12:a2:62:bc:d0:96:53:
         ed:fa:53:15:4d:21:a7:15:70:8b:8e:8c:c2:c1:a7:65:45:10:
         24:df:34:f1:35:7c:f9:c8:d0:9b:08:37:28:87:a9:88:ab:ef:
         8d:51:24:db:0f:fa:ac:91:47:b5:28:c3:3d:a4:ef:da:89:c1:
         67:22:3d:db:2a:ae:9e:2b:8b:ef:cb:82:04:0b:19:02:c1:b9:
         57:22:0d:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPMAEX5Gh6Hwe73YjQQi+qaiU9cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNDAzMDUxODEyMTVaFw0yNTAzMDQxODE3MTVaMDMxMTAvBgNV
BAMTKDMwRERCMTgyRDcyNEU1NzVFRDA4OTIxNTQ1OTQyRjgxQkY3QkNFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJVxY/4CWiy+moi8tTPpRofbO
+wsUSBmvoeJ8q4/ecwhcb3+GYIOLa4lZi+FV2hBMQQssDeece1gVKyO8Ls+MS4y0
ulUvLLtHXQP0bzlkONwQKvpmqi3DGT2ZLNUUKvh0Pl+5FSGUW1pn2VDojg1SIgzF
EeUJsWgDOgxthL3bYKej9ohvhharMUYBxWxupyuJXhYTsm2MnZe0Py4GbM2jB0Q9
Dt7IJi226gq0LQZEjZD5CAkWwZriWL8KX3YfvSiWjqmlwEQYZGYcre3uFGHm3MG7
WYeOeKt/jW3JrWFsw2555cns58VMCl/we/E846Z9jQnIvczI5JQRMWyGU4GTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMN2xgtck5XXtCJIVRZQvgb97zmgwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHD4
MA0GCSqGSIb3DQEBCwUAA4IBAQCGrjadLSSbGofPUfDwKE6B3V64NOoMVjQAHD4b
Y5agsZ6UyJBu3FjsfTVEGaahybi92aYFCoyRmJaYzhuauNDGUwPtIfOzvYxsRdE2
qYtatGhnxDoPdiXexDPfLUShwMfndqV3LMTMeEPJoJb5jWTpLj+TBF1GHqVJqIzQ
nB5X94+2ZMYsj5oeqzO53NuGHHPgU+V2WSpuJgI0L6FE3h1Hp7up00LsgMQFO0qc
QBKiYrzQllPt+lMVTSGnFXCLjozCwadlRRAk3zTxNXz5yNCbCDcoh6mIq++NUSTb
D/qskUe1KMM9pO/aicFnIj3bKq6eK4vvy4IECxkCwblXIg0f
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org