Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132342e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132342e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          2AG7lWXLjGl7mUMFbWrGuo9eBCkqnWNFHbhiakRMdOA=
Subject key identifier:   2C:99:4E:9A:8B:5D:BC:17:96:06:A9:F9:18:69:71:50:39:80:C2:9F
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       59BAADA8208C27D47586A22FC28F5002878BDE0E
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132342e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     27826
IP address blocks:        200.16.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:ad:a8:20:8c:27:d4:75:86:a2:2f:c2:8f:50:02:87:8b:de:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=2C994E9A8B5DBC179606A9F9186971503980C29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:a4:37:1c:12:e6:50:ab:22:9b:00:f0:ff:
                    d4:63:c5:a6:a9:21:6f:0f:2b:9a:38:b2:5c:63:bd:
                    0d:78:a7:68:c1:48:f5:19:f3:27:58:7b:4c:92:49:
                    47:31:d5:56:43:8e:ae:82:3c:54:4d:54:f8:95:de:
                    f6:05:80:61:47:1b:af:0b:3f:6a:eb:c0:99:77:72:
                    f0:e5:d0:0f:16:fa:cf:b9:aa:aa:4a:e7:9a:87:8a:
                    3a:ce:25:dd:e2:c6:11:b9:ca:07:23:3c:e5:7d:e4:
                    7b:c7:a0:b9:13:e8:7a:64:96:98:42:aa:8e:d2:7e:
                    3f:5f:d7:5a:2d:31:2d:3a:be:dd:c5:ce:29:8e:cf:
                    56:a4:3d:1b:f8:5a:54:61:f0:48:b6:f9:5a:30:34:
                    b6:82:e4:de:3c:f7:c3:f8:90:f2:32:d0:42:28:86:
                    da:7f:30:cb:ce:9a:de:fc:1b:e4:7d:00:ba:8a:d8:
                    1c:fb:18:c0:75:3f:cd:ca:3e:8d:4b:65:da:95:b1:
                    ba:e2:96:82:7d:58:5e:e4:2e:94:c7:a6:8e:83:87:
                    38:f9:8f:b7:8a:0b:99:c6:9b:e5:6f:50:04:43:65:
                    89:a8:ed:33:23:1c:fa:5c:c8:e7:a6:d5:dd:05:73:
                    18:c7:93:28:f2:6e:39:25:5d:ee:db:53:1d:65:f5:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:4E:9A:8B:5D:BC:17:96:06:A9:F9:18:69:71:50:39:80:C2:9F
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132342e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:73:6a:5c:28:1d:ab:07:d0:0a:c3:18:a3:c7:9c:10:ec:18:
         1e:99:cf:0a:c8:6d:de:18:90:b2:dc:cd:1a:87:cc:5d:4c:6f:
         63:1e:6c:c0:d4:2c:83:6e:b9:af:a3:5f:84:c3:ac:4a:2e:77:
         ff:38:eb:00:9f:7c:87:a3:bd:2d:10:1a:22:ac:02:65:95:39:
         8d:4e:95:58:d0:9a:de:79:53:b2:69:ed:27:ae:cc:d5:5b:55:
         0c:b3:6e:86:9f:48:1c:e0:11:94:89:eb:a5:7c:2e:74:64:9e:
         5f:2e:49:c0:b6:96:2c:6d:b4:ed:c0:20:92:4e:d3:74:57:1d:
         c9:46:7b:73:55:e0:ef:8c:6a:eb:48:82:22:6c:52:f1:df:f1:
         0f:52:b2:70:cd:f2:df:a8:c9:ae:9d:6c:06:1a:d5:c6:a0:c5:
         94:20:fa:0d:b4:55:35:b7:13:f9:13:c6:93:27:84:ce:f5:cd:
         f1:bd:90:b1:05:92:6b:4b:2e:11:73:8d:9d:54:bd:69:bd:b2:
         1e:1c:df:b8:7b:6d:02:8f:f8:d7:c3:27:16:9a:7f:2d:e7:64:
         07:d7:90:e4:70:45:53:33:ab:87:ad:cb:57:28:d6:68:d4:cb:
         82:65:01:9a:fe:43:38:e1:8d:47:6b:65:1e:24:21:fe:5b:13:
         b4:ab:5f:01
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWbqtqCCMJ9R1hqIvwo9QAoeL3g4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBQTVCMUU1QjgwMDU1NkE1Qjc5Rjk5N0UxQjBDODgw
MjBDMTNCOTAeFw0yNDAzMDUxNzM0NTFaFw0yNTAzMDQxNzM5NTFaMDMxMTAvBgNV
BAMTKDJDOTk0RTlBOEI1REJDMTc5NjA2QTlGOTE4Njk3MTUwMzk4MEMyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ46Q3HBLmUKsimwDw/9Rjxaap
IW8PK5o4slxjvQ14p2jBSPUZ8ydYe0ySSUcx1VZDjq6CPFRNVPiV3vYFgGFHG68L
P2rrwJl3cvDl0A8W+s+5qqpK55qHijrOJd3ixhG5ygcjPOV95HvHoLkT6HpklphC
qo7Sfj9f11otMS06vt3FzimOz1akPRv4WlRh8Ei2+VowNLaC5N4898P4kPIy0EIo
htp/MMvOmt78G+R9ALqK2Bz7GMB1P83KPo1LZdqVsbriloJ9WF7kLpTHpo6Dhzj5
j7eKC5nGm+VvUARDZYmo7TMjHPpcyOem1d0FcxjHkyjybjklXe7bUx1l9ePvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULJlOmotdvBeWBqn5GGlxUDmAwp8wHwYDVR0j
BBgwFoAUtapbHluABValt5+ZfhsMiAIME7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUMzQjg3QzE0NkI1RTVGRjU3NkU2NDJBN0M3Qzk3N0ZC
RTk5RDJBRkQ0MDY5QzUwQ0NGRTZBOTc4ODY1NDlGLzAvQjVBQTVCMUU1QjgwMDU1
NkE1Qjc5Rjk5N0UxQjBDODgwMjBDMTNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUFBNUIxRTVCODAwNTU2QTVC
NzlGOTk3RTFCMEM4ODAyMEMxM0I5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDM0I4N0MxNDZCNUU1RkY1NzZFNjQyQTdDN0M5NzdGQkU5OUQyQUZE
NDA2OUM1MENDRkU2QTk3ODg2NTQ5Ri8wLzMyMzAzMDJlMzEzNjJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgQfDAN
BgkqhkiG9w0BAQsFAAOCAQEA3nNqXCgdqwfQCsMYo8ecEOwYHpnPCsht3hiQstzN
GofMXUxvYx5swNQsg265r6NfhMOsSi53/zjrAJ98h6O9LRAaIqwCZZU5jU6VWNCa
3nlTsmntJ67M1VtVDLNuhp9IHOARlInrpXwudGSeXy5JwLaWLG207cAgkk7TdFcd
yUZ7c1Xg74xq60iCImxS8d/xD1KycM3y36jJrp1sBhrVxqDFlCD6DbRVNbcT+RPG
kyeEzvXN8b2QsQWSa0suEXONnVS9ab2yHhzfuHttAo/418MnFpp/LedkB9eQ5HBF
UzOrh63LVyjWaNTLgmUBmv5DOOGNR2tlHiQh/lsTtKtfAQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org