Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e31362e302f32312d3232203d3e203139313830.roa
File:                     3230302e3131302e31362e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          9yYbaSv3a15sH6m8r1y7qqi0INXbarfN+PFZQiBpkek=
Subject key identifier:   EA:16:CE:9E:80:DB:9F:0C:14:0A:60:4E:1A:05:F8:27:F9:CC:FA:25
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       1F2C3F722978CA2C970BF9DFF7E57A1E2CB8A8F1
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e31362e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 17:56:39 +0000
ROA not before:           Tue 05 Mar 2024 17:51:39 +0000
ROA not after:            Tue 04 Mar 2025 17:56:39 +0000
asID:                     19180
IP address blocks:        200.110.16.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:3f:72:29:78:ca:2c:97:0b:f9:df:f7:e5:7a:1e:2c:b8:a8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:39 2024 GMT
            Not After : Mar  4 17:56:39 2025 GMT
        Subject: CN=EA16CE9E80DB9F0C140A604E1A05F827F9CCFA25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:cf:f1:43:2e:02:83:3d:66:a1:88:01:11:
                    05:52:9e:a8:a6:f7:7a:d5:51:04:5c:96:88:85:b3:
                    de:74:06:90:66:fe:94:60:62:ca:14:30:32:df:b2:
                    06:ff:f7:eb:04:8b:7a:96:49:f9:4b:fa:9a:bf:5a:
                    fc:78:ed:c0:4c:e4:75:a9:5f:5d:b4:4e:b7:29:bb:
                    f8:28:25:da:cd:df:60:35:2a:af:a1:4c:5d:b0:3c:
                    ff:41:21:09:1e:4a:7e:84:ea:de:32:7e:7e:20:c1:
                    d0:c4:81:6d:6d:9a:c8:1f:3b:92:f6:04:bf:98:1f:
                    53:1d:b0:bc:51:68:69:8a:73:55:4a:e6:28:a7:b3:
                    24:e0:8c:19:54:05:62:bf:4e:30:61:38:34:11:d5:
                    78:0c:a6:30:9a:b8:12:65:3e:f6:e3:4c:46:28:30:
                    52:e1:2f:98:5c:27:4f:89:5e:65:fb:18:b1:13:d8:
                    39:c2:b6:bb:22:d4:6c:31:b2:dc:a0:2c:17:5f:c1:
                    d4:8f:28:7c:26:da:4c:28:35:ac:e6:32:dc:f0:ee:
                    d3:5c:fb:9b:59:e1:e6:96:52:bb:4e:f5:90:72:48:
                    b7:7b:28:8c:ce:f5:e0:62:00:58:c9:e0:c6:b9:d4:
                    ea:a6:a9:a1:68:86:b7:77:7d:e6:8a:25:df:49:9d:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:CE:9E:80:DB:9F:0C:14:0A:60:4E:1A:05:F8:27:F9:CC:FA:25
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e31362e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:f9:0f:30:e9:d0:4b:1c:e1:2a:36:23:2d:ce:88:ca:81:
         4b:c7:6e:01:9e:68:a5:39:8c:59:b7:ca:5c:13:d4:d5:92:1d:
         4c:1b:02:84:a5:64:bc:21:18:d7:de:e4:42:1a:40:ef:68:16:
         30:5c:ae:c0:e7:0b:58:69:bc:02:ed:51:1b:1b:22:4e:ca:54:
         45:02:9e:b0:80:7a:35:a4:08:9a:8f:a2:10:69:d7:fe:1e:25:
         d7:7c:91:05:f8:1e:24:92:51:aa:10:aa:22:6b:eb:36:6d:f4:
         87:e5:6e:8a:97:9e:cf:9e:4d:90:c0:fa:95:68:60:37:ab:d6:
         41:d1:17:04:27:47:73:e9:dd:9c:20:ba:b1:30:05:38:21:e6:
         8d:e8:aa:f9:de:2b:1b:b8:80:97:7e:b7:c5:1c:83:d3:46:72:
         21:8d:b9:9d:89:20:af:7c:2d:c9:4b:dc:27:15:b2:09:99:cb:
         fb:9c:91:b0:e5:a5:44:ed:1b:fe:00:6d:e5:b2:bf:b8:24:ef:
         fd:cc:10:27:52:5c:b8:dd:5c:82:18:42:a0:c5:75:48:6a:4f:
         6d:87:f7:6d:c9:57:ad:03:7d:58:3b:f4:ee:71:69:82:13:d3:
         6b:d1:c1:9e:6b:95:3e:d8:94:cd:73:90:cb:43:43:1f:fe:5d:
         88:38:e7:82
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHyw/cil4yiyXC/nf9+V6Hiy4qPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNDAzMDUxNzUxMzlaFw0yNTAzMDQxNzU2MzlaMDMxMTAvBgNV
BAMTKEVBMTZDRTlFODBEQjlGMEMxNDBBNjA0RTFBMDVGODI3RjlDQ0ZBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxc/xQy4Cgz1moYgBEQVSnqim
93rVUQRcloiFs950BpBm/pRgYsoUMDLfsgb/9+sEi3qWSflL+pq/Wvx47cBM5HWp
X120Trcpu/goJdrN32A1Kq+hTF2wPP9BIQkeSn6E6t4yfn4gwdDEgW1tmsgfO5L2
BL+YH1MdsLxRaGmKc1VK5iinsyTgjBlUBWK/TjBhODQR1XgMpjCauBJlPvbjTEYo
MFLhL5hcJ0+JXmX7GLET2DnCtrsi1GwxstygLBdfwdSPKHwm2kwoNazmMtzw7tNc
+5tZ4eaWUrtO9ZBySLd7KIzO9eBiAFjJ4Ma51OqmqaFohrd3feaKJd9JnSHHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6hbOnoDbnwwUCmBOGgX4J/nM+iUwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzMDJlMzEzMTMwMmUzMTM2MmUz
MDJmMzIzMTJkMzIzMjIwM2QzZTIwMzEzOTMxMzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8huEDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ8f5DzDp0Esc4So2Iy3OiMqBS8duAZ5opTmMWbfK
XBPU1ZIdTBsChKVkvCEY197kQhpA72gWMFyuwOcLWGm8Au1RGxsiTspURQKesIB6
NaQImo+iEGnX/h4l13yRBfgeJJJRqhCqImvrNm30h+Vuipeez55NkMD6lWhgN6vW
QdEXBCdHc+ndnCC6sTAFOCHmjeiq+d4rG7iAl363xRyD00ZyIY25nYkgr3wtyUvc
JxWyCZnL+5yRsOWlRO0b/gBt5bK/uCTv/cwQJ1JcuN1cghhCoMV1SGpPbYf3bclX
rQN9WDv07nFpghPTa9HBnmuVPtiUzXOQy0NDH/5diDjngg==
-----END CERTIFICATE-----
Generated at Fri May 31 01:30:59 2024 by rpki-client on console-ams.rpki-client.org