Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa
File:                     3230302e322e382e302f32312d3231203d3e2037393635.roa (raw, json)
Hash identifier:          c4R5sNwbl2FvCAcUPtAgAfaUhI4XirB9aLnx9CqH/tU=
Subject key identifier:   B9:08:FD:D5:42:6D:54:2C:80:F5:6A:46:AD:88:36:DB:76:78:D8:AB
Certificate issuer:       /CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
Certificate serial:       765534C70A87DA574D0A522EA379B5B0B54FA899
Authority key identifier: BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa
Signing time:             Tue 05 Mar 2024 18:05:52 +0000
ROA not before:           Tue 05 Mar 2024 18:00:52 +0000
ROA not after:            Tue 04 Mar 2025 18:05:52 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:34:c7:0a:87:da:57:4d:0a:52:2e:a3:79:b5:b0:b5:4f:a8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
        Validity
            Not Before: Mar  5 18:00:52 2024 GMT
            Not After : Mar  4 18:05:52 2025 GMT
        Subject: CN=B908FDD5426D542C80F56A46AD8836DB7678D8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:c2:4c:d1:f3:34:9e:82:26:ef:36:f1:cd:
                    b0:bd:a5:ca:43:7e:3f:79:c2:9f:a8:d8:4a:d8:45:
                    78:fc:54:d1:d7:bf:ad:2a:9e:22:71:2a:46:64:ec:
                    f6:b4:57:82:8a:c4:5d:37:7b:f0:27:ca:33:00:02:
                    64:e2:b9:b8:83:c9:5c:f2:2b:cf:a7:e8:d3:ab:1a:
                    f4:6c:5a:37:28:9b:34:51:d3:66:83:a5:43:7f:9c:
                    1d:c0:d6:fd:6a:2c:85:68:5d:0f:75:ab:b6:28:c7:
                    08:8c:29:29:84:60:bc:3b:d4:42:75:37:95:36:d4:
                    85:1b:70:a6:5c:d8:fe:6b:4a:c5:d9:a7:37:e4:c9:
                    ff:b4:47:b8:68:f0:f8:12:00:60:5b:5b:98:c8:b2:
                    a2:8e:79:18:d7:16:88:6d:d2:dd:9e:20:7a:ce:59:
                    6e:ba:b4:6e:8f:bf:67:54:28:c4:fa:11:8f:dd:3e:
                    57:54:ae:0a:ac:aa:37:65:87:c4:66:98:ff:d9:00:
                    8d:41:e2:83:0e:f9:a5:bf:e4:5d:3c:26:08:3f:3e:
                    61:e6:9f:64:ee:4b:3a:5f:af:ac:91:f4:2d:29:da:
                    1d:75:3f:5b:34:7d:db:b0:ed:64:8e:38:ff:36:05:
                    d2:31:45:3b:3d:98:15:ef:21:80:03:e6:8b:21:72:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:FD:D5:42:6D:54:2C:80:F5:6A:46:AD:88:36:DB:76:78:D8:AB
            X509v3 Authority Key Identifier:
                keyid:BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:da:da:48:af:16:90:28:41:9c:01:19:91:52:e1:c6:00:df:
         93:39:83:1f:51:3e:95:ea:79:0d:72:1a:e4:d9:2b:e0:45:e9:
         98:1b:59:d2:30:6d:7d:9f:80:1f:43:8a:d5:51:c7:08:e2:d0:
         03:d1:55:f9:c1:4a:90:dc:e5:90:40:75:02:e2:b7:65:e7:3c:
         7e:06:bd:1d:57:b9:87:df:2d:cb:df:44:b0:fd:f2:00:12:f8:
         17:b8:bd:79:af:0e:0e:35:9a:2a:1b:34:87:91:9b:6b:de:a7:
         6b:37:97:9c:de:e9:c4:ce:fc:95:50:74:d0:38:03:3d:d5:9b:
         53:d7:5d:0e:0c:0a:72:19:61:d2:43:30:a4:cc:e9:a4:bb:b9:
         2b:99:23:f0:a5:82:3c:da:52:5c:26:43:58:11:7a:2d:63:0f:
         fa:a7:26:9d:7a:4a:c3:ca:39:f0:5a:d8:17:ad:bc:30:c0:82:
         d9:0c:a1:ed:95:eb:11:e3:98:25:ed:8f:88:6a:e1:f3:6b:7c:
         88:5d:28:f3:c1:83:0c:18:06:75:05:d4:bb:56:c3:56:8b:f7:
         53:db:07:16:d0:ed:42:99:e2:5f:1e:f3:ea:b3:70:ff:18:1c:
         52:4c:93:e2:4f:bc:fc:5a:26:ee:16:b0:ea:2b:c5:f4:50:ba:
         bc:8f:9a:0a
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUdlU0xwqH2ldNClIuo3m1sLVPqJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwNjhGNDc1MjY1QUU1OENDMjg4QTRFRDEwQ0VCQTE4
QzUxRkQ4MzAeFw0yNDAzMDUxODAwNTJaFw0yNTAzMDQxODA1NTJaMDMxMTAvBgNV
BAMTKEI5MDhGREQ1NDI2RDU0MkM4MEY1NkE0NkFEODgzNkRCNzY3OEQ4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZP8JM0fM0noIm7zbxzbC9pcpD
fj95wp+o2ErYRXj8VNHXv60qniJxKkZk7Pa0V4KKxF03e/AnyjMAAmTiubiDyVzy
K8+n6NOrGvRsWjcomzRR02aDpUN/nB3A1v1qLIVoXQ91q7YoxwiMKSmEYLw71EJ1
N5U21IUbcKZc2P5rSsXZpzfkyf+0R7ho8PgSAGBbW5jIsqKOeRjXFoht0t2eIHrO
WW66tG6Pv2dUKMT6EY/dPldUrgqsqjdlh8RmmP/ZAI1B4oMO+aW/5F08Jgg/PmHm
n2TuSzpfr6yR9C0p2h11P1s0fduw7WSOOP82BdIxRTs9mBXvIYAD5oshciu1AgMB
AAGjggLAMIICvDAdBgNVHQ4EFgQUuQj91UJtVCyA9WpGrYg223Z42KswHwYDVR0j
BBgwFoAUvAaPR1JlrljMKIpO0QzroYxR/YMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MEUwNzBCOEJCNTJFNEU5Nzk4RTgxQzJEODI2QUYzRjBE
NjA3NTQ3REU5MTE3RDk1RTQxMTEwRkFFNzlBMUNDLzAvQkMwNjhGNDc1MjY1QUU1
OENDMjg4QTRFRDEwQ0VCQTE4QzUxRkQ4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzA2OEY0NzUyNjVBRTU4Q0My
ODhBNEVEMTBDRUJBMThDNTFGRDgzLmNlcjCBvwYIKwYBBQUHAQsEgbIwga8wgawG
CCsGAQUFBzALhoGfcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODBFMDcwQjhCQjUyRTRFOTc5OEU4MUMyRDgyNkFGM0YwRDYwNzU0N0RF
OTExN0Q5NUU0MTExMEZBRTc5QTFDQy8wLzMyMzAzMDJlMzIyZTM4MmUzMDJmMzIz
MTJkMzIzMTIwM2QzZTIwMzczOTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIAggwDQYJKoZIhvcN
AQELBQADggEBAIba2kivFpAoQZwBGZFS4cYA35M5gx9RPpXqeQ1yGuTZK+BF6Zgb
WdIwbX2fgB9DitVRxwji0APRVfnBSpDc5ZBAdQLit2XnPH4GvR1XuYffLcvfRLD9
8gAS+Be4vXmvDg41miobNIeRm2vep2s3l5ze6cTO/JVQdNA4Az3Vm1PXXQ4MCnIZ
YdJDMKTM6aS7uSuZI/ClgjzaUlwmQ1gRei1jD/qnJp16SsPKOfBa2BetvDDAgtkM
oe2V6xHjmCXtj4hq4fNrfIhdKPPBgwwYBnUF1LtWw1aL91PbBxbQ7UKZ4l8e8+qz
cP8YHFJMk+JPvPxaJu4WsOorxfRQuryPmgo=
-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:30 2024 by rpki-client on console-fra.rpki-client.org