Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33322e302f32302d3236203d3e203136373332.roa
File:                     3230302e35392e33322e302f32302d3236203d3e203136373332.roa (raw, json)
Hash identifier:          hExXnuAbMWufxm7qhEsScTkNml5hgU79gfkkzHuueR8=
Subject key identifier:   C3:EE:83:D8:3F:9F:98:30:2D:63:A7:8B:1F:77:38:3E:0B:DA:47:7C
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       0F9DD7CE8A7BEB893DE5A709EB3E49428288078D
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33322e302f32302d3236203d3e203136373332.roa
Signing time:             Tue 05 Mar 2024 17:46:57 +0000
ROA not before:           Tue 05 Mar 2024 17:41:57 +0000
ROA not after:            Tue 04 Mar 2025 17:46:57 +0000
asID:                     16732
IP address blocks:        200.59.32.0/20 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9d:d7:ce:8a:7b:eb:89:3d:e5:a7:09:eb:3e:49:42:82:88:07:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:57 2024 GMT
            Not After : Mar  4 17:46:57 2025 GMT
        Subject: CN=C3EE83D83F9F98302D63A78B1F77383E0BDA477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:0b:c1:62:df:43:40:f7:e2:d1:1c:52:84:
                    9b:7c:3d:92:bc:0f:2a:31:d5:1e:45:b6:97:42:e6:
                    0d:76:7c:29:68:10:64:29:6b:1f:5c:02:1b:a1:d0:
                    36:16:e7:70:4b:31:a4:0d:39:cd:89:0a:a9:dd:c6:
                    40:a9:99:8a:f1:00:95:e7:65:df:90:e2:ef:db:4d:
                    c0:43:22:a1:3f:12:89:77:66:d1:e1:4e:3f:28:a9:
                    47:b7:72:bb:45:07:cf:94:45:09:13:e9:99:09:34:
                    42:dd:b9:53:e5:41:b0:0d:23:6a:ed:99:a2:66:21:
                    8a:36:5f:1e:c5:f3:7b:4f:7c:52:a1:15:04:a1:e9:
                    28:33:ac:65:f4:9c:61:f9:fd:4e:30:48:d3:b5:e3:
                    b6:db:b4:90:ec:7e:73:fe:a6:9e:7c:38:9c:55:46:
                    2f:11:cf:db:02:89:d3:01:12:a7:2a:c0:ae:a3:e6:
                    77:79:78:fa:e9:d0:7f:be:ff:bc:a5:f6:61:73:31:
                    d9:81:49:97:c5:79:e2:c6:19:d4:7f:77:c7:86:91:
                    1e:e3:fe:5f:82:c3:3a:ee:81:bd:cf:57:67:ba:d5:
                    47:b3:02:52:e1:6c:4e:70:0a:7b:59:f1:b5:3d:41:
                    ec:7e:41:46:c2:6b:30:f1:5e:c9:88:c5:14:7c:89:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EE:83:D8:3F:9F:98:30:2D:63:A7:8B:1F:77:38:3E:0B:DA:47:7C
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33322e302f32302d3236203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:24:57:a4:8b:8f:67:40:7a:36:dd:cb:d8:af:84:2c:22:
         5a:dd:1c:aa:9c:67:70:06:c4:44:b3:dd:46:52:d1:6c:fd:c5:
         94:ff:c9:63:f9:aa:49:29:c6:c4:10:49:45:9a:fa:41:e0:46:
         9b:b6:35:71:d6:61:77:40:47:26:3f:19:e5:e9:a8:b0:ac:b9:
         a4:63:73:7f:05:c6:f5:01:79:14:ff:3a:48:ad:ed:f1:20:f2:
         cc:db:36:18:0b:3d:16:dd:8c:ad:94:ff:e1:be:7b:6c:f4:c3:
         6d:9f:58:6a:74:dd:0f:6f:ac:70:75:da:bb:9e:cc:03:b7:81:
         31:49:bc:7f:99:94:eb:38:0c:b1:3c:4a:d6:be:ba:48:2a:1e:
         9a:2f:92:4d:f4:44:a4:15:5e:45:0c:92:b6:93:9b:22:79:cd:
         e4:43:22:78:68:24:f4:d0:19:ca:70:02:e1:be:f4:20:19:70:
         93:77:cb:4b:86:78:03:64:5b:f1:2d:66:f7:bb:38:7b:13:b5:
         56:a6:89:59:35:08:24:3d:70:26:0a:f5:24:54:78:4b:0d:72:
         be:d5:37:9e:f5:63:68:63:b8:3f:86:86:54:a3:d6:e1:77:38:
         b6:37:fc:4b:8b:08:a5:a9:e2:a8:36:d6:40:02:5b:78:58:27:
         a9:e0:4c:ce
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUD53Xzop764k95acJ6z5JQoKIB40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZBQ0FDOEVGRjZERjg0MzI2MThDNjAwQjc0Q0RDNTQ0
RkVEOTRCNzAeFw0yNDAzMDUxNzQxNTdaFw0yNTAzMDQxNzQ2NTdaMDMxMTAvBgNV
BAMTKEMzRUU4M0Q4M0Y5Rjk4MzAyRDYzQTc4QjFGNzczODNFMEJEQTQ3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOiAvBYt9DQPfi0RxShJt8PZK8
Dyox1R5FtpdC5g12fCloEGQpax9cAhuh0DYW53BLMaQNOc2JCqndxkCpmYrxAJXn
Zd+Q4u/bTcBDIqE/Eol3ZtHhTj8oqUe3crtFB8+URQkT6ZkJNELduVPlQbANI2rt
maJmIYo2Xx7F83tPfFKhFQSh6SgzrGX0nGH5/U4wSNO147bbtJDsfnP+pp58OJxV
Ri8Rz9sCidMBEqcqwK6j5nd5ePrp0H++/7yl9mFzMdmBSZfFeeLGGdR/d8eGkR7j
/l+Cwzrugb3PV2e61UezAlLhbE5wCntZ8bU9Qex+QUbCazDxXsmIxRR8iZ01AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUw+6D2D+fmDAtY6eLH3c4PgvaR3wwHwYDVR0j
BBgwFoAUpqysjv9t+EMmGMYAt0zcVE/tlLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzVGMkVFREMzQ0RDOEE0N0VDQkM2M0FFRUQ1MzdFNUNF
QTU0QzcyMUE5MEU3NjI1NEIyOUZGNERDM0Y3RjIzLzAvQTZBQ0FDOEVGRjZERjg0
MzI2MThDNjAwQjc0Q0RDNTQ0RkVEOTRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkFDQUM4RUZGNkRGODQzMjYx
OEM2MDBCNzRDREM1NDRGRUQ5NEI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTc1RjJFRURDM0NEQzhBNDdFQ0JDNjNBRUVENTM3RTVDRUE1NEM3MjFB
OTBFNzYyNTRCMjlGRjREQzNGN0YyMy8wLzMyMzAzMDJlMzUzOTJlMzMzMjJlMzAy
ZjMyMzAyZDMyMzYyMDNkM2UyMDMxMzYzNzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIOyAwDQYJ
KoZIhvcNAQELBQADggEBAIyGJFeki49nQHo23cvYr4QsIlrdHKqcZ3AGxESz3UZS
0Wz9xZT/yWP5qkkpxsQQSUWa+kHgRpu2NXHWYXdARyY/GeXpqLCsuaRjc38FxvUB
eRT/Okit7fEg8szbNhgLPRbdjK2U/+G+e2z0w22fWGp03Q9vrHB12ruezAO3gTFJ
vH+ZlOs4DLE8Sta+ukgqHpovkk30RKQVXkUMkraTmyJ5zeRDInhoJPTQGcpwAuG+
9CAZcJN3y0uGeANkW/EtZve7OHsTtVamiVk1CCQ9cCYK9SRUeEsNcr7VN571Y2hj
uD+GhlSj1uF3OLY3/EuLCKWp4qg21kACW3hYJ6ngTM4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org