Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa
File:                     3230302e302e36332e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          Kct7RJW1yTJogHk+lY+Vts3Jj7r59BgD71Shx7Wj2Qs=
Subject key identifier:   D6:6F:20:AD:D7:95:BB:49:72:63:68:13:9C:33:4D:9E:DE:4E:36:F3
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       1DECEA192502014310E28C51886408305868D112
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 05 Mar 2024 17:44:14 +0000
ROA not before:           Tue 05 Mar 2024 17:39:14 +0000
ROA not after:            Tue 04 Mar 2025 17:44:14 +0000
asID:                     198949
IP address blocks:        200.0.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:ea:19:25:02:01:43:10:e2:8c:51:88:64:08:30:58:68:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:14 2024 GMT
            Not After : Mar  4 17:44:14 2025 GMT
        Subject: CN=D66F20ADD795BB49726368139C334D9EDE4E36F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:d9:8a:cd:da:4e:f8:a0:3b:b8:15:1c:d9:
                    b0:58:a4:7e:3e:51:6a:6a:4f:41:d5:88:cc:fc:ae:
                    a5:28:29:93:51:a0:de:19:58:35:7e:77:7e:f5:c5:
                    d9:61:70:60:b8:91:bb:d7:03:47:3c:2d:c1:70:05:
                    20:97:85:f4:9a:9e:45:26:5d:86:08:9c:96:dc:f9:
                    50:f9:f1:73:56:33:d0:10:50:59:62:34:49:79:8a:
                    ac:54:e2:15:2b:7f:54:83:88:35:91:d8:23:23:ef:
                    8c:8d:70:df:50:ed:f5:cf:24:3c:6b:dc:e3:db:a9:
                    59:07:c7:56:61:f0:3d:dd:09:21:14:6e:d6:22:64:
                    80:30:44:16:78:07:5c:ae:89:dd:5e:76:21:ac:a7:
                    cd:ac:c9:25:70:c3:aa:30:7b:fe:81:8f:e5:94:7e:
                    01:65:db:83:99:53:b1:ae:a0:7b:e2:f1:4c:49:31:
                    3c:8a:ac:28:4e:cd:a1:f0:83:34:20:03:ea:af:cc:
                    90:66:ce:b0:81:a7:fa:05:9d:f5:c6:61:59:d7:20:
                    f3:26:b4:19:28:a6:a0:ca:7b:d3:d5:d4:4f:5b:cd:
                    66:a8:5f:4e:31:05:52:0b:9c:d3:08:34:8b:32:c4:
                    69:bc:5a:47:22:b1:af:f0:95:ef:fd:31:23:b9:29:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:20:AD:D7:95:BB:49:72:63:68:13:9C:33:4D:9E:DE:4E:36:F3
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:67:b1:89:2e:fc:3f:3d:76:49:da:6a:9b:ca:d7:97:76:d7:
         53:f4:22:1c:73:d9:5e:ab:cd:72:ad:6e:f5:40:77:5f:bd:2e:
         6a:15:94:48:ca:4d:7b:91:56:21:4f:98:88:a4:9f:6b:92:ef:
         e8:e3:42:90:65:f0:38:c7:40:3e:be:b7:9f:a9:8d:0d:07:b2:
         ce:3b:0a:ab:f6:72:d4:9f:a4:a7:74:65:2a:d2:c2:7b:1c:50:
         e0:86:32:11:42:38:5a:f0:f9:c9:6a:41:34:5d:34:66:c2:53:
         ff:21:c5:8f:f5:04:d2:9f:87:fa:62:53:04:61:0f:35:2c:93:
         80:bb:cc:82:01:88:9f:f6:2e:ab:d9:71:da:12:b5:90:d3:a2:
         5f:ef:44:60:39:b5:33:8d:b7:16:0d:57:2d:eb:d7:25:c8:51:
         aa:bf:04:b0:fe:5b:44:84:04:40:85:84:89:be:28:df:a9:ce:
         b2:20:03:28:ca:40:69:8f:c4:c0:f7:65:42:b1:fb:da:58:9a:
         17:0f:d3:f1:87:f2:ab:6b:a6:2b:56:c4:ac:93:6c:e5:40:31:
         7a:bc:f3:2d:63:aa:45:3b:f1:c6:7d:00:bb:9e:e9:2e:d9:d2:
         69:84:7e:09:cc:9a:da:de:a0:48:0e:50:f9:31:67:2f:19:de:
         31:52:35:af
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHezqGSUCAUMQ4oxRiGQIMFho0RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNDAzMDUxNzM5MTRaFw0yNTAzMDQxNzQ0MTRaMDMxMTAvBgNV
BAMTKEQ2NkYyMEFERDc5NUJCNDk3MjYzNjgxMzlDMzM0RDlFREU0RTM2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fNmKzdpO+KA7uBUc2bBYpH4+
UWpqT0HViMz8rqUoKZNRoN4ZWDV+d371xdlhcGC4kbvXA0c8LcFwBSCXhfSankUm
XYYInJbc+VD58XNWM9AQUFliNEl5iqxU4hUrf1SDiDWR2CMj74yNcN9Q7fXPJDxr
3OPbqVkHx1Zh8D3dCSEUbtYiZIAwRBZ4B1yuid1ediGsp82sySVww6owe/6Bj+WU
fgFl24OZU7GuoHvi8UxJMTyKrChOzaHwgzQgA+qvzJBmzrCBp/oFnfXGYVnXIPMm
tBkopqDKe9PV1E9bzWaoX04xBVILnNMINIsyxGm8Wkcisa/wle/9MSO5KaLZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1m8grdeVu0lyY2gTnDNNnt5ONvMwHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMyMzAzMDJlMzAyZTM2MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIAD8wDQYJ
KoZIhvcNAQELBQADggEBAGhnsYku/D89dknaapvK15d211P0Ihxz2V6rzXKtbvVA
d1+9LmoVlEjKTXuRViFPmIikn2uS7+jjQpBl8DjHQD6+t5+pjQ0Hss47Cqv2ctSf
pKd0ZSrSwnscUOCGMhFCOFrw+clqQTRdNGbCU/8hxY/1BNKfh/piUwRhDzUsk4C7
zIIBiJ/2LqvZcdoStZDTol/vRGA5tTONtxYNVy3r1yXIUaq/BLD+W0SEBECFhIm+
KN+pzrIgAyjKQGmPxMD3ZUKx+9pYmhcP0/GH8qtrpitWxKyTbOVAMXq88y1jqkU7
8cZ9ALue6S7Z0mmEfgnMmtreoEgOUPkxZy8Z3jFSNa8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org