Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa
File:                     3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa (raw, json)
Hash identifier:          759wzG/cxRU+7bu1PYagEsoRdeHbObArH5mX9a4kijA=
Subject key identifier:   A4:F5:8C:07:C6:40:4E:D2:93:7E:E2:A8:1D:2F:31:9C:87:AA:2A:E0
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       78A2772946B6A6640DE60D81B2B5A3F0A6763924
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa
Signing time:             Tue 05 Mar 2024 17:57:07 +0000
ROA not before:           Tue 05 Mar 2024 17:52:07 +0000
ROA not after:            Tue 04 Mar 2025 17:57:07 +0000
asID:                     265844
IP address blocks:        200.115.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:77:29:46:b6:a6:64:0d:e6:0d:81:b2:b5:a3:f0:a6:76:39:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar  5 17:52:07 2024 GMT
            Not After : Mar  4 17:57:07 2025 GMT
        Subject: CN=A4F58C07C6404ED2937EE2A81D2F319C87AA2AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:6a:79:68:d2:f0:e9:0c:e4:24:48:5d:97:
                    d4:21:b3:56:c5:5a:55:e9:3a:67:0e:86:48:9e:b9:
                    ff:b1:de:de:dc:88:d4:70:1d:1a:81:00:b5:dc:7a:
                    64:e7:90:b0:64:34:29:52:93:67:6f:d6:27:7e:f5:
                    02:82:82:fa:e1:74:f9:be:ac:91:7c:93:f2:a9:c5:
                    4d:76:2e:f2:ec:94:70:35:33:59:97:cc:fa:6e:17:
                    c9:f9:bb:0f:b5:43:29:26:f9:75:8a:a6:ac:20:83:
                    09:1c:eb:e3:64:4b:e6:4e:e5:16:36:34:5b:71:29:
                    60:2a:38:18:89:d4:66:3c:56:6a:5e:2d:09:22:b7:
                    03:7c:04:5e:bb:05:04:bc:f1:f5:ab:b2:a8:3f:47:
                    bd:6b:c6:23:50:ec:02:83:cb:de:b7:47:2e:3b:b1:
                    2b:a0:6c:2f:60:b6:38:3f:3c:dd:4b:a9:e0:23:93:
                    1f:ec:e5:5f:23:f1:af:b4:e0:67:1e:c6:42:f0:35:
                    a9:16:c2:fb:21:66:80:00:74:a9:c6:a4:8d:d3:11:
                    d0:a4:a7:7a:8d:b5:fb:98:99:4f:9c:cb:5e:52:de:
                    c6:14:b4:9a:d3:39:25:2d:02:ae:2a:e6:7f:2d:11:
                    b7:0a:5b:27:54:c9:1e:ce:ae:30:65:bb:1b:0c:ab:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:8C:07:C6:40:4E:D2:93:7E:E2:A8:1D:2F:31:9C:87:AA:2A:E0
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:ac:8f:b9:6e:31:63:f1:6f:bb:ab:c6:fb:ff:93:4f:2a:
         ff:5f:cf:0a:e6:e2:85:97:74:84:69:d6:6c:ba:e2:60:8e:76:
         bb:e1:e3:10:0a:82:9d:27:0a:87:37:2c:05:0b:89:1b:2d:85:
         01:ae:15:b5:d8:bb:20:3f:ef:4d:93:3d:87:a5:a3:19:1f:34:
         04:77:da:a0:74:28:16:c8:6c:7a:8b:54:bf:01:3d:ac:aa:eb:
         02:a6:db:9e:1d:49:02:cf:52:90:11:26:52:53:4d:21:dd:c7:
         f1:df:ad:50:62:16:61:56:6e:94:1a:b8:36:ae:46:34:f4:2f:
         1a:8c:78:af:70:9a:70:c2:f1:ea:6f:b2:44:83:78:be:0f:1b:
         8f:6d:f8:9c:fd:36:73:a6:b5:64:69:9c:66:90:b9:74:25:9c:
         53:e5:20:e2:bf:bb:e5:87:03:e8:9e:ee:a4:b8:fe:a7:3e:54:
         ce:a9:95:7a:3a:e4:ad:33:0d:b8:9b:dd:ca:61:0a:92:b1:e8:
         29:e3:c5:96:e4:29:f3:a3:dc:95:98:3c:af:30:dc:6f:8a:2b:
         57:f7:82:1a:79:12:36:9f:39:e7:57:3b:1c:40:b7:d3:cf:ce:
         3f:ab:b3:7e:48:26:6c:6f:87:ef:f6:ac:9a:24:d9:5d:50:81:
         af:6f:42:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeKJ3KUa2pmQN5g2BsrWj8KZ2OSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4QTlEQTczMTIwNkM3MzkwQzhBNkVCMTZBQ0VFMjg1
REFEQ0UwMzAeFw0yNDAzMDUxNzUyMDdaFw0yNTAzMDQxNzU3MDdaMDMxMTAvBgNV
BAMTKEE0RjU4QzA3QzY0MDRFRDI5MzdFRTJBODFEMkYzMTlDODdBQTJBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEWp5aNLw6QzkJEhdl9Qhs1bF
WlXpOmcOhkieuf+x3t7ciNRwHRqBALXcemTnkLBkNClSk2dv1id+9QKCgvrhdPm+
rJF8k/KpxU12LvLslHA1M1mXzPpuF8n5uw+1Qykm+XWKpqwggwkc6+NkS+ZO5RY2
NFtxKWAqOBiJ1GY8VmpeLQkitwN8BF67BQS88fWrsqg/R71rxiNQ7AKDy963Ry47
sSugbC9gtjg/PN1LqeAjkx/s5V8j8a+04GcexkLwNakWwvshZoAAdKnGpI3TEdCk
p3qNtfuYmU+cy15S3sYUtJrTOSUtAq4q5n8tEbcKWydUyR7OrjBluxsMq6HRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpPWMB8ZATtKTfuKoHS8xnIeqKuAwHwYDVR0j
BBgwFoAUpIqdpzEgbHOQyKbrFqzuKF2tzgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0NFNTg1NTQzN0E1RThGQTA5QUFFQzdEMkQ3MzI5MEMw
NjdDQzhFQjIwRTA0RUMwOTJDRDM3NDFEOUE2RDgyLzAvQTQ4QTlEQTczMTIwNkM3
MzkwQzhBNkVCMTZBQ0VFMjg1REFEQ0UwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDhBOURBNzMxMjA2QzczOTBD
OEE2RUIxNkFDRUUyODVEQURDRTAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdDRTU4NTU0MzdBNUU4RkEwOUFBRUM3RDJENzMyOTBDMDY3Q0M4RUIy
MEUwNEVDMDkyQ0QzNzQxRDlBNkQ4Mi8wLzMyMzAzMDJlMzEzMTM1MmUzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHMO
MA0GCSqGSIb3DQEBCwUAA4IBAQCt5KyPuW4xY/Fvu6vG+/+TTyr/X88K5uKFl3SE
adZsuuJgjna74eMQCoKdJwqHNywFC4kbLYUBrhW12LsgP+9Nkz2HpaMZHzQEd9qg
dCgWyGx6i1S/AT2squsCptueHUkCz1KQESZSU00h3cfx361QYhZhVm6UGrg2rkY0
9C8ajHivcJpwwvHqb7JEg3i+DxuPbfic/TZzprVkaZxmkLl0JZxT5SDiv7vlhwPo
nu6kuP6nPlTOqZV6OuStMw24m93KYQqSsegp48WW5Cnzo9yVmDyvMNxviitX94Ia
eRI2nznnVzscQLfTz84/q7N+SCZsb4fv9qyaJNldUIGvb0Kc
-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org