Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e2036343731.roa
File:                     3230302e3131312e302e302f31362d3234203d3e2036343731.roa (raw, json)
Hash identifier:          6w9ZdTaV3pfJj/gcfCJLqvmFzXU4f97IwrMDtmBvPvE=
Subject key identifier:   73:04:5D:D9:AA:52:E5:0E:77:C7:C4:17:9F:CD:41:D4:62:7A:30:83
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       15418A6B32EB1C3C00D4613337209C5DEB8BBCD0
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e2036343731.roa
Signing time:             Tue 05 Mar 2024 18:14:54 +0000
ROA not before:           Tue 05 Mar 2024 18:09:54 +0000
ROA not after:            Tue 04 Mar 2025 18:14:54 +0000
asID:                     6471
IP address blocks:        200.111.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:8a:6b:32:eb:1c:3c:00:d4:61:33:37:20:9c:5d:eb:8b:bc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:54 2024 GMT
            Not After : Mar  4 18:14:54 2025 GMT
        Subject: CN=73045DD9AA52E50E77C7C4179FCD41D4627A3083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:8a:60:d4:c1:73:35:b4:be:50:12:ae:b3:
                    93:a4:d1:57:5a:2b:d5:ad:2f:b4:e0:a1:82:9a:21:
                    11:e4:3f:2e:a4:af:91:91:41:b3:24:af:3b:c3:91:
                    92:c1:22:5b:1e:c5:ca:63:4d:b0:9f:39:68:7a:0d:
                    df:7a:a9:e7:a2:40:1c:fb:fb:89:a1:58:68:6a:a6:
                    23:67:ba:70:d8:cb:5b:13:1a:3a:79:0e:c6:94:35:
                    33:ea:82:43:00:8b:83:32:6c:fb:f0:ff:52:8c:af:
                    9c:6d:cf:71:1d:f1:b2:f0:18:51:20:12:6e:0e:43:
                    14:22:c0:b2:87:5e:9a:58:60:16:86:69:3c:be:28:
                    67:41:5a:aa:22:68:7e:a4:8a:d9:c6:1c:7b:05:ed:
                    39:0e:3e:44:8c:1b:64:85:f8:b9:78:3b:14:86:5d:
                    99:95:61:6c:18:b0:24:47:01:3c:f9:63:96:c5:11:
                    3c:87:93:68:dd:44:f3:05:77:c9:12:37:8a:01:85:
                    13:1b:f5:70:28:f8:2a:ca:9b:74:4f:9c:41:ce:e5:
                    6f:f5:10:07:f4:30:37:e0:27:5a:02:6c:ff:ce:d7:
                    f8:f6:22:0c:c9:4f:72:7d:04:79:8a:cc:ef:4f:64:
                    bc:1f:52:8f:69:16:cd:84:8a:25:c9:50:1f:17:30:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:5D:D9:AA:52:E5:0E:77:C7:C4:17:9F:CD:41:D4:62:7A:30:83
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:5d:6d:b4:7b:88:ec:4a:0f:8c:05:7c:11:37:ab:68:44:
         bb:f9:31:6d:ac:83:1f:06:eb:6b:59:72:4e:c7:52:2c:c0:bf:
         0e:1c:45:c7:15:00:30:0f:4d:5a:42:23:b4:53:e8:c3:61:88:
         6e:3e:b4:49:56:c7:ea:96:a3:d7:d6:56:a1:79:cd:41:62:4a:
         55:ab:2f:f0:31:4c:ee:ec:86:94:a6:b2:00:61:f1:c7:fa:48:
         fd:e7:62:6a:19:da:a5:4e:f8:cf:5c:47:25:82:e3:6d:82:a6:
         b6:c8:99:9c:95:e3:97:b0:7d:52:20:2b:fa:8e:5e:a0:76:28:
         4e:07:e2:15:f3:21:29:e4:b4:9f:d0:06:4a:0f:e5:8c:20:f9:
         1f:f7:5a:68:03:d7:24:9c:1d:32:06:dd:6c:a1:db:2a:3d:07:
         f6:98:76:50:e6:63:4a:46:b4:d7:69:40:e5:b3:47:bb:f2:32:
         10:70:30:b5:c8:32:bd:ce:33:d3:ea:cb:2c:5b:8b:fc:8f:bf:
         d3:94:2e:c3:c3:5f:71:80:52:41:96:33:d6:45:90:9f:5a:83:
         03:5d:cc:6a:38:09:82:81:e9:60:e2:ec:2a:e3:21:a6:be:ba:
         13:99:ed:34:89:87:3c:53:72:5f:1d:5a:0a:21:79:c3:b3:91:
         58:a7:ab:c0
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUFUGKazLrHDwA1GEzNyCcXeuLvNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEQjQ0RDE4QkMxNkFCMDM5QzJCMUI2QkQzODY2QUIy
OUUxMjJBNzAeFw0yNDAzMDUxODA5NTRaFw0yNTAzMDQxODE0NTRaMDMxMTAvBgNV
BAMTKDczMDQ1REQ5QUE1MkU1MEU3N0M3QzQxNzlGQ0Q0MUQ0NjI3QTMwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKYpg1MFzNbS+UBKus5Ok0Vda
K9WtL7TgoYKaIRHkPy6kr5GRQbMkrzvDkZLBIlsexcpjTbCfOWh6Dd96qeeiQBz7
+4mhWGhqpiNnunDYy1sTGjp5DsaUNTPqgkMAi4MybPvw/1KMr5xtz3Ed8bLwGFEg
Em4OQxQiwLKHXppYYBaGaTy+KGdBWqoiaH6kitnGHHsF7TkOPkSMG2SF+Ll4OxSG
XZmVYWwYsCRHATz5Y5bFETyHk2jdRPMFd8kSN4oBhRMb9XAo+CrKm3RPnEHO5W/1
EAf0MDfgJ1oCbP/O1/j2IgzJT3J9BHmKzO9PZLwfUo9pFs2EiiXJUB8XMAwtAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUcwRd2apS5Q53x8QXn81B1GJ6MIMwHwYDVR0j
BBgwFoAUP9tE0YvBarA5wrG2vThmqynhIqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODYyQzkyRkU3OTU3MUNEQ0U4MzRBNjA5MDUzMDAyQTEy
MTJDOUI3MDc5NkFGQUQwMUM2MTkzRDdGMERBQUFCLzAvM0ZEQjQ0RDE4QkMxNkFC
MDM5QzJCMUI2QkQzODY2QUIyOUUxMjJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkRCNDREMThCQzE2QUIwMzlD
MkIxQjZCRDM4NjZBQjI5RTEyMkE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg2MkM5MkZFNzk1NzFDRENFODM0QTYwOTA1MzAwMkExMjEyQzlCNzA3
OTZBRkFEMDFDNjE5M0Q3RjBEQUFBQi8wLzMyMzAzMDJlMzEzMTMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyG8wDQYJKoZI
hvcNAQELBQADggEBADHyXW20e4jsSg+MBXwRN6toRLv5MW2sgx8G62tZck7HUizA
vw4cRccVADAPTVpCI7RT6MNhiG4+tElWx+qWo9fWVqF5zUFiSlWrL/AxTO7shpSm
sgBh8cf6SP3nYmoZ2qVO+M9cRyWC422CprbImZyV45ewfVIgK/qOXqB2KE4H4hXz
ISnktJ/QBkoP5Ywg+R/3WmgD1yScHTIG3Wyh2yo9B/aYdlDmY0pGtNdpQOWzR7vy
MhBwMLXIMr3OM9Pqyyxbi/yPv9OULsPDX3GAUkGWM9ZFkJ9agwNdzGo4CYKB6WDi
7CrjIaa+uhOZ7TSJhzxTcl8dWgohecOzkVinq8A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:00 2024 by rpki-client on console-ams.rpki-client.org