Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3138342e302f32342d3234203d3e203532333934.roa
File:                     3230302e36312e3138342e302f32342d3234203d3e203532333934.roa (raw, json)
Hash identifier:          8B5tl5IKhC4lWsl5EFvt73TI/59AfKHnnrje3proT40=
Subject key identifier:   E9:EF:03:CB:80:5F:64:88:06:15:DB:67:5D:4F:5C:9F:EA:3A:B5:D8
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       1A03692C9EE68E5F544DB30A14D837AB655588A4
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3138342e302f32342d3234203d3e203532333934.roa
Signing time:             Tue 05 Mar 2024 18:12:09 +0000
ROA not before:           Tue 05 Mar 2024 18:07:09 +0000
ROA not after:            Tue 04 Mar 2025 18:12:09 +0000
asID:                     52394
IP address blocks:        200.61.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:03:69:2c:9e:e6:8e:5f:54:4d:b3:0a:14:d8:37:ab:65:55:88:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:09 2024 GMT
            Not After : Mar  4 18:12:09 2025 GMT
        Subject: CN=E9EF03CB805F64880615DB675D4F5C9FEA3AB5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:3a:4b:ce:37:3d:75:b0:7a:67:b6:fb:f3:
                    40:ce:b2:8d:19:92:d4:6f:bf:e7:63:ac:07:61:32:
                    ca:dc:46:cc:24:93:23:5e:a2:a9:86:1d:69:15:cf:
                    30:2f:c9:6f:2b:1c:12:9c:c1:4a:a1:72:e9:6b:1d:
                    9d:25:45:0e:80:29:a7:4c:46:d0:31:08:05:81:ae:
                    6d:95:a6:76:ec:a2:df:3d:05:d2:ab:c0:b4:76:c8:
                    3a:07:6d:e6:ab:87:f3:c4:51:2e:13:bc:88:f4:76:
                    77:40:4c:7b:65:bb:9c:ac:db:3f:1b:91:d8:d1:d0:
                    97:80:4e:48:d4:bf:58:8b:ca:cd:78:cf:d5:84:fc:
                    0d:00:8c:0d:0c:e5:7f:2f:a1:fd:af:2d:50:5e:42:
                    9d:53:5e:2e:fd:69:80:1a:ef:7d:5b:25:c1:85:6f:
                    d9:ed:33:39:e1:c2:74:1d:3e:91:21:6f:ca:91:f9:
                    33:5d:7e:8f:0a:22:29:d8:b3:33:fd:71:c0:5b:de:
                    5c:7f:5c:df:53:6c:80:29:74:4b:4a:80:2c:da:c7:
                    5c:80:4b:9c:49:32:a4:96:cc:63:cc:2b:6f:ca:0b:
                    0c:79:83:6d:a0:fb:4c:32:d1:71:6c:51:6a:10:3f:
                    b1:e0:5c:d5:e5:a2:92:61:81:6e:c4:58:4b:8c:dc:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:03:CB:80:5F:64:88:06:15:DB:67:5D:4F:5C:9F:EA:3A:B5:D8
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3138342e302f32342d3234203d3e203532333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:89:cf:ae:11:c8:97:a8:6a:27:7f:f5:99:3b:8b:2e:6e:ac:
         f3:66:4a:2c:af:dc:d5:12:1f:4e:d0:a3:a9:23:ed:a3:4f:98:
         24:9f:9e:6e:18:3e:b4:2a:ef:ce:31:ca:f4:ec:d8:0e:2b:b1:
         a2:ee:5e:b2:7a:4d:8d:61:6d:84:9b:11:47:5e:bb:f2:8b:a6:
         79:bf:96:c6:0e:ce:6f:ff:3d:ac:13:82:96:86:29:8f:8b:f1:
         51:9b:7d:e5:83:05:92:55:67:b8:70:af:63:88:c8:22:6f:03:
         15:75:4b:78:b2:21:1f:d7:91:c6:82:72:92:e9:ea:54:73:61:
         d9:4b:05:cb:b8:29:8a:ed:fc:4d:80:c6:af:6a:a9:15:f1:ee:
         69:79:35:a8:46:d8:2f:06:09:30:97:ac:bc:de:df:2b:20:8e:
         52:48:cd:7f:02:24:c2:2a:b4:91:2e:5f:d0:c0:53:ea:7e:9a:
         9d:6f:2f:a9:d0:04:8a:22:83:70:fd:05:c9:50:1a:a0:76:4c:
         86:81:2c:40:87:16:47:16:15:7a:80:c6:ff:c1:0f:aa:6e:47:
         94:99:00:49:16:59:10:c0:30:3c:5d:4d:fa:5a:da:02:58:d6:
         cc:b8:f3:24:3b:88:21:1e:08:e8:41:dc:f4:a4:7e:2e:eb:ac:
         ef:51:8e:b2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGgNpLJ7mjl9UTbMKFNg3q2VViKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNDAzMDUxODA3MDlaFw0yNTAzMDQxODEyMDlaMDMxMTAvBgNV
BAMTKEU5RUYwM0NCODA1RjY0ODgwNjE1REI2NzVENEY1QzlGRUEzQUI1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pjpLzjc9dbB6Z7b780DOso0Z
ktRvv+djrAdhMsrcRswkkyNeoqmGHWkVzzAvyW8rHBKcwUqhculrHZ0lRQ6AKadM
RtAxCAWBrm2Vpnbsot89BdKrwLR2yDoHbearh/PEUS4TvIj0dndATHtlu5ys2z8b
kdjR0JeATkjUv1iLys14z9WE/A0AjA0M5X8vof2vLVBeQp1TXi79aYAa731bJcGF
b9ntMznhwnQdPpEhb8qR+TNdfo8KIinYszP9ccBb3lx/XN9TbIApdEtKgCzax1yA
S5xJMqSWzGPMK2/KCwx5g22g+0wy0XFsUWoQP7HgXNXlopJhgW7EWEuM3EOFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6e8Dy4BfZIgGFdtnXU9cn+o6tdgwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzAzMDJlMzYzMTJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg9uDAN
BgkqhkiG9w0BAQsFAAOCAQEAVYnPrhHIl6hqJ3/1mTuLLm6s82ZKLK/c1RIfTtCj
qSPto0+YJJ+ebhg+tCrvzjHK9OzYDiuxou5esnpNjWFthJsRR1678oumeb+Wxg7O
b/89rBOCloYpj4vxUZt95YMFklVnuHCvY4jIIm8DFXVLeLIhH9eRxoJykunqVHNh
2UsFy7gpiu38TYDGr2qpFfHuaXk1qEbYLwYJMJesvN7fKyCOUkjNfwIkwiq0kS5f
0MBT6n6anW8vqdAEiiKDcP0FyVAaoHZMhoEsQIcWRxYVeoDG/8EPqm5HlJkASRZZ
EMAwPF1N+lraAljWzLjzJDuIIR4I6EHc9KR+Luus71GOsg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org