Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
File:                     3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa (raw, json)
Hash identifier:          BZM9j7iUpUBk6IVP4i7q6QgDLHdMoIeB/IYsploY/kA=
Subject key identifier:   70:F3:15:58:9A:0C:51:99:72:6C:2F:5C:D0:64:6A:C4:97:7A:1D:98
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       4162F7719477572A63188138FD0853C8FB79ECAB
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
Signing time:             Tue 05 Mar 2024 17:54:52 +0000
ROA not before:           Tue 05 Mar 2024 17:49:52 +0000
ROA not after:            Tue 04 Mar 2025 17:54:52 +0000
asID:                     28058
IP address blocks:        200.105.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:62:f7:71:94:77:57:2a:63:18:81:38:fd:08:53:c8:fb:79:ec:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Mar  5 17:49:52 2024 GMT
            Not After : Mar  4 17:54:52 2025 GMT
        Subject: CN=70F315589A0C5199726C2F5CD0646AC4977A1D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:84:db:28:34:30:ee:48:59:5d:10:26:44:
                    35:67:32:32:95:c8:20:ad:46:14:03:56:74:e2:77:
                    2a:0b:5d:03:f5:49:66:d5:bb:eb:ea:8e:39:ab:d4:
                    fa:3f:20:09:86:70:1e:f6:2c:cc:b2:8d:77:df:4d:
                    69:38:a5:3b:11:c8:1e:71:f4:fe:26:19:9f:26:25:
                    0a:ed:3e:0f:54:cd:aa:bd:38:6c:66:5c:1e:fd:cd:
                    fc:30:4b:8f:18:98:b1:a1:ae:a7:65:fd:b7:7c:d1:
                    ef:2a:cb:8c:d4:b6:ba:bc:b0:8f:79:b3:00:25:98:
                    8c:68:09:3a:1f:34:ec:69:70:12:d3:a5:5d:38:9f:
                    da:9a:c4:78:5c:44:ba:42:7b:cc:ce:6f:2b:29:9a:
                    cb:52:76:18:5d:25:c3:37:45:0e:4c:00:76:15:ac:
                    48:30:d6:ff:4b:86:3c:84:ba:b4:38:48:81:8b:06:
                    56:70:13:4e:01:fd:6b:4f:d0:c4:ae:8b:b0:3f:71:
                    86:f6:14:0e:0d:bd:3c:41:1d:22:e2:a7:47:58:8e:
                    2e:b3:5f:3a:3d:73:a6:8d:d8:9a:96:fe:bc:ed:d0:
                    de:a1:fc:59:df:cb:92:83:b5:0d:63:27:ce:f7:d8:
                    8d:13:8f:b0:f5:79:88:1f:f6:7a:b4:ff:2b:52:5c:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:15:58:9A:0C:51:99:72:6C:2F:5C:D0:64:6A:C4:97:7A:1D:98
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:15:ea:39:12:2a:4b:68:a8:9f:8b:e2:d1:09:97:28:b6:15:
         44:ac:f8:45:0a:be:2a:ff:74:f4:3a:02:e5:0b:73:89:8d:0f:
         96:4a:9a:dc:eb:36:a4:41:8a:e5:9c:2e:0a:94:7e:17:88:15:
         33:27:f2:b9:ca:0e:cc:65:4e:6e:36:5d:62:4b:30:a7:08:9f:
         5f:5e:a2:29:0c:56:d2:d5:4d:7c:e1:0f:33:f5:38:6d:39:6d:
         f8:7b:b4:8c:04:9a:5c:c8:51:22:06:c8:65:70:98:5a:50:67:
         5b:93:be:9c:be:5e:ac:fe:b6:7e:03:5d:1c:4c:74:79:a4:70:
         88:f9:67:b4:75:71:c9:27:3f:0c:39:12:04:f4:5f:22:ba:cf:
         16:a5:c8:69:c6:05:f1:49:03:e5:2b:f2:3f:fb:13:54:0b:30:
         1e:22:f8:d3:c3:ce:82:3f:10:e7:58:11:7a:43:b5:d0:45:02:
         8b:bf:b1:4f:7b:97:99:a5:d1:92:c9:e9:0e:f5:c0:c2:31:93:
         5e:e9:1f:44:60:12:b8:50:7a:da:09:89:74:91:07:92:94:2e:
         50:5c:48:20:cb:90:ab:f0:cc:95:f7:70:08:b6:07:98:5e:69:
         68:e1:78:05:95:73:ca:75:34:be:0f:3f:64:7c:87:33:19:44:
         1e:06:c5:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQWL3cZR3VypjGIE4/QhTyPt57KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgwNjhERjdCRThCN0I1MDI3QjJGQ0ExOTI3QURCNEM5
RTY1RDNDRjAeFw0yNDAzMDUxNzQ5NTJaFw0yNTAzMDQxNzU0NTJaMDMxMTAvBgNV
BAMTKDcwRjMxNTU4OUEwQzUxOTk3MjZDMkY1Q0QwNjQ2QUM0OTc3QTFEOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGYTbKDQw7khZXRAmRDVnMjKV
yCCtRhQDVnTidyoLXQP1SWbVu+vqjjmr1Po/IAmGcB72LMyyjXffTWk4pTsRyB5x
9P4mGZ8mJQrtPg9Uzaq9OGxmXB79zfwwS48YmLGhrqdl/bd80e8qy4zUtrq8sI95
swAlmIxoCTofNOxpcBLTpV04n9qaxHhcRLpCe8zObyspmstSdhhdJcM3RQ5MAHYV
rEgw1v9LhjyEurQ4SIGLBlZwE04B/WtP0MSui7A/cYb2FA4NvTxBHSLip0dYji6z
Xzo9c6aN2JqW/rzt0N6h/Fnfy5KDtQ1jJ8732I0Tj7D1eYgf9nq0/ytSXFBBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcPMVWJoMUZlybC9c0GRqxJd6HZgwHwYDVR0j
BBgwFoAUCAaN976Le1AnsvyhknrbTJ5l088wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOERFQkEzQUVGMzZBNjVDQTY2QkNFMDEyNTI0NzY2OTY0
MTJFNzZFMUQ5RjA0NEZGNjI2QTk5NDk2MUNBRjJFLzAvMDgwNjhERjdCRThCN0I1
MDI3QjJGQ0ExOTI3QURCNEM5RTY1RDNDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODA2OERGN0JFOEI3QjUwMjdC
MkZDQTE5MjdBREI0QzlFNjVEM0NGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThERUJBM0FFRjM2QTY1Q0E2NkJDRTAxMjUyNDc2Njk2NDEyRTc2RTFE
OUYwNDRGRjYyNkE5OTQ5NjFDQUYyRS8wLzMyMzAzMDJlMzEzMDM1MmUzMTMxMzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzAzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyGlw
MA0GCSqGSIb3DQEBCwUAA4IBAQCXFeo5EipLaKifi+LRCZcothVErPhFCr4q/3T0
OgLlC3OJjQ+WSprc6zakQYrlnC4KlH4XiBUzJ/K5yg7MZU5uNl1iSzCnCJ9fXqIp
DFbS1U184Q8z9ThtOW34e7SMBJpcyFEiBshlcJhaUGdbk76cvl6s/rZ+A10cTHR5
pHCI+We0dXHJJz8MORIE9F8ius8WpchpxgXxSQPlK/I/+xNUCzAeIvjTw86CPxDn
WBF6Q7XQRQKLv7FPe5eZpdGSyekO9cDCMZNe6R9EYBK4UHraCYl0kQeSlC5QXEgg
y5Cr8MyV93AItgeYXmlo4XgFlXPKdTS+Dz9kfIczGUQeBsWY
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org