Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33392e302e302f31392d3234203d3e2037343338.roa
File:                     3230302e33392e302e302f31392d3234203d3e2037343338.roa (raw, json)
Hash identifier:          X9DttiY37h0rMEXdVyKRZU4/A32CzXaym2kUg4dl3aA=
Subject key identifier:   6E:B7:53:1A:AD:15:D3:A2:30:52:1F:2A:ED:E6:C5:AA:3D:AA:AD:28
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       536DED80E2F516308608F1C8862ED40B889D737A
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33392e302e302f31392d3234203d3e2037343338.roa
Signing time:             Tue 05 Mar 2024 18:16:24 +0000
ROA not before:           Tue 05 Mar 2024 18:11:24 +0000
ROA not after:            Tue 04 Mar 2025 18:16:24 +0000
asID:                     7438
IP address blocks:        200.39.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6d:ed:80:e2:f5:16:30:86:08:f1:c8:86:2e:d4:0b:88:9d:73:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:24 2024 GMT
            Not After : Mar  4 18:16:24 2025 GMT
        Subject: CN=6EB7531AAD15D3A230521F2AEDE6C5AA3DAAAD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:fa:52:8a:33:1d:4d:f1:bd:d5:64:7e:0b:
                    92:76:5f:07:55:3e:7b:6d:20:0c:ee:bb:18:06:37:
                    2c:8c:9d:c4:39:d4:e6:ed:be:ab:44:07:89:0c:df:
                    f2:6c:5a:b4:e3:93:a4:63:3e:35:32:47:27:3b:6e:
                    d6:03:93:2e:7d:9a:65:05:63:0c:23:b5:7e:18:28:
                    32:40:8e:91:8d:fb:67:35:d2:e5:16:7f:fb:8c:71:
                    6e:e3:53:6e:e9:13:eb:a2:cf:4c:05:c3:81:5e:a9:
                    ed:0e:1c:8d:0d:62:a7:e9:6d:bc:60:e7:4a:74:f3:
                    67:ac:4e:c1:8c:39:37:32:7f:1a:d4:2c:30:2b:d9:
                    19:1d:8d:62:b3:56:c6:cb:79:f1:ab:da:5c:c3:db:
                    b7:c6:0d:ef:b1:50:4b:8f:b7:56:24:eb:f5:14:f5:
                    46:0c:83:18:64:e3:c0:5f:d6:ab:32:14:41:06:97:
                    7a:ff:82:77:fa:8b:c6:ca:ef:dc:5b:d3:36:b8:04:
                    f0:fb:bd:dc:6f:ed:38:8f:a2:cb:43:fb:3e:37:cd:
                    3e:5f:a3:6c:00:16:a3:b2:fd:0b:c1:a7:8e:5c:37:
                    cb:d6:d3:51:98:67:3a:90:a1:84:a4:1c:05:3b:f8:
                    dc:8c:1d:df:06:42:1f:c0:3b:d3:d8:a2:ba:74:e2:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B7:53:1A:AD:15:D3:A2:30:52:1F:2A:ED:E6:C5:AA:3D:AA:AD:28
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e33392e302e302f31392d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:13:bd:5d:81:d7:7b:bb:04:12:74:a7:da:62:13:75:a5:
         13:dd:35:29:c5:75:df:98:85:68:52:97:93:7a:35:c2:76:3a:
         2f:a7:a1:6e:c5:fe:77:56:64:6c:c7:a7:f4:dc:e5:4d:3b:d0:
         98:71:a0:4e:7a:24:80:6a:1c:c7:0b:53:b8:9a:3d:16:e0:67:
         49:9c:21:37:79:77:af:c7:97:7f:e7:8b:84:3a:35:58:28:c7:
         c3:43:15:b4:8c:9b:ea:4d:fa:ea:ee:d0:aa:dd:45:0e:ab:13:
         5d:25:b3:0c:14:78:46:9d:ca:eb:17:07:7e:ea:d7:93:eb:88:
         45:24:e7:5c:e4:c3:b6:b1:68:39:42:95:58:28:5c:fa:9e:ec:
         9f:5d:01:9b:af:7c:3d:01:8e:5e:fa:fd:80:5a:62:fd:ac:fd:
         3e:09:e3:a4:57:f5:82:52:03:07:99:89:12:e7:d8:60:9f:9c:
         e3:6a:93:28:1b:46:2e:ee:8d:44:ad:9d:03:b4:6d:00:0b:90:
         9a:65:a8:e9:12:bb:19:33:d3:63:e6:25:f7:ee:97:4d:ab:0e:
         f4:19:02:2f:e2:5e:1a:47:64:59:73:ef:9f:81:bc:20:67:c8:
         17:6f:27:0b:8f:ce:ae:2f:1e:ad:28:fd:9f:cc:fc:c2:7d:ae:
         40:8e:49:8a
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUU23tgOL1FjCGCPHIhi7UC4idc3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCNDA3ODVFM0EyNDBBMjU3NTAwQzFFQUM5NDlBMjYx
MDNBODIxMDAeFw0yNDAzMDUxODExMjRaFw0yNTAzMDQxODE2MjRaMDMxMTAvBgNV
BAMTKDZFQjc1MzFBQUQxNUQzQTIzMDUyMUYyQUVERTZDNUFBM0RBQUFEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMPpSijMdTfG91WR+C5J2XwdV
PnttIAzuuxgGNyyMncQ51ObtvqtEB4kM3/JsWrTjk6RjPjUyRyc7btYDky59mmUF
YwwjtX4YKDJAjpGN+2c10uUWf/uMcW7jU27pE+uiz0wFw4Feqe0OHI0NYqfpbbxg
50p082esTsGMOTcyfxrULDAr2RkdjWKzVsbLefGr2lzD27fGDe+xUEuPt1Yk6/UU
9UYMgxhk48Bf1qsyFEEGl3r/gnf6i8bK79xb0za4BPD7vdxv7TiPostD+z43zT5f
o2wAFqOy/QvBp45cN8vW01GYZzqQoYSkHAU7+NyMHd8GQh/AO9PYorp04mlXAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUbrdTGq0V06IwUh8q7ebFqj2qrSgwHwYDVR0j
BBgwFoAUwrQHheOiQKJXUAwerJSaJhA6ghAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MzA0RDVDQTA3RDNDQzY3NUM3NjAzNkE5NEQ3NkRFQ0U1
MzRCMjExMjEwQjBDQjlFQUEyRTkwNENEMkY3RTFFLzAvQzJCNDA3ODVFM0EyNDBB
MjU3NTAwQzFFQUM5NDlBMjYxMDNBODIxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkI0MDc4NUUzQTI0MEEyNTc1
MDBDMUVBQzk0OUEyNjEwM0E4MjEwLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTMwNEQ1Q0EwN0QzQ0M2NzVDNzYwMzZBOTRENzZERUNFNTM0QjIxMTIx
MEIwQ0I5RUFBMkU5MDRDRDJGN0UxRS8wLzMyMzAzMDJlMzMzOTJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzNzM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcgnADANBgkqhkiG
9w0BAQsFAAOCAQEAinETvV2B13u7BBJ0p9piE3WlE901KcV135iFaFKXk3o1wnY6
L6ehbsX+d1ZkbMen9NzlTTvQmHGgTnokgGocxwtTuJo9FuBnSZwhN3l3r8eXf+eL
hDo1WCjHw0MVtIyb6k366u7Qqt1FDqsTXSWzDBR4Rp3K6xcHfurXk+uIRSTnXOTD
trFoOUKVWChc+p7sn10Bm698PQGOXvr9gFpi/az9PgnjpFf1glIDB5mJEufYYJ+c
42qTKBtGLu6NRK2dA7RtAAuQmmWo6RK7GTPTY+Yl9+6XTasO9BkCL+JeGkdkWXPv
n4G8IGfIF28nC4/Ori8erSj9n8z8wn2uQI5Jig==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org