Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35362e302f32322d3234203d3e203136373332.roa
File:                     3230302e35392e35362e302f32322d3234203d3e203136373332.roa (raw, json)
Hash identifier:          LyXiVd7Q1QUKEJgEdA+B864uBzT1p4XyoD8ynoWagzc=
Subject key identifier:   EA:B2:33:EB:AC:6C:7D:A0:71:B3:F6:47:EB:EF:80:FA:C1:DF:0F:85
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       5B5F98E7A54DAC3A383EFC4E65F859D94C04412B
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35362e302f32322d3234203d3e203136373332.roa
Signing time:             Tue 05 Mar 2024 17:46:58 +0000
ROA not before:           Tue 05 Mar 2024 17:41:58 +0000
ROA not after:            Tue 04 Mar 2025 17:46:58 +0000
asID:                     16732
IP address blocks:        200.59.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:98:e7:a5:4d:ac:3a:38:3e:fc:4e:65:f8:59:d9:4c:04:41:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:58 2024 GMT
            Not After : Mar  4 17:46:58 2025 GMT
        Subject: CN=EAB233EBAC6C7DA071B3F647EBEF80FAC1DF0F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:a7:6e:af:37:e6:87:f8:a8:c1:46:cb:51:
                    19:c8:45:7b:55:67:24:d5:58:6b:f2:25:ed:3b:13:
                    da:49:9a:7d:1c:d9:43:6e:ad:c6:58:d6:44:f7:6c:
                    89:fb:6a:62:36:f1:98:c8:b5:41:53:0f:4e:8d:6d:
                    9a:e1:53:66:40:b0:c3:92:81:08:6c:00:6e:2c:a0:
                    e4:95:7b:d8:ed:12:e7:a7:e6:f3:89:d6:83:9d:36:
                    d1:8c:95:3c:2c:c5:55:98:8a:c5:f3:be:8c:49:55:
                    9d:bc:43:6d:f1:2a:74:4d:c0:95:9f:ef:df:e7:5d:
                    c5:9f:78:b8:a6:04:91:0b:64:f4:cc:51:99:42:00:
                    ca:f1:d3:c3:b8:9a:60:35:c4:da:d4:54:97:90:0e:
                    76:99:7d:41:fa:28:5a:31:d8:c4:cb:fb:4a:ca:66:
                    3f:30:a1:fb:ea:81:d0:e0:3e:a9:16:d6:b2:98:8d:
                    aa:24:58:c6:8d:0e:aa:e5:0e:ce:81:80:84:f5:08:
                    7d:ee:87:8e:3e:2d:34:88:9c:7d:48:ec:50:94:e6:
                    02:4f:32:84:9d:ef:55:cd:d7:61:9a:fb:30:33:0c:
                    5a:85:96:8c:ea:1b:82:f5:da:78:b4:37:89:70:e9:
                    f6:7e:59:6f:d1:6e:1f:1c:c4:69:96:2d:89:ae:6e:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:33:EB:AC:6C:7D:A0:71:B3:F6:47:EB:EF:80:FA:C1:DF:0F:85
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35362e302f32322d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:6f:ce:bc:d7:28:72:8f:c1:a4:c4:7d:02:29:c9:a4:31:
         cf:0c:fd:5c:5c:c7:22:f0:c3:40:31:20:4a:16:8e:5d:7d:69:
         f5:c4:ed:94:47:9d:f6:31:d4:17:3d:59:9e:a2:80:8b:0e:e8:
         d8:88:69:90:76:69:0d:4f:12:ba:b2:1a:f8:99:ae:14:cd:71:
         50:d4:e9:0f:82:80:33:53:f0:8f:90:84:95:65:b1:73:66:67:
         b6:21:9c:27:1b:00:63:e0:b4:92:b9:e5:9b:b9:c7:1a:44:9a:
         00:29:7d:8f:1b:07:36:95:be:75:39:6c:5a:df:35:22:fb:c1:
         b7:80:17:3c:3f:dc:82:13:52:1a:db:8b:29:9a:75:73:4f:99:
         c8:9b:f6:ae:29:bf:e6:ee:ce:aa:de:a2:85:76:76:bb:66:eb:
         0a:f5:c2:84:95:28:6c:82:f0:25:3e:15:78:98:8a:16:8c:e3:
         9a:13:56:c3:d9:33:03:29:7b:6e:e5:d8:76:15:de:c8:dd:69:
         70:66:13:d5:95:c1:72:79:9b:c8:3c:55:32:f3:0f:cd:94:08:
         c9:7d:2d:f4:ff:be:e5:21:c3:d1:bf:63:20:b2:50:c6:4f:3b:
         7f:7c:e1:f1:63:30:85:90:40:0b:e4:6b:78:37:b4:20:2b:de:
         05:15:13:d5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUW1+Y56VNrDo4PvxOZfhZ2UwEQSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZBQ0FDOEVGRjZERjg0MzI2MThDNjAwQjc0Q0RDNTQ0
RkVEOTRCNzAeFw0yNDAzMDUxNzQxNThaFw0yNTAzMDQxNzQ2NThaMDMxMTAvBgNV
BAMTKEVBQjIzM0VCQUM2QzdEQTA3MUIzRjY0N0VCRUY4MEZBQzFERjBGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+Kdurzfmh/iowUbLURnIRXtV
ZyTVWGvyJe07E9pJmn0c2UNurcZY1kT3bIn7amI28ZjItUFTD06NbZrhU2ZAsMOS
gQhsAG4soOSVe9jtEuen5vOJ1oOdNtGMlTwsxVWYisXzvoxJVZ28Q23xKnRNwJWf
79/nXcWfeLimBJELZPTMUZlCAMrx08O4mmA1xNrUVJeQDnaZfUH6KFox2MTL+0rK
Zj8wofvqgdDgPqkW1rKYjaokWMaNDqrlDs6BgIT1CH3uh44+LTSInH1I7FCU5gJP
MoSd71XN12Ga+zAzDFqFlozqG4L12ni0N4lw6fZ+WW/Rbh8cxGmWLYmubsM9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU6rIz66xsfaBxs/ZH6++A+sHfD4UwHwYDVR0j
BBgwFoAUpqysjv9t+EMmGMYAt0zcVE/tlLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzVGMkVFREMzQ0RDOEE0N0VDQkM2M0FFRUQ1MzdFNUNF
QTU0QzcyMUE5MEU3NjI1NEIyOUZGNERDM0Y3RjIzLzAvQTZBQ0FDOEVGRjZERjg0
MzI2MThDNjAwQjc0Q0RDNTQ0RkVEOTRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkFDQUM4RUZGNkRGODQzMjYx
OEM2MDBCNzRDREM1NDRGRUQ5NEI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTc1RjJFRURDM0NEQzhBNDdFQ0JDNjNBRUVENTM3RTVDRUE1NEM3MjFB
OTBFNzYyNTRCMjlGRjREQzNGN0YyMy8wLzMyMzAzMDJlMzUzOTJlMzUzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzYzNzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIOzgwDQYJ
KoZIhvcNAQELBQADggEBAITWb8681yhyj8GkxH0CKcmkMc8M/VxcxyLww0AxIEoW
jl19afXE7ZRHnfYx1Bc9WZ6igIsO6NiIaZB2aQ1PErqyGviZrhTNcVDU6Q+CgDNT
8I+QhJVlsXNmZ7YhnCcbAGPgtJK55Zu5xxpEmgApfY8bBzaVvnU5bFrfNSL7wbeA
Fzw/3IITUhrbiymadXNPmcib9q4pv+buzqreooV2drtm6wr1woSVKGyC8CU+FXiY
ihaM45oTVsPZMwMpe27l2HYV3sjdaXBmE9WVwXJ5m8g8VTLzD82UCMl9LfT/vuUh
w9G/YyCyUMZPO3984fFjMIWQQAvka3g3tCAr3gUVE9U=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:45 2024 by rpki-client on console-fra.rpki-client.org