Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230362e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230362e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          N+VG5SxeHF5DcdJNxbZcJmSUhNTrrGxXjzexgzYvAVk=
Subject key identifier:   C4:99:5C:E6:5A:B6:8E:5A:12:1E:EA:AF:14:3E:B1:EB:7B:4D:D0:47
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       0CD7A7D072E47E7AE6E885EE11CEEA4BB2E57997
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230362e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:12 +0000
ROA not before:           Tue 05 Mar 2024 18:08:12 +0000
ROA not after:            Tue 04 Mar 2025 18:13:12 +0000
asID:                     20015
IP address blocks:        200.71.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d7:a7:d0:72:e4:7e:7a:e6:e8:85:ee:11:ce:ea:4b:b2:e5:79:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:12 2024 GMT
            Not After : Mar  4 18:13:12 2025 GMT
        Subject: CN=C4995CE65AB68E5A121EEAAF143EB1EB7B4DD047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:3e:f0:35:1c:22:ae:2b:b3:ed:25:d5:25:
                    62:a0:db:d7:4c:ae:58:74:2d:91:df:df:ba:85:4e:
                    4f:96:4c:e1:80:4e:e8:f6:e7:4c:c6:09:0a:c9:01:
                    0f:00:f3:76:a0:30:3a:c2:47:f4:c7:db:c8:14:18:
                    b5:2a:e7:e8:b0:39:3e:07:35:68:56:af:f1:eb:e3:
                    c5:19:f9:ca:00:6e:c0:11:74:84:2c:e3:ff:76:d6:
                    76:38:84:03:d5:27:bb:ae:98:64:89:5e:8f:e9:8b:
                    89:cd:2a:f6:24:5b:ee:30:5d:46:3e:cb:fb:38:bf:
                    ac:dc:96:33:1d:9c:a9:f9:e8:d5:ca:fa:43:1d:d0:
                    8c:e4:ca:e3:b9:23:43:aa:fe:79:1a:66:18:18:d2:
                    35:a2:a1:91:2b:cd:07:8a:58:e4:ff:b9:86:51:1b:
                    32:fa:0e:01:03:d3:14:77:39:03:77:e3:79:87:aa:
                    53:54:2d:4c:79:3c:0f:13:5c:d5:1b:f3:a0:88:9a:
                    16:f5:27:6d:7e:e7:46:33:a9:e4:2d:2f:f4:3b:35:
                    59:18:4b:5b:37:86:df:9b:96:ff:c0:35:22:75:33:
                    0b:15:4b:a6:a6:c1:ce:f5:7d:3a:80:d1:b7:3a:a4:
                    32:d8:fb:37:59:64:ec:7d:f2:e8:22:76:fb:e7:e8:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:99:5C:E6:5A:B6:8E:5A:12:1E:EA:AF:14:3E:B1:EB:7B:4D:D0:47
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230362e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:93:97:5d:bb:f2:f4:81:9c:34:39:fa:e7:90:17:64:5a:14:
         54:56:67:dd:80:b4:2f:bb:2b:60:f9:26:30:26:5c:d9:d1:d3:
         dc:a6:68:01:f9:7c:43:33:61:6f:66:07:90:fb:fd:0a:91:d1:
         a6:36:9e:a1:48:85:94:0f:0a:53:b6:ac:12:d4:b7:8f:45:3b:
         c4:33:9d:c7:1e:b9:1d:ab:b2:c6:9a:84:d9:ba:60:5b:7e:35:
         c3:0c:b7:11:61:f2:72:0d:4d:38:97:90:00:2e:5c:57:ee:97:
         65:26:93:47:b1:88:6e:8c:bf:0f:eb:ea:43:b5:10:47:3b:b7:
         b6:86:5a:e6:2b:c8:ac:fc:fd:ad:42:66:4f:41:57:94:aa:e2:
         56:bb:10:57:39:51:a3:a6:6c:fc:95:9e:90:a1:28:a7:12:fe:
         c4:f2:f8:2a:1b:d8:bc:2e:4a:77:f8:dc:f0:9d:1f:d3:41:d7:
         47:e7:c4:51:ba:f4:bd:6a:2d:28:a6:92:86:22:ff:a8:5c:09:
         66:a9:7f:98:68:03:12:c2:20:17:fb:c1:89:d0:13:1e:d4:49:
         7d:fa:f9:f8:7b:74:a8:21:c2:2a:47:93:64:18:01:4e:40:2f:
         15:8c:0d:e5:ee:15:4f:73:0a:1e:63:a3:ab:3c:d9:43:77:3c:
         43:fd:13:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDNen0HLkfnrm6IXuEc7qS7LleZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNDAzMDUxODA4MTJaFw0yNTAzMDQxODEzMTJaMDMxMTAvBgNV
BAMTKEM0OTk1Q0U2NUFCNjhFNUExMjFFRUFBRjE0M0VCMUVCN0I0REQwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYT7wNRwiriuz7SXVJWKg29dM
rlh0LZHf37qFTk+WTOGATuj250zGCQrJAQ8A83agMDrCR/TH28gUGLUq5+iwOT4H
NWhWr/Hr48UZ+coAbsARdIQs4/921nY4hAPVJ7uumGSJXo/pi4nNKvYkW+4wXUY+
y/s4v6zcljMdnKn56NXK+kMd0IzkyuO5I0Oq/nkaZhgY0jWioZErzQeKWOT/uYZR
GzL6DgED0xR3OQN343mHqlNULUx5PA8TXNUb86CImhb1J21+50YzqeQtL/Q7NVkY
S1s3ht+blv/ANSJ1MwsVS6amwc71fTqA0bc6pDLY+zdZZOx98ugidvvn6NdTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUxJlc5lq2jloSHuqvFD6x63tN0EcwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMDM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhHzjAN
BgkqhkiG9w0BAQsFAAOCAQEAVpOXXbvy9IGcNDn655AXZFoUVFZn3YC0L7srYPkm
MCZc2dHT3KZoAfl8QzNhb2YHkPv9CpHRpjaeoUiFlA8KU7asEtS3j0U7xDOdxx65
HauyxpqE2bpgW341wwy3EWHycg1NOJeQAC5cV+6XZSaTR7GIboy/D+vqQ7UQRzu3
toZa5ivIrPz9rUJmT0FXlKriVrsQVzlRo6Zs/JWekKEopxL+xPL4KhvYvC5Kd/jc
8J0f00HXR+fEUbr0vWotKKaShiL/qFwJZql/mGgDEsIgF/vBidATHtRJffr5+Ht0
qCHCKkeTZBgBTkAvFYwN5e4VT3MKHmOjqzzZQ3c8Q/0TpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org