Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa
File:                     3230302e362e31372e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          XEAMkgrGaHU2ai24vkp05HvOuX8MO0Qa7D5jORcDw0E=
Subject key identifier:   15:67:2D:BC:41:54:02:1A:DC:35:03:79:9C:EB:6F:03:7C:29:91:26
Certificate issuer:       /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
Certificate serial:       14DE3B4F785EBF6C655F69840DF7520AF681B972
Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:06:07 +0000
ROA not before:           Tue 05 Mar 2024 18:01:07 +0000
ROA not after:            Tue 04 Mar 2025 18:06:07 +0000
asID:                     23031
IP address blocks:        200.6.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:de:3b:4f:78:5e:bf:6c:65:5f:69:84:0d:f7:52:0a:f6:81:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
        Validity
            Not Before: Mar  5 18:01:07 2024 GMT
            Not After : Mar  4 18:06:07 2025 GMT
        Subject: CN=15672DBC4154021ADC3503799CEB6F037C299126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:0a:83:23:1d:d8:95:e4:72:46:13:c4:48:
                    87:58:c2:40:60:61:28:57:23:b2:6f:94:a7:0f:52:
                    6d:f7:4f:9e:49:cc:af:75:39:b9:c7:ee:0d:0d:6c:
                    d8:03:f8:ea:00:34:fd:7a:10:4f:54:e7:db:89:e3:
                    f3:de:1a:3e:c6:8e:21:01:a9:f6:a6:74:81:fd:54:
                    5b:10:fa:9e:6c:6d:a5:25:db:1f:e5:ae:27:63:6c:
                    8b:7b:df:4d:54:ae:9e:89:17:73:74:03:ff:14:e2:
                    9d:46:ae:01:50:0e:b7:d5:5e:6a:35:33:73:5e:fb:
                    2e:ad:58:72:77:2d:85:b0:72:da:d0:df:44:e6:56:
                    65:24:2d:1d:fd:e6:12:d9:ed:8d:56:7b:17:e3:f9:
                    57:9e:9c:98:7a:a8:05:95:ef:f9:09:d4:81:e3:e1:
                    73:e9:a0:41:90:33:96:fe:12:45:36:89:84:2d:6f:
                    f0:a1:31:90:8e:88:00:c5:5a:32:dc:53:81:da:7a:
                    dc:60:11:31:de:4d:71:64:56:80:f2:89:c7:cc:18:
                    db:f3:8a:db:81:68:3d:f2:de:73:6b:e3:cb:45:16:
                    8b:06:d3:9d:e2:9a:32:dc:c9:f7:47:05:5b:aa:61:
                    16:18:09:49:e5:27:35:72:7c:29:85:f4:c2:13:1c:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:2D:BC:41:54:02:1A:DC:35:03:79:9C:EB:6F:03:7C:29:91:26
            X509v3 Authority Key Identifier:
                keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:5e:aa:af:08:00:c1:c6:34:b9:71:03:10:ca:f9:98:2d:
         ea:ad:b9:86:8f:c1:92:b6:98:82:4f:01:1a:a7:32:0d:bf:23:
         c7:4f:20:f1:77:3f:9d:a3:f3:d5:19:8e:81:6c:b1:d4:74:bd:
         8e:88:7f:90:58:2d:82:a5:43:8f:bd:35:bd:ce:67:cc:0b:5a:
         fa:e7:1d:61:5c:8b:c4:19:c3:0f:f1:06:2f:0d:07:51:15:16:
         0d:4a:38:21:f1:5d:30:97:1b:6c:72:32:fe:95:8c:a1:0b:b6:
         04:71:c4:01:c5:39:8b:2e:28:5b:59:cb:d8:6a:74:ee:13:35:
         38:9f:a9:10:7d:1d:fb:26:f1:19:0a:12:80:cb:bb:fb:d1:04:
         83:b6:a5:73:71:b9:93:4a:6b:5a:67:ec:2d:40:6d:27:42:69:
         07:75:66:8d:84:d8:96:04:f7:79:c9:7c:b2:1a:22:bf:fd:a2:
         31:b1:44:72:4a:ca:8b:0b:d5:63:9e:c8:26:b8:9b:ef:e2:f5:
         ac:28:5a:b4:86:16:e2:45:19:b3:89:01:d5:80:be:a0:d7:5a:
         7c:b7:fd:d2:2b:c1:90:85:9d:93:36:69:39:af:4f:fb:52:9b:
         2f:40:68:7f:68:2c:b7:37:98:28:5b:55:de:5a:41:2a:e5:40:
         3c:72:ed:db
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFN47T3hev2xlX2mEDfdSCvaBuXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5
Q0QwODgzMzAeFw0yNDAzMDUxODAxMDdaFw0yNTAzMDQxODA2MDdaMDMxMTAvBgNV
BAMTKDE1NjcyREJDNDE1NDAyMUFEQzM1MDM3OTlDRUI2RjAzN0MyOTkxMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW0wqDIx3YleRyRhPESIdYwkBg
YShXI7JvlKcPUm33T55JzK91ObnH7g0NbNgD+OoANP16EE9U59uJ4/PeGj7GjiEB
qfamdIH9VFsQ+p5sbaUl2x/lridjbIt7301Urp6JF3N0A/8U4p1GrgFQDrfVXmo1
M3Ne+y6tWHJ3LYWwctrQ30TmVmUkLR395hLZ7Y1Wexfj+VeenJh6qAWV7/kJ1IHj
4XPpoEGQM5b+EkU2iYQtb/ChMZCOiADFWjLcU4HaetxgETHeTXFkVoDyicfMGNvz
ituBaD3y3nNr48tFFosG053imjLcyfdHBVuqYRYYCUnlJzVyfCmF9MITHMDjAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUFWctvEFUAhrcNQN5nOtvA3wpkSYwHwYDVR0j
BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz
N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1
Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1
M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB
MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wLzMyMzAzMDJlMzYyZTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAYRMA0GCSqG
SIb3DQEBCwUAA4IBAQAD9l6qrwgAwcY0uXEDEMr5mC3qrbmGj8GStpiCTwEapzIN
vyPHTyDxdz+do/PVGY6BbLHUdL2OiH+QWC2CpUOPvTW9zmfMC1r65x1hXIvEGcMP
8QYvDQdRFRYNSjgh8V0wlxtscjL+lYyhC7YEccQBxTmLLihbWcvYanTuEzU4n6kQ
fR37JvEZChKAy7v70QSDtqVzcbmTSmtaZ+wtQG0nQmkHdWaNhNiWBPd5yXyyGiK/
/aIxsURySsqLC9VjnsgmuJvv4vWsKFq0hhbiRRmziQHVgL6g11p8t/3SK8GQhZ2T
Nmk5r0/7UpsvQGh/aCy3N5goW1XeWkEq5UA8cu3b
-----END CERTIFICATE-----
Generated at Tue May 7 15:12:17 2024 by rpki-client on console-fra.rpki-client.org