Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38322e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          xHiyPOPJZz3f5tewya+0dxVbAKK/golZPysE9n8KFIk=
Subject key identifier:   97:CE:02:A7:57:46:A4:01:A2:A9:BB:9C:4B:CF:3D:C7:5B:69:13:74
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       23AA0A47A3D35CBB64DC764BE10C22E9D6F7B283
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 17 Sep 2024 00:35:00 +0000
ROA not before:           Tue 17 Sep 2024 00:30:00 +0000
ROA not after:            Tue 16 Sep 2025 00:35:00 +0000
asID:                     28065
IP address blocks:        200.114.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:aa:0a:47:a3:d3:5c:bb:64:dc:76:4b:e1:0c:22:e9:d6:f7:b2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 17 00:30:00 2024 GMT
            Not After : Sep 16 00:35:00 2025 GMT
        Subject: CN=97CE02A75746A401A2A9BB9C4BCF3DC75B691374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:47:0a:2e:45:0e:a9:db:d4:75:b2:08:b1:
                    76:49:db:fa:56:3d:dc:fe:58:1d:23:db:5b:d3:78:
                    57:b3:15:27:5d:87:e4:c3:55:de:91:4d:04:c8:14:
                    88:93:0f:37:d5:86:f4:52:0d:59:54:0a:e2:ff:eb:
                    02:86:67:55:a0:bf:ab:0f:06:46:27:68:be:46:9f:
                    0b:10:17:8c:ad:2d:f6:b9:27:ed:12:d7:e1:80:96:
                    75:a5:a0:a7:fc:7c:e6:43:82:fe:2c:6f:0a:76:ae:
                    18:73:af:9e:75:3b:f3:b3:19:f6:14:a1:6f:04:0d:
                    61:06:62:44:6e:dc:70:a8:19:ef:91:f1:01:fe:b8:
                    20:46:19:6b:bd:10:76:af:01:ef:80:ef:bb:2c:8b:
                    78:fb:19:e1:57:cf:8d:88:16:f1:62:c8:5f:fc:eb:
                    4c:94:27:1a:49:af:1e:72:9a:a5:8b:77:17:ed:1e:
                    89:82:aa:59:e0:bb:fb:ad:07:5b:fc:ac:34:c7:a2:
                    22:a3:5e:17:d9:77:5d:83:04:2c:d1:94:c7:da:dc:
                    1b:77:c6:a2:57:97:ee:64:12:f2:d7:4a:ea:97:e8:
                    34:89:7e:21:c2:0c:64:6c:7e:00:35:50:3c:6d:42:
                    f1:df:c0:6b:5e:4a:9d:ee:b3:70:c9:c0:a3:3c:90:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:02:A7:57:46:A4:01:A2:A9:BB:9C:4B:CF:3D:C7:5B:69:13:74
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:0c:2b:3e:02:71:38:a5:f5:35:53:8c:82:ef:a7:c9:6d:
         58:3e:27:f6:26:53:60:39:a1:70:b4:49:6d:b8:a6:18:a6:d9:
         5a:69:72:b0:d2:0a:0c:54:18:54:b9:fb:62:8d:a2:3a:36:c5:
         4d:48:0e:82:14:bb:d8:8d:d2:00:50:0b:b3:ab:59:a1:ba:59:
         95:0b:1b:89:e9:46:2e:e3:07:88:a7:e1:36:5f:43:ca:d2:2d:
         8b:71:ce:8f:74:3b:18:a6:6f:99:ee:22:c3:13:89:33:00:ba:
         10:1b:58:96:81:e1:40:df:3f:c1:92:9f:3a:49:3b:f7:66:a5:
         ab:b7:97:62:44:64:3f:19:ec:c4:ac:48:b6:91:c5:ac:e7:1c:
         49:ec:da:4b:7f:3f:b9:af:f3:dc:78:84:93:fa:54:c9:ab:e4:
         6b:14:8c:a0:bd:7b:68:f8:d9:1a:86:0d:ae:1f:12:d9:35:73:
         cc:22:31:51:76:a1:f9:5f:d2:73:1c:c3:96:94:84:57:07:58:
         58:1b:a4:7a:7c:b9:3d:9e:a5:52:c6:c8:53:08:6b:70:62:4f:
         7f:bc:42:bc:ff:4e:e0:0b:87:16:fa:96:c1:af:e3:de:0a:18:
         4e:95:db:41:ae:0b:d1:18:e7:7b:88:e2:5b:ca:9a:66:a3:cf:
         0e:bc:54:3c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI6oKR6PTXLtk3HZL4Qwi6db3soMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNDA5MTcwMDMwMDBaFw0yNTA5MTYwMDM1MDBaMDMxMTAvBgNV
BAMTKDk3Q0UwMkE3NTc0NkE0MDFBMkE5QkI5QzRCQ0YzREM3NUI2OTEzNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7kcKLkUOqdvUdbIIsXZJ2/pW
Pdz+WB0j21vTeFezFSddh+TDVd6RTQTIFIiTDzfVhvRSDVlUCuL/6wKGZ1Wgv6sP
BkYnaL5GnwsQF4ytLfa5J+0S1+GAlnWloKf8fOZDgv4sbwp2rhhzr551O/OzGfYU
oW8EDWEGYkRu3HCoGe+R8QH+uCBGGWu9EHavAe+A77ssi3j7GeFXz42IFvFiyF/8
60yUJxpJrx5ymqWLdxftHomCqlngu/utB1v8rDTHoiKjXhfZd12DBCzRlMfa3Bt3
xqJXl+5kEvLXSuqX6DSJfiHCDGRsfgA1UDxtQvHfwGteSp3us3DJwKM8kAi5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUl84Cp1dGpAGiqbucS889x1tpE3QwHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhyUjAN
BgkqhkiG9w0BAQsFAAOCAQEAd8gMKz4CcTil9TVTjILvp8ltWD4n9iZTYDmhcLRJ
bbimGKbZWmlysNIKDFQYVLn7Yo2iOjbFTUgOghS72I3SAFALs6tZobpZlQsbielG
LuMHiKfhNl9DytIti3HOj3Q7GKZvme4iwxOJMwC6EBtYloHhQN8/wZKfOkk792al
q7eXYkRkPxnsxKxItpHFrOccSezaS38/ua/z3HiEk/pUyavkaxSMoL17aPjZGoYN
rh8S2TVzzCIxUXah+V/ScxzDlpSEVwdYWBukeny5PZ6lUsbIUwhrcGJPf7xCvP9O
4AuHFvqWwa/j3goYTpXbQa4L0Rjne4jiW8qaZqPPDrxUPA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org