Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136372e302f32342d3234203d3e203238343538.roa
File:                     3230302e3130362e3136372e302f32342d3234203d3e203238343538.roa (raw, json)
Hash identifier:          j38jykGcw/QGzApW1IIOfHsiTOeKS+0139xnW9Mkkl8=
Subject key identifier:   5C:A2:28:C2:4A:75:6C:28:1F:5C:50:C6:C5:14:F1:31:23:96:74:57
Certificate issuer:       /CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
Certificate serial:       29363F5F47BDEC8C1D46B7EEAB363BF4E682726F
Authority key identifier: BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136372e302f32342d3234203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 17:51:04 +0000
ROA not before:           Tue 05 Mar 2024 17:46:04 +0000
ROA not after:            Tue 04 Mar 2025 17:51:04 +0000
asID:                     28458
IP address blocks:        200.106.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:3f:5f:47:bd:ec:8c:1d:46:b7:ee:ab:36:3b:f4:e6:82:72:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
        Validity
            Not Before: Mar  5 17:46:04 2024 GMT
            Not After : Mar  4 17:51:04 2025 GMT
        Subject: CN=5CA228C24A756C281F5C50C6C514F13123967457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:41:12:d6:a3:d2:54:69:4c:9d:8c:2c:f6:
                    96:bf:69:20:6b:9c:10:13:5d:d5:af:e5:f6:57:33:
                    04:7e:95:2b:e3:33:d2:05:9d:df:2d:43:14:2a:ed:
                    b5:a1:2e:f9:ca:5b:1e:94:72:9a:0f:89:0d:b8:ad:
                    67:51:f6:28:a7:1f:d5:97:29:48:83:35:db:96:21:
                    80:a8:90:20:c1:aa:6a:48:74:51:cd:06:35:23:e9:
                    dd:24:16:0c:bd:e0:5d:c7:e9:a6:34:ef:8d:6e:c6:
                    c8:f9:85:5a:80:ef:f6:93:91:98:0b:ed:c5:79:2e:
                    60:ac:e2:f7:b1:80:8b:c4:9f:78:ec:1a:42:0d:89:
                    be:4d:f4:ee:f3:5a:54:5e:af:a6:64:3e:2d:21:6a:
                    2b:d7:b8:80:42:f7:aa:64:0a:94:e3:77:63:ee:81:
                    04:93:da:92:98:86:61:e3:b6:fc:ac:88:1e:09:7a:
                    04:25:6a:92:23:f9:6c:0c:ce:da:8d:8b:96:3b:7b:
                    72:be:ed:9e:00:2b:72:c7:23:92:de:46:fb:ad:1d:
                    d9:c7:f1:86:39:0e:94:70:38:ba:2c:0a:ff:44:a8:
                    2d:98:9c:3e:e4:81:8e:b6:bf:20:53:34:5c:49:10:
                    2b:1a:4f:72:3b:9f:8d:0e:84:fa:63:ab:b5:4b:f3:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:28:C2:4A:75:6C:28:1F:5C:50:C6:C5:14:F1:31:23:96:74:57
            X509v3 Authority Key Identifier:
                keyid:BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136372e302f32342d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:15:6a:ab:1e:eb:c8:3a:1a:d0:1f:3d:bd:6b:cc:50:81:2b:
         30:69:de:83:52:5e:3a:e7:53:92:c9:6f:c4:2d:a9:5f:d8:d0:
         2e:ce:5b:2c:ed:57:ba:e1:95:a8:ac:e7:32:01:05:6c:3e:d4:
         1c:bd:92:5b:92:d3:92:91:c1:3a:dc:0d:fc:eb:d9:c9:ca:1a:
         04:81:de:81:20:e9:5c:c8:61:df:fd:4e:9b:94:27:36:7e:78:
         fa:6a:39:ad:40:d9:ad:1f:61:d2:77:fa:37:ee:14:ae:8b:f9:
         8b:1a:03:13:bb:6d:6f:b5:91:95:08:db:9a:5e:55:83:ec:80:
         38:aa:e4:2d:b7:e4:da:cc:bf:6f:c1:3b:68:6b:7c:0d:f0:c3:
         bf:95:d2:7f:91:da:6a:6e:17:4f:46:9c:d4:d7:34:fa:9e:c4:
         4a:56:19:7d:e0:c8:ba:d6:91:0c:cd:d2:76:35:aa:7c:c0:c3:
         41:4e:b4:eb:a9:0e:e2:39:35:14:2a:3d:61:12:63:a5:cb:c9:
         e0:ee:05:b8:c0:85:79:21:be:e0:03:35:23:a8:19:4e:ec:3e:
         05:0d:a0:c2:9d:92:15:5e:ba:8f:c8:dc:6e:79:d5:96:f3:36:
         0a:71:10:f3:22:d2:3e:aa:9d:23:65:45:f6:44:7e:ae:ad:09:
         46:72:96:f9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKTY/X0e97IwdRrfuqzY79OaCcm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4MDc5OUFBRTRCQzFFOTk1RTkzNjFFMEQ1OUEzRTIz
RTY5MzZGODAeFw0yNDAzMDUxNzQ2MDRaFw0yNTAzMDQxNzUxMDRaMDMxMTAvBgNV
BAMTKDVDQTIyOEMyNEE3NTZDMjgxRjVDNTBDNkM1MTRGMTMxMjM5Njc0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYC0ES1qPSVGlMnYws9pa/aSBr
nBATXdWv5fZXMwR+lSvjM9IFnd8tQxQq7bWhLvnKWx6UcpoPiQ24rWdR9iinH9WX
KUiDNduWIYCokCDBqmpIdFHNBjUj6d0kFgy94F3H6aY0741uxsj5hVqA7/aTkZgL
7cV5LmCs4vexgIvEn3jsGkINib5N9O7zWlRer6ZkPi0haivXuIBC96pkCpTjd2Pu
gQST2pKYhmHjtvysiB4JegQlapIj+WwMztqNi5Y7e3K+7Z4AK3LHI5LeRvutHdnH
8YY5DpRwOLosCv9EqC2YnD7kgY62vyBTNFxJECsaT3I7n40OhPpjq7VL8xGVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXKIowkp1bCgfXFDGxRTxMSOWdFcwHwYDVR0j
BBgwFoAUvIB5mq5LwemV6TYeDVmj4j5pNvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUNENDVGQzQzNzMzMEM0QUEzMERFNjU0OUU1N0M0NzdC
MTY3MEUzRjZENDg3NDUwRjU2ODcxMDg0RDU5QjE2LzAvQkM4MDc5OUFBRTRCQzFF
OTk1RTkzNjFFMEQ1OUEzRTIzRTY5MzZGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzgwNzk5QUFFNEJDMUU5OTVF
OTM2MUUwRDU5QTNFMjNFNjkzNkY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDRDQ1RkM0MzczMzBDNEFBMzBERTY1NDlFNTdDNDc3QjE2NzBFM0Y2
RDQ4NzQ1MEY1Njg3MTA4NEQ1OUIxNi8wLzMyMzAzMDJlMzEzMDM2MmUzMTM2Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGqn
MA0GCSqGSIb3DQEBCwUAA4IBAQApFWqrHuvIOhrQHz29a8xQgSswad6DUl4651OS
yW/ELalf2NAuzlss7Ve64ZWorOcyAQVsPtQcvZJbktOSkcE63A3869nJyhoEgd6B
IOlcyGHf/U6blCc2fnj6ajmtQNmtH2HSd/o37hSui/mLGgMTu21vtZGVCNuaXlWD
7IA4quQtt+TazL9vwTtoa3wN8MO/ldJ/kdpqbhdPRpzU1zT6nsRKVhl94Mi61pEM
zdJ2Nap8wMNBTrTrqQ7iOTUUKj1hEmOly8ng7gW4wIV5Ib7gAzUjqBlO7D4FDaDC
nZIVXrqPyNxuedWW8zYKcRDzItI+qp0jZUX2RH6urQlGcpb5
-----END CERTIFICATE-----
Generated at Fri May 3 10:33:24 2024 by rpki-client on console-ams.rpki-client.org