Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e302e302f32342d3234203d3e203237383533.roa
File:                     3230302e31302e302e302f32342d3234203d3e203237383533.roa (raw, json)
Hash identifier:          H59fLeGfNZrslKmtqGyVhvlbjhv2Fbg9yu3tsXTyuT0=
Subject key identifier:   4F:7F:63:1A:F6:15:1E:3A:30:07:9A:B1:12:C3:0A:CD:63:AB:8B:0F
Certificate issuer:       /CN=979EB6F46297D1850B9D5762A6C41CE6DCD9773E
Certificate serial:       3FA382DE04C1835C5D29F59235040CA5616FF997
Authority key identifier: 97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e302e302f32342d3234203d3e203237383533.roa
Signing time:             Fri 07 Jun 2024 00:45:00 +0000
ROA not before:           Fri 07 Jun 2024 00:40:00 +0000
ROA not after:            Fri 06 Jun 2025 00:45:00 +0000
asID:                     27853
IP address blocks:        200.10.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:82:de:04:c1:83:5c:5d:29:f5:92:35:04:0c:a5:61:6f:f9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979EB6F46297D1850B9D5762A6C41CE6DCD9773E
        Validity
            Not Before: Jun  7 00:40:00 2024 GMT
            Not After : Jun  6 00:45:00 2025 GMT
        Subject: CN=4F7F631AF6151E3A30079AB112C30ACD63AB8B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:b2:52:a5:7c:09:7b:c4:14:44:8d:dd:68:
                    5b:c8:62:5e:e3:73:95:51:07:2b:04:d7:d1:fe:77:
                    a7:3f:50:a8:ed:61:9e:c4:b2:d9:c7:8c:24:3b:8d:
                    16:be:4a:1c:0d:77:4b:87:60:96:d3:db:34:9d:e7:
                    41:f5:d5:5e:13:2d:17:2a:28:6b:85:fa:ea:e4:ba:
                    ea:3a:92:cc:35:a5:14:70:02:ed:2a:b6:41:be:01:
                    d5:48:de:b0:ad:c0:22:cb:14:70:d2:3c:a6:28:fb:
                    94:23:6e:50:5b:e0:95:e9:59:b3:83:4e:af:19:1b:
                    d5:1c:a2:c7:b8:69:3d:6d:0f:6a:7d:b8:58:45:93:
                    74:16:ea:79:36:cb:f7:4a:26:cf:64:ed:22:c8:0a:
                    24:0a:89:95:14:e0:9a:3c:0e:b6:3c:e9:76:45:7b:
                    31:e0:8a:20:f5:0f:43:8f:7b:c8:d2:34:06:02:6e:
                    cc:ae:22:d5:f5:57:17:a2:0d:a8:c4:76:6c:05:77:
                    c6:1d:4f:91:f7:34:fc:e6:8b:44:e1:2a:10:73:31:
                    60:6a:f6:5d:32:7f:84:f9:07:19:7c:5e:a9:dc:c6:
                    70:e5:87:67:5a:76:0a:f4:59:3a:96:29:ba:f8:17:
                    53:96:c5:ee:90:35:8b:8b:43:df:83:74:ac:f0:d5:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7F:63:1A:F6:15:1E:3A:30:07:9A:B1:12:C3:0A:CD:63:AB:8B:0F
            X509v3 Authority Key Identifier:
                keyid:97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e302e302f32342d3234203d3e203237383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:5b:3f:d2:6a:c2:0b:2d:7e:a0:fd:1a:68:51:32:9a:72:
         62:8d:85:50:dd:de:0c:22:09:1b:c5:87:e3:de:c8:61:79:9a:
         17:04:c2:83:29:8e:a6:20:55:c0:eb:e5:25:18:78:f0:5f:c5:
         35:70:db:c0:3a:6a:ba:64:88:65:a2:6e:e6:0c:86:6e:19:d7:
         8f:83:0a:78:f6:fb:8c:a9:be:80:8e:1e:0a:b7:3a:d0:31:39:
         fe:62:08:3c:44:56:40:1c:49:e5:d7:01:5d:00:83:3e:89:e0:
         3d:f0:d6:08:46:36:43:f5:82:e4:f0:60:7a:8a:df:51:01:3c:
         9e:ca:53:b4:cd:70:fc:46:2b:a1:15:ce:10:44:e9:ba:be:40:
         23:ad:df:2f:8f:42:4b:37:9b:83:06:bc:f8:55:ea:0f:2c:ff:
         e5:5a:75:0c:4f:e0:9a:5f:6f:f9:da:7c:0e:85:f6:ca:93:5a:
         92:26:2e:5b:70:2e:e7:c6:3a:80:dd:ea:03:d9:c7:5c:6d:9e:
         b2:00:6f:f3:9d:54:57:fc:e0:1e:b3:87:91:40:fd:b2:c3:b6:
         31:e2:66:bc:38:66:ba:6d:8e:2e:18:2b:a2:27:aa:17:a4:7b:
         ca:c8:e0:46:30:1e:26:01:78:50:04:36:d8:ae:77:85:3a:f2:
         46:01:ce:86
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUP6OC3gTBg1xdKfWSNQQMpWFv+ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RUI2RjQ2Mjk3RDE4NTBCOUQ1NzYyQTZDNDFDRTZE
Q0Q5NzczRTAeFw0yNDA2MDcwMDQwMDBaFw0yNTA2MDYwMDQ1MDBaMDMxMTAvBgNV
BAMTKDRGN0Y2MzFBRjYxNTFFM0EzMDA3OUFCMTEyQzMwQUNENjNBQjhCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzLJSpXwJe8QURI3daFvIYl7j
c5VRBysE19H+d6c/UKjtYZ7EstnHjCQ7jRa+ShwNd0uHYJbT2zSd50H11V4TLRcq
KGuF+urkuuo6ksw1pRRwAu0qtkG+AdVI3rCtwCLLFHDSPKYo+5QjblBb4JXpWbOD
Tq8ZG9Ucose4aT1tD2p9uFhFk3QW6nk2y/dKJs9k7SLICiQKiZUU4Jo8DrY86XZF
ezHgiiD1D0OPe8jSNAYCbsyuItX1VxeiDajEdmwFd8YdT5H3NPzmi0ThKhBzMWBq
9l0yf4T5Bxl8XqncxnDlh2dadgr0WTqWKbr4F1OWxe6QNYuLQ9+DdKzw1fjtAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUT39jGvYVHjowB5qxEsMKzWOriw8wHwYDVR0j
BBgwFoAUl5629GKX0YULnVdipsQc5tzZdz4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRjVENzI3RDVDMjgzRkZFNDA1NUJCREYyQTBGMTVDRTA3
RkZFOEJFMjExMzg2RUVFMkFDMjk4MTFCNTc3NTdCLzAvOTc5RUI2RjQ2Mjk3RDE4
NTBCOUQ1NzYyQTZDNDFDRTZEQ0Q5NzczRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFQjZGNDYyOTdEMTg1MEI5
RDU3NjJBNkM0MUNFNkRDRDk3NzNFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkY1RDcyN0Q1QzI4M0ZGRTQwNTVCQkRGMkEwRjE1Q0UwN0ZGRThCRTIx
MTM4NkVFRTJBQzI5ODExQjU3NzU3Qi8wLzMyMzAzMDJlMzEzMDJlMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAoAMA0GCSqG
SIb3DQEBCwUAA4IBAQBE1ls/0mrCCy1+oP0aaFEymnJijYVQ3d4MIgkbxYfj3shh
eZoXBMKDKY6mIFXA6+UlGHjwX8U1cNvAOmq6ZIhlom7mDIZuGdePgwp49vuMqb6A
jh4KtzrQMTn+Ygg8RFZAHEnl1wFdAIM+ieA98NYIRjZD9YLk8GB6it9RATyeylO0
zXD8RiuhFc4QROm6vkAjrd8vj0JLN5uDBrz4VeoPLP/lWnUMT+CaX2/52nwOhfbK
k1qSJi5bcC7nxjqA3eoD2cdcbZ6yAG/znVRX/OAes4eRQP2yw7Yx4ma8OGa6bY4u
GCuiJ6oXpHvKyOBGMB4mAXhQBDbYrneFOvJGAc6G
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org