Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e3131322e3230382e302f32312d3234203d3e203237393431.roa
File:                     3230302e3131322e3230382e302f32312d3234203d3e203237393431.roa (raw, json)
Hash identifier:          jgu2yuMPJDkaf72GX/4f7IcokaUrvKp+6ceC3ZEJdyY=
Subject key identifier:   D6:6D:9C:6E:F0:CC:E8:00:7D:AC:7E:FB:46:86:DE:60:1D:DA:5C:8A
Certificate issuer:       /CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
Certificate serial:       6C815623B4C23753E9F1A4F18CB169AC6B3CFD9D
Authority key identifier: 4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e3131322e3230382e302f32312d3234203d3e203237393431.roa
Signing time:             Tue 05 Mar 2024 17:55:47 +0000
ROA not before:           Tue 05 Mar 2024 17:50:47 +0000
ROA not after:            Tue 04 Mar 2025 17:55:47 +0000
asID:                     27941
IP address blocks:        200.112.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:81:56:23:b4:c2:37:53:e9:f1:a4:f1:8c:b1:69:ac:6b:3c:fd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC81E6B81F4EADC2BDBE339C81FDDB275E19369
        Validity
            Not Before: Mar  5 17:50:47 2024 GMT
            Not After : Mar  4 17:55:47 2025 GMT
        Subject: CN=D66D9C6EF0CCE8007DAC7EFB4686DE601DDA5C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:4c:ec:47:87:a7:c7:f2:23:74:92:06:06:
                    21:ab:db:20:64:04:31:18:65:04:c0:bc:c7:39:93:
                    90:82:5e:e4:4e:d3:96:69:74:2b:e5:95:5e:ec:7d:
                    4b:d5:67:fa:55:e8:69:df:9c:be:77:83:40:2d:5f:
                    53:05:56:b9:9e:cf:66:c6:61:13:33:1b:83:3c:11:
                    70:fd:5e:d0:dc:a9:78:9a:a7:08:d4:2d:58:5c:5f:
                    5d:16:6e:3d:f2:d1:75:0d:c2:fa:f3:f2:b5:3b:f5:
                    3b:af:6c:8f:f4:18:0b:92:1c:aa:68:f7:d6:d0:ef:
                    15:9f:5a:ec:e2:d9:df:73:6c:25:f6:c9:ed:26:52:
                    a7:e1:85:2b:80:45:b6:2b:66:5a:4e:e9:e2:1b:76:
                    e6:bb:4f:91:5f:b9:68:ee:48:e3:ce:48:22:98:ec:
                    1e:95:4b:2f:a5:ba:ff:3a:d8:4c:75:37:5a:5e:03:
                    39:05:d8:94:a8:08:d8:fb:56:01:39:85:cf:e8:69:
                    ba:ea:8a:17:a3:2f:12:ab:0d:bb:58:35:a2:dc:74:
                    04:2e:8a:f0:42:e9:ea:71:10:91:e4:19:fe:f2:ee:
                    4e:5d:ae:6e:0b:59:5c:0c:db:5f:c2:86:39:aa:13:
                    82:f4:87:80:cf:69:38:1e:0b:c1:61:51:10:79:57:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:9C:6E:F0:CC:E8:00:7D:AC:7E:FB:46:86:DE:60:1D:DA:5C:8A
            X509v3 Authority Key Identifier:
                keyid:4B:C8:1E:6B:81:F4:EA:DC:2B:DB:E3:39:C8:1F:DD:B2:75:E1:93:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BC81E6B81F4EADC2BDBE339C81FDDB275E19369.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5971E8848332E32EA74D5364D63827562450775146F204776D51548F098E3362/0/3230302e3131322e3230382e302f32312d3234203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:b6:13:60:4c:c9:6b:50:e8:62:a6:35:bd:58:56:26:b3:
         30:19:3c:0e:49:74:78:61:b4:30:05:48:2b:11:cf:6f:87:a3:
         f7:bd:68:9e:66:dc:dd:ef:2d:fb:c5:d3:3c:d9:f6:4c:6b:2a:
         9e:49:2e:bd:6a:8c:5f:f4:12:e1:7c:7b:f9:eb:a9:d4:4b:8e:
         20:67:63:92:6b:5c:94:a0:34:d8:8e:27:0c:48:53:ea:cb:84:
         5d:bc:c2:64:c5:96:e9:95:7c:61:98:da:7e:3d:1d:e6:be:d1:
         34:c1:6e:65:6e:52:4d:f1:86:9c:ef:9e:1e:8a:df:d9:c2:e2:
         9f:8c:f0:f1:6d:ba:ef:54:fe:2d:b9:f2:5f:29:33:81:5a:70:
         fb:92:80:e6:54:3d:22:a2:e2:6e:28:26:27:9d:b2:cc:f7:22:
         43:48:c6:65:2b:82:9e:ac:ee:cc:e5:31:ff:69:fd:b0:1e:92:
         51:d5:98:58:ab:c4:de:f0:15:96:32:ce:38:cb:67:04:9e:9c:
         2a:3d:4d:76:04:3a:01:90:9c:15:56:62:82:fc:46:6b:27:fa:
         c7:3b:2e:52:76:7b:14:75:7d:a0:44:48:10:e1:aa:09:31:4a:
         78:47:f4:82:6d:e0:03:76:fb:2d:be:71:a7:ff:46:f3:cd:b6:
         ec:40:c8:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbIFWI7TCN1Pp8aTxjLFprGs8/Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJDODFFNkI4MUY0RUFEQzJCREJFMzM5QzgxRkREQjI3
NUUxOTM2OTAeFw0yNDAzMDUxNzUwNDdaFw0yNTAzMDQxNzU1NDdaMDMxMTAvBgNV
BAMTKEQ2NkQ5QzZFRjBDQ0U4MDA3REFDN0VGQjQ2ODZERTYwMUREQTVDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNEzsR4enx/IjdJIGBiGr2yBk
BDEYZQTAvMc5k5CCXuRO05ZpdCvllV7sfUvVZ/pV6GnfnL53g0AtX1MFVrmez2bG
YRMzG4M8EXD9XtDcqXiapwjULVhcX10Wbj3y0XUNwvrz8rU79TuvbI/0GAuSHKpo
99bQ7xWfWuzi2d9zbCX2ye0mUqfhhSuARbYrZlpO6eIbdua7T5FfuWjuSOPOSCKY
7B6VSy+luv862Ex1N1peAzkF2JSoCNj7VgE5hc/oabrqihejLxKrDbtYNaLcdAQu
ivBC6epxEJHkGf7y7k5drm4LWVwM21/ChjmqE4L0h4DPaTgeC8FhURB5V/CBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1m2cbvDM6AB9rH77RobeYB3aXIowHwYDVR0j
BBgwFoAUS8gea4H06twr2+M5yB/dsnXhk2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTcxRTg4NDgzMzJFMzJFQTc0RDUzNjRENjM4Mjc1NjI0
NTA3NzUxNDZGMjA0Nzc2RDUxNTQ4RjA5OEUzMzYyLzAvNEJDODFFNkI4MUY0RUFE
QzJCREJFMzM5QzgxRkREQjI3NUUxOTM2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QkM4MUU2QjgxRjRFQURDMkJE
QkUzMzlDODFGRERCMjc1RTE5MzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3MUU4ODQ4MzMyRTMyRUE3NEQ1MzY0RDYzODI3NTYyNDUwNzc1MTQ2
RjIwNDc3NkQ1MTU0OEYwOThFMzM2Mi8wLzMyMzAzMDJlMzEzMTMyMmUzMjMwMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzkzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyHDQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAxrrYTYEzJa1DoYqY1vVhWJrMwGTwOSXR4YbQw
BUgrEc9vh6P3vWieZtzd7y37xdM82fZMayqeSS69aoxf9BLhfHv566nUS44gZ2OS
a1yUoDTYjicMSFPqy4RdvMJkxZbplXxhmNp+PR3mvtE0wW5lblJN8Yac754eit/Z
wuKfjPDxbbrvVP4tufJfKTOBWnD7koDmVD0iouJuKCYnnbLM9yJDSMZlK4KerO7M
5TH/af2wHpJR1ZhYq8Te8BWWMs44y2cEnpwqPU12BDoBkJwVVmKC/EZrJ/rHOy5S
dnsUdX2gREgQ4aoJMUp4R/SCbeADdvstvnGn/0bzzbbsQMgG
-----END CERTIFICATE-----
Generated at Sat May 4 12:52:23 2024 by rpki-client on console-fra.rpki-client.org