Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139352e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          vzyf0ihWGTOajWBHZONwYNaj1ZQMcYKs1PwvEbDAgkg=
Subject key identifier:   38:48:7E:95:5C:EF:3D:76:15:89:4C:7B:92:AD:E2:A0:CE:D5:86:6B
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       045536BE1C5BC7C720EB10CD7EAA5BF326948249
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:14 +0000
ROA not before:           Tue 05 Mar 2024 18:08:14 +0000
ROA not after:            Tue 04 Mar 2025 18:13:14 +0000
asID:                     20015
IP address blocks:        200.71.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:55:36:be:1c:5b:c7:c7:20:eb:10:cd:7e:aa:5b:f3:26:94:82:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:14 2024 GMT
            Not After : Mar  4 18:13:14 2025 GMT
        Subject: CN=38487E955CEF3D7615894C7B92ADE2A0CED5866B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:1e:7f:de:a3:b5:46:a2:f7:95:fc:1e:6a:
                    2f:55:45:c4:88:71:1c:23:78:59:9a:e8:14:a6:24:
                    7d:98:19:27:98:f2:ac:7f:97:01:d6:11:9e:5f:ea:
                    db:04:8b:c8:d4:0f:cb:6b:fd:6f:d9:8a:eb:d1:84:
                    42:5e:de:2f:43:71:ad:7c:62:f2:80:cc:6e:49:35:
                    c9:29:91:1e:a5:24:9a:3a:57:6e:5c:49:6f:a7:0c:
                    31:43:be:42:33:fe:69:16:c3:a2:8b:40:f9:20:27:
                    82:8c:f3:66:3e:d4:9c:66:ab:bc:29:ef:02:2f:fc:
                    c8:25:2d:bf:ca:0f:de:b7:94:49:ed:18:bb:7c:02:
                    1a:11:c4:57:bc:ea:9f:c9:79:5d:cd:cc:3c:cf:6c:
                    38:09:c5:48:3e:8c:d9:1f:e4:b7:0e:87:36:17:76:
                    c3:0f:fd:30:7f:c3:89:47:89:a8:25:9c:db:aa:64:
                    d4:a9:09:61:91:e6:4c:ff:f5:b5:ae:66:71:a7:6f:
                    df:2a:dd:98:26:a7:02:83:cb:21:a2:4b:7f:8a:7e:
                    87:b7:ab:3b:90:2f:d7:1d:2e:ab:d7:60:f8:2e:c7:
                    5a:fc:da:81:9b:bb:d7:13:3e:b0:83:6d:dd:91:a5:
                    ad:c3:4b:18:44:b5:6b:cf:64:5c:0d:20:16:b0:d1:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:48:7E:95:5C:EF:3D:76:15:89:4C:7B:92:AD:E2:A0:CE:D5:86:6B
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:51:d4:18:35:7d:20:f3:55:76:9d:fa:42:f7:cd:d7:b8:
         e3:6a:01:81:8e:e0:d7:3e:07:f0:f8:cc:65:1d:f2:c8:50:b1:
         7e:65:0e:43:45:25:a2:5a:09:3f:96:86:b8:76:b1:f3:5a:21:
         68:ee:de:31:65:0e:5e:c0:47:3d:2d:6c:54:78:80:b5:af:a2:
         c6:30:94:6b:48:82:1f:69:77:8a:3c:5c:99:fb:af:43:ff:85:
         60:92:b3:98:8b:49:27:f0:52:65:5e:51:0a:47:23:5a:d1:5c:
         46:ff:9b:f1:64:00:48:1c:35:28:52:c8:35:13:bb:6d:c4:50:
         06:e7:fb:b4:11:db:71:09:99:a5:e6:fd:71:73:16:1a:1c:48:
         20:15:94:04:9b:e4:c9:3e:e3:e7:98:36:cf:4c:8f:7d:f5:95:
         05:ee:15:90:50:3a:83:f7:34:25:d9:b0:74:32:fc:9b:8a:c7:
         5d:8d:e0:b7:81:68:6f:25:66:33:32:27:4a:6a:c3:c7:ac:9e:
         ac:cb:70:97:1a:2a:5b:bd:a1:8a:70:d3:35:b2:aa:d9:ed:d4:
         81:b7:a7:ef:b6:15:3b:9f:4c:76:c2:81:8d:be:83:ea:fe:b0:
         67:a3:1b:37:0a:da:dd:8f:b2:63:18:fe:02:97:08:65:7e:ca:
         eb:88:93:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBFU2vhxbx8cg6xDNfqpb8yaUgkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNDAzMDUxODA4MTRaFw0yNTAzMDQxODEzMTRaMDMxMTAvBgNV
BAMTKDM4NDg3RTk1NUNFRjNENzYxNTg5NEM3QjkyQURFMkEwQ0VENTg2NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wR5/3qO1RqL3lfweai9VRcSI
cRwjeFma6BSmJH2YGSeY8qx/lwHWEZ5f6tsEi8jUD8tr/W/ZiuvRhEJe3i9Dca18
YvKAzG5JNckpkR6lJJo6V25cSW+nDDFDvkIz/mkWw6KLQPkgJ4KM82Y+1Jxmq7wp
7wIv/MglLb/KD963lEntGLt8AhoRxFe86p/JeV3NzDzPbDgJxUg+jNkf5LcOhzYX
dsMP/TB/w4lHiaglnNuqZNSpCWGR5kz/9bWuZnGnb98q3ZgmpwKDyyGiS3+Kfoe3
qzuQL9cdLqvXYPgux1r82oGbu9cTPrCDbd2Rpa3DSxhEtWvPZFwNIBaw0eHXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOEh+lVzvPXYViUx7kq3ioM7VhmswHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhHwzAN
BgkqhkiG9w0BAQsFAAOCAQEACzlR1Bg1fSDzVXad+kL3zde442oBgY7g1z4H8PjM
ZR3yyFCxfmUOQ0UloloJP5aGuHax81ohaO7eMWUOXsBHPS1sVHiAta+ixjCUa0iC
H2l3ijxcmfuvQ/+FYJKzmItJJ/BSZV5RCkcjWtFcRv+b8WQASBw1KFLINRO7bcRQ
Buf7tBHbcQmZpeb9cXMWGhxIIBWUBJvkyT7j55g2z0yPffWVBe4VkFA6g/c0Jdmw
dDL8m4rHXY3gt4FobyVmMzInSmrDx6yerMtwlxoqW72hinDTNbKq2e3Ugben77YV
O59MdsKBjb6D6v6wZ6MbNwra3Y+yYxj+ApcIZX7K64iTbw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org