Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa
File:                     3230302e332e3139322e302f32342d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          IlOHzQZkhlf2vwms4hG/dVDZvC9gqBF4FWzALvyAB+Y=
Subject key identifier:   3D:CB:52:25:F4:BC:70:3C:DB:B0:03:FD:A1:B9:48:AD:20:AB:A1:DB
Certificate issuer:       /CN=A4810347EA70678F1F1785A618883EAA51B29441
Certificate serial:       36DE622D84B7140AF39F3889171E981B8CD958A7
Authority key identifier: A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 18:23:45 +0000
ROA not before:           Tue 05 Mar 2024 18:18:45 +0000
ROA not after:            Tue 04 Mar 2025 18:23:45 +0000
asID:                     265696
IP address blocks:        200.3.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:62:2d:84:b7:14:0a:f3:9f:38:89:17:1e:98:1b:8c:d9:58:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4810347EA70678F1F1785A618883EAA51B29441
        Validity
            Not Before: Mar  5 18:18:45 2024 GMT
            Not After : Mar  4 18:23:45 2025 GMT
        Subject: CN=3DCB5225F4BC703CDBB003FDA1B948AD20ABA1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:33:ab:39:84:5a:33:86:f9:0e:60:1b:f5:
                    32:26:8a:68:1d:92:81:a2:12:67:28:e1:00:7e:ef:
                    a6:fd:24:cd:e2:5c:8b:94:c2:12:fd:3b:e7:a1:96:
                    8d:af:93:fa:c0:de:ca:cd:b5:53:c2:83:ab:1e:d9:
                    29:10:74:1d:7e:da:b1:45:b7:64:17:11:a8:22:53:
                    1a:5a:0a:0e:15:e1:3d:96:60:8f:06:88:31:5f:b7:
                    05:4a:ff:ce:5b:f0:70:72:59:57:49:c1:cd:23:d9:
                    11:b1:f1:f9:63:9d:22:46:2c:43:38:78:62:7d:3f:
                    70:ec:46:9d:05:1a:c0:e6:a6:53:20:38:d3:50:ef:
                    38:0c:70:59:15:b3:a7:be:66:0e:50:16:d2:f3:07:
                    53:b2:c1:fb:2a:b5:4c:55:52:fc:36:e8:ab:66:3f:
                    3b:17:7a:60:44:67:29:18:b5:41:0d:8b:2d:d1:5e:
                    c7:12:04:65:4c:6b:34:52:0e:f3:f2:8f:b0:38:56:
                    63:58:a4:dc:98:58:be:eb:d3:71:b8:5f:0c:f4:1b:
                    22:4a:53:ec:e5:8e:ef:7c:d0:be:f8:06:f2:b6:63:
                    a4:a7:98:8f:ce:79:fc:df:c8:db:f1:0b:cd:49:8c:
                    73:6f:ab:84:2e:61:f7:23:8e:0b:8b:a1:6b:75:c1:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:52:25:F4:BC:70:3C:DB:B0:03:FD:A1:B9:48:AD:20:AB:A1:DB
            X509v3 Authority Key Identifier:
                keyid:A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b7:0c:1e:e2:8b:2c:bc:2e:d7:c5:67:91:40:79:97:be:0a:
         ea:4e:b4:2e:7a:ba:d6:dc:14:b4:42:9e:24:5a:fb:16:c9:90:
         11:5b:d1:75:6e:dc:e4:a7:35:7c:b7:43:80:06:e7:27:b5:b3:
         48:ac:65:f9:f7:f1:fd:72:51:3f:8e:bb:a6:d4:ad:50:51:a3:
         9b:15:8b:5f:24:51:cd:94:a9:f5:18:2d:44:9c:cb:e8:4d:d7:
         fb:ee:6f:45:c1:66:66:38:8e:92:26:5c:ff:53:9e:82:1e:d5:
         e5:50:fb:96:72:3a:d6:b6:75:54:b0:c4:2f:02:a8:87:bc:59:
         7e:58:54:13:f6:a8:0d:8e:6f:50:ff:8e:76:80:09:06:61:c9:
         27:38:e1:78:98:7f:f2:20:5a:9f:0a:83:d7:69:ea:88:30:eb:
         fd:98:2a:ac:ba:4b:cc:d2:f8:79:e6:08:c8:df:58:3f:69:55:
         85:bb:10:c7:37:f7:9b:38:5c:88:6f:db:3e:63:81:39:8e:0c:
         40:ab:08:a1:e6:57:eb:75:4c:98:7b:6d:2e:49:68:d2:8a:94:
         62:06:e4:38:a0:20:eb:c9:18:17:d0:93:47:e4:a3:d8:0d:15:
         53:84:8d:7d:29:e6:ef:e0:c2:8b:2e:48:0f:44:21:79:59:15:
         57:35:06:08
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNt5iLYS3FArznziJFx6YG4zZWKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4MTAzNDdFQTcwNjc4RjFGMTc4NUE2MTg4ODNFQUE1
MUIyOTQ0MTAeFw0yNDAzMDUxODE4NDVaFw0yNTAzMDQxODIzNDVaMDMxMTAvBgNV
BAMTKDNEQ0I1MjI1RjRCQzcwM0NEQkIwMDNGREExQjk0OEFEMjBBQkExREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMjOrOYRaM4b5DmAb9TImimgd
koGiEmco4QB+76b9JM3iXIuUwhL9O+ehlo2vk/rA3srNtVPCg6se2SkQdB1+2rFF
t2QXEagiUxpaCg4V4T2WYI8GiDFftwVK/85b8HByWVdJwc0j2RGx8fljnSJGLEM4
eGJ9P3DsRp0FGsDmplMgONNQ7zgMcFkVs6e+Zg5QFtLzB1OywfsqtUxVUvw26Ktm
PzsXemBEZykYtUENiy3RXscSBGVMazRSDvPyj7A4VmNYpNyYWL7r03G4Xwz0GyJK
U+zlju980L74BvK2Y6SnmI/OefzfyNvxC81JjHNvq4QuYfcjjguLoWt1wcOLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPctSJfS8cDzbsAP9oblIrSCrodswHwYDVR0j
BBgwFoAUpIEDR+pwZ48fF4WmGIg+qlGylEEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQTk3NTNGRjAyQ0I2N0E5NTlCQzYzMTU2NzE2RjFCNjlD
ODg4OEY5MjRGOTYxNDUwNjNCQUJERkU0OUZDMjBDLzAvQTQ4MTAzNDdFQTcwNjc4
RjFGMTc4NUE2MTg4ODNFQUE1MUIyOTQ0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDgxMDM0N0VBNzA2NzhGMUYx
Nzg1QTYxODg4M0VBQTUxQjI5NDQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0E5NzUzRkYwMkNCNjdBOTU5QkM2MzE1NjcxNkYxQjY5Qzg4ODhGOTI0
Rjk2MTQ1MDYzQkFCREZFNDlGQzIwQy8wLzMyMzAzMDJlMzMyZTMxMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgDwDAN
BgkqhkiG9w0BAQsFAAOCAQEAlLcMHuKLLLwu18VnkUB5l74K6k60Lnq61twUtEKe
JFr7FsmQEVvRdW7c5Kc1fLdDgAbnJ7WzSKxl+ffx/XJRP467ptStUFGjmxWLXyRR
zZSp9RgtRJzL6E3X++5vRcFmZjiOkiZc/1Oegh7V5VD7lnI61rZ1VLDELwKoh7xZ
flhUE/aoDY5vUP+OdoAJBmHJJzjheJh/8iBanwqD12nqiDDr/ZgqrLpLzNL4eeYI
yN9YP2lVhbsQxzf3mzhciG/bPmOBOY4MQKsIoeZX63VMmHttLklo0oqUYgbkOKAg
68kYF9CTR+Sj2A0VU4SNfSnm7+DCiy5ID0QheVkVVzUGCA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org