Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa
File:                     3230302e38392e36342e302f32302d3230203d3e203233313430.roa (raw, json)
Hash identifier:          SFv3rHyG9NgwN8aNWOP27o6nQliyN8+2DgjTca5n9Lg=
Subject key identifier:   67:B4:43:B8:62:C8:08:8A:85:6C:51:6B:ED:7D:DA:B1:58:7B:2F:64
Certificate issuer:       /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
Certificate serial:       2D167F6DA6F2E6291237671EB1EF2C487495AFB3
Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa
Signing time:             Tue 05 Mar 2024 18:14:42 +0000
ROA not before:           Tue 05 Mar 2024 18:09:42 +0000
ROA not after:            Tue 04 Mar 2025 18:14:42 +0000
asID:                     23140
IP address blocks:        200.89.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:16:7f:6d:a6:f2:e6:29:12:37:67:1e:b1:ef:2c:48:74:95:af:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C
        Validity
            Not Before: Mar  5 18:09:42 2024 GMT
            Not After : Mar  4 18:14:42 2025 GMT
        Subject: CN=67B443B862C8088A856C516BED7DDAB1587B2F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:5f:75:09:a5:ee:7e:4d:be:a2:04:f4:40:
                    12:9a:a4:df:fd:71:7e:00:3e:08:e9:19:ad:da:ec:
                    16:e3:d9:53:25:38:d2:e8:22:6e:97:40:51:1b:69:
                    8f:ca:08:5a:93:74:2f:51:54:ba:07:8f:40:16:62:
                    45:bd:be:62:77:20:b9:db:6b:e5:f8:15:eb:76:8b:
                    dd:a6:ff:40:3e:8f:fe:6d:b3:38:c9:fc:92:bf:16:
                    ff:fc:ed:83:a1:0f:db:d9:1a:66:bd:2e:2f:06:6e:
                    13:db:95:62:42:32:8c:b3:9d:0e:f7:7d:ab:66:d7:
                    7a:d5:ee:d8:ff:66:8e:a7:46:64:c4:3d:61:8c:5a:
                    09:e5:e1:cd:b2:92:9e:5e:21:b7:97:eb:e3:f9:45:
                    43:1d:e7:c7:96:9b:ff:15:a9:bb:5f:3b:fa:13:dc:
                    ce:fe:c2:d4:fa:fc:c9:aa:0f:8b:f3:38:d0:e5:fe:
                    19:b9:0c:e6:f7:4d:6a:c5:26:44:18:aa:5c:f9:10:
                    d2:5a:95:8c:b6:75:7e:05:be:ee:1b:1e:df:ef:d7:
                    d9:ec:74:12:d9:7b:ca:a2:73:28:0e:eb:2a:2c:4a:
                    40:ff:08:7b:1f:9a:35:d4:ba:1b:f5:9f:47:ad:f2:
                    89:7f:de:3d:2f:ce:c2:54:6f:c2:dd:6e:90:4c:7c:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:43:B8:62:C8:08:8A:85:6C:51:6B:ED:7D:DA:B1:58:7B:2F:64
            X509v3 Authority Key Identifier:
                keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/3230302e38392e36342e302f32302d3230203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:59:3e:41:5f:15:a0:8d:23:cf:88:c9:59:fd:63:8b:32:
         d8:1d:9d:1d:a1:87:0a:33:9f:1e:fa:93:c8:0c:3c:3d:f9:84:
         e3:9d:33:28:ef:1f:ae:94:13:a3:d6:7d:b7:e5:cc:73:9a:08:
         d1:83:e5:6d:37:38:8f:1a:88:43:6a:fe:35:5f:88:30:3b:95:
         6a:aa:3e:34:10:74:1d:42:be:e9:74:c8:1c:f7:c8:22:75:a4:
         87:25:b3:b0:5e:c4:2c:1c:e8:02:0f:bb:cb:c1:da:85:10:f2:
         25:b9:db:5c:77:22:38:16:01:d3:d7:31:05:55:a3:14:0b:e1:
         24:f6:e2:23:aa:d2:dc:10:22:a0:83:c1:bd:bf:a4:63:92:09:
         0a:dc:22:e4:fe:28:1e:ca:57:aa:37:70:f1:e2:b0:aa:f9:8f:
         f7:22:fc:4d:25:fd:51:f3:61:93:9f:72:34:f3:e2:b3:10:04:
         35:23:79:15:c7:b5:17:25:92:54:09:90:96:da:b8:9e:44:d6:
         22:1f:8f:e0:14:36:e2:56:04:35:86:7d:9e:4e:5b:4c:48:e0:
         bd:88:a2:62:e7:c2:92:88:bf:ad:33:cb:15:34:4f:10:7b:0b:
         8c:31:a3:dc:9a:8e:d9:c1:af:50:db:05:67:a9:71:4c:78:79:
         be:31:68:da
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULRZ/baby5ikSN2cese8sSHSVr7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk2RTgwOEM5MTNCOUY0QkZDOTUwQjRGMURERUIxMTU5
RTVDOUI1QzAeFw0yNDAzMDUxODA5NDJaFw0yNTAzMDQxODE0NDJaMDMxMTAvBgNV
BAMTKDY3QjQ0M0I4NjJDODA4OEE4NTZDNTE2QkVEN0REQUIxNTg3QjJGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdV91CaXufk2+ogT0QBKapN/9
cX4APgjpGa3a7Bbj2VMlONLoIm6XQFEbaY/KCFqTdC9RVLoHj0AWYkW9vmJ3ILnb
a+X4Fet2i92m/0A+j/5tszjJ/JK/Fv/87YOhD9vZGma9Li8GbhPblWJCMoyznQ73
fatm13rV7tj/Zo6nRmTEPWGMWgnl4c2ykp5eIbeX6+P5RUMd58eWm/8VqbtfO/oT
3M7+wtT6/MmqD4vzONDl/hm5DOb3TWrFJkQYqlz5ENJalYy2dX4Fvu4bHt/v19ns
dBLZe8qicygO6yosSkD/CHsfmjXUuhv1n0et8ol/3j0vzsJUb8LdbpBMfFhlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZ7RDuGLICIqFbFFr7X3asVh7L2QwHwYDVR0j
BBgwFoAUOW6AjJE7n0v8lQtPHd6xFZ5cm1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Mzk2QjIzQUY4NzA1REMxRjFBMTM1MjcwMjM0NDMyQUJB
MDE2Nzc1QzE3ODE5RjY3RDY5QkYzOUMxQkU5N0E4LzAvMzk2RTgwOEM5MTNCOUY0
QkZDOTUwQjRGMURERUIxMTU5RTVDOUI1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTZFODA4QzkxM0I5RjRCRkM5
NTBCNEYxRERFQjExNTlFNUM5QjVDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTM5NkIyM0FGODcwNURDMUYxQTEzNTI3MDIzNDQzMkFCQTAxNjc3NUMx
NzgxOUY2N0Q2OUJGMzlDMUJFOTdBOC8wLzMyMzAzMDJlMzgzOTJlMzYzNDJlMzAy
ZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIWUAwDQYJ
KoZIhvcNAQELBQADggEBAC4KWT5BXxWgjSPPiMlZ/WOLMtgdnR2hhwoznx76k8gM
PD35hOOdMyjvH66UE6PWfbflzHOaCNGD5W03OI8aiENq/jVfiDA7lWqqPjQQdB1C
vul0yBz3yCJ1pIcls7BexCwc6AIPu8vB2oUQ8iW521x3IjgWAdPXMQVVoxQL4ST2
4iOq0twQIqCDwb2/pGOSCQrcIuT+KB7KV6o3cPHisKr5j/ci/E0l/VHzYZOfcjTz
4rMQBDUjeRXHtRclklQJkJbauJ5E1iIfj+AUNuJWBDWGfZ5OW0xI4L2IomLnwpKI
v60zyxU0TxB7C4wxo9yajtnBr1DbBWepcUx4eb4xaNo=
-----END CERTIFICATE-----
Generated at Wed May 1 20:47:09 2024 by rpki-client on console-ams.rpki-client.org