Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa
File:                     3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa (raw, json)
Hash identifier:          IUiZ1j5dZ0akNjrseC0SqA3zDwxmqlFVLJkzE4GnHvk=
Subject key identifier:   C8:CD:E0:02:E8:A2:63:EE:C9:07:65:BB:E0:B5:30:5A:C2:F8:80:32
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       6D12B4C1E5FB2FEB9115FF5954E26124AEF76957
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa
Signing time:             Tue 05 Mar 2024 18:15:01 +0000
ROA not before:           Tue 05 Mar 2024 18:10:01 +0000
ROA not after:            Tue 04 Mar 2025 18:15:01 +0000
asID:                     52320
IP address blocks:        209.127.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:12:b4:c1:e5:fb:2f:eb:91:15:ff:59:54:e2:61:24:ae:f7:69:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Mar  5 18:10:01 2024 GMT
            Not After : Mar  4 18:15:01 2025 GMT
        Subject: CN=C8CDE002E8A263EEC90765BBE0B5305AC2F88032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:f7:11:24:b9:9b:2b:e0:b1:83:90:3a:8d:
                    e9:a3:2a:6a:d4:12:7e:74:6b:b4:38:63:73:d3:11:
                    99:0d:c3:ee:7e:cf:58:d1:68:7b:b1:ae:c7:81:82:
                    92:ab:8c:6b:cd:9d:03:69:1c:2d:de:cf:1c:53:2d:
                    24:23:77:71:df:e6:2f:bd:78:96:da:1e:6e:3a:2b:
                    52:dc:0d:6f:98:62:8b:7c:86:01:20:a3:f0:66:74:
                    aa:f1:2d:8f:13:0e:fd:1a:e7:32:e5:e5:79:6e:16:
                    47:e2:63:59:53:b0:74:eb:37:16:a6:3c:ff:fe:3e:
                    50:ec:f8:3c:ba:33:70:e0:d5:1e:3e:73:e0:19:f4:
                    3e:bb:ad:45:f4:c0:45:ac:11:8f:90:39:3d:a9:41:
                    9c:db:fc:4f:15:5b:09:c3:7a:51:e2:aa:c0:f0:0f:
                    af:10:a1:13:59:ae:3a:39:4a:53:22:31:5a:e0:5d:
                    85:f9:1d:32:73:4b:1b:3b:bc:17:cd:cb:43:2c:cd:
                    f3:15:2e:7b:5b:55:46:6c:64:bd:9e:5a:47:80:57:
                    ce:0c:ff:7d:fd:fd:49:6b:88:04:b6:c3:71:46:ef:
                    ac:9c:09:22:63:84:78:6b:4c:91:78:15:4c:17:79:
                    2f:1c:3e:f7:7d:a5:a1:69:26:73:e0:fc:f8:81:f3:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:E0:02:E8:A2:63:EE:C9:07:65:BB:E0:B5:30:5A:C2:F8:80:32
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3230392e3132372e3231322e302f32342d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:23:3a:a3:85:ad:16:59:5a:9f:8c:69:bc:d0:bc:a4:9f:
         13:d9:cd:9e:f4:95:a1:d3:06:ab:51:62:a8:62:56:20:96:e6:
         5d:cc:ba:a0:9d:90:ab:ed:58:c9:c5:73:9c:17:46:91:cc:0a:
         68:61:23:aa:5a:d0:e9:0a:76:50:ab:b9:4c:81:29:a0:22:de:
         6a:4b:79:46:1e:96:09:1a:6e:a1:6e:90:a6:e9:86:c6:91:1d:
         0f:ac:35:e4:26:24:c5:d8:31:1c:b5:7d:76:40:b5:30:5b:bd:
         75:bd:fc:44:6b:04:81:e9:94:3b:80:65:d6:fe:92:41:47:9b:
         fc:7a:7e:99:53:fb:5d:96:5c:c3:0c:be:6f:b5:0a:6a:d3:6c:
         84:53:8d:1e:8d:2d:9e:a1:1d:5b:8d:06:cb:35:ac:60:1d:c8:
         c9:24:56:df:65:76:be:5b:04:b7:55:c8:84:36:22:74:a4:73:
         18:30:fc:32:7e:09:01:34:8e:8e:c5:b3:d7:cb:be:ea:fb:df:
         9a:1e:49:73:af:a8:e2:4e:c4:24:0f:6b:a4:35:6c:be:6d:3f:
         a8:4c:43:a7:ca:10:af:74:9a:68:02:04:11:fe:b8:dc:f1:7f:
         32:29:bb:f5:4d:9c:58:33:e7:cc:08:77:04:16:06:13:21:62:
         fd:aa:34:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbRK0weX7L+uRFf9ZVOJhJK73aVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBBNDU1NkJBRDU1NDZENjg4RUQwRkY3QjQ5MkIzODgx
RUJDODUyNjAeFw0yNDAzMDUxODEwMDFaFw0yNTAzMDQxODE1MDFaMDMxMTAvBgNV
BAMTKEM4Q0RFMDAyRThBMjYzRUVDOTA3NjVCQkUwQjUzMDVBQzJGODgwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh/cRJLmbK+Cxg5A6jemjKmrU
En50a7Q4Y3PTEZkNw+5+z1jRaHuxrseBgpKrjGvNnQNpHC3ezxxTLSQjd3Hf5i+9
eJbaHm46K1LcDW+YYot8hgEgo/BmdKrxLY8TDv0a5zLl5XluFkfiY1lTsHTrNxam
PP/+PlDs+Dy6M3Dg1R4+c+AZ9D67rUX0wEWsEY+QOT2pQZzb/E8VWwnDelHiqsDw
D68QoRNZrjo5SlMiMVrgXYX5HTJzSxs7vBfNy0MszfMVLntbVUZsZL2eWkeAV84M
/339/UlriAS2w3FG76ycCSJjhHhrTJF4FUwXeS8cPvd9paFpJnPg/PiB89LXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyM3gAuiiY+7JB2W74LUwWsL4gDIwHwYDVR0j
BBgwFoAUsKRVa61VRtaI7Q/3tJKziB68hSYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkIyNThCNkIzN0Q1QTk5NjFDQUMyQ0I5MkFFOUZGNjQx
RUU1OEM0MkNGQzUwNkM4NjFBRDc0RTkzMzE3RDU5LzAvQjBBNDU1NkJBRDU1NDZE
Njg4RUQwRkY3QjQ5MkIzODgxRUJDODUyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMEE0NTU2QkFENTU0NkQ2ODhF
RDBGRjdCNDkyQjM4ODFFQkM4NTI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJCMjU4QjZCMzdENUE5OTYxQ0FDMkNCOTJBRTlGRjY0MUVFNThDNDJD
RkM1MDZDODYxQUQ3NEU5MzMxN0Q1OS8wLzMyMzAzOTJlMzEzMjM3MmUzMjMxMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/U
MA0GCSqGSIb3DQEBCwUAA4IBAQAejSM6o4WtFllan4xpvNC8pJ8T2c2e9JWh0war
UWKoYlYgluZdzLqgnZCr7VjJxXOcF0aRzApoYSOqWtDpCnZQq7lMgSmgIt5qS3lG
HpYJGm6hbpCm6YbGkR0PrDXkJiTF2DEctX12QLUwW711vfxEawSB6ZQ7gGXW/pJB
R5v8en6ZU/tdllzDDL5vtQpq02yEU40ejS2eoR1bjQbLNaxgHcjJJFbfZXa+WwS3
VciENiJ0pHMYMPwyfgkBNI6OxbPXy77q+9+aHklzr6jiTsQkD2ukNWy+bT+oTEOn
yhCvdJpoAgQR/rjc8X8yKbv1TZxYM+fMCHcEFgYTIWL9qjR2
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org