Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e37342e302f32342d3234203d3e203133343430.roa
File:                     3230302e33332e37342e302f32342d3234203d3e203133343430.roa (raw, json)
Hash identifier:          P8RrLHQG6wlyuJSStuow5+R4F7lxIGpGM4Tsz3KLpUc=
Subject key identifier:   B1:07:A5:EA:FB:07:C8:85:83:A2:75:E7:D0:D3:2E:4F:7D:78:BE:75
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       244A0D7F410AA55A12DBB23AE7E68E0C44C6B453
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e37342e302f32342d3234203d3e203133343430.roa
Signing time:             Tue 05 Mar 2024 17:50:40 +0000
ROA not before:           Tue 05 Mar 2024 17:45:40 +0000
ROA not after:            Tue 04 Mar 2025 17:50:40 +0000
asID:                     13440
IP address blocks:        200.33.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4a:0d:7f:41:0a:a5:5a:12:db:b2:3a:e7:e6:8e:0c:44:c6:b4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:40 2024 GMT
            Not After : Mar  4 17:50:40 2025 GMT
        Subject: CN=B107A5EAFB07C88583A275E7D0D32E4F7D78BE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:9e:ba:cb:c9:d1:24:b9:08:62:be:33:80:
                    ec:5f:4b:de:6d:32:04:2c:63:2b:d4:ee:9f:ef:54:
                    44:6d:79:63:79:d0:8a:d6:9d:e7:8d:43:13:eb:ac:
                    ab:f8:ff:eb:35:46:08:3e:b8:1b:08:89:fc:a8:16:
                    59:95:79:28:a8:92:f5:9d:e3:18:72:41:0b:b7:02:
                    a9:e8:f9:e9:9b:a1:2d:be:a9:f0:3f:38:d7:ec:02:
                    20:6c:11:6a:86:0e:4e:58:d3:98:2c:08:33:58:9b:
                    ce:b7:89:7d:f3:98:3e:b0:b0:27:9a:27:9b:56:5f:
                    9f:52:c0:09:97:cc:24:9f:a2:34:0f:37:ba:ce:8f:
                    17:57:cf:1f:1d:94:80:e6:65:bd:dd:0f:ad:e7:6e:
                    3a:48:3f:64:44:ce:3d:25:2e:4d:ca:20:11:30:44:
                    7c:c9:6e:3c:d6:d8:11:e8:d2:68:8a:fe:8d:87:2a:
                    f4:31:56:07:62:22:03:f3:96:67:d6:e9:57:34:94:
                    98:1e:93:03:48:8c:f3:98:77:59:2e:c7:7e:86:cf:
                    23:cc:3a:3b:84:6d:9a:8a:f7:08:70:47:c6:9b:be:
                    de:d4:87:8f:8a:6d:26:c1:50:f1:96:ce:a5:96:4f:
                    1a:d8:dd:d7:13:9e:4b:14:b3:f2:b6:a2:31:51:ba:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:07:A5:EA:FB:07:C8:85:83:A2:75:E7:D0:D3:2E:4F:7D:78:BE:75
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e33332e37342e302f32342d3234203d3e203133343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:0a:f5:d4:1b:01:06:22:37:28:67:a2:69:74:ee:c1:18:
         88:fd:db:0e:c5:c6:f0:5f:c7:fe:74:c3:bf:3b:83:d4:1c:d6:
         23:0e:4d:1a:47:b5:ba:5c:4e:85:9f:df:cb:93:38:8e:f5:8f:
         cb:b2:ca:ae:7f:4c:7a:a8:9a:9a:e7:5f:96:b9:ae:38:f8:e5:
         7d:cc:87:ca:44:a0:37:41:d0:6a:25:92:50:6a:a8:d4:d6:3b:
         86:fd:58:e9:c2:40:c4:3e:2f:32:02:91:4f:9a:fc:ff:24:94:
         99:f1:b0:bb:33:38:8d:3a:69:54:84:42:76:b0:16:0f:32:41:
         75:a2:f4:11:0e:fd:76:95:23:12:8e:ab:a0:63:35:11:d1:89:
         37:50:87:dc:88:c4:b5:d2:8b:29:29:da:c0:4e:c9:7a:42:0f:
         b5:5d:81:75:e8:de:64:4e:f9:6b:c3:3e:18:ed:a8:79:a1:9d:
         7f:8d:54:64:2b:d0:1e:08:3e:88:28:3d:80:49:91:bb:6e:ab:
         a7:d6:87:45:af:93:c2:37:4b:b6:4c:4f:6a:6a:4b:dc:6b:c0:
         77:c1:65:d8:ec:e8:07:48:3b:d6:49:11:e4:98:60:4b:e6:a4:
         50:86:27:1a:e5:52:45:76:4d:57:22:6c:a8:80:48:cc:e0:d6:
         4e:5f:03:6c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJEoNf0EKpVoS27I65+aODETGtFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNDAzMDUxNzQ1NDBaFw0yNTAzMDQxNzUwNDBaMDMxMTAvBgNV
BAMTKEIxMDdBNUVBRkIwN0M4ODU4M0EyNzVFN0QwRDMyRTRGN0Q3OEJFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Op66y8nRJLkIYr4zgOxfS95t
MgQsYyvU7p/vVERteWN50IrWneeNQxPrrKv4/+s1Rgg+uBsIifyoFlmVeSiokvWd
4xhyQQu3Aqno+emboS2+qfA/ONfsAiBsEWqGDk5Y05gsCDNYm863iX3zmD6wsCea
J5tWX59SwAmXzCSfojQPN7rOjxdXzx8dlIDmZb3dD63nbjpIP2REzj0lLk3KIBEw
RHzJbjzW2BHo0miK/o2HKvQxVgdiIgPzlmfW6Vc0lJgekwNIjPOYd1kux36GzyPM
OjuEbZqK9whwR8abvt7Uh4+KbSbBUPGWzqWWTxrY3dcTnksUs/K2ojFRuti3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsQel6vsHyIWDonXn0NMuT314vnUwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMDJlMzMzMzJlMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIUowDQYJ
KoZIhvcNAQELBQADggEBAE7iCvXUGwEGIjcoZ6JpdO7BGIj92w7FxvBfx/50w787
g9Qc1iMOTRpHtbpcToWf38uTOI71j8uyyq5/THqomprnX5a5rjj45X3Mh8pEoDdB
0GolklBqqNTWO4b9WOnCQMQ+LzICkU+a/P8klJnxsLszOI06aVSEQnawFg8yQXWi
9BEO/XaVIxKOq6BjNRHRiTdQh9yIxLXSiykp2sBOyXpCD7VdgXXo3mRO+WvDPhjt
qHmhnX+NVGQr0B4IPogoPYBJkbtuq6fWh0Wvk8I3S7ZMT2pqS9xrwHfBZdjs6AdI
O9ZJEeSYYEvmpFCGJxrlUkV2TVcibKiASMzg1k5fA2w=
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org