Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa
File:                     3230302e36332e39342e302f32342d3234203d3e20323637383139.roa (raw, json)
Hash identifier:          ZT3ldO2K+Nr0lMc2i4/p9DR8N5tUKn7GY46sdV9/QTY=
Subject key identifier:   84:5C:C0:1A:1A:93:BD:43:DF:69:7A:33:EA:4B:86:BA:7B:EC:F8:28
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       4A686A5E8D86657A40D80A4B7170993AAB81AC53
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa
Signing time:             Tue 05 Mar 2024 18:07:49 +0000
ROA not before:           Tue 05 Mar 2024 18:02:49 +0000
ROA not after:            Tue 04 Mar 2025 18:07:49 +0000
asID:                     267819
IP address blocks:        200.63.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:6a:5e:8d:86:65:7a:40:d8:0a:4b:71:70:99:3a:ab:81:ac:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Mar  5 18:02:49 2024 GMT
            Not After : Mar  4 18:07:49 2025 GMT
        Subject: CN=845CC01A1A93BD43DF697A33EA4B86BA7BECF828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:30:ef:49:6a:9b:41:b6:ea:b7:ee:7c:9c:
                    10:31:ad:bc:5d:77:17:57:44:42:6a:87:e6:8a:02:
                    81:65:2c:6f:3d:14:07:e8:d0:8e:7d:2a:77:ed:bc:
                    f8:73:3d:ed:ff:c4:50:4e:64:58:2e:42:42:09:18:
                    4a:1e:8d:46:78:a5:da:2a:a4:9d:fe:5c:68:7e:13:
                    94:b7:51:7e:f7:b3:81:2c:4d:48:0a:f1:ad:95:5d:
                    a1:fc:73:df:5f:08:e7:92:09:48:8c:fe:da:76:5f:
                    1d:ec:10:1e:49:e5:a8:eb:94:cb:64:67:62:68:ae:
                    bb:5d:ce:73:13:95:1d:d4:e2:80:51:10:a6:1f:6c:
                    97:af:22:b5:35:f8:98:1b:e5:4b:d9:f2:7b:fa:32:
                    11:02:84:a1:fb:7e:33:22:cf:70:86:09:e1:42:da:
                    92:87:05:97:0c:37:08:46:39:07:91:67:98:2e:84:
                    74:b1:3a:a2:bf:5f:21:5b:cc:44:b4:38:c6:85:4d:
                    a6:7e:c6:ee:b1:f4:e0:52:11:0c:8e:cc:b1:c2:7b:
                    f0:57:b8:36:63:62:b5:8b:a1:11:c5:6c:a6:a3:4f:
                    3f:2b:ef:0c:58:a3:8c:5e:68:2c:08:95:1e:28:dd:
                    06:b2:d3:5c:87:4f:bb:b5:48:4d:e6:00:1a:2e:84:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:C0:1A:1A:93:BD:43:DF:69:7A:33:EA:4B:86:BA:7B:EC:F8:28
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:d1:51:96:94:f2:c2:cd:a7:05:ca:a2:cc:32:5b:10:46:
         d7:27:9d:65:6f:7f:b2:6a:16:b7:46:f9:cb:b8:0a:cb:a8:d4:
         57:29:a1:3a:3d:0a:d5:d9:41:db:c3:fb:19:59:66:9b:03:06:
         16:1f:34:e6:f3:ae:a3:a7:c8:e4:59:3d:43:b3:8a:fa:ac:e6:
         41:fe:08:8e:d3:9c:cf:89:e2:f6:78:46:b6:9e:65:f7:ab:ad:
         18:14:12:93:fc:35:6e:3b:ac:58:33:82:d9:ba:06:c0:53:54:
         26:a0:39:79:36:71:ab:94:5e:e5:04:d1:ff:6d:23:98:c7:c0:
         b1:e2:ce:23:68:63:cd:bf:10:16:28:bc:b5:c1:0d:a6:1e:37:
         01:2e:56:ae:19:a1:d5:f3:13:5a:99:11:d7:58:6d:c6:5b:7e:
         87:67:fb:ed:8b:f2:59:25:9c:a1:66:a5:f6:3c:ec:74:c7:0e:
         72:13:d8:c2:48:33:05:0f:ba:66:a7:5a:ab:8d:3a:f8:ab:e4:
         23:f1:d5:8a:9d:fe:4b:99:b2:d9:a3:e1:4e:d8:60:6d:56:1d:
         6f:8a:9e:f4:e6:19:7d:80:d0:a3:cf:d1:4d:8b:10:fc:7e:4b:
         9d:86:93:f1:9a:43:73:ae:72:2e:dd:2c:53:a3:17:f4:85:36:
         46:83:e0:df
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSmhqXo2GZXpA2ApLcXCZOquBrFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGQkI5ODdGNDc2MkQ5NjI2RTU1NzE5RUY0NjA1MDk0
M0RFRTUxQzAeFw0yNDAzMDUxODAyNDlaFw0yNTAzMDQxODA3NDlaMDMxMTAvBgNV
BAMTKDg0NUNDMDFBMUE5M0JENDNERjY5N0EzM0VBNEI4NkJBN0JFQ0Y4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTuTDvSWqbQbbqt+58nBAxrbxd
dxdXREJqh+aKAoFlLG89FAfo0I59KnftvPhzPe3/xFBOZFguQkIJGEoejUZ4pdoq
pJ3+XGh+E5S3UX73s4EsTUgK8a2VXaH8c99fCOeSCUiM/tp2Xx3sEB5J5ajrlMtk
Z2JorrtdznMTlR3U4oBREKYfbJevIrU1+Jgb5UvZ8nv6MhEChKH7fjMiz3CGCeFC
2pKHBZcMNwhGOQeRZ5guhHSxOqK/XyFbzES0OMaFTaZ+xu6x9OBSEQyOzLHCe/BX
uDZjYrWLoRHFbKajTz8r7wxYo4xeaCwIlR4o3Qay01yHT7u1SE3mABouhG2nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhFzAGhqTvUPfaXoz6kuGunvs+CgwHwYDVR0j
BBgwFoAUifu5h/R2LZYm5VcZ70YFCUPe5RwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QkFBRUZBQkZGQjQwNzdCMDJGMzdBNkNBNEVBQzUzOUI0
MDc5NDgxQzgwQzgzRjZGOUQyQkZGMzA3NDRDRkFBLzAvODlGQkI5ODdGNDc2MkQ5
NjI2RTU1NzE5RUY0NjA1MDk0M0RFRTUxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUZCQjk4N0Y0NzYyRDk2MjZF
NTU3MTlFRjQ2MDUwOTQzREVFNTFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkJBQUVGQUJGRkI0MDc3QjAyRjM3QTZDQTRFQUM1MzlCNDA3OTQ4MUM4
MEM4M0Y2RjlEMkJGRjMwNzQ0Q0ZBQS8wLzMyMzAzMDJlMzYzMzJlMzkzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg/XjAN
BgkqhkiG9w0BAQsFAAOCAQEAlRvRUZaU8sLNpwXKoswyWxBG1yedZW9/smoWt0b5
y7gKy6jUVymhOj0K1dlB28P7GVlmmwMGFh805vOuo6fI5Fk9Q7OK+qzmQf4IjtOc
z4ni9nhGtp5l96utGBQSk/w1bjusWDOC2boGwFNUJqA5eTZxq5Re5QTR/20jmMfA
seLOI2hjzb8QFii8tcENph43AS5Wrhmh1fMTWpkR11htxlt+h2f77YvyWSWcoWal
9jzsdMcOchPYwkgzBQ+6Zqdaq406+KvkI/HVip3+S5my2aPhTthgbVYdb4qe9OYZ
fYDQo8/RTYsQ/H5LnYaT8ZpDc65yLt0sU6MX9IU2RoPg3w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org