Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135392e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3135392e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          xnnqST+qzcivTwnkhlopz66Y5h327m8jF+7KbzF0HBs=
Subject key identifier:   FA:41:1A:96:5C:D3:C7:9D:00:6B:6A:55:EE:E8:26:BD:68:D8:06:95
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       600C9234D19D318A58B683B6E8B3D1C96631E502
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135392e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:07 +0000
ROA not before:           Tue 13 Aug 2024 16:35:07 +0000
ROA not after:            Tue 12 Aug 2025 16:40:07 +0000
asID:                     13999
IP address blocks:        200.77.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0c:92:34:d1:9d:31:8a:58:b6:83:b6:e8:b3:d1:c9:66:31:e5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:07 2024 GMT
            Not After : Aug 12 16:40:07 2025 GMT
        Subject: CN=FA411A965CD3C79D006B6A55EEE826BD68D80695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:4b:ef:52:47:3f:bf:a0:94:e8:d7:86:15:
                    7e:5a:d5:f6:28:79:cb:64:bb:88:33:99:aa:cb:4a:
                    e5:f2:0c:fc:97:aa:ca:0b:35:44:42:c6:8d:fb:98:
                    0b:76:4d:6d:cb:10:c8:57:f2:a3:df:7e:de:89:7b:
                    2e:17:9e:3b:aa:5d:d5:6f:bc:c5:cf:a8:0b:a2:76:
                    13:91:0b:50:e8:6a:42:92:d5:a8:cf:f2:88:7f:c5:
                    df:db:45:7a:fd:f5:25:45:9b:83:5b:8f:69:03:38:
                    0f:aa:68:4c:d6:9f:ad:d1:7c:35:86:06:94:f6:08:
                    b3:01:1c:91:e4:35:5d:a3:ec:e4:f6:b0:96:f8:e3:
                    94:8d:4d:5c:18:ea:a8:91:69:6a:c5:48:4d:b9:45:
                    02:25:87:35:ab:af:f2:4e:34:cc:e6:e2:d2:f3:ca:
                    20:f4:0d:e3:a6:e8:22:19:b0:92:25:b2:56:23:cb:
                    31:fb:ff:07:98:0b:59:38:35:bf:e8:ca:a7:d5:f7:
                    90:9e:5f:00:46:b3:ee:22:d1:17:d2:09:ac:50:10:
                    76:70:20:62:1e:e7:d2:f3:5b:af:a4:ac:59:c0:dd:
                    7a:ba:57:80:88:a7:b0:18:d1:bc:b6:db:a0:7a:db:
                    e0:ae:7c:5c:a7:02:01:ea:6a:20:eb:f2:d3:14:33:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:1A:96:5C:D3:C7:9D:00:6B:6A:55:EE:E8:26:BD:68:D8:06:95
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135392e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:89:9c:55:59:11:a6:80:b7:c1:70:42:43:41:b4:c6:f7:
         cd:0f:88:8a:5a:d4:fd:8b:f7:45:f0:85:55:e5:7c:90:bc:40:
         a9:e7:51:d5:9b:10:a6:1b:a5:52:46:d9:be:5c:3d:cb:21:38:
         d3:55:e0:45:42:88:f3:9b:e0:4c:4d:b8:03:af:d0:86:b2:f4:
         97:4e:99:5c:2d:0a:a5:5c:82:b9:af:ef:b9:7f:5d:37:a9:ff:
         20:75:92:6a:1d:57:c0:30:73:00:3f:c5:3a:50:bd:2f:cf:b2:
         ed:9f:61:9d:50:c1:1d:4b:f6:91:7a:4f:a3:e3:cc:43:97:0e:
         5c:4e:d2:52:7f:84:11:02:99:d2:5d:3a:c3:f1:f5:90:f4:0c:
         9c:dc:8f:d5:4e:0f:bf:52:fd:d5:38:ce:37:4d:85:51:06:03:
         04:6d:5f:51:82:82:e8:9b:31:d1:db:c5:2b:13:e5:55:eb:c9:
         68:e3:91:25:1f:10:ec:72:70:76:61:2e:63:39:11:03:b7:c4:
         8a:62:85:3e:bd:b2:15:42:94:75:b0:8a:91:58:c2:48:49:16:
         4e:73:3a:3f:89:81:f2:96:61:22:00:c0:ce:f8:ed:e1:df:da:
         c4:3f:a5:fe:c8:a5:48:e2:d5:94:e2:8a:40:0c:13:0d:4b:95:
         6f:66:53:85
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYAySNNGdMYpYtoO26LPRyWYx5QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3NzFCMkQzMDlCMDVCQjhDMkYwRUEzNkZGMTc1MDFF
MjQyQTE5RTAeFw0yNDA4MTMxNjM1MDdaFw0yNTA4MTIxNjQwMDdaMDMxMTAvBgNV
BAMTKEZBNDExQTk2NUNEM0M3OUQwMDZCNkE1NUVFRTgyNkJENjhEODA2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VUvvUkc/v6CU6NeGFX5a1fYo
ectku4gzmarLSuXyDPyXqsoLNURCxo37mAt2TW3LEMhX8qPfft6Jey4XnjuqXdVv
vMXPqAuidhORC1DoakKS1ajP8oh/xd/bRXr99SVFm4Nbj2kDOA+qaEzWn63RfDWG
BpT2CLMBHJHkNV2j7OT2sJb445SNTVwY6qiRaWrFSE25RQIlhzWrr/JONMzm4tLz
yiD0DeOm6CIZsJIlslYjyzH7/weYC1k4Nb/oyqfV95CeXwBGs+4i0RfSCaxQEHZw
IGIe59LzW6+krFnA3Xq6V4CIp7AY0by226B62+CufFynAgHqaiDr8tMUMwvTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+kEallzTx50Aa2pV7ugmvWjYBpUwHwYDVR0j
BBgwFoAU6XcbLTCbBbuMLw6jb/F1AeJCoZ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvRTk3NzFCMkQzMDlCMDVC
QjhDMkYwRUEzNkZGMTc1MDFFMjQyQTE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTc3MUIyRDMwOUIwNUJCOEMy
RjBFQTM2RkYxNzUwMUUyNDJBMTlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzczNzJlMzEzNTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhNnzAN
BgkqhkiG9w0BAQsFAAOCAQEATRSJnFVZEaaAt8FwQkNBtMb3zQ+IilrU/Yv3RfCF
VeV8kLxAqedR1ZsQphulUkbZvlw9yyE401XgRUKI85vgTE24A6/QhrL0l06ZXC0K
pVyCua/vuX9dN6n/IHWSah1XwDBzAD/FOlC9L8+y7Z9hnVDBHUv2kXpPo+PMQ5cO
XE7SUn+EEQKZ0l06w/H1kPQMnNyP1U4Pv1L91TjON02FUQYDBG1fUYKC6Jsx0dvF
KxPlVevJaOORJR8Q7HJwdmEuYzkRA7fEimKFPr2yFUKUdbCKkVjCSEkWTnM6P4mB
8pZhIgDAzvjt4d/axD+l/silSOLVlOKKQAwTDUuVb2ZThQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:30 2024 by rpki-client on console-fra.rpki-client.org