Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32332e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          WD7IWK0zRp0HSWZehhH/9iQGZxnqtm9LGdwvzSBLcaw=
Subject key identifier:   90:93:66:78:8A:C2:94:BB:EB:62:83:0F:C4:96:C3:92:F9:75:C3:31
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       76C7E73435CCA942B3F5BC47977E1363FB57F8F6
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 05 Mar 2024 18:09:32 +0000
ROA not before:           Tue 05 Mar 2024 18:04:32 +0000
ROA not after:            Tue 04 Mar 2025 18:09:32 +0000
asID:                     12684
IP address blocks:        200.89.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c7:e7:34:35:cc:a9:42:b3:f5:bc:47:97:7e:13:63:fb:57:f8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Mar  5 18:04:32 2024 GMT
            Not After : Mar  4 18:09:32 2025 GMT
        Subject: CN=909366788AC294BBEB62830FC496C392F975C331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:97:0c:b4:6d:30:19:6d:3f:28:28:20:b5:
                    e8:dc:f7:6d:37:6e:0d:0c:9e:9f:5f:63:f9:37:d8:
                    91:fb:bc:d7:56:f5:e7:bf:23:9a:06:f0:43:70:8a:
                    b5:ee:be:98:9d:ea:91:26:f3:84:a8:53:46:6d:ad:
                    43:15:f3:3e:de:85:1a:8b:84:a8:e4:00:34:7e:b4:
                    0c:73:bb:c5:45:38:e3:d1:ea:a5:95:97:83:e9:25:
                    d5:93:6a:09:b1:66:73:7b:e3:40:0d:6e:5e:d0:87:
                    09:37:ec:d2:f1:7b:60:74:e8:7e:7d:57:d5:ad:a5:
                    69:98:a8:eb:c8:45:e7:e0:95:3e:ed:30:5b:54:1d:
                    5f:89:80:e6:33:a3:c9:2e:c0:d3:93:c1:13:0f:b0:
                    00:53:3b:ed:e0:f1:eb:21:29:f4:58:44:8a:4d:ba:
                    92:ac:e9:80:70:64:e7:f3:b5:48:c4:62:d0:f0:c5:
                    d4:6c:19:3c:88:50:24:3e:e9:09:61:9e:e8:cb:f9:
                    19:67:f2:0f:4c:51:43:cd:4c:95:24:82:99:ab:05:
                    97:41:1f:6a:93:63:8f:8e:b4:7e:65:de:97:66:a1:
                    f3:f4:f1:5a:5e:03:cf:d6:55:a1:0f:1b:b7:97:ab:
                    f9:9c:e1:d1:3a:c7:6e:c1:f5:c8:76:8d:cc:f9:5c:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:66:78:8A:C2:94:BB:EB:62:83:0F:C4:96:C3:92:F9:75:C3:31
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:47:7f:ba:ce:e6:de:16:e4:cb:65:e7:6d:61:d8:33:29:e5:
         64:41:e1:9e:4f:11:5a:81:31:93:de:21:53:72:7b:2a:53:4d:
         e0:0b:fe:f2:27:17:57:a9:0b:eb:d7:67:e6:28:4a:f0:05:35:
         d6:8d:f0:14:04:03:83:e9:3a:d7:38:46:c8:16:f9:45:b9:89:
         81:3d:10:d3:94:17:6a:52:10:68:9b:bf:04:c8:0d:ec:b9:b4:
         ce:1a:75:35:e3:f9:d5:e5:4a:ee:dd:43:12:06:94:88:a0:ba:
         be:eb:17:57:7d:19:f7:3a:84:e0:f3:43:b5:fc:6c:9a:82:27:
         f8:2f:ed:d1:aa:54:29:23:54:41:b6:99:d2:64:ea:0d:80:41:
         7e:52:01:78:e5:2a:f0:91:00:0a:a3:82:e8:68:0f:60:91:07:
         c0:41:7d:17:cb:89:44:a7:20:a8:82:ad:d5:e0:b0:d6:cb:1b:
         bf:c1:52:3c:76:52:de:b4:10:c5:03:71:18:b7:60:a6:3d:84:
         1d:4d:ce:3c:ba:d2:dc:1d:bf:e4:d4:4c:86:db:34:7a:b5:2e:
         0b:26:84:bf:81:3b:f8:44:23:dd:d1:10:fa:69:56:9c:56:8a:
         9e:d2:22:98:ac:35:d6:31:78:3b:e1:c0:68:75:05:7f:e7:2a:
         02:01:be:07
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdsfnNDXMqUKz9bxHl34TY/tX+PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YzMDgxM0ZBOEYwRjNFMDhFNDUyQzk2NEZEODJGN0NB
NzQ4MjkwQTAeFw0yNDAzMDUxODA0MzJaFw0yNTAzMDQxODA5MzJaMDMxMTAvBgNV
BAMTKDkwOTM2Njc4OEFDMjk0QkJFQjYyODMwRkM0OTZDMzkyRjk3NUMzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBZcMtG0wGW0/KCggtejc9203
bg0Mnp9fY/k32JH7vNdW9ee/I5oG8ENwirXuvpid6pEm84SoU0ZtrUMV8z7ehRqL
hKjkADR+tAxzu8VFOOPR6qWVl4PpJdWTagmxZnN740ANbl7Qhwk37NLxe2B06H59
V9WtpWmYqOvIRefglT7tMFtUHV+JgOYzo8kuwNOTwRMPsABTO+3g8eshKfRYRIpN
upKs6YBwZOfztUjEYtDwxdRsGTyIUCQ+6QlhnujL+Rln8g9MUUPNTJUkgpmrBZdB
H2qTY4+OtH5l3pdmofP08VpeA8/WVaEPG7eXq/mc4dE6x27B9ch2jcz5XIs3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUkJNmeIrClLvrYoMPxJbDkvl1wzEwHwYDVR0j
BBgwFoAUzzCBP6jw8+CORSyWT9gvfKdIKQowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODNGNkM3MDMwNzkyMTBGQzlDRTk2Q0E3REMwQzk5ODVG
NTI4OTYxQkU5MkYxMzE4MTc5MjQ5NTc0N0Q5OTE4LzAvQ0YzMDgxM0ZBOEYwRjNF
MDhFNDUyQzk2NEZEODJGN0NBNzQ4MjkwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjMwODEzRkE4RjBGM0UwOEU0
NTJDOTY0RkQ4MkY3Q0E3NDgyOTBBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzgzRjZDNzAzMDc5MjEwRkM5Q0U5NkNBN0RDMEM5OTg1RjUyODk2MUJF
OTJGMTMxODE3OTI0OTU3NDdEOTkxOC8wLzMyMzAzMDJlMzgzOTJlMzIzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIWRcwDQYJ
KoZIhvcNAQELBQADggEBAEZHf7rO5t4W5Mtl521h2DMp5WRB4Z5PEVqBMZPeIVNy
eypTTeAL/vInF1epC+vXZ+YoSvAFNdaN8BQEA4PpOtc4RsgW+UW5iYE9ENOUF2pS
EGibvwTIDey5tM4adTXj+dXlSu7dQxIGlIigur7rF1d9Gfc6hODzQ7X8bJqCJ/gv
7dGqVCkjVEG2mdJk6g2AQX5SAXjlKvCRAAqjguhoD2CRB8BBfRfLiUSnIKiCrdXg
sNbLG7/BUjx2Ut60EMUDcRi3YKY9hB1Nzjy60twdv+TUTIbbNHq1LgsmhL+BO/hE
I93REPppVpxWip7SIpisNdYxeDvhwGh1BX/nKgIBvgc=
-----END CERTIFICATE-----
Generated at Thu Oct 17 11:47:59 2024 by rpki-client on console-fra.rpki-client.org