Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
File:                     3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa (raw, json)
Hash identifier:          AlHZ7P6DWDwoxIdLkU+OMVQ3uqrQImaoRTa0nIWZakw=
Subject key identifier:   8B:DC:99:28:2E:27:A5:ED:EF:B7:B9:5B:27:5C:C2:FD:D9:26:3B:72
Certificate issuer:       /CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Certificate serial:       2345E5D2BB421EDCD388A3596FDB8DD6C44A2BCB
Authority key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     271867
IP address blocks:        200.36.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:45:e5:d2:bb:42:1e:dc:d3:88:a3:59:6f:db:8d:d6:c4:4a:2b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=8BDC99282E27A5EDEFB7B95B275CC2FDD9263B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:7d:2e:38:eb:c4:9a:7e:7a:d6:40:a4:6c:
                    af:fa:88:85:7f:1b:ac:4b:05:7f:00:7a:df:01:80:
                    3b:46:c0:83:e1:c7:6a:5f:6e:de:40:a6:d6:28:49:
                    b9:f6:26:b2:a8:3d:f6:7d:6e:9e:2e:52:21:c0:5d:
                    bb:f5:97:9d:74:a0:0d:f7:36:18:a2:c8:7c:1b:1e:
                    cd:fd:ae:36:cb:27:d9:94:1d:80:91:87:2c:b8:77:
                    47:ff:1f:65:d7:77:2d:b3:ca:c8:69:7e:88:88:8d:
                    ce:8d:80:b4:06:c3:46:d6:a2:6c:c1:0c:6f:17:1d:
                    52:73:87:e7:ab:d0:ab:06:cd:84:ef:db:7b:3e:46:
                    bd:b0:29:57:81:45:56:75:06:32:75:bf:21:30:3e:
                    a9:a0:cd:06:56:4d:60:e4:97:0a:e0:88:ca:53:21:
                    5a:b5:84:a8:70:bc:55:aa:f5:93:19:3f:b2:d0:e5:
                    4a:f5:90:7e:bc:0d:b7:9d:91:a1:b4:8c:fe:7a:6b:
                    e6:32:0d:13:b4:3c:55:68:5d:9d:b5:f1:98:e2:8c:
                    a7:d1:c5:bb:35:73:fe:50:35:c4:24:11:37:67:a2:
                    a8:81:aa:00:ae:f6:32:a9:71:c4:4e:cd:b3:ba:3a:
                    97:22:64:cf:e7:fe:6a:b2:7e:55:5a:ea:c5:09:bf:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:99:28:2E:27:A5:ED:EF:B7:B9:5B:27:5C:C2:FD:D9:26:3B:72
            X509v3 Authority Key Identifier:
                keyid:44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:2a:c4:ca:b7:35:52:7d:25:45:e5:3f:22:25:dd:ed:cc:
         ff:65:6d:ff:a9:e5:13:81:e7:c2:29:d7:5d:00:42:3b:dc:2a:
         59:36:96:db:a1:be:89:84:62:32:f1:c2:72:0b:d9:b6:2a:51:
         11:89:05:f1:b7:1f:91:29:ba:bc:6d:89:29:c1:cf:2d:09:bb:
         ca:35:b0:c4:69:e5:66:27:f5:d7:a3:8c:11:c2:31:7e:04:1a:
         d8:66:2b:08:bd:69:d0:aa:94:b1:f0:f2:4d:73:04:37:b7:91:
         72:c2:81:32:6f:ed:93:a0:cb:7c:44:68:9d:5f:8f:d1:0c:f5:
         db:26:ad:e1:7c:f3:95:f7:2b:ce:c7:e4:cb:74:7a:25:21:c6:
         25:58:8f:2b:e9:72:78:2d:f0:00:78:31:ba:a3:71:82:84:ff:
         2f:70:09:65:86:f5:2e:be:36:b4:e8:01:27:3c:cc:2d:d4:18:
         43:c9:48:fe:22:23:96:59:b0:c4:fd:9e:b4:1a:4f:e0:f3:af:
         09:d0:f5:a7:98:2d:47:af:a7:c1:3a:bd:14:f7:8a:03:c2:30:
         a7:95:ca:63:90:f7:ad:f6:8d:82:4a:50:13:4e:30:8e:75:15:
         bf:52:1a:f8:f8:0e:76:0b:57:cd:c5:63:b5:19:de:c3:e4:fb:
         c4:e2:6c:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUI0Xl0rtCHtzTiKNZb9uN1sRKK8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGMDk3RDFCMERGMUQyQjAwRDcxNEYwRTZDNzYxQkYx
MkNDMjNGNjAeFw0yNDAzMDUxODA3MDZaFw0yNTAzMDQxODEyMDZaMDMxMTAvBgNV
BAMTKDhCREM5OTI4MkUyN0E1RURFRkI3Qjk1QjI3NUNDMkZERDkyNjNCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpH0uOOvEmn561kCkbK/6iIV/
G6xLBX8Aet8BgDtGwIPhx2pfbt5AptYoSbn2JrKoPfZ9bp4uUiHAXbv1l510oA33
NhiiyHwbHs39rjbLJ9mUHYCRhyy4d0f/H2XXdy2zyshpfoiIjc6NgLQGw0bWomzB
DG8XHVJzh+er0KsGzYTv23s+Rr2wKVeBRVZ1BjJ1vyEwPqmgzQZWTWDklwrgiMpT
IVq1hKhwvFWq9ZMZP7LQ5Ur1kH68DbedkaG0jP56a+YyDRO0PFVoXZ218ZjijKfR
xbs1c/5QNcQkETdnoqiBqgCu9jKpccROzbO6OpciZM/n/mqyflVa6sUJvzBPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUi9yZKC4npe3vt7lbJ1zC/dkmO3IwHwYDVR0j
BBgwFoAURPCX0bDfHSsA1xTw5sdhvxLMI/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84REE4NzZBOTVFNEMzQzFCOTBDODgyODQwQUE3MTY1MTA2
RjVGOEVFNEIxMjE5QzdFMTQ3ODlEQzBBQkY2MTRELzAvNDRGMDk3RDFCMERGMUQy
QjAwRDcxNEYwRTZDNzYxQkYxMkNDMjNGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEYwOTdEMUIwREYxRDJCMDBE
NzE0RjBFNkM3NjFCRjEyQ0MyM0Y2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOERBODc2QTk1RTRDM0MxQjkwQzg4Mjg0MEFBNzE2NTEwNkY1RjhFRTRC
MTIxOUM3RTE0Nzg5REMwQUJGNjE0RC8wLzMyMzAzMDJlMzMzNjJlMzIzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCTQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBntCrEyrc1Un0lReU/IiXd7cz/ZW3/qeUTgefC
KdddAEI73CpZNpbbob6JhGIy8cJyC9m2KlERiQXxtx+RKbq8bYkpwc8tCbvKNbDE
aeVmJ/XXo4wRwjF+BBrYZisIvWnQqpSx8PJNcwQ3t5FywoEyb+2ToMt8RGidX4/R
DPXbJq3hfPOV9yvOx+TLdHolIcYlWI8r6XJ4LfAAeDG6o3GChP8vcAllhvUuvja0
6AEnPMwt1BhDyUj+IiOWWbDE/Z60Gk/g868J0PWnmC1Hr6fBOr0U94oDwjCnlcpj
kPet9o2CSlATTjCOdRW/Uhr4+A52C1fNxWO1Gd7D5PvE4mww
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org