Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136332e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          NMHYHJH9NMEmk3uuRx9qR/zg0nOOu3DlsETUoCklCVM=
Subject key identifier:   A4:B6:5B:FC:DC:22:9E:7B:5F:DB:BB:11:EB:31:81:41:FA:C7:74:C3
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       4147FD88E62ABADE2CDECE224B4D7188C6344690
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:21 +0000
ROA not before:           Tue 05 Mar 2024 18:02:21 +0000
ROA not after:            Tue 04 Mar 2025 18:07:21 +0000
asID:                     22541
IP address blocks:        200.75.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:47:fd:88:e6:2a:ba:de:2c:de:ce:22:4b:4d:71:88:c6:34:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:21 2024 GMT
            Not After : Mar  4 18:07:21 2025 GMT
        Subject: CN=A4B65BFCDC229E7B5FDBBB11EB318141FAC774C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:8d:df:d1:8a:f8:07:05:91:ee:a0:04:7a:
                    e9:36:a6:47:8c:b0:d0:5c:ac:93:66:05:8e:1f:be:
                    be:14:2c:b7:98:7b:6b:e3:49:83:1b:85:c8:9b:c9:
                    50:a0:7a:4a:b5:c8:75:d5:1b:89:3a:6d:61:86:c2:
                    94:e1:5d:07:2d:d0:e1:93:a1:cd:e3:57:91:c2:af:
                    f3:43:03:4c:b8:41:a9:1b:cb:27:ab:de:40:6b:47:
                    b9:c8:23:bc:29:41:ab:eb:90:df:39:e9:59:35:37:
                    69:b0:6c:c7:1a:79:1c:93:04:06:21:78:ae:0b:d9:
                    21:b5:2a:68:0c:eb:d5:10:fa:51:5e:95:d2:d5:0e:
                    f9:b3:19:17:7a:dd:6e:31:8e:d0:a6:99:a1:6e:22:
                    98:69:fa:db:49:52:d1:1f:b0:87:0f:45:6c:80:31:
                    0a:b1:eb:e0:ad:fe:db:cc:47:a7:4e:a1:64:dd:4b:
                    d9:1d:e5:c9:3b:c4:8c:9e:f6:be:03:1d:7c:ba:7c:
                    8b:c1:b7:37:30:65:db:56:7a:6e:61:20:2d:ad:ff:
                    a4:d5:59:b2:45:6a:d5:a9:cc:91:d8:58:a9:f6:82:
                    a0:70:23:3a:7d:d2:19:df:b4:8b:85:79:53:ad:cf:
                    ef:47:63:89:80:c4:93:c5:b2:c3:62:89:b4:d0:f6:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:5B:FC:DC:22:9E:7B:5F:DB:BB:11:EB:31:81:41:FA:C7:74:C3
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:59:14:f0:e1:8e:c2:c6:d5:5c:fb:8a:58:05:96:b7:77:
         c7:03:42:6e:36:13:2c:11:7e:dd:d4:ac:67:a0:5c:53:d8:fa:
         55:0d:68:14:c3:39:0f:73:ef:65:73:c3:e6:66:58:9b:6e:45:
         88:4d:8c:56:96:57:ae:39:4e:a9:20:8b:53:29:6f:95:d5:a9:
         cc:c4:ec:04:57:f6:b6:12:18:c4:3d:7f:aa:05:e7:24:c6:86:
         7c:f7:8c:c0:70:e4:8f:2a:39:f9:77:30:14:63:de:0f:a2:3d:
         12:f2:8f:25:fd:f7:2f:29:cf:39:e2:52:a8:fa:77:70:7a:b1:
         41:d6:c4:bf:a1:c0:e6:77:65:f7:3a:29:bb:89:37:0c:15:62:
         02:a8:25:eb:94:f5:ad:b1:07:39:ef:98:02:54:95:8c:0c:61:
         fa:7e:85:67:ef:ab:63:40:79:d1:32:26:ec:d8:fc:2a:72:de:
         82:ae:9c:7f:41:25:e2:3d:0f:84:80:f9:d3:8d:34:78:4a:6e:
         6d:bd:6c:74:a0:af:e6:0a:e4:dd:5e:34:09:93:20:8a:0c:a6:
         69:03:50:2c:77:8f:e9:52:b1:67:59:9e:94:b1:05:9a:3b:8f:
         0a:4a:9a:7c:b0:9f:68:e4:73:fb:22:5b:d6:2d:ab:8f:67:39:
         91:a0:ac:9e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQUf9iOYqut4s3s4iS01xiMY0RpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB
ODE5QUYzRDAeFw0yNDAzMDUxODAyMjFaFw0yNTAzMDQxODA3MjFaMDMxMTAvBgNV
BAMTKEE0QjY1QkZDREMyMjlFN0I1RkRCQkIxMUVCMzE4MTQxRkFDNzc0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDY3f0Yr4BwWR7qAEeuk2pkeM
sNBcrJNmBY4fvr4ULLeYe2vjSYMbhcibyVCgekq1yHXVG4k6bWGGwpThXQct0OGT
oc3jV5HCr/NDA0y4Qakbyyer3kBrR7nII7wpQavrkN856Vk1N2mwbMcaeRyTBAYh
eK4L2SG1KmgM69UQ+lFeldLVDvmzGRd63W4xjtCmmaFuIphp+ttJUtEfsIcPRWyA
MQqx6+Ct/tvMR6dOoWTdS9kd5ck7xIye9r4DHXy6fIvBtzcwZdtWem5hIC2t/6TV
WbJFatWpzJHYWKn2gqBwIzp90hnftIuFeVOtz+9HY4mAxJPFssNiibTQ9sXVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpLZb/Nwinntf27sR6zGBQfrHdMMwHwYDVR0j
BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF
MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB
MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD
Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0
QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMyMzAzMDJlMzczNTJlMzEzNjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM1MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhLozAN
BgkqhkiG9w0BAQsFAAOCAQEAG1hZFPDhjsLG1Vz7ilgFlrd3xwNCbjYTLBF+3dSs
Z6BcU9j6VQ1oFMM5D3PvZXPD5mZYm25FiE2MVpZXrjlOqSCLUylvldWpzMTsBFf2
thIYxD1/qgXnJMaGfPeMwHDkjyo5+XcwFGPeD6I9EvKPJf33LynPOeJSqPp3cHqx
QdbEv6HA5ndl9zopu4k3DBViAqgl65T1rbEHOe+YAlSVjAxh+n6FZ++rY0B50TIm
7Nj8KnLegq6cf0El4j0PhID50400eEpubb1sdKCv5grk3V40CZMgigymaQNQLHeP
6VKxZ1melLEFmjuPCkqafLCfaORz+yJb1i2rj2c5kaCsng==
-----END CERTIFICATE-----
Generated at Thu May 2 17:40:18 2024 by rpki-client on console-fra.rpki-client.org