Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3230302e38352e302e302f31392d3234203d3e203137303739.roa
File:                     3230302e38352e302e302f31392d3234203d3e203137303739.roa (raw, json)
Hash identifier:          NRtz/cBIOc/Prp62vltijXPTuPODw4X3EiFXSYuEdOY=
Subject key identifier:   F9:A1:7C:4C:A6:CF:DF:9E:9D:88:E3:18:33:4A:E9:FE:D3:E0:E5:A5
Certificate issuer:       /CN=7E430D26B905E716C96769CDDDB35113F08000A7
Certificate serial:       0196111EDE5CAD0AEE8EAC0A99F9C52666322B47
Authority key identifier: 7E:43:0D:26:B9:05:E7:16:C9:67:69:CD:DD:B3:51:13:F0:80:00:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3230302e38352e302e302f31392d3234203d3e203137303739.roa
Signing time:             Tue 05 Mar 2024 18:22:38 +0000
ROA not before:           Tue 05 Mar 2024 18:17:38 +0000
ROA not after:            Tue 04 Mar 2025 18:22:38 +0000
asID:                     17079
IP address blocks:        200.85.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 20:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:1e:de:5c:ad:0a:ee:8e:ac:0a:99:f9:c5:26:66:32:2b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E430D26B905E716C96769CDDDB35113F08000A7
        Validity
            Not Before: Mar  5 18:17:38 2024 GMT
            Not After : Mar  4 18:22:38 2025 GMT
        Subject: CN=F9A17C4CA6CFDF9E9D88E318334AE9FED3E0E5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:dc:71:77:09:28:f8:41:91:f3:f1:a7:dc:
                    97:88:82:0e:45:e7:af:b4:07:9f:29:17:93:13:50:
                    24:8f:b4:f0:1b:82:e2:be:cc:ce:4d:d8:ab:f7:2b:
                    d1:c4:03:66:98:2d:1c:cb:8b:28:bf:9d:b9:87:df:
                    b8:72:b7:ab:fa:cd:c2:2d:88:dc:65:af:f0:07:57:
                    68:fc:2d:40:ba:d0:f8:9f:58:0c:bb:f7:46:93:df:
                    e5:82:dc:81:fb:4c:7e:f8:ff:30:02:46:df:c6:9a:
                    4e:a0:12:cb:dc:83:c2:1e:b9:bd:10:d2:35:b7:ad:
                    07:f5:a7:f6:32:fd:25:13:f0:dc:31:94:df:96:69:
                    a4:f5:7f:8d:a4:08:ab:c2:26:ec:1f:db:2c:24:a7:
                    07:09:61:fe:44:9d:b1:ec:39:50:e7:0f:52:ad:b7:
                    ac:d6:3a:4a:95:95:30:98:a6:13:8b:8e:a0:ea:e1:
                    8f:5d:d6:1c:95:51:d8:04:ef:89:70:6c:51:97:5f:
                    f6:fa:38:f7:75:d7:1a:a7:ab:ae:66:a2:8b:d2:b4:
                    d0:b0:93:99:8b:0f:2b:11:10:2f:b4:9c:66:1e:2d:
                    de:db:76:58:6b:2e:cc:c2:86:80:7d:80:5a:b7:1b:
                    8c:c0:8f:16:34:9d:5c:39:37:91:64:ea:4d:24:01:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:7C:4C:A6:CF:DF:9E:9D:88:E3:18:33:4A:E9:FE:D3:E0:E5:A5
            X509v3 Authority Key Identifier:
                keyid:7E:43:0D:26:B9:05:E7:16:C9:67:69:CD:DD:B3:51:13:F0:80:00:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/7E430D26B905E716C96769CDDDB35113F08000A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E430D26B905E716C96769CDDDB35113F08000A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2E0ADE40F592875F93669F9033FD2584409DDB0AD29A147DC3D8BFF40C4B012/0/3230302e38352e302e302f31392d3234203d3e203137303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:b3:37:74:08:ed:8f:c2:d9:37:6b:e2:05:4d:f6:c0:6e:97:
         3a:a1:b1:a3:35:bd:9e:5d:42:4d:43:d4:11:f1:1c:10:30:ef:
         ee:1b:4c:4f:27:e7:9b:eb:3b:db:eb:00:82:67:7e:4a:59:9d:
         7e:66:b2:2f:78:79:bb:1f:f5:cd:82:17:9d:b3:f9:be:3c:df:
         c1:2a:52:d9:96:50:1d:dc:f8:6c:61:6d:bd:2d:d2:0f:ad:ea:
         8e:cb:79:db:88:b7:53:b4:65:26:3d:e5:a6:1e:a2:86:64:6a:
         6b:5e:69:4e:35:a7:53:e8:38:6f:85:a8:98:19:d5:a0:58:10:
         8e:ee:1e:1d:98:b9:45:cc:96:5c:92:0c:cf:c9:bf:ca:15:80:
         cd:6c:ca:6d:8c:c7:c3:36:95:04:66:64:a8:4d:2d:dd:ce:55:
         2c:c5:31:f0:32:8a:e7:10:e4:1d:58:67:01:f2:34:ad:fb:ae:
         e1:4e:aa:72:54:fb:a9:51:6a:e1:6f:86:a3:ea:ba:a3:e3:eb:
         f3:9a:fa:94:9f:92:43:a8:3f:f3:15:d5:48:e5:72:aa:08:ba:
         dd:18:fc:68:64:8a:39:0e:48:90:6a:9b:8f:c4:03:2f:9e:54:
         40:c0:0f:cc:1e:02:bf:74:10:c7:fc:46:93:60:1c:0c:c0:5f:
         74:46:bd:71
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUAZYRHt5crQrujqwKmfnFJmYyK0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U0MzBEMjZCOTA1RTcxNkM5Njc2OUNERERCMzUxMTNG
MDgwMDBBNzAeFw0yNDAzMDUxODE3MzhaFw0yNTAzMDQxODIyMzhaMDMxMTAvBgNV
BAMTKEY5QTE3QzRDQTZDRkRGOUU5RDg4RTMxODMzNEFFOUZFRDNFMEU1QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tNxxdwko+EGR8/Gn3JeIgg5F
56+0B58pF5MTUCSPtPAbguK+zM5N2Kv3K9HEA2aYLRzLiyi/nbmH37hyt6v6zcIt
iNxlr/AHV2j8LUC60PifWAy790aT3+WC3IH7TH74/zACRt/Gmk6gEsvcg8Ieub0Q
0jW3rQf1p/Yy/SUT8NwxlN+WaaT1f42kCKvCJuwf2ywkpwcJYf5EnbHsOVDnD1Kt
t6zWOkqVlTCYphOLjqDq4Y9d1hyVUdgE74lwbFGXX/b6OPd11xqnq65moovStNCw
k5mLDysREC+0nGYeLd7bdlhrLszChoB9gFq3G4zAjxY0nVw5N5Fk6k0kAVe3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU+aF8TKbP356diOMYM0rp/tPg5aUwHwYDVR0j
BBgwFoAUfkMNJrkF5xbJZ2nN3bNRE/CAAKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMkUwQURFNDBGNTkyODc1RjkzNjY5RjkwMzNGRDI1ODQ0
MDlEREIwQUQyOUExNDdEQzNEOEJGRjQwQzRCMDEyLzAvN0U0MzBEMjZCOTA1RTcx
NkM5Njc2OUNERERCMzUxMTNGMDgwMDBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTQzMEQyNkI5MDVFNzE2Qzk2
NzY5Q0REREIzNTExM0YwODAwMEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDJFMEFERTQwRjU5Mjg3NUY5MzY2OUY5MDMzRkQyNTg0NDA5RERCMEFE
MjlBMTQ3REMzRDhCRkY0MEM0QjAxMi8wLzMyMzAzMDJlMzgzNTJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMTM3MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyFUAMA0GCSqG
SIb3DQEBCwUAA4IBAQCwszd0CO2Pwtk3a+IFTfbAbpc6obGjNb2eXUJNQ9QR8RwQ
MO/uG0xPJ+eb6zvb6wCCZ35KWZ1+ZrIveHm7H/XNgheds/m+PN/BKlLZllAd3Phs
YW29LdIPreqOy3nbiLdTtGUmPeWmHqKGZGprXmlONadT6DhvhaiYGdWgWBCO7h4d
mLlFzJZckgzPyb/KFYDNbMptjMfDNpUEZmSoTS3dzlUsxTHwMornEOQdWGcB8jSt
+67hTqpyVPupUWrhb4aj6rqj4+vzmvqUn5JDqD/zFdVI5XKqCLrdGPxoZIo5DkiQ
apuPxAMvnlRAwA/MHgK/dBDH/EaTYBwMwF90Rr1x
-----END CERTIFICATE-----
Generated at Sat May 4 08:30:36 2024 by rpki-client on console-fra.rpki-client.org