Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e38342e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e38342e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Aglw0hlOGIcYwwjnTN1L13ns1MMRYrCMkuSAWT8UN0I=
Subject key identifier:   B0:0A:69:49:C6:13:3A:B5:E7:B0:A0:73:F4:50:64:C2:BE:58:13:A5
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0DE227557BC29D14D3EEB5A6B7B3CFA96076700A
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e38342e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     18747
IP address blocks:        200.73.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e2:27:55:7b:c2:9d:14:d3:ee:b5:a6:b7:b3:cf:a9:60:76:70:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=B00A6949C6133AB5E7B0A073F45064C2BE5813A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:ae:a7:9e:64:5e:03:37:c3:da:2a:ef:55:
                    d9:14:d4:e9:57:88:5e:79:30:a7:e7:87:c2:22:9c:
                    05:43:b9:17:14:ff:15:0c:9f:f4:45:a5:6f:5b:78:
                    e7:5e:f8:5d:18:73:f1:59:4e:8c:bb:57:a5:0e:80:
                    b0:b7:0f:ab:aa:fd:c5:a1:f6:d3:c4:d9:cc:f9:3b:
                    7b:e8:d5:55:43:f2:6e:76:6a:b0:6c:07:a3:f1:49:
                    40:5b:78:ec:a8:6c:08:9b:48:80:76:bc:ce:55:22:
                    f2:12:ec:af:86:fe:03:05:ba:cd:83:cb:ed:98:62:
                    83:91:a8:9c:4b:f0:3b:b7:75:fe:d4:97:81:5c:b9:
                    e4:d1:7d:61:51:92:08:19:08:3b:26:4c:2e:60:9a:
                    18:86:8f:e4:d3:51:ff:db:ec:90:b2:2d:8a:50:dd:
                    18:3b:b0:6d:2e:18:69:b4:3f:d0:3a:fa:b9:7d:61:
                    2d:d2:74:a0:05:91:8d:ac:43:9a:58:6f:03:8d:76:
                    a3:5b:b8:72:a0:a7:ec:c0:8f:9e:04:97:45:f0:9a:
                    d9:b6:49:28:fe:b7:93:b6:b4:1a:8c:6f:c7:dd:02:
                    1a:a5:32:e7:1a:63:44:07:30:a2:88:27:6f:db:c8:
                    a8:e3:55:c2:32:76:8d:dc:bf:3a:c7:db:1c:03:4e:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0A:69:49:C6:13:3A:B5:E7:B0:A0:73:F4:50:64:C2:BE:58:13:A5
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e38342e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:e7:05:3f:b6:9e:ea:78:98:44:f7:ad:33:a1:ef:04:71:
         49:12:54:74:c7:bc:03:15:07:90:c4:0d:e9:b5:3c:9d:92:4d:
         f5:a1:27:dc:d7:1c:ae:c4:47:fb:f2:50:ae:0d:a9:f1:69:df:
         b6:96:52:fd:56:4c:18:7e:47:55:1e:51:c9:b7:04:16:63:27:
         76:eb:13:a7:81:e9:20:96:ac:bd:83:33:04:48:e7:69:c5:c8:
         b8:1f:a8:b3:b3:37:3b:b9:ce:20:a3:f8:96:db:17:3c:1a:1b:
         85:a0:e3:75:1e:c3:6d:df:dc:78:c6:39:fb:74:34:e2:b5:dd:
         3d:65:d4:6d:c5:38:43:9a:98:f4:11:7a:46:0e:66:90:9a:3b:
         69:76:fd:87:88:13:ea:90:bf:98:7c:f3:bc:97:af:be:21:ee:
         ee:7b:30:f8:65:f4:bd:78:36:29:35:23:01:52:b7:71:0c:23:
         1d:ae:d2:dd:8c:40:02:ca:3f:93:7f:7a:b0:cb:4b:4b:9a:b3:
         69:68:9e:56:86:be:00:fa:08:a5:24:f3:b8:1a:02:35:9b:d7:
         9b:a9:ed:da:76:7b:38:95:80:f4:8d:ee:a6:9e:71:78:0d:ae:
         98:74:4f:1c:36:c5:5a:4a:ec:4b:2c:02:b2:55:46:94:0c:4e:
         ed:a2:f9:da
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDeInVXvCnRTT7rWmt7PPqWB2cAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MTFaFw0yNTAzMDQxNzU5MTFaMDMxMTAvBgNV
BAMTKEIwMEE2OTQ5QzYxMzNBQjVFN0IwQTA3M0Y0NTA2NEMyQkU1ODEzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO966nnmReAzfD2irvVdkU1OlX
iF55MKfnh8IinAVDuRcU/xUMn/RFpW9beOde+F0Yc/FZToy7V6UOgLC3D6uq/cWh
9tPE2cz5O3vo1VVD8m52arBsB6PxSUBbeOyobAibSIB2vM5VIvIS7K+G/gMFus2D
y+2YYoORqJxL8Du3df7Ul4FcueTRfWFRkggZCDsmTC5gmhiGj+TTUf/b7JCyLYpQ
3Rg7sG0uGGm0P9A6+rl9YS3SdKAFkY2sQ5pYbwONdqNbuHKgp+zAj54El0Xwmtm2
SSj+t5O2tBqMb8fdAhqlMucaY0QHMKKIJ2/byKjjVcIydo3cvzrH2xwDTojPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsAppScYTOrXnsKBz9FBkwr5YE6UwHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzczMzJlMzgzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADISVQwDQYJ
KoZIhvcNAQELBQADggEBAAOi5wU/tp7qeJhE960zoe8EcUkSVHTHvAMVB5DEDem1
PJ2STfWhJ9zXHK7ER/vyUK4NqfFp37aWUv1WTBh+R1UeUcm3BBZjJ3brE6eB6SCW
rL2DMwRI52nFyLgfqLOzNzu5ziCj+JbbFzwaG4Wg43Uew23f3HjGOft0NOK13T1l
1G3FOEOamPQRekYOZpCaO2l2/YeIE+qQv5h887yXr74h7u57MPhl9L14Nik1IwFS
t3EMIx2u0t2MQALKP5N/erDLS0uas2lonlaGvgD6CKUk87gaAjWb15up7dp2eziV
gPSN7qaecXgNrph0Txw2xVpK7EssArJVRpQMTu2i+do=
-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org