Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e33332e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e33332e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          KCydPaFUbQwTOfvRnHKfzhLnn8bLYO988bhieofaFCA=
Subject key identifier:   47:C9:BE:57:41:6A:8C:33:C2:D6:40:18:C8:53:C1:D8:E5:D0:3C:3F
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3139BB22DE47269A383B3E891F8C13565B43FFD8
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e33332e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:08 +0000
ROA not before:           Tue 05 Mar 2024 17:54:08 +0000
ROA not after:            Tue 04 Mar 2025 17:59:08 +0000
asID:                     18747
IP address blocks:        200.73.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:bb:22:de:47:26:9a:38:3b:3e:89:1f:8c:13:56:5b:43:ff:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:08 2024 GMT
            Not After : Mar  4 17:59:08 2025 GMT
        Subject: CN=47C9BE57416A8C33C2D64018C853C1D8E5D03C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:32:c3:c2:d2:7c:bf:60:3c:9d:9e:4a:20:
                    f5:64:83:90:06:e1:d1:dd:91:5f:80:5c:e4:f7:c3:
                    c7:cd:e9:ee:79:52:f6:45:a9:b5:82:86:77:78:ac:
                    46:eb:04:a7:3a:39:b9:2c:2a:d2:f3:13:31:f4:1c:
                    f2:f6:60:0a:d0:91:23:02:b4:e3:32:9d:f5:ad:8a:
                    a2:bc:1d:62:5f:d0:38:61:89:56:b2:97:c4:a2:1b:
                    64:07:ff:fe:44:fc:8c:0a:3a:24:85:8c:bd:a5:25:
                    5b:de:4c:52:bd:8b:0d:ef:64:54:b9:9e:e9:15:75:
                    09:99:fe:80:07:95:cb:3a:15:b3:47:a3:b1:9b:ec:
                    44:2c:d2:cf:1e:47:1d:b2:14:6f:cd:26:99:b3:1a:
                    97:58:de:45:c6:01:89:4f:93:7b:8a:b8:2d:88:63:
                    50:c2:1c:90:bd:74:8f:57:86:65:e2:99:12:0d:42:
                    eb:60:64:3a:bc:26:04:e0:41:9f:b8:b9:1d:68:b9:
                    3b:36:e6:93:b4:d1:2e:7b:9e:6f:e7:a9:ff:7d:ed:
                    4c:6a:f5:e1:fc:46:0e:1e:ba:5c:74:22:02:0a:ac:
                    a7:d1:1c:82:ab:4c:5f:21:f7:6d:c3:a3:80:cf:90:
                    7c:2c:7e:53:70:c9:f8:18:02:4c:bd:07:3b:09:28:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C9:BE:57:41:6A:8C:33:C2:D6:40:18:C8:53:C1:D8:E5:D0:3C:3F
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e33332e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:77:12:23:cb:4c:f6:61:b0:4e:86:58:98:56:ad:00:36:
         f8:f2:e3:1f:bc:67:91:9d:57:2d:08:b1:21:d5:63:eb:ed:49:
         83:f0:a3:ef:9f:f9:a4:4c:d3:a7:f2:ed:5d:58:15:65:3c:2b:
         0d:6c:a1:e5:c2:29:42:10:2c:6c:00:2e:38:cd:1d:3a:af:30:
         a1:88:b2:46:7e:19:0e:97:a4:fe:c0:a1:dd:4f:8f:59:df:55:
         fa:bd:aa:64:35:bb:63:74:98:17:a2:92:5e:a3:e5:4c:51:a5:
         65:bf:09:1a:37:3c:ed:60:07:1a:98:44:5a:cf:ec:61:11:5d:
         1a:43:9f:1d:f9:5b:03:86:08:62:02:93:ea:e3:3d:93:1c:e3:
         06:d5:0c:a6:24:9f:55:6d:19:39:2e:2a:45:07:67:87:00:c1:
         4a:da:3c:da:11:52:85:71:ac:3b:57:b2:dd:74:48:bc:10:20:
         9b:03:22:58:c9:0c:f9:76:a0:e1:2b:dc:5c:9e:79:d8:64:8a:
         11:e3:b3:21:28:c0:19:5f:23:32:3e:ed:67:08:46:92:10:78:
         f4:df:01:e2:05:af:4a:5e:ee:98:3e:85:c7:37:11:ee:4a:36:
         11:77:c0:72:51:ac:92:65:47:a1:8b:23:ba:39:0f:0c:66:3f:
         f7:99:38:fb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMTm7It5HJpo4Oz6JH4wTVltD/9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MDhaFw0yNTAzMDQxNzU5MDhaMDMxMTAvBgNV
BAMTKDQ3QzlCRTU3NDE2QThDMzNDMkQ2NDAxOEM4NTNDMUQ4RTVEMDNDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzzLDwtJ8v2A8nZ5KIPVkg5AG
4dHdkV+AXOT3w8fN6e55UvZFqbWChnd4rEbrBKc6ObksKtLzEzH0HPL2YArQkSMC
tOMynfWtiqK8HWJf0DhhiVayl8SiG2QH//5E/IwKOiSFjL2lJVveTFK9iw3vZFS5
nukVdQmZ/oAHlcs6FbNHo7Gb7EQs0s8eRx2yFG/NJpmzGpdY3kXGAYlPk3uKuC2I
Y1DCHJC9dI9XhmXimRINQutgZDq8JgTgQZ+4uR1ouTs25pO00S57nm/nqf997Uxq
9eH8Rg4eulx0IgIKrKfRHIKrTF8h923Do4DPkHwsflNwyfgYAky9BzsJKDX9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUR8m+V0FqjDPC1kAYyFPB2OXQPD8wHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzczMzJlMzMzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADISSEwDQYJ
KoZIhvcNAQELBQADggEBAFqWdxIjy0z2YbBOhliYVq0ANvjy4x+8Z5GdVy0IsSHV
Y+vtSYPwo++f+aRM06fy7V1YFWU8Kw1soeXCKUIQLGwALjjNHTqvMKGIskZ+GQ6X
pP7Aod1Pj1nfVfq9qmQ1u2N0mBeikl6j5UxRpWW/CRo3PO1gBxqYRFrP7GERXRpD
nx35WwOGCGICk+rjPZMc4wbVDKYkn1VtGTkuKkUHZ4cAwUraPNoRUoVxrDtXst10
SLwQIJsDIljJDPl2oOEr3FyeedhkihHjsyEowBlfIzI+7WcIRpIQePTfAeIFr0pe
7pg+hcc3Ee5KNhF3wHJRrJJlR6GLI7o5DwxmP/eZOPs=
-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org