Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
File:                     3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          rva6H6XOy84FPyhNZG03Ej/w7eDm7+ZoT4cdXSUy0jU=
Subject key identifier:   12:9F:43:BD:E4:EE:50:96:9A:58:80:9F:0F:E7:CC:B3:25:0E:4B:CD
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       66BB02D94CCD5D22703F90305193BC3167496785
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 11 Sep 2024 14:35:02 +0000
ROA not before:           Wed 11 Sep 2024 14:30:02 +0000
ROA not after:            Wed 10 Sep 2025 14:35:02 +0000
asID:                     11556
IP address blocks:        200.115.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:02:d9:4c:cd:5d:22:70:3f:90:30:51:93:bc:31:67:49:67:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:02 2024 GMT
            Not After : Sep 10 14:35:02 2025 GMT
        Subject: CN=129F43BDE4EE50969A58809F0FE7CCB3250E4BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:d4:b3:55:e9:14:4a:6b:ec:9d:bc:db:0a:
                    c4:4c:c0:fd:d7:f9:e2:91:cc:35:1f:92:20:9f:d1:
                    2c:a1:0c:21:5d:c9:1a:39:36:a3:52:d3:fe:38:65:
                    d9:68:78:e3:ef:00:ac:e2:b1:39:99:d6:50:79:4d:
                    35:34:6f:86:22:bf:91:e0:62:cf:f3:6c:fb:51:9e:
                    f8:22:f1:2a:85:40:76:32:e4:d8:1a:1e:c3:e2:cb:
                    e5:03:5b:e3:94:e0:a9:f6:6c:ca:e4:15:ae:7a:4c:
                    02:42:6c:14:ba:d7:c4:17:06:64:56:33:5e:ef:c1:
                    7d:26:0f:b3:94:18:46:9b:7e:1c:f2:88:15:ea:92:
                    2f:99:ea:2c:16:2b:81:7e:4c:e1:fd:d9:c6:25:6c:
                    65:55:89:da:f5:f7:c1:8e:0d:f9:65:23:71:9c:89:
                    05:2f:a0:97:0f:5b:c5:2e:13:62:0b:91:a3:f3:8a:
                    27:da:44:af:ca:49:29:5e:7d:cf:f7:1b:d1:f0:4d:
                    c4:22:0b:08:f1:e4:fe:6e:3c:f3:bd:93:d8:6b:08:
                    59:75:a0:ae:80:2e:ac:ba:c0:8d:b5:0c:30:19:d6:
                    08:ff:4f:96:8d:d8:02:7f:02:6a:95:36:17:ff:e5:
                    85:91:69:cf:75:dc:fc:c2:91:23:85:d2:e5:4d:df:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9F:43:BD:E4:EE:50:96:9A:58:80:9F:0F:E7:CC:B3:25:0E:4B:CD
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:b6:d6:75:68:99:09:f4:46:92:10:f1:81:46:75:22:0a:
         4d:a1:1e:94:d4:ce:38:b1:11:59:ea:4f:32:d8:b3:ce:9c:4e:
         4c:ae:84:43:d5:94:81:2b:c9:dc:c4:40:d1:fc:88:78:50:b9:
         39:5e:fc:e2:c0:c9:af:de:c5:f2:5d:32:c6:7b:1d:be:6e:86:
         d3:fe:6a:f5:9f:50:71:f2:77:b5:56:11:d3:c5:e5:1e:1c:d8:
         bf:a8:86:59:f6:d5:87:58:47:67:8a:a9:e2:c9:c2:04:05:49:
         fa:de:ff:b4:44:0b:b3:73:f1:65:2f:14:02:88:27:b6:5b:77:
         e9:1f:13:19:9c:e4:95:63:3d:6b:79:f1:d4:4f:92:60:f7:f7:
         30:58:84:81:8a:22:9e:f0:15:25:a1:b8:b2:3c:07:ae:4f:78:
         5d:fd:fb:06:91:08:74:03:66:fc:70:74:15:cc:1b:67:ba:1f:
         80:a7:e5:bd:e8:9a:83:df:e5:3e:b6:18:79:16:40:91:97:34:
         80:63:0c:b1:4e:93:ba:7e:89:74:11:8f:ce:81:65:4c:ea:bc:
         b2:45:36:d5:c0:bf:2f:d0:12:b8:f1:76:c4:74:c5:e7:80:8e:
         ed:a6:e4:7a:b0:2e:a5:80:bc:e1:3b:f4:1d:c2:25:5a:20:0a:
         ba:7c:d5:b8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZrsC2UzNXSJwP5AwUZO8MWdJZ4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNDA5MTExNDMwMDJaFw0yNTA5MTAxNDM1MDJaMDMxMTAvBgNV
BAMTKDEyOUY0M0JERTRFRTUwOTY5QTU4ODA5RjBGRTdDQ0IzMjUwRTRCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhtSzVekUSmvsnbzbCsRMwP3X
+eKRzDUfkiCf0SyhDCFdyRo5NqNS0/44ZdloeOPvAKzisTmZ1lB5TTU0b4Yiv5Hg
Ys/zbPtRnvgi8SqFQHYy5NgaHsPiy+UDW+OU4Kn2bMrkFa56TAJCbBS618QXBmRW
M17vwX0mD7OUGEabfhzyiBXqki+Z6iwWK4F+TOH92cYlbGVVidr198GODfllI3Gc
iQUvoJcPW8UuE2ILkaPziifaRK/KSSlefc/3G9HwTcQiCwjx5P5uPPO9k9hrCFl1
oK6ALqy6wI21DDAZ1gj/T5aN2AJ/AmqVNhf/5YWRac913PzCkSOF0uVN3w1xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEp9DveTuUJaaWICfD+fMsyUOS80wHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMyMzAzMDJlMzEzMTM1MmUzMTM3MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHOv
MA0GCSqGSIb3DQEBCwUAA4IBAQA8hrbWdWiZCfRGkhDxgUZ1IgpNoR6U1M44sRFZ
6k8y2LPOnE5MroRD1ZSBK8ncxEDR/Ih4ULk5XvziwMmv3sXyXTLGex2+bobT/mr1
n1Bx8ne1VhHTxeUeHNi/qIZZ9tWHWEdniqniycIEBUn63v+0RAuzc/FlLxQCiCe2
W3fpHxMZnOSVYz1refHUT5Jg9/cwWISBiiKe8BUlobiyPAeuT3hd/fsGkQh0A2b8
cHQVzBtnuh+Ap+W96JqD3+U+thh5FkCRlzSAYwyxTpO6fol0EY/OgWVM6ryyRTbV
wL8v0BK48XbEdMXngI7tpuR6sC6lgLzhO/QdwiVaIAq6fNW4
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:03 2024 by rpki-client on console-ams.rpki-client.org