Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e382e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e382e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Cv0J222S4MfBu8VnHO9W1fhZLC6LfDnSQjqXLVx8kNk=
Subject key identifier:   A9:4D:22:D9:CD:81:BC:85:02:58:BE:E1:95:36:97:41:CC:3A:F1:FD
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       2CC083FC5452B92A1D1B5EAA6061517719079574
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e382e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:00 +0000
ROA not before:           Tue 05 Mar 2024 17:54:00 +0000
ROA not after:            Tue 04 Mar 2025 17:59:00 +0000
asID:                     18747
IP address blocks:        200.73.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:83:fc:54:52:b9:2a:1d:1b:5e:aa:60:61:51:77:19:07:95:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:00 2024 GMT
            Not After : Mar  4 17:59:00 2025 GMT
        Subject: CN=A94D22D9CD81BC850258BEE195369741CC3AF1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:88:f3:e0:73:37:6e:f1:3c:dd:6a:e1:46:
                    45:47:15:10:de:fb:a7:f0:92:82:8c:15:0f:d5:0a:
                    9d:2b:2e:06:6c:4e:79:7f:f0:6a:58:d4:ee:61:4c:
                    90:9c:bd:0b:f0:60:01:58:e8:6c:bc:2f:6f:11:3c:
                    ae:f1:52:fb:4e:ed:45:1d:89:3f:be:4d:b4:d2:1d:
                    b2:14:b1:60:6b:64:f6:a1:c2:42:87:39:ba:ac:c3:
                    53:1d:fb:c9:95:ee:b0:5b:d7:aa:0c:4c:a8:2a:c8:
                    f9:ac:b3:3e:0b:db:88:fd:65:a9:d8:16:27:59:a2:
                    a0:3f:f2:6b:be:96:4f:56:4b:5e:af:86:61:7f:ad:
                    6e:f1:32:a1:79:9f:e2:2e:02:c5:9d:e0:cc:10:fe:
                    c1:eb:aa:06:c2:a2:3f:7d:71:23:de:27:4a:32:a1:
                    15:28:ea:6f:df:d9:66:b5:c8:27:3f:90:5a:6b:f0:
                    af:c4:c1:b9:90:ee:41:96:39:48:b4:53:81:69:64:
                    b9:81:80:35:ae:4f:09:aa:10:cd:91:5f:55:09:f1:
                    58:ba:7a:34:39:86:55:b3:71:05:8b:43:51:b9:4e:
                    77:f5:70:c0:8a:f6:dc:9e:2d:94:40:10:2a:57:94:
                    9b:55:6e:92:92:22:97:c3:43:44:e1:d1:be:45:c7:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:22:D9:CD:81:BC:85:02:58:BE:E1:95:36:97:41:CC:3A:F1:FD
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e382e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:07:e5:df:e3:ff:9d:22:68:63:ae:c6:82:32:d4:bf:da:e4:
         9a:6d:fd:0f:39:dc:c8:d7:5f:fb:78:a7:88:1c:bb:76:db:da:
         14:2a:6d:72:ed:6e:a2:5d:50:2b:db:b5:e6:07:20:df:5e:24:
         07:43:76:c8:75:e9:7a:78:31:26:89:06:78:c9:87:85:39:b2:
         42:11:56:c6:55:7f:bc:9a:41:9e:36:94:bb:a5:80:c2:a4:09:
         bf:a4:d6:91:bf:58:56:27:0d:a3:4b:60:00:6f:05:22:f8:c0:
         20:bb:00:87:62:c0:5d:74:28:f9:b1:9b:8d:5a:dc:ab:79:bc:
         2d:9e:ae:c9:ef:a5:88:54:e3:15:97:7e:30:4b:21:da:bb:fb:
         2e:40:9c:97:c3:91:56:64:59:ba:44:02:6b:66:89:9a:42:67:
         dd:c6:eb:c1:e5:bc:15:99:9f:85:33:ab:39:fc:32:d2:10:5d:
         94:81:d8:06:59:a8:27:c0:5b:fd:ac:19:9e:3a:0e:29:ef:68:
         18:ff:98:9c:3b:50:2b:3b:93:4f:99:f5:c3:0c:37:ee:d8:57:
         59:8f:d7:91:96:6b:7c:0a:ac:84:d8:27:df:5a:fe:82:c1:de:
         b2:b2:55:ad:d1:41:93:fb:68:0f:11:f7:20:13:78:63:36:c8:
         80:0e:90:46
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIULMCD/FRSuSodG16qYGFRdxkHlXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MDBaFw0yNTAzMDQxNzU5MDBaMDMxMTAvBgNV
BAMTKEE5NEQyMkQ5Q0Q4MUJDODUwMjU4QkVFMTk1MzY5NzQxQ0MzQUYxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnYjz4HM3bvE83WrhRkVHFRDe
+6fwkoKMFQ/VCp0rLgZsTnl/8GpY1O5hTJCcvQvwYAFY6Gy8L28RPK7xUvtO7UUd
iT++TbTSHbIUsWBrZPahwkKHObqsw1Md+8mV7rBb16oMTKgqyPmssz4L24j9ZanY
FidZoqA/8mu+lk9WS16vhmF/rW7xMqF5n+IuAsWd4MwQ/sHrqgbCoj99cSPeJ0oy
oRUo6m/f2Wa1yCc/kFpr8K/EwbmQ7kGWOUi0U4FpZLmBgDWuTwmqEM2RX1UJ8Vi6
ejQ5hlWzcQWLQ1G5Tnf1cMCK9tyeLZRAECpXlJtVbpKSIpfDQ0Th0b5Fxxv1AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUqU0i2c2BvIUCWL7hlTaXQcw68f0wHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzczMzJlMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyEkIMA0GCSqG
SIb3DQEBCwUAA4IBAQB2B+Xf4/+dImhjrsaCMtS/2uSabf0POdzI11/7eKeIHLt2
29oUKm1y7W6iXVAr27XmByDfXiQHQ3bIdel6eDEmiQZ4yYeFObJCEVbGVX+8mkGe
NpS7pYDCpAm/pNaRv1hWJw2jS2AAbwUi+MAguwCHYsBddCj5sZuNWtyrebwtnq7J
76WIVOMVl34wSyHau/suQJyXw5FWZFm6RAJrZomaQmfdxuvB5bwVmZ+FM6s5/DLS
EF2UgdgGWagnwFv9rBmeOg4p72gY/5icO1ArO5NPmfXDDDfu2FdZj9eRlmt8CqyE
2CffWv6Cwd6yslWt0UGT+2gPEfcgE3hjNsiADpBG
-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org