Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3134302e302f32322d3234203d3e203132363834.roa
File:                     3230302e34372e3134302e302f32322d3234203d3e203132363834.roa (raw, json)
Hash identifier:          0jTTZpJmupZqci1MbUkTIG7DN0qRNVyiTTUed8ywi5E=
Subject key identifier:   D3:41:BB:A1:B4:49:55:ED:E4:77:AB:49:5B:0A:DA:92:C6:0B:CE:3E
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       7E08464BDA1BBA7EE0CD934790EA702CB769624F
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3134302e302f32322d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 18:14:24 +0000
ROA not before:           Tue 05 Mar 2024 18:09:24 +0000
ROA not after:            Tue 04 Mar 2025 18:14:24 +0000
asID:                     12684
IP address blocks:        200.47.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:08:46:4b:da:1b:ba:7e:e0:cd:93:47:90:ea:70:2c:b7:69:62:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Mar  5 18:09:24 2024 GMT
            Not After : Mar  4 18:14:24 2025 GMT
        Subject: CN=D341BBA1B44955EDE477AB495B0ADA92C60BCE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:fa:dc:d2:23:72:b2:ce:71:ea:37:37:1e:
                    b1:a3:9a:80:e2:9c:4a:01:28:07:94:10:89:aa:89:
                    c2:68:10:14:9c:aa:98:30:c9:c6:94:18:6a:fe:0b:
                    1c:a0:fb:2c:b0:0f:7d:75:6c:cd:44:93:ac:00:a9:
                    de:f9:8c:53:5f:c6:39:7e:47:33:82:f1:2a:43:8e:
                    25:d3:a4:32:be:65:8f:a4:b0:0e:0f:90:42:51:57:
                    fb:be:d3:4e:02:e3:b6:60:5d:3e:5a:16:9f:69:31:
                    17:15:ae:12:e8:45:fc:ac:10:af:8b:57:91:a2:76:
                    0b:34:5e:f1:eb:18:65:2a:94:19:4a:bb:a0:8b:c3:
                    e0:d3:5d:34:ce:ab:dc:a5:51:9f:ec:c4:db:28:b4:
                    b8:f9:6c:f0:c7:03:56:28:4c:8b:b3:0a:3e:c4:39:
                    7b:eb:f3:3c:ce:db:2f:2c:42:14:fe:02:dc:39:92:
                    ba:bd:35:14:0f:99:4c:13:f1:f0:7c:3f:82:67:9e:
                    9a:d2:bd:a7:d4:0c:d3:03:9f:d1:de:80:b2:a2:b3:
                    8f:8b:ca:d7:2d:2a:ae:22:be:e0:cd:76:c4:fa:fc:
                    93:b4:85:3c:1a:ca:fa:39:1e:3d:dc:a7:5f:8c:c6:
                    3b:1c:0a:38:dd:59:6d:37:e6:0f:97:e7:c7:99:d6:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:41:BB:A1:B4:49:55:ED:E4:77:AB:49:5B:0A:DA:92:C6:0B:CE:3E
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e3134302e302f32322d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:b7:d8:8f:12:d4:78:45:2d:80:1c:eb:d8:5c:aa:26:47:
         6e:3e:90:1a:b1:75:5d:fe:17:9a:ac:db:1f:83:53:1b:f8:87:
         7b:4f:ac:c5:d3:aa:a1:7c:de:4d:58:8f:0a:33:46:b8:9d:ae:
         58:28:a6:d6:81:e8:b4:3c:fc:2a:b1:a8:b0:1e:65:85:ce:1c:
         d1:24:3b:70:7a:b2:7a:78:6b:15:f9:ad:17:07:f3:9f:89:96:
         ae:ee:5c:d2:1c:ef:a8:6b:9a:1a:a5:ea:b5:4b:ec:ec:46:ce:
         e0:dc:40:6e:0f:d9:09:68:9f:d5:78:69:2b:cb:5c:e6:0c:d8:
         dd:e9:12:44:04:8a:a4:74:3c:99:4a:34:df:4d:e9:8a:75:0c:
         b0:cb:3c:b9:c4:49:a7:10:e4:d3:d0:45:2d:a0:70:93:41:d1:
         45:e6:e3:4e:9f:32:bb:25:54:9e:20:a1:44:91:f2:cd:e6:01:
         b7:bd:c8:3e:63:5c:26:76:64:2e:ac:93:58:bc:cc:2d:36:84:
         60:52:53:8b:21:25:36:c0:be:bc:c9:0c:3f:6e:89:5b:36:a7:
         10:66:70:ee:72:68:d2:d2:f2:ad:e6:4b:9b:e9:af:6a:26:5c:
         4c:1f:c5:8f:6e:54:f2:71:ce:62:32:c7:1d:12:d6:c5:01:5d:
         45:11:e1:ad
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfghGS9obun7gzZNHkOpwLLdpYk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5NDVGNEJFQjcwM0NGRTE0Mjc5REYxNDIwNEZBMzBG
MjFERUU0QzAeFw0yNDAzMDUxODA5MjRaFw0yNTAzMDQxODE0MjRaMDMxMTAvBgNV
BAMTKEQzNDFCQkExQjQ0OTU1RURFNDc3QUI0OTVCMEFEQTkyQzYwQkNFM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSPfrc0iNyss5x6jc3HrGjmoDi
nEoBKAeUEImqicJoEBScqpgwycaUGGr+Cxyg+yywD311bM1Ek6wAqd75jFNfxjl+
RzOC8SpDjiXTpDK+ZY+ksA4PkEJRV/u+004C47ZgXT5aFp9pMRcVrhLoRfysEK+L
V5Gidgs0XvHrGGUqlBlKu6CLw+DTXTTOq9ylUZ/sxNsotLj5bPDHA1YoTIuzCj7E
OXvr8zzO2y8sQhT+Atw5krq9NRQPmUwT8fB8P4JnnprSvafUDNMDn9HegLKis4+L
ytctKq4ivuDNdsT6/JO0hTwayvo5Hj3cp1+MxjscCjjdWW035g+X58eZ1tZjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU00G7obRJVe3kd6tJWwraksYLzj4wHwYDVR0j
BBgwFoAURJRfS+twPP4UJ53xQgT6MPId7kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdGQTAzNzVCMTQyMzEzNDE3REU2RDc2NjRGRkRCOTFB
RkFCOTczQ0QxRkI0RDkzMkJDM0I0QTc4OEJCRUI1LzAvNDQ5NDVGNEJFQjcwM0NG
RTE0Mjc5REYxNDIwNEZBMzBGMjFERUU0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDk0NUY0QkVCNzAzQ0ZFMTQy
NzlERjE0MjA0RkEzMEYyMURFRTRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RkEwMzc1QjE0MjMxMzQxN0RFNkQ3NjY0RkZEQjkxQUZBQjk3M0NE
MUZCNEQ5MzJCQzNCNEE3ODhCQkVCNS8wLzMyMzAzMDJlMzQzNzJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMjM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgvjDAN
BgkqhkiG9w0BAQsFAAOCAQEAFp+32I8S1HhFLYAc69hcqiZHbj6QGrF1Xf4Xmqzb
H4NTG/iHe0+sxdOqoXzeTViPCjNGuJ2uWCim1oHotDz8KrGosB5lhc4c0SQ7cHqy
enhrFfmtFwfzn4mWru5c0hzvqGuaGqXqtUvs7EbO4NxAbg/ZCWif1XhpK8tc5gzY
3ekSRASKpHQ8mUo0303pinUMsMs8ucRJpxDk09BFLaBwk0HRRebjTp8yuyVUniCh
RJHyzeYBt73IPmNcJnZkLqyTWLzMLTaEYFJTiyElNsC+vMkMP26JWzanEGZw7nJo
0tLyreZLm+mvaiZcTB/Fj25U8nHOYjLHHRLWxQFdRRHhrQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org