Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa
File:                     3230302e392e39362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          FDx0xKihaDQUsTclUb1gFBt7+u97VzoypkWGyzae8Ak=
Subject key identifier:   EC:21:F4:5F:32:06:02:07:F3:54:51:37:60:E8:38:F8:03:A5:8C:0E
Certificate issuer:       /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial:       4A593708E2330F3D3658AD338542DCD6B5CE91BE
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:08:35 +0000
ROA not before:           Tue 05 Mar 2024 18:03:35 +0000
ROA not after:            Tue 04 Mar 2025 18:08:35 +0000
asID:                     27947
IP address blocks:        200.9.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:59:37:08:e2:33:0f:3d:36:58:ad:33:85:42:dc:d6:b5:ce:91:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
        Validity
            Not Before: Mar  5 18:03:35 2024 GMT
            Not After : Mar  4 18:08:35 2025 GMT
        Subject: CN=EC21F45F32060207F354513760E838F803A58C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:09:b5:ae:91:66:12:c7:c3:a2:0d:ff:68:
                    f6:99:23:b3:1b:db:3f:27:91:e0:a2:9b:5e:91:2c:
                    b6:c8:a6:01:6a:69:94:53:56:7d:4c:3e:c4:60:20:
                    73:a1:7d:1c:fd:b7:96:6d:0f:0d:a8:a2:8d:51:a2:
                    0f:8d:0b:b0:39:4c:02:74:ee:99:9a:91:ac:63:cf:
                    6b:02:f5:fe:57:f6:1c:1a:94:0b:1b:f6:1f:dd:28:
                    1a:6a:67:51:3f:f1:19:40:ff:ff:b2:ba:91:c4:fc:
                    13:37:b9:ff:59:b7:28:6c:1e:4e:d2:2c:a5:82:bb:
                    7f:43:30:c3:ea:22:90:08:a3:48:b5:cf:05:13:0e:
                    3b:54:d2:df:3b:01:61:c5:e2:58:53:2e:04:e7:55:
                    9e:a6:f6:9a:b1:3a:29:79:f4:0f:5e:a9:ba:4e:a5:
                    cd:a9:9e:61:e5:c7:21:2a:21:94:7e:9e:d1:44:a9:
                    ec:77:d2:bb:08:24:79:bc:8b:49:f5:65:f1:e8:22:
                    0b:2d:09:0f:24:d0:65:fc:de:c4:c2:ba:8f:bd:14:
                    d6:1b:bd:ea:42:ed:92:b6:70:b9:b4:2f:03:44:cf:
                    6b:53:0b:eb:3b:ff:51:ee:3a:1b:27:51:23:a7:1a:
                    84:c6:b9:3b:d2:16:a0:17:4d:fe:76:03:88:d6:64:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:F4:5F:32:06:02:07:F3:54:51:37:60:E8:38:F8:03:A5:8C:0E
            X509v3 Authority Key Identifier:
                keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:46:f0:85:83:59:62:66:0d:94:bc:a1:d3:f4:eb:20:86:14:
         e5:c3:72:c5:89:54:26:f8:05:54:75:10:bb:29:70:3e:5e:9e:
         40:9b:de:8b:14:9b:af:80:73:9d:41:f7:2f:e7:9c:21:98:b5:
         54:9a:fb:30:4d:42:5d:16:5d:b5:b8:f8:e1:a2:af:5f:e8:c3:
         61:e2:8a:2f:70:1a:bb:bc:ea:8a:0f:a1:b4:6b:0a:02:eb:29:
         34:19:6b:e0:67:8f:c4:6c:f9:cf:c1:d0:6c:2a:68:5d:04:f0:
         27:04:18:1e:69:6c:5a:25:8c:44:8d:0e:5a:01:26:a8:04:bc:
         f7:c7:f9:52:2b:6f:59:7d:b7:01:a2:46:f5:43:79:65:a8:91:
         d3:1e:1c:9a:fb:50:e9:0a:68:b0:cd:e2:37:25:96:e0:ba:52:
         29:15:ef:bb:21:21:c2:1b:86:8a:b1:73:58:88:a8:83:02:9a:
         fc:45:c1:9a:d8:24:71:a3:6b:f5:80:a9:2f:dd:09:aa:ee:38:
         30:ba:a5:d7:4f:05:ab:82:a8:ce:70:06:6f:38:09:cc:f3:7b:
         6a:38:41:db:56:93:9c:d7:ff:3e:1f:2a:43:1a:44:5e:0f:27:
         d4:54:d2:43:c7:ad:26:f8:78:dd:56:84:94:ff:8a:4a:9b:0a:
         33:8f:6b:ac
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUSlk3COIzDz02WK0zhULc1rXOkb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG
OEE3NzdBQTAeFw0yNDAzMDUxODAzMzVaFw0yNTAzMDQxODA4MzVaMDMxMTAvBgNV
BAMTKEVDMjFGNDVGMzIwNjAyMDdGMzU0NTEzNzYwRTgzOEY4MDNBNThDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapgm1rpFmEsfDog3/aPaZI7Mb
2z8nkeCim16RLLbIpgFqaZRTVn1MPsRgIHOhfRz9t5ZtDw2ooo1Rog+NC7A5TAJ0
7pmakaxjz2sC9f5X9hwalAsb9h/dKBpqZ1E/8RlA//+yupHE/BM3uf9ZtyhsHk7S
LKWCu39DMMPqIpAIo0i1zwUTDjtU0t87AWHF4lhTLgTnVZ6m9pqxOil59A9eqbpO
pc2pnmHlxyEqIZR+ntFEqex30rsIJHm8i0n1ZfHoIgstCQ8k0GX83sTCuo+9FNYb
vepC7ZK2cLm0LwNEz2tTC+s7/1HuOhsnUSOnGoTGuTvSFqAXTf52A4jWZGfTAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU7CH0XzIGAgfzVFE3YOg4+AOljA4wHwYDVR0j
BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD
RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC
RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3
NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw
N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wLzMyMzAzMDJlMzkyZTM5MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAlgMA0GCSqG
SIb3DQEBCwUAA4IBAQBSRvCFg1liZg2UvKHT9OsghhTlw3LFiVQm+AVUdRC7KXA+
Xp5Am96LFJuvgHOdQfcv55whmLVUmvswTUJdFl21uPjhoq9f6MNh4oovcBq7vOqK
D6G0awoC6yk0GWvgZ4/EbPnPwdBsKmhdBPAnBBgeaWxaJYxEjQ5aASaoBLz3x/lS
K29ZfbcBokb1Q3llqJHTHhya+1DpCmiwzeI3JZbgulIpFe+7ISHCG4aKsXNYiKiD
Apr8RcGa2CRxo2v1gKkv3Qmq7jgwuqXXTwWrgqjOcAZvOAnM83tqOEHbVpOc1/8+
HypDGkReDyfUVNJDx60m+HjdVoSU/4pKmwozj2us
-----END CERTIFICATE-----
Generated at Mon May 6 01:47:08 2024 by rpki-client on console-fra.rpki-client.org