Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3137322e302f32342d3234203d3e203634313133.roa
File:                     3230302e31302e3137322e302f32342d3234203d3e203634313133.roa (raw, json)
Hash identifier:          a0v6PV7ZrIn7+Zyx9b3vlU9rw0tok9LCvV1XTg6cjS8=
Subject key identifier:   18:BC:92:DB:4A:F8:3A:D7:12:04:F6:D3:C3:5A:5C:89:F2:EB:6F:23
Certificate issuer:       /CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
Certificate serial:       497107444EAA9E3769322EF1D1F33B83431606EA
Authority key identifier: 81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3137322e302f32342d3234203d3e203634313133.roa
Signing time:             Tue 05 Mar 2024 17:40:04 +0000
ROA not before:           Tue 05 Mar 2024 17:35:04 +0000
ROA not after:            Tue 04 Mar 2025 17:40:04 +0000
asID:                     64113
IP address blocks:        200.10.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:71:07:44:4e:aa:9e:37:69:32:2e:f1:d1:f3:3b:83:43:16:06:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
        Validity
            Not Before: Mar  5 17:35:04 2024 GMT
            Not After : Mar  4 17:40:04 2025 GMT
        Subject: CN=18BC92DB4AF83AD71204F6D3C35A5C89F2EB6F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:63:60:4c:9f:11:ff:be:2b:c9:d6:0f:e4:
                    a0:10:2f:3b:cf:43:f0:c9:2e:0e:4f:7e:db:27:79:
                    80:92:20:fc:7e:aa:2c:0b:1b:f3:4a:6a:42:03:38:
                    5f:6d:50:44:fd:0a:96:27:a7:24:59:bf:8f:fa:35:
                    67:53:39:8f:85:d8:00:aa:bc:a3:3b:c8:96:44:a5:
                    37:64:92:fa:ea:29:3f:bc:02:07:33:31:2e:64:f7:
                    57:7d:72:84:a1:46:ee:50:2f:10:ee:74:74:38:52:
                    0e:f6:34:6c:c6:61:70:a6:be:35:fe:b0:0c:ea:ec:
                    2b:1b:5b:3b:14:89:ea:54:ac:7d:d4:7c:40:31:82:
                    41:42:b6:4d:28:b3:be:ec:72:4a:8f:39:a8:78:56:
                    68:28:4f:27:1b:38:3e:75:81:29:dc:49:f7:2f:21:
                    ba:52:b7:e4:65:03:04:32:2c:5e:98:2d:90:8e:47:
                    87:58:e9:53:63:c5:45:e3:93:e0:68:db:d6:f7:63:
                    f2:c4:85:12:3c:8e:6b:39:66:80:0c:10:b2:4e:16:
                    fd:7e:ee:f8:a7:d9:df:7b:a6:3b:3a:58:d9:c6:23:
                    62:84:71:b2:55:ad:2c:e1:de:03:de:3a:46:7c:d6:
                    62:72:39:99:ed:1f:be:f7:72:55:67:c7:b8:52:a4:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:92:DB:4A:F8:3A:D7:12:04:F6:D3:C3:5A:5C:89:F2:EB:6F:23
            X509v3 Authority Key Identifier:
                keyid:81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3137322e302f32342d3234203d3e203634313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:e1:a2:65:57:7b:4a:0b:65:00:76:f2:ea:6a:6d:4e:e3:
         56:89:e2:6f:37:2e:ba:60:4d:f9:aa:f1:ae:c1:4d:4d:f1:b2:
         2a:fd:80:c4:2d:4d:f9:54:63:9d:45:f4:51:37:16:ee:43:04:
         d5:f8:52:1c:dd:26:d8:3f:4d:8f:5c:0a:79:25:7b:af:b5:bf:
         51:8b:f9:c1:9d:20:4a:0e:de:64:34:ea:c2:76:96:85:86:45:
         1a:ce:45:4a:be:7f:01:bf:de:53:4a:f0:19:49:e1:78:fe:16:
         1e:47:cb:f6:4e:97:27:64:c3:3e:a1:6d:4d:08:75:eb:f2:a0:
         81:5a:66:8d:5a:74:51:22:02:76:20:96:43:02:1e:d3:f9:dd:
         d4:da:34:03:e2:58:09:7e:ba:d4:4b:6b:f8:eb:f2:93:2d:a4:
         13:6c:d2:6c:1a:71:f0:d3:8a:21:f9:67:f4:74:65:e7:d7:5f:
         fb:44:89:ee:4f:5f:75:e4:0d:d1:af:7a:3f:58:1c:ab:df:2b:
         6a:a7:24:f3:d5:98:07:ab:ed:ad:df:60:f3:df:ba:83:72:d1:
         48:a4:2b:45:06:a7:5f:19:c7:fa:4a:7a:93:fd:d7:16:2e:a4:
         d9:41:16:8f:41:89:49:10:1b:e1:18:2c:2f:eb:7d:39:38:4b:
         9e:34:94:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSXEHRE6qnjdpMi7x0fM7g0MWBuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE0QjI0QzUxQTE0NjBBRTVBMzMxNTM5NDE4MEQ2QTAz
QkI0NkJFQzAeFw0yNDAzMDUxNzM1MDRaFw0yNTAzMDQxNzQwMDRaMDMxMTAvBgNV
BAMTKDE4QkM5MkRCNEFGODNBRDcxMjA0RjZEM0MzNUE1Qzg5RjJFQjZGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JGNgTJ8R/74rydYP5KAQLzvP
Q/DJLg5PftsneYCSIPx+qiwLG/NKakIDOF9tUET9CpYnpyRZv4/6NWdTOY+F2ACq
vKM7yJZEpTdkkvrqKT+8AgczMS5k91d9coShRu5QLxDudHQ4Ug72NGzGYXCmvjX+
sAzq7CsbWzsUiepUrH3UfEAxgkFCtk0os77sckqPOah4VmgoTycbOD51gSncSfcv
IbpSt+RlAwQyLF6YLZCOR4dY6VNjxUXjk+Bo29b3Y/LEhRI8jms5ZoAMELJOFv1+
7vin2d97pjs6WNnGI2KEcbJVrSzh3gPeOkZ81mJyOZntH773clVnx7hSpEalAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGLyS20r4OtcSBPbTw1pcifLrbyMwHwYDVR0j
BBgwFoAUgUskxRoUYK5aMxU5QYDWoDu0a+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzU1QzVBNzZFQ0Y4MDM4QzA0QjlEODgzRTBBNzkzNkQw
MjEwNEZDMkE0NTZCQzJCMDdFMUVBRjkyQUFERTBDLzAvODE0QjI0QzUxQTE0NjBB
RTVBMzMxNTM5NDE4MEQ2QTAzQkI0NkJFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTRCMjRDNTFBMTQ2MEFFNUEz
MzE1Mzk0MTgwRDZBMDNCQjQ2QkVDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTc1NUM1QTc2RUNGODAzOEMwNEI5RDg4M0UwQTc5MzZEMDIxMDRGQzJB
NDU2QkMyQjA3RTFFQUY5MkFBREUwQy8wLzMyMzAzMDJlMzEzMDJlMzEzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgKrDAN
BgkqhkiG9w0BAQsFAAOCAQEAHvDhomVXe0oLZQB28upqbU7jVonibzcuumBN+arx
rsFNTfGyKv2AxC1N+VRjnUX0UTcW7kME1fhSHN0m2D9Nj1wKeSV7r7W/UYv5wZ0g
Sg7eZDTqwnaWhYZFGs5FSr5/Ab/eU0rwGUnheP4WHkfL9k6XJ2TDPqFtTQh16/Kg
gVpmjVp0USICdiCWQwIe0/nd1No0A+JYCX661Etr+Ovyky2kE2zSbBpx8NOKIfln
9HRl59df+0SJ7k9fdeQN0a96P1gcq98raqck89WYB6vtrd9g89+6g3LRSKQrRQan
XxnH+kp6k/3XFi6k2UEWj0GJSRAb4RgsL+t9OThLnjSUsQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org