Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa
File:                     3230302e38312e3131322e302f32312d3234203d3e203136393231.roa (raw, json)
Hash identifier:          B7bY4fFBxFI/1L8kiNWHWFpq7Oqe8nLilylMVE9POvc=
Subject key identifier:   49:76:82:61:91:5A:25:78:EC:2C:C0:4C:A4:54:51:4E:6F:94:30:F9
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       433AA3D3703126FB454F9F1083F2AD74A1160F77
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     16921
IP address blocks:        200.81.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:a3:d3:70:31:26:fb:45:4f:9f:10:83:f2:ad:74:a1:16:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=49768261915A2578EC2CC04CA454514E6F9430F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:c3:36:f8:77:a9:b1:17:b2:a7:2c:8e:ba:
                    71:ac:fd:cb:e6:90:dd:96:27:54:6c:21:ae:e7:f9:
                    e6:0c:14:d3:23:49:8c:54:7a:67:46:b3:82:34:b3:
                    28:5e:94:10:0c:ce:4f:f7:21:40:5d:5f:11:2b:5e:
                    f3:04:44:71:cd:4a:a3:fd:a3:09:4b:b8:14:8a:83:
                    bf:45:a1:2e:1d:f0:4b:cd:44:d2:5f:c0:35:58:b8:
                    73:e4:19:16:2c:f0:57:ce:6c:18:f1:8b:62:6c:e9:
                    e0:0a:af:2c:ee:79:2c:e9:83:06:e5:fc:76:62:67:
                    e6:f5:25:b4:cb:0e:74:59:2d:ef:a4:f6:92:0f:0e:
                    49:ce:a8:c6:28:93:be:18:bf:25:4d:53:2c:fc:e9:
                    6a:58:a8:f7:e1:70:88:7d:69:9f:15:fa:a0:c1:64:
                    c4:ba:db:1e:9a:f1:1c:a5:33:3a:45:d7:57:00:a8:
                    fc:07:d2:c5:6c:d0:05:3f:25:91:0b:66:dd:ea:3f:
                    f0:70:cb:2a:af:68:1e:f1:c2:bb:5d:dc:ee:b2:07:
                    00:6d:b6:06:5f:7b:6e:3c:04:07:dc:96:04:98:37:
                    8f:25:5c:cb:bb:7d:a4:fa:0f:cc:e2:c1:c8:2d:ab:
                    d4:01:d4:cf:b4:fc:b2:09:34:9e:b6:40:39:6b:d9:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:76:82:61:91:5A:25:78:EC:2C:C0:4C:A4:54:51:4E:6F:94:30:F9
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:8e:f1:36:6d:00:de:e5:a9:18:7f:9f:3f:2b:e8:25:83:
         ad:79:ca:2d:a9:03:2a:a9:16:80:55:00:e5:0d:6c:9b:56:f8:
         74:8f:85:e9:e6:fa:98:f3:53:e5:c6:d3:d4:28:a0:51:bf:49:
         ae:05:f6:1b:3a:65:56:a4:94:da:c0:43:7b:f8:0c:6e:2a:50:
         a3:7a:48:b0:62:ac:08:d1:6d:fd:b0:de:e1:57:aa:ca:1a:d7:
         63:e4:8d:1e:0a:02:eb:bb:f4:db:75:14:9b:7b:11:5f:02:d9:
         79:04:42:cf:30:6b:16:97:8d:d5:fd:d8:05:2c:2a:c6:a3:47:
         6f:06:5a:d0:e4:93:04:46:2a:c7:79:94:01:ec:29:6b:a0:dc:
         50:73:da:47:a8:ac:18:7d:40:c5:df:6c:28:09:2b:0a:1c:2d:
         45:8f:00:b3:c7:3c:67:ae:ba:9f:47:66:8c:c0:03:e8:b7:8d:
         03:8d:97:85:00:30:63:3b:0e:50:db:3f:e5:54:24:bf:ab:1a:
         74:75:08:b8:8b:70:d5:fc:4f:fd:ff:9d:a9:a8:87:a9:0a:61:
         c7:bb:a3:dc:b4:fb:70:fb:47:e6:4f:42:3a:c5:e2:53:18:5e:
         e6:48:3b:54:5b:38:da:98:d7:f3:10:f3:5f:5d:f5:1b:9e:cd:
         8e:fa:0d:c9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQzqj03AxJvtFT58Qg/KtdKEWD3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5RjA0NUQzRTFEQTIxNTg5RDdBRkE5RDI5NkFFMjRE
MzNBMDlFRTAeFw0yNDAzMDUxNzQyNThaFw0yNTAzMDQxNzQ3NThaMDMxMTAvBgNV
BAMTKDQ5NzY4MjYxOTE1QTI1NzhFQzJDQzA0Q0E0NTQ1MTRFNkY5NDMwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4MM2+HepsReypyyOunGs/cvm
kN2WJ1RsIa7n+eYMFNMjSYxUemdGs4I0syhelBAMzk/3IUBdXxErXvMERHHNSqP9
owlLuBSKg79FoS4d8EvNRNJfwDVYuHPkGRYs8FfObBjxi2Js6eAKryzueSzpgwbl
/HZiZ+b1JbTLDnRZLe+k9pIPDknOqMYok74YvyVNUyz86WpYqPfhcIh9aZ8V+qDB
ZMS62x6a8RylMzpF11cAqPwH0sVs0AU/JZELZt3qP/BwyyqvaB7xwrtd3O6yBwBt
tgZfe248BAfclgSYN48lXMu7faT6D8ziwcgtq9QB1M+0/LIJNJ62QDlr2XZDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSXaCYZFaJXjsLMBMpFRRTm+UMPkwHwYDVR0j
BBgwFoAUMJ8EXT4dohWJ16+p0pauJNM6Ce4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEVCNEMwQjVGRDNFMUIxQzkyREY5Rjk0MzhCNzMwRTU4
Mjk5RDJBQTExRjIwQ0JGOTVEODQ1OTUwRjcwNkJBLzAvMzA5RjA0NUQzRTFEQTIx
NTg5RDdBRkE5RDI5NkFFMjREMzNBMDlFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDlGMDQ1RDNFMURBMjE1ODlE
N0FGQTlEMjk2QUUyNEQzM0EwOUVFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRFQjRDMEI1RkQzRTFCMUM5MkRGOUY5NDM4QjczMEU1ODI5OUQyQUEx
MUYyMENCRjk1RDg0NTk1MEY3MDZCQS8wLzMyMzAzMDJlMzgzMTJlMzEzMTMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNjM5MzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hRcDAN
BgkqhkiG9w0BAQsFAAOCAQEAhVqO8TZtAN7lqRh/nz8r6CWDrXnKLakDKqkWgFUA
5Q1sm1b4dI+F6eb6mPNT5cbT1CigUb9JrgX2GzplVqSU2sBDe/gMbipQo3pIsGKs
CNFt/bDe4VeqyhrXY+SNHgoC67v023UUm3sRXwLZeQRCzzBrFpeN1f3YBSwqxqNH
bwZa0OSTBEYqx3mUAewpa6DcUHPaR6isGH1Axd9sKAkrChwtRY8As8c8Z666n0dm
jMAD6LeNA42XhQAwYzsOUNs/5VQkv6sadHUIuItw1fxP/f+dqaiHqQphx7uj3LT7
cPtH5k9COsXiUxhe5kg7VFs42pjX8xDzX131G57NjvoNyQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org