Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa
File:                     3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa (raw, json)
Hash identifier:          k9xjKSxl4cVLdBaeE3jwodKBRMiDfmFthaNXI9JFeCI=
Subject key identifier:   FC:DB:AF:0A:7E:28:1A:3B:4F:6E:B3:98:72:57:E9:DC:7E:C3:A9:D0
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       619E339676EB1DA93659A056492E655AB942F6C2
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa
Signing time:             Tue 17 Sep 2024 00:55:00 +0000
ROA not before:           Tue 17 Sep 2024 00:50:00 +0000
ROA not after:            Tue 16 Sep 2025 00:55:00 +0000
asID:                     273088
IP address blocks:        200.114.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9e:33:96:76:eb:1d:a9:36:59:a0:56:49:2e:65:5a:b9:42:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 17 00:50:00 2024 GMT
            Not After : Sep 16 00:55:00 2025 GMT
        Subject: CN=FCDBAF0A7E281A3B4F6EB3987257E9DC7EC3A9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:0a:45:cf:96:c8:c4:58:9d:4c:e4:bb:d9:
                    4f:2e:22:3e:5d:e5:87:aa:3e:d3:59:ee:ca:9b:e7:
                    63:5c:6b:1d:db:c0:e9:9a:f1:5b:38:52:45:41:7b:
                    b3:57:bc:9c:82:3c:9f:49:e2:c7:43:d5:63:09:8b:
                    89:05:f5:29:21:e8:d8:35:f3:ce:7a:be:e5:8d:b3:
                    23:b5:5c:b0:3c:47:ef:37:42:82:4e:ce:54:fb:46:
                    de:bc:3b:40:0e:9b:7b:f3:85:41:04:15:29:d9:13:
                    f9:42:f4:72:7b:49:a8:80:52:99:ea:53:04:71:50:
                    6a:8a:ba:67:c7:82:09:7d:77:a8:a4:90:4d:60:03:
                    04:b8:7f:13:58:22:b4:bc:60:60:b0:45:32:2c:aa:
                    48:8e:e6:f0:6b:b3:b1:80:38:ae:f9:28:e6:e8:42:
                    fa:6e:5b:79:95:7e:62:75:10:3f:33:28:a5:29:aa:
                    30:0b:7f:29:5f:51:ca:30:bc:f7:17:8f:14:66:48:
                    28:fe:14:4c:04:7b:19:09:e0:3e:48:a5:2e:00:c3:
                    1e:07:24:f9:d4:ff:9a:c2:0d:92:f5:60:47:1c:e8:
                    a4:4d:f5:f5:f1:32:b2:dd:e2:58:8f:9f:9f:6d:32:
                    07:46:50:55:a4:0a:37:12:7b:c7:c1:e9:04:ea:ef:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:AF:0A:7E:28:1A:3B:4F:6E:B3:98:72:57:E9:DC:7E:C3:A9:D0
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:2c:70:62:9f:e2:3d:40:99:01:cd:d7:c8:58:58:3b:4d:
         bf:68:a5:2d:97:08:23:52:9f:6e:8d:35:cc:4a:39:ea:fc:53:
         0c:42:cf:2e:71:2f:1a:8c:1b:ef:c2:2a:96:a4:b5:c2:c9:f7:
         a3:f4:4b:2c:2a:3e:cd:77:4a:bb:42:31:dc:6e:dc:e3:dd:34:
         ea:f7:ff:7a:22:71:a1:4a:b4:ee:bf:cd:ec:5e:96:73:1e:79:
         3c:96:9c:90:3c:47:a1:ac:a7:5b:6b:70:cc:70:37:62:22:0f:
         0d:f3:ea:94:13:66:a2:19:5c:e0:73:ec:10:cc:c0:25:a3:94:
         5a:6d:dc:05:7c:85:0f:72:2e:23:65:82:6a:fc:58:f9:cf:1c:
         70:b4:dd:ae:5f:2b:42:d2:f1:55:be:1c:e7:a4:a5:9f:14:66:
         17:b0:b4:17:60:a3:e6:76:0e:fe:22:1e:45:fe:5d:6a:66:39:
         8d:0f:29:6e:10:cf:ec:ed:c7:16:25:cf:bb:5d:a6:ef:fe:e3:
         64:a2:78:31:12:d8:5c:b3:c6:30:d1:fb:ea:65:03:c3:37:60:
         dd:e1:dd:a1:e6:9e:d3:ed:17:db:c8:c4:a5:2f:54:5e:01:ff:
         9c:5e:a1:84:4e:56:6f:4f:db:bd:e1:db:72:ea:14:5d:c1:47:
         32:1e:56:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYZ4zlnbrHak2WaBWSS5lWrlC9sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNDA5MTcwMDUwMDBaFw0yNTA5MTYwMDU1MDBaMDMxMTAvBgNV
BAMTKEZDREJBRjBBN0UyODFBM0I0RjZFQjM5ODcyNTdFOURDN0VDM0E5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cwpFz5bIxFidTOS72U8uIj5d
5YeqPtNZ7sqb52Ncax3bwOma8Vs4UkVBe7NXvJyCPJ9J4sdD1WMJi4kF9Skh6Ng1
8856vuWNsyO1XLA8R+83QoJOzlT7Rt68O0AOm3vzhUEEFSnZE/lC9HJ7SaiAUpnq
UwRxUGqKumfHggl9d6ikkE1gAwS4fxNYIrS8YGCwRTIsqkiO5vBrs7GAOK75KObo
QvpuW3mVfmJ1ED8zKKUpqjALfylfUcowvPcXjxRmSCj+FEwEexkJ4D5IpS4Awx4H
JPnU/5rCDZL1YEcc6KRN9fXxMrLd4liPn59tMgdGUFWkCjcSe8fB6QTq76hJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/NuvCn4oGjtPbrOYclfp3H7DqdAwHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHJR
MA0GCSqGSIb3DQEBCwUAA4IBAQCE+CxwYp/iPUCZAc3XyFhYO02/aKUtlwgjUp9u
jTXMSjnq/FMMQs8ucS8ajBvvwiqWpLXCyfej9EssKj7Nd0q7QjHcbtzj3TTq9/96
InGhSrTuv83sXpZzHnk8lpyQPEehrKdba3DMcDdiIg8N8+qUE2aiGVzgc+wQzMAl
o5RabdwFfIUPci4jZYJq/Fj5zxxwtN2uXytC0vFVvhznpKWfFGYXsLQXYKPmdg7+
Ih5F/l1qZjmNDyluEM/s7ccWJc+7Xabv/uNkongxEthcs8Yw0fvqZQPDN2Dd4d2h
5p7T7RfbyMSlL1ReAf+cXqGETlZvT9u94dty6hRdwUcyHlaU
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org