Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3232342e302f32302d3234203d3e203131333135.roa
File:                     3230302e36382e3232342e302f32302d3234203d3e203131333135.roa (raw, json)
Hash identifier:          D+qXWQBtYiMHWuvcduIGBlC1Y+nNfyuOuBQnkVDqAqM=
Subject key identifier:   13:CA:01:75:3C:77:5A:1F:6C:BE:3A:2E:0A:F9:9D:85:D2:DA:E2:9F
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5A29F690F741CBCF6E957718AF130CDDB69A1C45
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3232342e302f32302d3234203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:40 +0000
ROA not before:           Tue 05 Mar 2024 18:02:40 +0000
ROA not after:            Tue 04 Mar 2025 18:07:40 +0000
asID:                     11315
IP address blocks:        200.68.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:f6:90:f7:41:cb:cf:6e:95:77:18:af:13:0c:dd:b6:9a:1c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:40 2024 GMT
            Not After : Mar  4 18:07:40 2025 GMT
        Subject: CN=13CA01753C775A1F6CBE3A2E0AF99D85D2DAE29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:5b:cc:3b:05:5e:ee:ed:54:78:f1:8b:b2:
                    0b:5b:cb:4e:cc:04:7b:df:4b:d7:39:c8:47:54:8b:
                    08:fe:e4:2c:af:98:80:fd:f8:9d:d6:90:9b:d8:85:
                    b1:bb:22:58:bb:88:8c:ec:49:b5:72:a9:ee:d8:8a:
                    32:1a:a6:4e:0a:f4:5a:eb:50:a7:87:b1:a6:b9:d6:
                    c5:fa:95:e6:c6:f9:83:f3:2e:23:8c:5f:02:52:44:
                    73:20:53:c0:40:26:38:85:6f:7b:9d:1a:93:ed:05:
                    d0:a3:46:be:c0:bc:68:0a:ca:95:12:0e:c8:d4:c9:
                    1b:94:4e:46:48:8a:70:3d:37:26:48:dd:69:78:b0:
                    3f:ca:c6:64:cb:d8:67:1c:5a:90:04:d3:d0:16:aa:
                    14:00:ca:60:ac:07:02:da:5c:00:0e:bc:94:e0:5b:
                    5e:4d:85:03:4e:a2:3a:69:81:6f:33:cd:17:00:ff:
                    1f:93:1b:99:5c:b4:77:23:c5:3b:2d:58:8a:d2:86:
                    86:d5:7b:3d:e1:53:33:0f:38:60:b3:4a:83:62:fa:
                    1e:50:cc:d3:51:09:2d:03:14:9c:cb:91:ae:4a:25:
                    48:df:8e:83:75:d9:8e:d3:b6:00:e8:aa:a2:c8:75:
                    f3:fc:25:9a:c3:fc:53:cf:16:32:04:92:00:81:bc:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:01:75:3C:77:5A:1F:6C:BE:3A:2E:0A:F9:9D:85:D2:DA:E2:9F
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3232342e302f32302d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:04:55:11:34:ab:d1:e5:2d:2f:fb:97:fe:4e:59:8a:38:45:
         43:a8:0f:b9:a8:39:98:51:41:c9:4f:2d:4d:06:74:b8:a9:ce:
         89:d1:81:0c:df:a5:9b:da:1c:44:e0:a7:4e:7c:b5:0a:32:68:
         c8:c0:dd:f5:ef:c1:e3:38:77:41:fe:66:b6:27:6a:79:b0:0b:
         2f:9c:d2:f0:a2:d2:3f:c4:53:fd:c2:57:07:7a:7f:25:15:5d:
         a5:30:34:2e:53:4e:9c:c0:10:d0:ee:2e:04:69:e9:a8:06:70:
         38:37:f4:3c:23:e7:f1:f2:6c:5a:de:96:53:eb:5d:4a:d6:18:
         5f:60:1b:0b:fb:85:4e:ef:a7:58:fd:ed:08:2b:11:60:23:fb:
         25:d3:06:dd:df:7e:8a:fa:2c:6f:9d:94:3f:8e:dc:82:df:2d:
         5f:2b:78:bc:65:0b:14:86:05:be:9e:8b:ed:93:58:78:9a:71:
         bc:86:b6:4d:81:df:e1:9c:ad:c2:42:fb:24:93:27:1d:59:3c:
         67:1a:b4:bd:23:1a:9e:e0:b5:e6:52:fb:a6:95:75:14:88:48:
         04:64:5c:a5:97:9b:25:b3:79:ac:6a:85:03:c0:c6:48:9d:0a:
         61:03:94:a1:58:58:e2:ce:0f:56:c3:14:1d:1f:b8:4d:9d:e1:
         78:2f:4c:c3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWin2kPdBy89ulXcYrxMM3baaHEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDBaFw0yNTAzMDQxODA3NDBaMDMxMTAvBgNV
BAMTKDEzQ0EwMTc1M0M3NzVBMUY2Q0JFM0EyRTBBRjk5RDg1RDJEQUUyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZVvMOwVe7u1UePGLsgtby07M
BHvfS9c5yEdUiwj+5CyvmID9+J3WkJvYhbG7Ili7iIzsSbVyqe7YijIapk4K9Frr
UKeHsaa51sX6lebG+YPzLiOMXwJSRHMgU8BAJjiFb3udGpPtBdCjRr7AvGgKypUS
DsjUyRuUTkZIinA9NyZI3Wl4sD/KxmTL2GccWpAE09AWqhQAymCsBwLaXAAOvJTg
W15NhQNOojppgW8zzRcA/x+TG5lctHcjxTstWIrShobVez3hUzMPOGCzSoNi+h5Q
zNNRCS0DFJzLka5KJUjfjoN12Y7TtgDoqqLIdfP8JZrD/FPPFjIEkgCBvJ7HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUE8oBdTx3Wh9svjouCvmdhdLa4p8wHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMyMzAzMDJlMzYzODJlMzIzMjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMTMzMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhE4DAN
BgkqhkiG9w0BAQsFAAOCAQEARgRVETSr0eUtL/uX/k5ZijhFQ6gPuag5mFFByU8t
TQZ0uKnOidGBDN+lm9ocROCnTny1CjJoyMDd9e/B4zh3Qf5mtidqebALL5zS8KLS
P8RT/cJXB3p/JRVdpTA0LlNOnMAQ0O4uBGnpqAZwODf0PCPn8fJsWt6WU+tdStYY
X2AbC/uFTu+nWP3tCCsRYCP7JdMG3d9+ivosb52UP47cgt8tXyt4vGULFIYFvp6L
7ZNYeJpxvIa2TYHf4ZytwkL7JJMnHVk8Zxq0vSManuC15lL7ppV1FIhIBGRcpZeb
JbN5rGqFA8DGSJ0KYQOUoVhY4s4PVsMUHR+4TZ3heC9Mww==
-----END CERTIFICATE-----
Generated at Mon May 27 17:11:18 2024 by rpki-client on console-fra.rpki-client.org