Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e33372e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          TkU9yvfOjyJvYsMhF7fxxPv0KSFtITvqMc/xTiUO1lw=
Subject key identifier:   14:DB:E0:60:ED:C6:A2:9E:BF:B8:13:A4:A5:6A:F2:9A:17:2C:3B:13
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       402DF405DE1F022B5B5797D0174E28838EC55CFF
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:55 +0000
ROA not before:           Tue 05 Mar 2024 18:15:55 +0000
ROA not after:            Tue 04 Mar 2025 18:20:55 +0000
asID:                     6147
IP address blocks:        200.37.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2d:f4:05:de:1f:02:2b:5b:57:97:d0:17:4e:28:83:8e:c5:5c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:55 2024 GMT
            Not After : Mar  4 18:20:55 2025 GMT
        Subject: CN=14DBE060EDC6A29EBFB813A4A56AF29A172C3B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:2c:7f:e0:f1:42:e1:5f:24:c5:06:5a:ff:
                    f5:9a:55:43:fa:8f:39:80:54:81:08:15:0f:a4:91:
                    42:02:82:be:40:91:96:e8:94:42:50:c0:b2:87:d1:
                    25:01:0e:b9:3a:95:75:12:16:6d:72:9a:39:d2:de:
                    f4:03:9f:b5:93:f8:87:8b:a9:30:3f:d9:5b:b3:f7:
                    7e:f4:9f:24:ff:95:6a:c2:3f:f4:d2:91:ef:35:52:
                    48:e4:97:79:08:34:b4:4f:39:ee:e7:28:6d:f5:33:
                    ea:de:f4:2b:b4:b7:a3:20:54:3b:c7:38:37:65:17:
                    1d:d1:41:d8:41:89:23:de:5f:b6:45:41:68:24:b9:
                    eb:27:0b:4b:db:92:72:34:e5:0c:12:a3:71:b3:74:
                    d1:4b:7f:8c:6c:ef:88:cd:fa:5d:5b:8e:4a:79:18:
                    5c:42:e2:cd:9a:81:3f:0e:57:13:35:a3:c0:94:cd:
                    06:fe:78:b2:cb:8b:77:42:1c:ab:c2:a9:0a:84:52:
                    c8:9e:f2:a0:91:f6:2f:0f:fe:ed:01:ac:ce:8e:c4:
                    7b:6e:fc:a3:45:c5:2e:75:28:3d:a6:ca:62:29:5d:
                    cf:c5:c4:ee:4b:b4:fd:0e:71:4f:22:2e:af:e0:09:
                    f3:d6:0c:fd:c8:ff:91:39:89:34:34:68:59:eb:de:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:E0:60:ED:C6:A2:9E:BF:B8:13:A4:A5:6A:F2:9A:17:2C:3B:13
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:49:85:89:22:70:5a:ea:0a:96:9c:75:42:96:b3:eb:57:
         da:fa:02:c1:3c:1d:d5:34:e7:69:3c:42:36:23:7d:05:88:96:
         1b:73:e1:30:9e:78:44:2f:88:ea:f5:db:3d:4d:3a:b8:c4:38:
         07:55:63:e9:83:6a:c9:39:61:76:d2:c0:13:86:f5:06:8e:68:
         10:12:bc:ec:6b:55:7a:20:9d:66:b9:24:64:f5:3e:33:ca:09:
         47:ef:33:a3:35:79:3f:a8:82:d7:77:70:59:8f:4f:1a:79:49:
         d4:b9:0a:e2:ed:b7:9c:d0:e5:94:a1:99:5d:08:89:ce:c9:7b:
         60:8a:15:56:92:8e:a4:46:a6:05:68:73:8c:3f:0b:28:91:18:
         de:8f:08:d4:88:b4:e7:29:cb:b6:19:11:e1:e6:38:5c:ec:c6:
         41:95:70:23:f6:a6:a9:39:82:c9:ad:7c:94:3b:ef:93:eb:4b:
         14:ed:93:f9:fd:45:8d:d0:31:84:5d:03:12:52:ba:8c:fb:23:
         79:41:07:df:7f:71:25:f7:0b:62:de:e0:83:ad:b6:27:d5:02:
         e5:96:e5:85:63:f7:7a:6e:cc:5c:c4:1e:10:51:71:58:e5:66:
         bb:01:ce:56:e6:d3:8e:43:a5:1c:a0:67:0d:02:40:23:85:b9:
         8e:f1:bc:c1
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUQC30Bd4fAitbV5fQF04og47FXP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNDAzMDUxODE1NTVaFw0yNTAzMDQxODIwNTVaMDMxMTAvBgNV
BAMTKDE0REJFMDYwRURDNkEyOUVCRkI4MTNBNEE1NkFGMjlBMTcyQzNCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hCx/4PFC4V8kxQZa//WaVUP6
jzmAVIEIFQ+kkUICgr5AkZbolEJQwLKH0SUBDrk6lXUSFm1ymjnS3vQDn7WT+IeL
qTA/2Vuz9370nyT/lWrCP/TSke81Ukjkl3kINLRPOe7nKG31M+re9Cu0t6MgVDvH
ODdlFx3RQdhBiSPeX7ZFQWgkuesnC0vbknI05QwSo3GzdNFLf4xs74jN+l1bjkp5
GFxC4s2agT8OVxM1o8CUzQb+eLLLi3dCHKvCqQqEUsie8qCR9i8P/u0BrM6OxHtu
/KNFxS51KD2mymIpXc/FxO5LtP0OcU8iLq/gCfPWDP3I/5E5iTQ0aFnr3rP5AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUFNvgYO3Gop6/uBOkpWrymhcsOxMwHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMDJlMzMzNzJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzNjMxMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMglMA0GCSqGSIb3
DQEBCwUAA4IBAQCcXEmFiSJwWuoKlpx1Qpaz61fa+gLBPB3VNOdpPEI2I30FiJYb
c+EwnnhEL4jq9ds9TTq4xDgHVWPpg2rJOWF20sAThvUGjmgQErzsa1V6IJ1muSRk
9T4zyglH7zOjNXk/qILXd3BZj08aeUnUuQri7bec0OWUoZldCInOyXtgihVWko6k
RqYFaHOMPwsokRjejwjUiLTnKcu2GRHh5jhc7MZBlXAj9qapOYLJrXyUO++T60sU
7ZP5/UWN0DGEXQMSUrqM+yN5QQfff3El9wti3uCDrbYn1QLlluWFY/d6bsxcxB4Q
UXFY5Wa7Ac5W5tOOQ6UcoGcNAkAjhbmO8bzB
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:46 2024 by rpki-client on console-fra.rpki-client.org