Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
File:                     3230302e36382e3139322e302f31392d3234203d3e203131333135.roa (raw, json)
Hash identifier:          AJyaHqo8GjipyuMp6CmHv2zy/ltUOu9yLKOWkQIH2kk=
Subject key identifier:   1F:FB:26:A0:FC:41:8B:00:6A:A9:4A:8F:BB:74:AA:DA:1C:00:F6:FC
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       53155296E568628EEDA28A8A193058ED3D6B3C21
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:48 +0000
ROA not before:           Tue 05 Mar 2024 18:02:48 +0000
ROA not after:            Tue 04 Mar 2025 18:07:48 +0000
asID:                     11315
IP address blocks:        200.68.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:15:52:96:e5:68:62:8e:ed:a2:8a:8a:19:30:58:ed:3d:6b:3c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:48 2024 GMT
            Not After : Mar  4 18:07:48 2025 GMT
        Subject: CN=1FFB26A0FC418B006AA94A8FBB74AADA1C00F6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:1c:13:b5:46:f4:a7:95:17:61:60:96:7e:
                    ba:04:e8:7b:14:22:dc:06:7a:3a:7a:33:1c:80:15:
                    0b:73:83:65:e9:59:0a:36:8f:bf:0c:a6:75:f3:98:
                    04:3b:20:45:66:d5:86:64:8b:38:1a:d5:17:25:72:
                    cf:17:62:79:4a:f1:3c:f9:ee:70:3d:44:99:14:f2:
                    94:0c:03:9c:34:1f:cc:5a:27:28:36:77:e8:f1:6f:
                    82:c2:0b:39:d7:65:ed:c0:08:c1:b9:80:6f:02:f6:
                    ac:f0:b9:f8:d4:45:bc:3b:24:bd:36:3c:9b:ef:79:
                    cc:6d:b9:81:b2:7e:ae:81:37:9d:ce:ad:25:68:d9:
                    d7:dc:22:d3:48:27:ca:84:da:5f:1b:a4:fb:99:07:
                    54:1f:8f:fc:61:fb:17:8b:e3:01:7d:71:2f:26:76:
                    ed:3b:7d:20:37:da:24:2d:e0:2d:c8:59:67:03:88:
                    83:17:1b:36:58:53:cd:93:15:f6:60:32:9d:e7:da:
                    fb:c4:0d:3b:7f:1d:cb:58:82:32:61:04:34:c2:22:
                    22:7c:cb:ca:85:40:f7:cd:f3:00:bb:4b:69:50:cf:
                    0e:34:7c:d3:e4:af:f8:a0:9e:a6:cc:db:f4:10:d2:
                    d6:6f:dc:6e:d4:75:62:20:38:94:30:cf:4c:b0:03:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:26:A0:FC:41:8B:00:6A:A9:4A:8F:BB:74:AA:DA:1C:00:F6:FC
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:d6:3e:18:fa:7a:f9:b8:e8:8d:6b:05:7d:8a:22:2c:0b:
         07:62:73:65:5a:d1:a2:01:de:66:59:72:a8:0b:1c:02:40:bc:
         e5:de:89:b6:b9:f6:05:f8:42:1a:0a:e0:c6:a4:62:32:e0:7a:
         ee:2a:62:43:0c:af:61:88:35:df:60:a7:2d:d8:1d:42:30:e9:
         89:58:31:72:55:86:5b:a4:fe:61:25:ed:7e:2a:11:04:66:b8:
         78:ae:a5:40:ca:04:c2:a8:ee:03:16:5a:cf:64:ae:13:49:cb:
         1f:d6:75:b1:49:ff:db:ab:f1:58:0b:4b:60:1f:ab:01:ec:19:
         49:9f:a7:32:16:39:6a:78:77:ae:6e:67:94:9c:3c:ea:e5:72:
         ac:a6:af:73:f4:03:78:b0:a9:71:44:21:39:5a:9c:af:9c:a4:
         88:19:99:e3:02:84:6d:54:0e:64:95:8b:c1:19:0d:3a:07:2d:
         0e:2d:21:86:8f:be:60:7b:58:e1:a2:9b:2a:0a:03:38:65:65:
         40:43:ce:57:ad:32:23:d8:76:7e:c9:c4:fa:38:29:7e:4a:06:
         0c:5f:15:89:65:c7:cb:dc:d1:d2:14:78:36:6d:77:9d:77:7c:
         24:04:0d:54:a2:b6:d9:c1:89:cf:c1:aa:89:5b:2d:9a:19:e9:
         b9:4e:c0:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUxVSluVoYo7tooqKGTBY7T1rPCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDhaFw0yNTAzMDQxODA3NDhaMDMxMTAvBgNV
BAMTKDFGRkIyNkEwRkM0MThCMDA2QUE5NEE4RkJCNzRBQURBMUMwMEY2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITxwTtUb0p5UXYWCWfroE6HsU
ItwGejp6MxyAFQtzg2XpWQo2j78MpnXzmAQ7IEVm1YZkizga1Rclcs8XYnlK8Tz5
7nA9RJkU8pQMA5w0H8xaJyg2d+jxb4LCCznXZe3ACMG5gG8C9qzwufjURbw7JL02
PJvvecxtuYGyfq6BN53OrSVo2dfcItNIJ8qE2l8bpPuZB1Qfj/xh+xeL4wF9cS8m
du07fSA32iQt4C3IWWcDiIMXGzZYU82TFfZgMp3n2vvEDTt/HctYgjJhBDTCIiJ8
y8qFQPfN8wC7S2lQzw40fNPkr/ignqbM2/QQ0tZv3G7UdWIgOJQwz0ywA2PhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUH/smoPxBiwBqqUqPu3Sq2hwA9vwwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMyMzAzMDJlMzYzODJlMzEzOTMyMmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzMTMzMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchEwDAN
BgkqhkiG9w0BAQsFAAOCAQEAieXWPhj6evm46I1rBX2KIiwLB2JzZVrRogHeZlly
qAscAkC85d6Jtrn2BfhCGgrgxqRiMuB67ipiQwyvYYg132CnLdgdQjDpiVgxclWG
W6T+YSXtfioRBGa4eK6lQMoEwqjuAxZaz2SuE0nLH9Z1sUn/26vxWAtLYB+rAewZ
SZ+nMhY5anh3rm5nlJw86uVyrKavc/QDeLCpcUQhOVqcr5ykiBmZ4wKEbVQOZJWL
wRkNOgctDi0hho++YHtY4aKbKgoDOGVlQEPOV60yI9h2fsnE+jgpfkoGDF8ViWXH
y9zR0hR4Nm13nXd8JAQNVKK22cGJz8GqiVstmhnpuU7Adw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org