Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131362e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131362e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          FjAY/lBXeoFQidRXWZb+rrtFBBGnWRK77pYcuHt7tlM=
Subject key identifier:   BF:79:25:C2:55:92:DA:B0:14:09:6B:41:81:10:A7:BC:56:F0:86:44
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       72B6D96A110924D265DD472CFB648A46CAEDBA97
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131362e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 05 Mar 2024 17:52:29 +0000
ROA not before:           Tue 05 Mar 2024 17:47:29 +0000
ROA not after:            Tue 04 Mar 2025 17:52:29 +0000
asID:                     52283
IP address blocks:        200.108.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b6:d9:6a:11:09:24:d2:65:dd:47:2c:fb:64:8a:46:ca:ed:ba:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Mar  5 17:47:29 2024 GMT
            Not After : Mar  4 17:52:29 2025 GMT
        Subject: CN=BF7925C25592DAB014096B418110A7BC56F08644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:73:8b:f6:46:7e:3a:51:c7:88:55:04:b5:
                    68:6d:81:b4:45:fd:d0:40:ab:e8:e6:ec:35:93:9b:
                    84:19:03:e0:6a:b9:f7:1b:57:2b:e3:3d:af:c3:f7:
                    4c:6a:2e:40:2a:d8:de:e0:ce:33:1f:63:35:53:2e:
                    5b:97:fb:11:a6:68:4a:29:09:10:9a:e7:36:e1:f1:
                    fc:5a:3c:dc:e8:90:8f:85:8b:bc:35:49:d5:3e:ef:
                    bb:33:6e:fc:8d:84:82:7c:45:b6:60:3d:6f:60:56:
                    d9:07:bd:7e:5d:f3:6c:1b:b0:d8:50:01:56:09:6c:
                    05:7d:d2:c1:f1:c7:16:20:2c:a3:f5:10:f6:d6:6e:
                    25:f5:66:b0:b0:79:70:90:ab:c2:2c:b9:02:e9:e7:
                    ef:70:d8:7f:7a:4c:b0:83:a5:d4:a7:d8:ba:67:60:
                    cb:87:13:9d:18:29:88:28:32:f0:32:77:08:a1:50:
                    3c:5e:bf:cd:c1:5a:fb:fd:d8:1a:1f:d8:94:02:66:
                    be:77:4b:ec:74:6c:e8:02:4b:6e:5f:8a:01:d4:56:
                    57:b6:97:4a:c9:07:de:86:e5:da:88:56:01:72:64:
                    3b:30:c4:eb:f2:39:1c:cf:b6:7b:50:8b:32:9d:54:
                    8e:13:10:ad:1d:18:41:0b:56:0f:97:66:bb:55:a7:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:25:C2:55:92:DA:B0:14:09:6B:41:81:10:A7:BC:56:F0:86:44
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131362e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:fe:9c:d5:1d:36:3c:9a:84:c5:b4:7f:f9:88:e9:0f:ba:27:
         84:3a:ef:d1:a7:ae:99:62:e6:36:7a:41:a4:6e:11:ca:c4:8b:
         57:7a:33:47:5c:c4:ef:c5:ec:e6:ad:60:44:15:a7:8f:9d:1d:
         1b:2c:a5:56:51:da:75:a2:9f:65:89:e3:a0:02:7a:c3:6c:e1:
         27:31:eb:16:5f:6a:3e:51:ea:1c:56:5d:2c:0a:26:ce:a3:90:
         81:8c:a7:d2:0b:77:a7:2b:65:35:bf:2b:ad:a9:6d:40:f8:78:
         3a:f9:92:90:65:2a:40:d7:4b:73:ac:bc:24:f1:e6:ce:34:e7:
         7b:be:cd:e7:e0:d9:ad:a7:f0:25:fa:57:8a:96:2a:a9:4f:ee:
         60:02:a0:b4:d8:0d:53:69:e7:fd:3e:0f:75:57:7e:62:05:69:
         65:12:ed:51:5d:d2:12:78:1f:fd:30:a7:2e:8e:85:04:15:1d:
         44:27:ca:11:2b:e6:bf:38:2f:32:93:37:ee:52:bb:52:b6:01:
         f5:6b:c6:b4:cc:85:87:31:1a:f9:e3:3d:d6:aa:68:d1:58:3b:
         1d:ef:f2:0c:05:49:20:4a:82:0d:e3:3a:1f:b1:29:c7:d9:96:
         b4:7d:49:30:47:0d:f0:df:58:ef:9b:66:65:66:f2:2d:ad:00:
         0e:c2:cc:f2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcrbZahEJJNJl3Ucs+2SKRsrtupcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2ODE0NEZBQTA3NUQzRDlCMTBFRjY5MUZDNTVFNkEz
QTNFMTcyRTAeFw0yNDAzMDUxNzQ3MjlaFw0yNTAzMDQxNzUyMjlaMDMxMTAvBgNV
BAMTKEJGNzkyNUMyNTU5MkRBQjAxNDA5NkI0MTgxMTBBN0JDNTZGMDg2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q3OL9kZ+OlHHiFUEtWhtgbRF
/dBAq+jm7DWTm4QZA+BqufcbVyvjPa/D90xqLkAq2N7gzjMfYzVTLluX+xGmaEop
CRCa5zbh8fxaPNzokI+Fi7w1SdU+77szbvyNhIJ8RbZgPW9gVtkHvX5d82wbsNhQ
AVYJbAV90sHxxxYgLKP1EPbWbiX1ZrCweXCQq8IsuQLp5+9w2H96TLCDpdSn2Lpn
YMuHE50YKYgoMvAydwihUDxev83BWvv92Bof2JQCZr53S+x0bOgCS25figHUVle2
l0rJB96G5dqIVgFyZDswxOvyORzPtntQizKdVI4TEK0dGEELVg+XZrtVp5KRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUv3klwlWS2rAUCWtBgRCnvFbwhkQwHwYDVR0j
BBgwFoAUsWgUT6oHXT2bEO9pH8Veajo+Fy4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTRBMzY2NzFGQTdEQkE5MTFCOThBNDZDRDUxOTYyRDk2
NjVCMERFNjhFQTUwRUJGNDNDOTJFQUU4MDIwRkZBLzAvQjE2ODE0NEZBQTA3NUQz
RDlCMTBFRjY5MUZDNTVFNkEzQTNFMTcyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTY4MTQ0RkFBMDc1RDNEOUIx
MEVGNjkxRkM1NUU2QTNBM0UxNzJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU0QTM2NjcxRkE3REJBOTExQjk4QTQ2Q0Q1MTk2MkQ5NjY1QjBERTY4
RUE1MEVCRjQzQzkyRUFFODAyMEZGQS8wLzMyMzAzMDJlMzEzMDM4MmUzMTMxMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGx0
MA0GCSqGSIb3DQEBCwUAA4IBAQC3/pzVHTY8moTFtH/5iOkPuieEOu/Rp66ZYuY2
ekGkbhHKxItXejNHXMTvxezmrWBEFaePnR0bLKVWUdp1op9lieOgAnrDbOEnMesW
X2o+UeocVl0sCibOo5CBjKfSC3enK2U1vyutqW1A+Hg6+ZKQZSpA10tzrLwk8ebO
NOd7vs3n4Nmtp/Al+leKliqpT+5gAqC02A1Taef9Pg91V35iBWllEu1RXdISeB/9
MKcujoUEFR1EJ8oRK+a/OC8ykzfuUrtStgH1a8a0zIWHMRr54z3WqmjRWDsd7/IM
BUkgSoIN4zofsSnH2Za0fUkwRw3w31jvm2ZlZvItrQAOwszy
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org