Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3230302e37312e38382e302f32312d3234203d3e203237393936.roa
File:                     3230302e37312e38382e302f32312d3234203d3e203237393936.roa (raw, json)
Hash identifier:          DhOFLXJJooDrAZ5EDs084CJcv4sypEMSR8WqqZBkbA4=
Subject key identifier:   65:2B:78:56:A6:85:51:9C:2C:1A:92:53:5F:C5:33:E6:A5:26:DA:4C
Certificate issuer:       /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854
Certificate serial:       284AFE9FC2AE2A3D437BC51DFCE713F1041BEA6B
Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3230302e37312e38382e302f32312d3234203d3e203237393936.roa
Signing time:             Tue 05 Mar 2024 18:03:02 +0000
ROA not before:           Tue 05 Mar 2024 17:58:02 +0000
ROA not after:            Tue 04 Mar 2025 18:03:02 +0000
asID:                     27996
IP address blocks:        200.71.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4a:fe:9f:c2:ae:2a:3d:43:7b:c5:1d:fc:e7:13:f1:04:1b:ea:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854
        Validity
            Not Before: Mar  5 17:58:02 2024 GMT
            Not After : Mar  4 18:03:02 2025 GMT
        Subject: CN=652B7856A685519C2C1A92535FC533E6A526DA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:28:de:c6:86:48:3f:d6:8c:89:57:dd:1f:
                    dd:3b:6e:f7:8a:3c:7c:06:4d:37:b4:80:c2:87:a3:
                    7e:22:29:a1:a4:c6:c2:03:fd:dc:6a:45:c0:3b:aa:
                    1a:3c:0e:e4:4d:ea:46:00:4f:61:41:98:23:86:28:
                    2e:6e:9f:da:2d:9c:40:8c:2e:bb:09:30:13:f7:41:
                    fa:6d:6c:87:6f:73:18:93:d8:de:87:6d:60:37:92:
                    3d:cd:ea:e8:df:ee:c2:24:f2:a0:cd:d3:16:d3:94:
                    a5:6f:45:44:9c:ee:8f:bd:92:39:63:10:1c:d3:79:
                    39:a0:da:8e:8c:9c:38:1a:dd:d8:2d:2a:bb:a2:0f:
                    1c:d4:5c:41:a2:b5:08:61:ef:b8:3a:19:be:e9:82:
                    86:c8:b6:b2:b7:5e:49:76:ae:b1:2c:13:dd:2b:6c:
                    ee:b1:de:86:da:4d:44:21:f5:e6:5d:2b:6b:21:85:
                    67:40:14:14:1b:fa:51:84:42:15:6b:c6:fe:0b:f5:
                    df:84:da:f6:e8:61:c4:70:50:02:bf:db:03:63:b7:
                    86:f9:1a:8e:53:10:fb:3a:09:62:8a:aa:c2:98:fc:
                    df:ff:ab:df:5f:a7:d4:5c:cc:24:df:7a:04:87:4c:
                    e4:6f:77:e0:99:c2:40:b5:7a:ab:ec:5f:9d:66:87:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2B:78:56:A6:85:51:9C:2C:1A:92:53:5F:C5:33:E6:A5:26:DA:4C
            X509v3 Authority Key Identifier:
                keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3230302e37312e38382e302f32312d3234203d3e203237393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:e3:74:1b:a7:20:27:dd:c5:17:a9:6d:a9:31:d7:1e:10:
         63:75:bf:b5:61:cc:3c:bf:ec:81:4f:c1:43:2a:f9:b2:8b:c6:
         ca:37:1c:ff:3c:68:61:c2:c3:e7:54:a4:f4:ae:2d:e3:f4:2f:
         83:19:51:23:aa:1d:83:71:e8:4e:d1:1e:c0:0a:ff:ce:66:07:
         9c:15:68:03:99:a1:48:10:5b:4e:cc:52:31:6d:59:39:0c:f8:
         b5:0f:2e:b0:bd:cc:26:e3:24:dc:ab:84:3c:ab:f6:38:e7:0e:
         87:13:51:68:15:85:cd:aa:ba:88:08:84:4c:7d:ec:43:23:40:
         40:cb:0f:84:b1:2f:f6:5b:bf:9f:70:73:0a:88:55:85:8f:56:
         9e:a7:65:42:b4:c1:db:db:ad:a9:43:5a:eb:c9:c9:f5:5d:52:
         7e:e7:a6:ff:42:65:75:05:39:f9:7a:d5:9c:12:6a:ab:69:73:
         58:48:33:12:7d:45:71:8e:c5:de:b9:3b:60:0d:a4:5f:bc:ec:
         8a:a0:08:c0:f6:54:b5:05:b2:45:dd:31:9b:fe:44:8b:91:62:
         1d:e0:81:10:28:11:71:ed:39:52:71:97:13:97:dd:0d:cd:22:
         98:9b:01:b7:08:67:63:33:f2:7b:bc:89:76:2e:03:0d:a6:12:
         b5:a0:4b:48
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKEr+n8KuKj1De8Ud/OcT8QQb6mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4
ODhFRTg1NDAeFw0yNDAzMDUxNzU4MDJaFw0yNTAzMDQxODAzMDJaMDMxMTAvBgNV
BAMTKDY1MkI3ODU2QTY4NTUxOUMyQzFBOTI1MzVGQzUzM0U2QTUyNkRBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CSjexoZIP9aMiVfdH907bveK
PHwGTTe0gMKHo34iKaGkxsID/dxqRcA7qho8DuRN6kYAT2FBmCOGKC5un9otnECM
LrsJMBP3QfptbIdvcxiT2N6HbWA3kj3N6ujf7sIk8qDN0xbTlKVvRUSc7o+9kjlj
EBzTeTmg2o6MnDga3dgtKruiDxzUXEGitQhh77g6Gb7pgobItrK3Xkl2rrEsE90r
bO6x3obaTUQh9eZdK2shhWdAFBQb+lGEQhVrxv4L9d+E2vboYcRwUAK/2wNjt4b5
Go5TEPs6CWKKqsKY/N//q99fp9RczCTfegSHTORvd+CZwkC1eqvsX51mh27vAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZSt4VqaFUZwsGpJTX8Uz5qUm2kwwHwYDVR0j
BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy
QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB
NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG
QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3
NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzMyMzAzMDJlMzczMTJlMzgzODJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczOTM5MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIR1gwDQYJ
KoZIhvcNAQELBQADggEBADjM43QbpyAn3cUXqW2pMdceEGN1v7VhzDy/7IFPwUMq
+bKLxso3HP88aGHCw+dUpPSuLeP0L4MZUSOqHYNx6E7RHsAK/85mB5wVaAOZoUgQ
W07MUjFtWTkM+LUPLrC9zCbjJNyrhDyr9jjnDocTUWgVhc2quogIhEx97EMjQEDL
D4SxL/Zbv59wcwqIVYWPVp6nZUK0wdvbralDWuvJyfVdUn7npv9CZXUFOfl61ZwS
aqtpc1hIMxJ9RXGOxd65O2ANpF+87IqgCMD2VLUFskXdMZv+RIuRYh3ggRAoEXHt
OVJxlxOX3Q3NIpibAbcIZ2Mz8nu8iXYuAw2mErWgS0g=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org