Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa
File:                     3230302e372e38382e302f32312d3234203d3e203237383030.roa (raw, json)
Hash identifier:          Ta0oIaK1SmaMOE0t85sq8Wsv0Tbtrsd8/NN795jRzUA=
Subject key identifier:   F2:59:47:5C:70:E2:3A:04:94:C3:66:74:6F:06:69:0D:4B:9E:D9:71
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       7800ECE533B7EA408CB63B2980027DDB92F30F3C
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa
Signing time:             Tue 05 Mar 2024 18:00:22 +0000
ROA not before:           Tue 05 Mar 2024 17:55:22 +0000
ROA not after:            Tue 04 Mar 2025 18:00:22 +0000
asID:                     27800
IP address blocks:        200.7.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:00:ec:e5:33:b7:ea:40:8c:b6:3b:29:80:02:7d:db:92:f3:0f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Mar  5 17:55:22 2024 GMT
            Not After : Mar  4 18:00:22 2025 GMT
        Subject: CN=F259475C70E23A0494C366746F06690D4B9ED971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:87:a8:29:50:89:b6:19:9a:2c:3e:95:74:
                    80:10:ba:ed:c1:44:0e:9e:37:00:15:36:dd:08:bd:
                    c1:e0:a4:86:03:10:f9:c2:44:92:4e:15:ce:76:e8:
                    00:6a:44:94:75:4e:51:d1:16:c6:d8:fd:e0:84:81:
                    e7:8e:ef:46:db:30:95:20:b4:ce:0c:c2:5f:ba:2d:
                    51:16:c7:87:68:89:e0:a6:29:27:4f:02:db:6b:23:
                    52:5d:2b:f2:37:21:c5:0b:9e:69:8e:ef:6c:ac:29:
                    7a:83:1f:c7:f6:a8:14:ca:85:96:46:b2:c5:c4:98:
                    a8:b8:03:66:3e:4e:78:6c:bb:c5:77:44:46:7d:4e:
                    c1:58:72:53:10:06:6a:0e:a1:00:e7:53:a8:d6:c1:
                    a9:20:89:fc:f7:38:57:bc:d1:dd:04:98:a3:57:1d:
                    90:5e:ca:17:b8:4b:39:7d:61:47:55:42:3d:8d:73:
                    91:79:cf:af:35:13:bc:e1:3d:83:68:bd:cb:c6:a8:
                    ca:26:dc:bb:3a:0d:ef:19:63:f6:f1:d2:75:58:88:
                    74:f2:34:e7:45:01:fb:34:6c:19:7d:6c:70:41:ec:
                    42:63:a3:77:ed:a9:17:75:29:3b:41:af:67:9a:e0:
                    08:cc:a4:bf:74:d0:2a:ce:52:26:a7:d9:8d:c4:bc:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:47:5C:70:E2:3A:04:94:C3:66:74:6F:06:69:0D:4B:9E:D9:71
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:0e:d3:a7:0c:cc:b6:11:e9:28:c3:26:8a:1b:f6:56:a8:
         9d:73:7c:4e:f4:32:40:48:11:0c:57:67:27:82:2b:f9:4b:5a:
         97:c0:b0:39:f8:b1:f1:13:04:0b:43:7e:91:a5:8c:de:29:43:
         c0:06:c7:05:f9:9d:ed:3e:2b:d0:35:56:98:82:9e:58:b7:ba:
         42:2f:9a:58:f9:da:e8:2f:26:a7:d8:41:23:d8:b5:bc:32:ad:
         81:de:0b:65:a4:80:50:e3:8e:22:b7:48:6b:d3:0b:b0:76:c3:
         f8:18:fa:1c:8d:b7:69:be:8c:58:6c:c8:1b:c8:cf:a2:e2:00:
         ca:b1:d4:af:1c:fb:a7:74:b8:15:c9:6d:88:fa:f6:06:61:28:
         95:b9:8d:44:c7:9b:09:e8:31:cd:22:23:8e:4b:5f:fd:3c:4a:
         8a:fd:86:1e:ab:ef:01:de:e8:db:b7:f9:b6:00:8a:65:1b:27:
         8d:79:af:4b:a5:26:e9:b5:f8:58:60:52:3c:ab:e1:c1:7e:65:
         c2:5b:3e:67:c8:a3:42:f5:cc:85:f1:f5:84:44:8b:df:2f:a0:
         44:f9:3b:14:2c:b5:07:47:aa:0f:db:81:d5:b2:cc:1e:a8:81:
         42:23:c0:db:9a:08:b8:df:be:d2:6f:82:73:4e:b9:29:14:4a:
         5c:64:ad:79
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUeADs5TO36kCMtjspgAJ925LzDzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNFNDI2RENFMTE2QzJGQzJEMDdCREQyMDlCQzA3MEY2
RDIzM0QxQzAeFw0yNDAzMDUxNzU1MjJaFw0yNTAzMDQxODAwMjJaMDMxMTAvBgNV
BAMTKEYyNTk0NzVDNzBFMjNBMDQ5NEMzNjY3NDZGMDY2OTBENEI5RUQ5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN84eoKVCJthmaLD6VdIAQuu3B
RA6eNwAVNt0IvcHgpIYDEPnCRJJOFc526ABqRJR1TlHRFsbY/eCEgeeO70bbMJUg
tM4Mwl+6LVEWx4doieCmKSdPAttrI1JdK/I3IcULnmmO72ysKXqDH8f2qBTKhZZG
ssXEmKi4A2Y+Tnhsu8V3REZ9TsFYclMQBmoOoQDnU6jWwakgifz3OFe80d0EmKNX
HZBeyhe4Szl9YUdVQj2Nc5F5z681E7zhPYNovcvGqMom3Ls6De8ZY/bx0nVYiHTy
NOdFAfs0bBl9bHBB7EJjo3ftqRd1KTtBr2ea4AjMpL900CrOUian2Y3EvMOjAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU8llHXHDiOgSUw2Z0bwZpDUue2XEwHwYDVR0j
BBgwFoAULOQm3OEWwvwtB73SCbwHD20jPRwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVDNUQ1OUQ0QzdBMzYzRUI2QzRDODVCQzQwODgyOTZF
MjdGQjJBQzUzRTZEQkE0QzY0REQyRjFEQzVCMzVELzAvMkNFNDI2RENFMTE2QzJG
QzJEMDdCREQyMDlCQzA3MEY2RDIzM0QxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQ0U0MjZEQ0UxMTZDMkZDMkQw
N0JERDIwOUJDMDcwRjZEMjMzRDFDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1QzVENTlENEM3QTM2M0VCNkM0Qzg1QkM0MDg4Mjk2RTI3RkIyQUM1
M0U2REJBNEM2NEREMkYxREM1QjM1RC8wLzMyMzAzMDJlMzcyZTM4MzgyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzMjM3MzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyAdYMA0GCSqG
SIb3DQEBCwUAA4IBAQAiuQ7TpwzMthHpKMMmihv2Vqidc3xO9DJASBEMV2cngiv5
S1qXwLA5+LHxEwQLQ36RpYzeKUPABscF+Z3tPivQNVaYgp5Yt7pCL5pY+droLyan
2EEj2LW8Mq2B3gtlpIBQ444it0hr0wuwdsP4GPocjbdpvoxYbMgbyM+i4gDKsdSv
HPundLgVyW2I+vYGYSiVuY1Ex5sJ6DHNIiOOS1/9PEqK/YYeq+8B3ujbt/m2AIpl
GyeNea9LpSbptfhYYFI8q+HBfmXCWz5nyKNC9cyF8fWERIvfL6BE+TsULLUHR6oP
24HVssweqIFCI8Dbmgi4377Sb4JzTrkpFEpcZK15
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org