Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132302e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          Jra98lHpIN2MlHID96mmZy0D7ak7zqrgf6jm5zya3ws=
Subject key identifier:   3A:7B:4E:EC:A5:8F:06:F3:02:F9:20:1B:A2:E6:0E:A5:07:A9:FC:BC
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       1EAEA9E143414D1A4F6334D1295B3975EC678C1A
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     27826
IP address blocks:        200.16.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ae:a9:e1:43:41:4d:1a:4f:63:34:d1:29:5b:39:75:ec:67:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=3A7B4EECA58F06F302F9201BA2E60EA507A9FCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:c4:43:f7:8f:0f:fd:38:e5:cf:9a:06:4b:
                    54:39:8a:2f:4f:6e:31:d4:41:e3:9a:ea:d5:32:d6:
                    42:b0:1b:22:d2:2b:fa:c8:c4:ae:2c:55:bd:f8:16:
                    ef:9c:36:d1:15:55:a7:cc:1b:4c:f4:b5:1f:29:25:
                    fd:c0:7a:8f:29:eb:d0:3d:9e:f5:b6:af:03:cd:62:
                    d0:bb:cc:1b:d2:f7:dc:0d:94:e4:10:ed:4c:0a:dd:
                    ae:0d:fc:ab:16:e7:54:99:3d:4e:c8:16:63:d3:0a:
                    11:e7:0a:92:eb:7a:5c:11:76:9c:07:a4:8e:ff:89:
                    2b:3f:5b:7a:58:ea:af:99:a6:4c:31:db:7b:d7:e9:
                    48:8d:30:d4:87:de:40:6c:d1:df:95:9d:d3:5e:ce:
                    b0:c5:e0:46:54:57:ab:3e:90:b2:12:94:0d:9d:0a:
                    0b:08:c9:73:a4:fd:d5:44:7a:9b:3c:92:9a:33:4d:
                    27:d1:7f:4a:51:86:78:60:0f:ce:79:83:7b:74:01:
                    25:04:1e:1d:33:e7:b4:6b:87:2a:90:e5:ee:71:07:
                    34:ea:62:65:30:d7:36:2e:53:c4:b2:55:98:ac:1b:
                    8c:cb:43:16:07:dd:81:74:20:91:66:ca:0d:d3:61:
                    ef:15:31:ff:13:5e:70:43:3b:6a:38:8a:9d:d0:71:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:4E:EC:A5:8F:06:F3:02:F9:20:1B:A2:E6:0E:A5:07:A9:FC:BC
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:47:60:8f:8c:c7:df:e9:e8:06:f4:bc:4b:14:1b:ef:62:0a:
         35:0e:a5:8c:b5:84:39:e8:77:67:b5:62:af:b5:fe:67:2b:de:
         d9:b3:00:5c:e0:16:0a:03:f9:5f:c8:16:98:70:db:65:99:13:
         4b:1a:0e:e0:03:04:7b:96:f2:6d:e0:95:5e:ba:e4:1a:57:b2:
         37:a2:67:bb:b1:60:97:fb:bb:b9:f3:45:4f:cb:d7:14:6e:df:
         7b:7c:4f:60:0e:09:b8:db:e3:ec:8a:49:3a:62:27:85:f7:33:
         1b:83:96:0c:f3:54:25:20:e3:1c:99:02:68:7b:8f:b0:37:bd:
         05:f6:f7:39:41:ec:e4:fd:1e:cf:b0:f4:9c:13:a8:14:c0:9a:
         ed:fb:f0:b8:f2:f9:a9:07:bb:8a:d1:98:74:bf:eb:97:bf:ee:
         64:e4:66:02:aa:64:61:02:a9:c6:a8:a9:69:fb:ce:d3:0b:85:
         df:be:53:e7:47:a2:5a:06:54:c6:dd:e7:f2:0d:ee:80:4f:79:
         c2:a6:5a:f3:24:65:11:8e:28:a8:b1:17:36:78:c1:97:33:db:
         d9:9f:4c:a2:e6:5a:5f:7d:0a:fe:5a:99:cf:d7:fc:5b:58:20:
         b4:56:84:71:c5:f7:0c:3e:e5:2c:34:e9:2e:90:09:5f:fb:ba:
         11:15:8d:3a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHq6p4UNBTRpPYzTRKVs5dexnjBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBQTVCMUU1QjgwMDU1NkE1Qjc5Rjk5N0UxQjBDODgw
MjBDMTNCOTAeFw0yNDAzMDUxNzM0NTJaFw0yNTAzMDQxNzM5NTJaMDMxMTAvBgNV
BAMTKDNBN0I0RUVDQTU4RjA2RjMwMkY5MjAxQkEyRTYwRUE1MDdBOUZDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4M8RD948P/Tjlz5oGS1Q5ii9P
bjHUQeOa6tUy1kKwGyLSK/rIxK4sVb34Fu+cNtEVVafMG0z0tR8pJf3Aeo8p69A9
nvW2rwPNYtC7zBvS99wNlOQQ7UwK3a4N/KsW51SZPU7IFmPTChHnCpLrelwRdpwH
pI7/iSs/W3pY6q+Zpkwx23vX6UiNMNSH3kBs0d+VndNezrDF4EZUV6s+kLISlA2d
CgsIyXOk/dVEeps8kpozTSfRf0pRhnhgD855g3t0ASUEHh0z57RrhyqQ5e5xBzTq
YmUw1zYuU8SyVZisG4zLQxYH3YF0IJFmyg3TYe8VMf8TXnBDO2o4ip3QcUzBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOntO7KWPBvMC+SAbouYOpQep/LwwHwYDVR0j
BBgwFoAUtapbHluABValt5+ZfhsMiAIME7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUMzQjg3QzE0NkI1RTVGRjU3NkU2NDJBN0M3Qzk3N0ZC
RTk5RDJBRkQ0MDY5QzUwQ0NGRTZBOTc4ODY1NDlGLzAvQjVBQTVCMUU1QjgwMDU1
NkE1Qjc5Rjk5N0UxQjBDODgwMjBDMTNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUFBNUIxRTVCODAwNTU2QTVC
NzlGOTk3RTFCMEM4ODAyMEMxM0I5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDM0I4N0MxNDZCNUU1RkY1NzZFNjQyQTdDN0M5NzdGQkU5OUQyQUZE
NDA2OUM1MENDRkU2QTk3ODg2NTQ5Ri8wLzMyMzAzMDJlMzEzNjJlMzEzMjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgQeDAN
BgkqhkiG9w0BAQsFAAOCAQEAgEdgj4zH3+noBvS8SxQb72IKNQ6ljLWEOeh3Z7Vi
r7X+Zyve2bMAXOAWCgP5X8gWmHDbZZkTSxoO4AMEe5bybeCVXrrkGleyN6Jnu7Fg
l/u7ufNFT8vXFG7fe3xPYA4JuNvj7IpJOmInhfczG4OWDPNUJSDjHJkCaHuPsDe9
Bfb3OUHs5P0ez7D0nBOoFMCa7fvwuPL5qQe7itGYdL/rl7/uZORmAqpkYQKpxqip
afvO0wuF375T50eiWgZUxt3n8g3ugE95wqZa8yRlEY4oqLEXNnjBlzPb2Z9MouZa
X30K/lqZz9f8W1ggtFaEccX3DD7lLDTpLpAJX/u6ERWNOg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org