Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e3131322e302f32302d3234203d3e203136353331.roa
File:                     3230302e37362e3131322e302f32302d3234203d3e203136353331.roa (raw, json)
Hash identifier:          h+5vylrohgyAT5qeOKRd9uHWjehvsBGqpEc1M5rVkf8=
Subject key identifier:   66:11:93:D8:9F:CA:50:0B:FB:42:D9:91:29:AF:24:DC:90:97:14:E2
Certificate issuer:       /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Certificate serial:       6027F24B900776C935CA59EFA292243FB27A494F
Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e3131322e302f32302d3234203d3e203136353331.roa
Signing time:             Tue 05 Mar 2024 17:59:33 +0000
ROA not before:           Tue 05 Mar 2024 17:54:33 +0000
ROA not after:            Tue 04 Mar 2025 17:59:33 +0000
asID:                     16531
IP address blocks:        200.76.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:27:f2:4b:90:07:76:c9:35:ca:59:ef:a2:92:24:3f:b2:7a:49:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
        Validity
            Not Before: Mar  5 17:54:33 2024 GMT
            Not After : Mar  4 17:59:33 2025 GMT
        Subject: CN=661193D89FCA500BFB42D99129AF24DC909714E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:4f:c1:f2:1d:e8:7e:dc:bf:47:37:0d:64:
                    f0:96:25:5e:1e:73:cf:44:49:b8:a9:92:64:e3:f3:
                    e2:9d:e8:a5:d6:98:e4:e2:20:e0:de:5b:f2:6f:c6:
                    94:32:7b:c3:36:4f:0a:b6:32:49:58:2f:cd:b8:0c:
                    da:99:ea:7a:8c:ff:04:3f:7f:4b:17:7e:25:4e:d4:
                    f1:f8:a6:e9:28:4d:8a:50:00:93:62:76:d7:25:f1:
                    cf:75:78:ac:fa:bc:84:22:d4:32:16:dd:52:3c:0f:
                    50:07:ff:b1:88:0e:62:b6:fd:1f:94:35:c8:48:e9:
                    11:5a:c3:2d:71:df:34:c7:9f:50:7f:29:24:2f:a2:
                    ed:09:6e:38:56:78:20:d0:4b:5f:d0:01:82:c4:1c:
                    d4:f9:4e:9a:a2:3d:25:d0:4c:d2:0b:e5:57:a3:b5:
                    64:9d:79:27:66:c1:cd:aa:df:23:c9:09:4b:77:7f:
                    3b:62:dd:6e:22:d0:d4:72:a2:8e:42:d3:e7:47:7b:
                    38:4f:1e:3c:89:3f:dd:3b:f0:8c:f9:6e:5a:33:6c:
                    58:d6:0d:87:85:83:e2:9e:fb:41:b2:17:c1:fd:83:
                    eb:f1:87:76:a0:b1:01:fb:52:74:31:8f:9c:27:61:
                    7a:17:dd:29:b6:5e:0a:f8:d3:64:b2:5f:97:7b:b5:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:93:D8:9F:CA:50:0B:FB:42:D9:91:29:AF:24:DC:90:97:14:E2
            X509v3 Authority Key Identifier:
                keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e3131322e302f32302d3234203d3e203136353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:8f:0c:d5:59:90:0b:68:e1:af:39:41:3f:cd:30:a8:37:1d:
         b9:ef:c0:d0:57:4e:fd:bd:ed:22:1b:9a:14:8a:3d:f4:dc:74:
         05:25:69:ef:69:91:34:1d:63:18:01:7a:b5:a7:1b:75:6b:d7:
         d0:97:0e:20:0c:cf:48:7f:45:16:70:d8:0c:10:2f:e4:95:37:
         de:ea:3c:41:7b:9d:4e:9e:e8:37:1c:bd:d3:79:fe:6d:19:f6:
         72:33:0b:6e:12:b3:96:48:33:c8:ae:af:e7:e3:15:f2:9d:d5:
         29:01:7c:aa:71:f9:bc:64:64:0b:8c:51:92:ae:80:c7:e0:94:
         08:07:bf:08:73:52:7b:b8:a8:0d:f1:6a:26:8a:51:2e:ab:1b:
         3d:18:41:36:3a:22:e9:1e:9e:a3:ea:da:2e:34:11:a4:b8:06:
         41:c1:fc:1c:2a:07:47:c4:75:89:e0:a4:dc:3a:7e:27:cc:00:
         97:78:ce:22:4f:3c:52:bf:b4:35:64:48:98:04:46:5c:b5:13:
         da:62:d0:e2:c9:d7:49:63:cc:b3:57:70:e0:cf:27:37:cf:3e:
         63:da:95:f5:c2:1b:96:68:c8:dc:ef:9e:85:06:7d:2a:96:90:
         5b:18:71:75:7d:9c:23:b3:90:2a:77:3f:dc:0e:da:66:7d:37:
         c7:3b:c6:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYCfyS5AHdsk1ylnvopIkP7J6SU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCMDZFQkQyOEZFODNBNTY0RkEzREZDODNGNEY5OEFD
NjIwQzk4QTAeFw0yNDAzMDUxNzU0MzNaFw0yNTAzMDQxNzU5MzNaMDMxMTAvBgNV
BAMTKDY2MTE5M0Q4OUZDQTUwMEJGQjQyRDk5MTI5QUYyNERDOTA5NzE0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI70/B8h3ofty/RzcNZPCWJV4e
c89ESbipkmTj8+Kd6KXWmOTiIODeW/JvxpQye8M2Twq2MklYL824DNqZ6nqM/wQ/
f0sXfiVO1PH4pukoTYpQAJNidtcl8c91eKz6vIQi1DIW3VI8D1AH/7GIDmK2/R+U
NchI6RFawy1x3zTHn1B/KSQvou0JbjhWeCDQS1/QAYLEHNT5TpqiPSXQTNIL5Vej
tWSdeSdmwc2q3yPJCUt3fzti3W4i0NRyoo5C0+dHezhPHjyJP9078Iz5blozbFjW
DYeFg+Ke+0GyF8H9g+vxh3agsQH7UnQxj5wnYXoX3Sm2Xgr402SyX5d7tUQZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZhGT2J/KUAv7QtmRKa8k3JCXFOIwHwYDVR0j
BBgwFoAUL7BuvSj+g6Vk+j38g/T5isYgyYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTU0QTg0NjQyMzZGMUJBOEU2MUM3QjZENjcyODZBMDA5
M0ZGRDQwOTM0NDY1M0ZGMEQ5QTc4NjkxRjQ3NDBGLzAvMkZCMDZFQkQyOEZFODNB
NTY0RkEzREZDODNGNEY5OEFDNjIwQzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkIwNkVCRDI4RkU4M0E1NjRG
QTNERkM4M0Y0Rjk4QUM2MjBDOThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk1NEE4NDY0MjM2RjFCQThFNjFDN0I2RDY3Mjg2QTAwOTNGRkQ0MDkz
NDQ2NTNGRjBEOUE3ODY5MUY0NzQwRi8wLzMyMzAzMDJlMzczNjJlMzEzMTMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM1MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhMcDAN
BgkqhkiG9w0BAQsFAAOCAQEAD48M1VmQC2jhrzlBP80wqDcdue/A0FdO/b3tIhua
FIo99Nx0BSVp72mRNB1jGAF6tacbdWvX0JcOIAzPSH9FFnDYDBAv5JU33uo8QXud
Tp7oNxy903n+bRn2cjMLbhKzlkgzyK6v5+MV8p3VKQF8qnH5vGRkC4xRkq6Ax+CU
CAe/CHNSe7ioDfFqJopRLqsbPRhBNjoi6R6eo+raLjQRpLgGQcH8HCoHR8R1ieCk
3Dp+J8wAl3jOIk88Ur+0NWRImARGXLUT2mLQ4snXSWPMs1dw4M8nN88+Y9qV9cIb
lmjI3O+ehQZ9KpaQWxhxdX2cI7OQKnc/3A7aZn03xzvGiA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:04 2024 by rpki-client on console-fra.rpki-client.org