Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa
File:                     3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa (raw, json)
Hash identifier:          qvZ2ZFXphCe6pq0SA5dCZIE6GnCk+956luti5SInKtM=
Subject key identifier:   3F:92:6B:F7:4E:DB:7B:03:61:8D:B2:52:12:9B:E0:C5:EA:09:6B:C8
Certificate issuer:       /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Certificate serial:       011839FA91E1D0BAAD517A3A95FC6A19E5640F99
Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa
Signing time:             Tue 05 Mar 2024 18:08:55 +0000
ROA not before:           Tue 05 Mar 2024 18:03:55 +0000
ROA not after:            Tue 04 Mar 2025 18:08:55 +0000
asID:                     265721
IP address blocks:        200.58.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:18:39:fa:91:e1:d0:ba:ad:51:7a:3a:95:fc:6a:19:e5:64:0f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
        Validity
            Not Before: Mar  5 18:03:55 2024 GMT
            Not After : Mar  4 18:08:55 2025 GMT
        Subject: CN=3F926BF74EDB7B03618DB252129BE0C5EA096BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:05:19:ef:da:ed:0d:37:e2:16:e5:41:df:
                    54:d6:c9:51:d3:6e:f2:d2:f1:66:06:6a:8d:b4:12:
                    c0:0f:b8:68:47:b6:f9:f3:b4:83:46:7c:ea:99:dc:
                    b8:5d:0d:a0:35:99:0f:12:16:da:24:19:ed:1b:f3:
                    fa:96:71:6e:ab:e1:ee:e5:67:4c:2e:4d:05:10:f1:
                    2a:1b:3c:54:55:5a:0a:f2:58:03:18:69:15:f4:9e:
                    71:e0:0c:e0:7a:4a:c6:a0:ce:44:7f:c3:dc:b5:37:
                    9e:c7:87:be:af:02:29:b9:4e:2a:a8:4b:0d:63:ad:
                    8a:64:cc:ac:d0:6d:0b:8a:04:c1:59:34:92:85:0b:
                    92:6b:b4:70:9c:8c:54:58:4b:14:4c:f0:bf:df:db:
                    c0:b5:62:99:4e:e3:3e:b1:9e:a3:66:cc:30:91:2b:
                    13:3c:40:2f:f9:3a:32:de:b2:3d:8d:21:da:9f:c3:
                    cb:27:ad:73:fc:21:58:83:eb:21:b9:39:a7:e2:5e:
                    56:1f:31:de:a4:6d:76:d9:69:ff:2e:a8:38:f2:81:
                    8a:70:fe:11:87:93:46:51:f3:86:f1:68:91:94:48:
                    16:f2:96:de:80:31:44:18:87:f2:45:fc:d8:c0:ec:
                    4a:c2:52:59:b7:0a:4c:60:7a:e7:e0:f7:e1:64:f7:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:92:6B:F7:4E:DB:7B:03:61:8D:B2:52:12:9B:E0:C5:EA:09:6B:C8
            X509v3 Authority Key Identifier:
                keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/3230302e35382e3234302e302f32312d3234203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:ed:88:33:d5:38:2f:19:72:f8:31:c3:54:0d:c9:7b:e2:
         20:46:1f:1f:e9:84:e9:0c:52:28:29:8d:80:c0:64:af:06:cb:
         81:31:6d:7e:51:55:66:ae:91:7a:88:c3:a2:b9:38:94:1d:8e:
         57:46:a9:c9:d5:da:6f:c5:f5:5b:34:45:45:d8:88:bf:58:88:
         2e:1c:0b:eb:80:b5:ea:32:79:d9:5b:37:0b:19:95:3b:cd:74:
         b1:5a:c4:fa:7d:91:2a:a8:35:2e:76:97:ed:75:74:b6:03:e7:
         bd:c2:a5:3a:ed:5b:ca:f4:dc:3e:e1:f3:ea:e8:42:05:61:c5:
         ab:14:53:0e:ca:6c:64:86:1d:45:8d:9c:5a:a1:f9:52:5e:ac:
         1a:2a:a3:9f:54:b1:f3:ea:b0:7a:e6:0d:1d:e0:dc:19:90:8b:
         1a:59:50:b4:c2:dc:06:95:4a:ab:74:de:23:51:da:3e:58:7d:
         c0:d5:c9:d9:36:31:d6:a6:bc:be:67:ff:ed:47:90:f2:09:ff:
         14:32:14:fe:a9:9d:c1:72:f4:91:1f:c7:1a:2f:7d:cf:64:ec:
         79:46:0c:9d:39:58:5c:4f:8c:3d:d3:02:ab:9c:b0:fa:0b:ce:
         29:12:9e:4a:da:c9:ec:3f:e3:68:bd:5f:1b:cf:d4:69:a5:3c:
         a3:f9:a8:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUARg5+pHh0LqtUXo6lfxqGeVkD5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY4QzM2ODBENkY4OEI3MkVDMDZGMTMyNkNBQTBBMzQ4
QUU0RkFBOTAeFw0yNDAzMDUxODAzNTVaFw0yNTAzMDQxODA4NTVaMDMxMTAvBgNV
BAMTKDNGOTI2QkY3NEVEQjdCMDM2MThEQjI1MjEyOUJFMEM1RUEwOTZCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdigUZ79rtDTfiFuVB31TWyVHT
bvLS8WYGao20EsAPuGhHtvnztINGfOqZ3LhdDaA1mQ8SFtokGe0b8/qWcW6r4e7l
Z0wuTQUQ8SobPFRVWgryWAMYaRX0nnHgDOB6SsagzkR/w9y1N57Hh76vAim5Tiqo
Sw1jrYpkzKzQbQuKBMFZNJKFC5JrtHCcjFRYSxRM8L/f28C1YplO4z6xnqNmzDCR
KxM8QC/5OjLesj2NIdqfw8snrXP8IViD6yG5OafiXlYfMd6kbXbZaf8uqDjygYpw
/hGHk0ZR84bxaJGUSBbylt6AMUQYh/JF/NjA7ErCUlm3Ckxgeufg9+Fk9zvHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUP5Jr907bewNhjbJSEpvgxeoJa8gwHwYDVR0j
BBgwFoAUL4w2gNb4i3LsBvEybKoKNIrk+qkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTA3MjUwNTU2MjBDMUE1MkYwOUU5REJCQUJFQjNCMDEy
ODAzQjdDMjUzODgxRkM0QTZDMzk0MkYxNUVDNDA3LzAvMkY4QzM2ODBENkY4OEI3
MkVDMDZGMTMyNkNBQTBBMzQ4QUU0RkFBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRjhDMzY4MEQ2Rjg4QjcyRUMw
NkYxMzI2Q0FBMEEzNDhBRTRGQUE5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDkwNzI1MDU1NjIwQzFBNTJGMDlFOURCQkFCRUIzQjAxMjgwM0I3QzI1
Mzg4MUZDNEE2QzM5NDJGMTVFQzQwNy8wLzMyMzAzMDJlMzUzODJlMzIzNDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjM1MzczMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyDrw
MA0GCSqGSIb3DQEBCwUAA4IBAQAM3+2IM9U4Lxly+DHDVA3Je+IgRh8f6YTpDFIo
KY2AwGSvBsuBMW1+UVVmrpF6iMOiuTiUHY5XRqnJ1dpvxfVbNEVF2Ii/WIguHAvr
gLXqMnnZWzcLGZU7zXSxWsT6fZEqqDUudpftdXS2A+e9wqU67VvK9Nw+4fPq6EIF
YcWrFFMOymxkhh1FjZxaoflSXqwaKqOfVLHz6rB65g0d4NwZkIsaWVC0wtwGlUqr
dN4jUdo+WH3A1cnZNjHWpry+Z//tR5DyCf8UMhT+qZ3BcvSRH8caL33PZOx5Rgyd
OVhcT4w90wKrnLD6C84pEp5K2snsP+NovV8bz9RppTyj+agY
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org