Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/3230302e3139322e3130362e302f32342d3234203d3e20323634373632.roa
File:                     3230302e3139322e3130362e302f32342d3234203d3e20323634373632.roa (raw, json)
Hash identifier:          BG3IlBaL5X/kRx/vedrrmB6hv6kHCHH2782vTEHYOpo=
Subject key identifier:   5E:A2:4F:DE:9A:A7:A1:69:6F:EF:56:4A:E5:62:93:BA:3A:E2:A0:B0
Certificate issuer:       /CN=4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6
Certificate serial:       10FB950BB238A5FA9BED879811F92E9DDA71F8C1
Authority key identifier: 4C:2E:26:C6:BF:1F:23:B5:EB:AC:DA:8F:AA:F8:94:B9:3B:81:27:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/3230302e3139322e3130362e302f32342d3234203d3e20323634373632.roa
Signing time:             Tue 05 Mar 2024 17:52:36 +0000
ROA not before:           Tue 05 Mar 2024 17:47:36 +0000
ROA not after:            Tue 04 Mar 2025 17:52:36 +0000
asID:                     264762
IP address blocks:        200.192.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fb:95:0b:b2:38:a5:fa:9b:ed:87:98:11:f9:2e:9d:da:71:f8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6
        Validity
            Not Before: Mar  5 17:47:36 2024 GMT
            Not After : Mar  4 17:52:36 2025 GMT
        Subject: CN=5EA24FDE9AA7A1696FEF564AE56293BA3AE2A0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:32:32:38:5e:f7:f9:a4:22:e4:f5:af:4f:
                    e6:f8:cc:0f:bd:e3:d5:ed:5e:5e:87:e0:2f:c3:70:
                    97:15:b2:e8:e2:35:f7:fb:4f:d9:e1:fc:ea:3a:ca:
                    7a:d1:62:de:fd:2d:8b:3b:74:4a:ed:d8:a9:f4:4d:
                    b6:84:f2:fb:b7:3d:27:6d:67:aa:6c:be:cc:70:2d:
                    cb:4e:cd:57:ad:7f:72:13:3d:81:ee:2f:26:b9:6e:
                    a5:1f:67:c3:e7:64:23:5b:46:85:db:89:91:5c:ba:
                    05:18:c2:8b:c3:d1:a6:b8:2b:1b:6c:15:49:8b:37:
                    a4:7c:b6:d6:07:d7:3e:fc:07:8b:fa:9e:94:20:6a:
                    d0:ae:47:55:51:63:fa:55:94:b0:eb:03:d9:c0:01:
                    1c:e7:f2:29:7f:98:6b:64:93:a6:b6:ef:2f:dc:0a:
                    1b:1a:d8:a9:60:f2:dc:9d:c1:80:85:be:ec:ac:d1:
                    5e:8c:ca:8d:56:62:42:46:a9:3e:5e:c6:97:8c:c7:
                    67:7a:cc:49:f8:d7:6a:b7:36:3d:7d:38:9a:d3:2b:
                    f3:4f:98:c8:2a:29:70:a0:ca:37:8a:ca:2b:d2:11:
                    74:69:16:d1:c3:52:91:ce:1f:fd:25:b3:39:e8:2a:
                    a7:81:e7:be:a9:73:25:52:4f:dd:54:4d:65:f2:8b:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:4F:DE:9A:A7:A1:69:6F:EF:56:4A:E5:62:93:BA:3A:E2:A0:B0
            X509v3 Authority Key Identifier:
                keyid:4C:2E:26:C6:BF:1F:23:B5:EB:AC:DA:8F:AA:F8:94:B9:3B:81:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C2E26C6BF1F23B5EBACDA8FAAF894B93B8127F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CAE48BF659FD712AEB92ADBBD162BF17D20A8AD39C67EAB9924B214FF49032AC/0/3230302e3139322e3130362e302f32342d3234203d3e20323634373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:00:41:b2:05:e6:ad:ed:26:d5:67:8b:bd:9f:aa:bc:c9:
         55:e9:b4:93:dd:e4:fc:06:24:48:3a:7d:20:c6:67:84:4a:81:
         74:85:9c:81:f3:0e:ef:b5:79:24:90:68:79:e2:d0:1b:e4:fd:
         be:02:b3:cf:1c:f8:34:10:d4:88:fd:dd:63:83:ea:25:21:32:
         de:a8:1d:2c:e2:be:82:7f:4e:c0:fd:ed:b0:dc:4a:f9:5a:cd:
         3c:52:8a:a5:e4:70:ec:10:65:f0:eb:fb:de:f9:53:b9:dd:42:
         45:ae:85:d9:ab:9b:b8:fa:7e:d9:ca:8b:64:d5:b2:02:51:c9:
         80:02:b2:5e:1e:0a:f5:58:dd:39:6f:24:8e:06:88:92:c6:fd:
         53:b7:20:32:8b:21:80:07:30:f5:6d:61:5d:15:94:3c:5d:cd:
         21:4b:3b:64:ff:0e:6d:76:8c:ad:f7:9d:3f:63:c7:ce:ff:07:
         4f:2e:5a:43:94:97:26:17:58:f2:a1:e8:b6:66:a2:d8:2c:3f:
         5c:7b:f8:a8:fe:18:1a:45:45:67:fa:40:05:4b:13:76:ec:46:
         53:0a:89:b5:18:f4:a8:f4:51:87:0f:b9:dc:47:23:19:80:6a:
         74:a0:d1:9b:23:36:19:8b:8d:06:5f:d1:5e:cf:9e:e8:a9:e0:
         ed:27:88:39
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEPuVC7I4pfqb7YeYEfkundpx+MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMyRTI2QzZCRjFGMjNCNUVCQUNEQThGQUFGODk0Qjkz
QjgxMjdGNjAeFw0yNDAzMDUxNzQ3MzZaFw0yNTAzMDQxNzUyMzZaMDMxMTAvBgNV
BAMTKDVFQTI0RkRFOUFBN0ExNjk2RkVGNTY0QUU1NjI5M0JBM0FFMkEwQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PjIyOF73+aQi5PWvT+b4zA+9
49XtXl6H4C/DcJcVsujiNff7T9nh/Oo6ynrRYt79LYs7dErt2Kn0TbaE8vu3PSdt
Z6psvsxwLctOzVetf3ITPYHuLya5bqUfZ8PnZCNbRoXbiZFcugUYwovD0aa4Kxts
FUmLN6R8ttYH1z78B4v6npQgatCuR1VRY/pVlLDrA9nAARzn8il/mGtkk6a27y/c
Chsa2Klg8tydwYCFvuys0V6Myo1WYkJGqT5expeMx2d6zEn412q3Nj19OJrTK/NP
mMgqKXCgyjeKyivSEXRpFtHDUpHOH/0lsznoKqeB576pcyVST91UTWXyi33pAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUXqJP3pqnoWlv71ZK5WKTujrioLAwHwYDVR0j
BBgwFoAUTC4mxr8fI7XrrNqPqviUuTuBJ/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQUU0OEJGNjU5RkQ3MTJBRUI5MkFEQkJEMTYyQkYxN0Qy
MEE4QUQzOUM2N0VBQjk5MjRCMjE0RkY0OTAzMkFDLzAvNEMyRTI2QzZCRjFGMjNC
NUVCQUNEQThGQUFGODk0QjkzQjgxMjdGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzJFMjZDNkJGMUYyM0I1RUJB
Q0RBOEZBQUY4OTRCOTNCODEyN0Y2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0FFNDhCRjY1OUZENzEyQUVCOTJBREJCRDE2MkJGMTdEMjBBOEFEMzlD
NjdFQUI5OTI0QjIxNEZGNDkwMzJBQy8wLzMyMzAzMDJlMzEzOTMyMmUzMTMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM2MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
wGowDQYJKoZIhvcNAQELBQADggEBAFWuAEGyBeat7SbVZ4u9n6q8yVXptJPd5PwG
JEg6fSDGZ4RKgXSFnIHzDu+1eSSQaHni0Bvk/b4Cs88c+DQQ1Ij93WOD6iUhMt6o
HSzivoJ/TsD97bDcSvlazTxSiqXkcOwQZfDr+975U7ndQkWuhdmrm7j6ftnKi2TV
sgJRyYACsl4eCvVY3TlvJI4GiJLG/VO3IDKLIYAHMPVtYV0VlDxdzSFLO2T/Dm12
jK33nT9jx87/B08uWkOUlyYXWPKh6LZmotgsP1x7+Kj+GBpFRWf6QAVLE3bsRlMK
ibUY9Kj0UYcPudxHIxmAanSg0ZsjNhmLjQZf0V7Pnuip4O0niDk=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org