Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
File:                     3230302e392e39342e302f32342d3234203d3e20323633383034.roa (raw, json)
Hash identifier:          pp0IT8EQDNwnjmsMNKxyeCtmbzoYYZokiyfmeM6aiwU=
Subject key identifier:   87:0D:7D:37:DB:54:8F:A8:01:5A:B8:91:17:E9:2E:AC:0F:E4:F8:70
Certificate issuer:       /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial:       04C92E2ECD377269C3710B0A9391C59725336B5D
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
Signing time:             Tue 05 Mar 2024 17:50:32 +0000
ROA not before:           Tue 05 Mar 2024 17:45:32 +0000
ROA not after:            Tue 04 Mar 2025 17:50:32 +0000
asID:                     263804
IP address blocks:        200.9.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:2e:2e:cd:37:72:69:c3:71:0b:0a:93:91:c5:97:25:33:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
        Validity
            Not Before: Mar  5 17:45:32 2024 GMT
            Not After : Mar  4 17:50:32 2025 GMT
        Subject: CN=870D7D37DB548FA8015AB89117E92EAC0FE4F870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:bc:a9:97:e6:ea:dc:45:ed:fb:00:4e:a6:
                    19:92:d0:a2:8e:e9:9f:40:92:bc:dc:70:53:6f:bd:
                    b5:19:f9:04:f2:e2:da:c8:73:41:cf:b4:96:d1:46:
                    ed:5e:83:26:9d:ee:8e:33:52:fc:db:d8:6f:8c:34:
                    3b:1b:22:61:35:76:99:0e:a5:fa:43:ff:79:9d:6b:
                    e1:fc:27:81:35:4b:a9:5d:22:16:21:c1:18:d3:9b:
                    46:cf:1e:ea:a5:65:b7:df:dc:f3:7f:63:d8:d5:55:
                    1d:5e:11:e7:f8:49:e6:69:10:1e:e0:06:33:a7:17:
                    06:24:ad:08:75:ff:1d:ea:73:31:2f:c6:52:ee:47:
                    04:b5:7e:81:5b:11:5b:2f:42:2b:88:b9:45:0b:fa:
                    84:29:a6:ab:98:1e:ef:00:76:34:0f:f8:1e:10:84:
                    32:9b:e2:e3:6b:10:14:02:3a:1c:49:d2:27:d6:be:
                    c4:e7:19:98:68:75:41:24:e7:66:47:3b:cd:e3:77:
                    38:4a:43:f2:5a:f5:fc:10:6e:31:74:d4:6e:ce:3a:
                    fc:53:1d:57:49:08:cb:5e:e1:67:2d:da:38:ae:ea:
                    f0:15:c9:3d:60:1d:9e:e8:2f:1a:5c:28:dd:99:ce:
                    cd:1a:f2:c0:b5:10:1a:13:ed:03:93:05:9d:0b:18:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:7D:37:DB:54:8F:A8:01:5A:B8:91:17:E9:2E:AC:0F:E4:F8:70
            X509v3 Authority Key Identifier:
                keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:76:5e:9f:3f:92:59:e5:ec:a9:cb:3c:2a:4c:09:41:c5:
         d1:85:1a:27:8a:41:5e:1d:13:c4:7d:47:62:4d:d0:1e:bd:29:
         90:56:ee:17:0d:bc:1b:c2:7f:52:4a:4b:5e:e1:1b:fc:48:e4:
         ba:56:ac:11:67:3e:7f:3b:a1:c9:4c:c6:f0:ab:e4:f0:21:2b:
         d8:d1:51:34:cd:f6:f8:39:c1:e5:ee:7c:ec:80:88:e1:37:f9:
         c9:2c:d5:23:56:f4:ab:74:c2:fb:33:01:46:00:5e:d0:ea:fb:
         21:a7:db:70:62:57:89:da:33:a2:0c:fe:90:a7:36:54:4c:8b:
         6a:1f:82:a5:b2:9b:72:69:38:12:82:bf:e6:61:4b:61:09:0d:
         07:db:c2:d5:35:b2:a9:a9:17:ef:49:a2:9e:99:9d:d1:c5:d2:
         25:e8:09:cf:65:5d:83:e7:66:c4:83:c5:c7:ac:dc:89:c6:d1:
         58:09:cc:cd:88:47:cd:ea:cd:7a:e7:36:d0:b3:b5:a3:6f:cf:
         22:7e:dc:0c:45:6b:2f:a1:66:87:08:1f:bb:9b:26:59:90:8b:
         6e:70:d7:07:47:96:e9:df:08:12:5b:4d:61:18:66:6e:41:f0:
         e6:3d:64:2d:36:30:97:73:96:6b:81:36:0b:73:26:d4:2a:e8:
         5c:8e:a1:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBMkuLs03cmnDcQsKk5HFlyUza10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDOTQ0OUNFMEZCMjY3ODVDQkU0QTYwRDlENTUxNEU5
RTE3N0FGODAeFw0yNDAzMDUxNzQ1MzJaFw0yNTAzMDQxNzUwMzJaMDMxMTAvBgNV
BAMTKDg3MEQ3RDM3REI1NDhGQTgwMTVBQjg5MTE3RTkyRUFDMEZFNEY4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxrypl+bq3EXt+wBOphmS0KKO
6Z9AkrzccFNvvbUZ+QTy4trIc0HPtJbRRu1egyad7o4zUvzb2G+MNDsbImE1dpkO
pfpD/3mda+H8J4E1S6ldIhYhwRjTm0bPHuqlZbff3PN/Y9jVVR1eEef4SeZpEB7g
BjOnFwYkrQh1/x3qczEvxlLuRwS1foFbEVsvQiuIuUUL+oQppquYHu8AdjQP+B4Q
hDKb4uNrEBQCOhxJ0ifWvsTnGZhodUEk52ZHO83jdzhKQ/Ja9fwQbjF01G7OOvxT
HVdJCMte4Wct2jiu6vAVyT1gHZ7oLxpcKN2Zzs0a8sC1EBoT7QOTBZ0LGCXnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUhw19N9tUj6gBWriRF+kurA/k+HAwHwYDVR0j
BBgwFoAUvMlEnOD7Jnhcvkpg2dVRTp4XevgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRCMjQwMTBCODZBM0ZFODgwNTkxOTQ1Qzc3MkVBRDEx
MEIyMTk3QThCNzc1NDgwNTIzODhEODNBNjc5RUQ2LzAvQkNDOTQ0OUNFMEZCMjY3
ODVDQkU0QTYwRDlENTUxNEU5RTE3N0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0M5NDQ5Q0UwRkIyNjc4NUNC
RTRBNjBEOUQ1NTE0RTlFMTc3QUY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JEQjI0MDEwQjg2QTNGRTg4MDU5MTk0NUM3NzJFQUQxMTBCMjE5N0E4
Qjc3NTQ4MDUyMzg4RDgzQTY3OUVENi8wLzMyMzAzMDJlMzkyZTM5MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICV4wDQYJ
KoZIhvcNAQELBQADggEBABjsdl6fP5JZ5eypyzwqTAlBxdGFGieKQV4dE8R9R2JN
0B69KZBW7hcNvBvCf1JKS17hG/xI5LpWrBFnPn87oclMxvCr5PAhK9jRUTTN9vg5
weXufOyAiOE3+cks1SNW9Kt0wvszAUYAXtDq+yGn23BiV4naM6IM/pCnNlRMi2of
gqWym3JpOBKCv+ZhS2EJDQfbwtU1sqmpF+9Jop6ZndHF0iXoCc9lXYPnZsSDxces
3InG0VgJzM2IR83qzXrnNtCztaNvzyJ+3AxFay+hZocIH7ubJlmQi25w1wdHlunf
CBJbTWEYZm5B8OY9ZC02MJdzlmuBNgtzJtQq6FyOoTQ=
-----END CERTIFICATE-----
Generated at Sat May 11 08:02:23 2024 by rpki-client on console-fra.rpki-client.org