Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
File:                     3230302e33352e3135362e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          qy4GbMaQ23t+ByRiCND1KSNOumI1qMaAU2RxBbA5uYA=
Subject key identifier:   D8:B3:59:C2:9D:CE:E2:AD:70:E7:FF:C8:58:47:1E:89:0F:A8:9D:54
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       75F5D48113F5C5927AF27CA871DB7A14F7CB7CCF
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 05 Mar 2024 17:58:37 +0000
ROA not before:           Tue 05 Mar 2024 17:53:37 +0000
ROA not after:            Tue 04 Mar 2025 17:58:37 +0000
asID:                     14259
IP address blocks:        200.35.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f5:d4:81:13:f5:c5:92:7a:f2:7c:a8:71:db:7a:14:f7:cb:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Mar  5 17:53:37 2024 GMT
            Not After : Mar  4 17:58:37 2025 GMT
        Subject: CN=D8B359C29DCEE2AD70E7FFC858471E890FA89D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:5a:28:86:88:98:4c:6d:db:c1:ca:b3:08:
                    f4:62:7c:52:fa:14:28:32:ba:3d:16:df:b1:d3:8c:
                    5c:d6:53:f1:ba:4b:2c:32:51:56:86:1c:25:4a:f3:
                    0d:f7:85:6f:67:51:61:8b:02:74:f4:c8:d7:0a:7e:
                    9a:a7:15:00:08:c2:a9:2e:49:d6:11:72:15:99:f2:
                    6b:6f:84:57:bb:a7:68:13:e8:f1:4e:f8:04:c4:73:
                    94:de:a4:ee:66:62:d9:0b:fb:b3:c3:6a:1c:42:fe:
                    77:64:8b:8b:34:90:9a:c9:17:d5:fc:de:e1:3a:c5:
                    3a:1f:57:c1:f2:f4:a5:c1:52:37:b6:68:6d:dd:fb:
                    f9:ca:bd:cf:6d:3e:50:16:0d:8a:03:e4:29:6d:20:
                    4b:df:cb:14:3b:97:ff:f3:ed:06:83:2f:09:58:25:
                    e0:52:f5:25:94:37:97:ff:2d:a9:01:bb:f5:bf:87:
                    05:34:69:d5:63:7c:4a:3a:eb:33:8d:cd:27:71:f5:
                    e4:59:9f:39:58:e5:32:59:74:a9:f5:fb:b6:d8:43:
                    46:86:dc:af:80:58:3b:75:02:99:0f:a0:4e:88:2d:
                    0d:9b:25:23:b6:48:6a:c0:07:91:c5:0f:de:9e:48:
                    85:66:4e:f4:d2:18:24:4c:6e:e8:96:8a:f7:0d:14:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:59:C2:9D:CE:E2:AD:70:E7:FF:C8:58:47:1E:89:0F:A8:9D:54
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:75:eb:4f:82:ee:3b:33:1e:b3:6f:27:51:53:94:da:4a:
         a9:d8:3c:dc:1d:d3:c1:3c:ce:72:65:a7:ee:a0:29:79:10:2e:
         ec:aa:3e:cf:9b:80:ac:34:bb:84:40:21:06:13:90:9d:18:01:
         9b:cc:56:ee:52:48:35:67:36:f2:14:8c:bd:ff:b8:48:09:e7:
         1e:38:f4:b3:dd:34:e2:ee:63:be:2b:e3:f2:66:1b:dd:ce:49:
         e4:04:68:3e:a3:fa:e9:59:cc:41:04:2b:17:cc:34:57:74:c1:
         5a:76:7d:24:c5:a5:7c:f9:ea:0e:36:0a:70:8d:d5:02:2b:67:
         07:25:10:62:0a:64:a9:4a:51:76:dc:7b:9c:f9:83:42:88:73:
         f0:82:33:ae:1f:f7:5d:a3:9d:e8:bd:64:85:f6:1b:df:1d:7f:
         90:f8:7e:1a:27:ab:ee:63:f2:69:22:c9:f8:c8:29:ae:2a:2e:
         ea:87:ba:6d:3b:ef:11:23:a5:92:60:8b:e9:78:1b:42:04:4f:
         e4:7c:7d:3c:e0:56:5c:55:00:7c:88:9a:0c:b8:a5:bc:82:de:
         9c:d5:69:eb:dc:fd:de:6c:6c:6c:ac:74:8a:c9:0e:f6:49:b5:
         64:c7:da:e9:19:ab:ef:71:49:e9:7a:61:90:f4:dc:32:97:af:
         bb:c1:46:d7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdfXUgRP1xZJ68nyocdt6FPfLfM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNBOTA1QjM1NjQ4Qzc2RERDMkI1RjdFNDhGRTEzQUEx
MjdGQzRBRjAeFw0yNDAzMDUxNzUzMzdaFw0yNTAzMDQxNzU4MzdaMDMxMTAvBgNV
BAMTKEQ4QjM1OUMyOURDRUUyQUQ3MEU3RkZDODU4NDcxRTg5MEZBODlENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lFoohoiYTG3bwcqzCPRifFL6
FCgyuj0W37HTjFzWU/G6SywyUVaGHCVK8w33hW9nUWGLAnT0yNcKfpqnFQAIwqku
SdYRchWZ8mtvhFe7p2gT6PFO+ATEc5TepO5mYtkL+7PDahxC/ndki4s0kJrJF9X8
3uE6xTofV8Hy9KXBUje2aG3d+/nKvc9tPlAWDYoD5CltIEvfyxQ7l//z7QaDLwlY
JeBS9SWUN5f/LakBu/W/hwU0adVjfEo66zONzSdx9eRZnzlY5TJZdKn1+7bYQ0aG
3K+AWDt1ApkPoE6ILQ2bJSO2SGrAB5HFD96eSIVmTvTSGCRMbuiWivcNFAPLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2LNZwp3O4q1w5//IWEceiQ+onVQwHwYDVR0j
BBgwFoAUk6kFs1ZIx23cK19+SP4TqhJ/xK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODQ0RDk2MTgwRjg1QkRGRUZCQTA4OUU5OTY5MzNCODcw
RDBEQTVFM0Y4NUM1RTlBMTA2MTE4RDgxMjRDNkM3LzAvOTNBOTA1QjM1NjQ4Qzc2
RERDMkI1RjdFNDhGRTEzQUExMjdGQzRBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0E5MDVCMzU2NDhDNzZEREMy
QjVGN0U0OEZFMTNBQTEyN0ZDNEFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg0NEQ5NjE4MEY4NUJERkVGQkEwODlFOTk2OTMzQjg3MEQwREE1RTNG
ODVDNUU5QTEwNjExOEQ4MTI0QzZDNy8wLzMyMzAzMDJlMzMzNTJlMzEzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgjnDAN
BgkqhkiG9w0BAQsFAAOCAQEANrl160+C7jszHrNvJ1FTlNpKqdg83B3TwTzOcmWn
7qApeRAu7Ko+z5uArDS7hEAhBhOQnRgBm8xW7lJINWc28hSMvf+4SAnnHjj0s900
4u5jvivj8mYb3c5J5ARoPqP66VnMQQQrF8w0V3TBWnZ9JMWlfPnqDjYKcI3VAitn
ByUQYgpkqUpRdtx7nPmDQohz8IIzrh/3XaOd6L1khfYb3x1/kPh+Gier7mPyaSLJ
+Mgpriou6oe6bTvvESOlkmCL6XgbQgRP5Hx9POBWXFUAfIiaDLilvILenNVp69z9
3mxsbKx0iskO9km1ZMfa6Rmr73FJ6XphkPTcMpevu8FG1w==
-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org