Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33342e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          bjIjVRgiRQQbuC5Jf3a3d70cokm2MiKHPX1rx5Wbg/c=
Subject key identifier:   57:F8:9C:A5:A9:F5:E8:67:5F:68:24:90:01:1F:EE:CA:30:A8:47:97
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       639357A62410B6B32DE30000F1B2A58C0EC2E8C3
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:20 +0000
ROA not before:           Tue 05 Mar 2024 17:47:20 +0000
ROA not after:            Tue 04 Mar 2025 17:52:20 +0000
asID:                     7418
IP address blocks:        200.29.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:93:57:a6:24:10:b6:b3:2d:e3:00:00:f1:b2:a5:8c:0e:c2:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:20 2024 GMT
            Not After : Mar  4 17:52:20 2025 GMT
        Subject: CN=57F89CA5A9F5E8675F682490011FEECA30A84797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:6e:92:a4:aa:28:ad:ab:5e:a0:d5:dc:b8:
                    f8:25:77:ff:1b:1b:7d:61:e1:71:fb:2b:0d:a7:b2:
                    9a:a1:3e:0b:c3:67:f6:c2:79:62:00:38:d2:81:c4:
                    40:e5:56:b1:64:9d:a4:6b:df:2f:47:8a:bb:ae:10:
                    b9:84:34:31:da:a1:f8:eb:83:1f:7b:3e:52:29:79:
                    62:18:a4:86:89:75:a9:d4:6a:a4:2b:f9:d4:87:71:
                    a4:1b:40:06:8c:de:3f:55:4d:88:d0:76:2a:ae:16:
                    99:a2:6b:60:16:41:2f:d2:9a:35:4a:a8:1a:22:83:
                    04:7a:47:f8:7a:52:9a:fe:4b:16:cf:7c:aa:50:5a:
                    02:bc:c1:67:07:cd:8c:42:9b:58:07:44:44:11:b8:
                    80:c3:17:88:f7:a0:89:85:9c:12:80:d4:24:5d:c4:
                    96:7b:39:d2:0d:43:e9:34:0e:43:e3:8f:00:22:03:
                    0b:0b:f9:d8:d1:8f:39:bc:db:c3:f3:55:ee:4f:ab:
                    39:3a:43:51:a6:07:d9:8d:b3:96:28:f3:17:fb:0b:
                    98:ca:e7:8d:41:aa:3f:51:48:78:ca:46:42:f7:c4:
                    d8:e8:08:34:b9:b7:30:07:0b:a9:2b:70:c8:54:ac:
                    ac:f8:fc:bb:db:6b:3b:1d:b9:25:dc:f8:44:88:82:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:9C:A5:A9:F5:E8:67:5F:68:24:90:01:1F:EE:CA:30:A8:47:97
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:47:27:00:8a:c6:be:cb:d1:16:e6:e0:52:10:ed:7c:3e:07:
         e6:ac:ec:8e:87:21:92:1f:29:24:4a:66:55:f7:7c:3f:7d:74:
         0c:1a:14:6c:b9:8f:73:78:1e:e2:d6:b1:55:e4:f5:0b:91:2d:
         c0:a0:da:94:11:f9:c2:6a:e8:e9:b5:84:8a:0e:76:c0:9d:cc:
         d4:f6:9f:45:26:9c:b3:3c:71:ce:85:3b:6a:cf:64:c2:a7:df:
         82:ab:e5:78:06:c9:e0:ff:ed:fe:cf:5b:48:27:5f:ee:c6:aa:
         83:89:55:3e:e7:5f:40:a6:1a:af:8c:af:ef:fb:5f:b8:1a:a6:
         11:bd:07:e4:48:69:22:81:9b:3a:5f:89:31:da:bc:dc:9e:94:
         4e:6b:64:13:49:90:17:ee:4f:c1:2e:f5:51:d2:d9:f5:92:9f:
         ad:ce:3a:46:72:8d:6a:22:e6:b5:f4:d8:69:55:51:6d:ec:42:
         ab:f8:82:64:82:b9:28:ae:47:7e:42:21:20:06:c1:93:9a:86:
         76:53:52:48:7f:3f:c5:59:d0:00:1b:07:ba:db:c3:8a:ea:06:
         f9:f0:c5:c7:6c:27:29:e9:2c:3d:38:31:9f:59:fa:9a:7c:f0:
         8f:68:83:97:0b:1a:82:e4:60:f7:67:95:44:fd:6b:0c:4f:11:
         cc:18:d2:95
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUY5NXpiQQtrMt4wAA8bKljA7C6MMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MjBaFw0yNTAzMDQxNzUyMjBaMDMxMTAvBgNV
BAMTKDU3Rjg5Q0E1QTlGNUU4Njc1RjY4MjQ5MDAxMUZFRUNBMzBBODQ3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXW6SpKoorateoNXcuPgld/8b
G31h4XH7Kw2nspqhPgvDZ/bCeWIAONKBxEDlVrFknaRr3y9HiruuELmENDHaofjr
gx97PlIpeWIYpIaJdanUaqQr+dSHcaQbQAaM3j9VTYjQdiquFpmia2AWQS/SmjVK
qBoigwR6R/h6Upr+SxbPfKpQWgK8wWcHzYxCm1gHREQRuIDDF4j3oImFnBKA1CRd
xJZ7OdINQ+k0DkPjjwAiAwsL+djRjzm828PzVe5Pqzk6Q1GmB9mNs5Yo8xf7C5jK
541Bqj9RSHjKRkL3xNjoCDS5tzAHC6krcMhUrKz4/LvbazsduSXc+ESIgiQ7AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUV/icpan16GdfaCSQAR/uyjCoR5cwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzOTJlMzMzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0iMA0GCSqG
SIb3DQEBCwUAA4IBAQC0RycAisa+y9EW5uBSEO18PgfmrOyOhyGSHykkSmZV93w/
fXQMGhRsuY9zeB7i1rFV5PULkS3AoNqUEfnCaujptYSKDnbAnczU9p9FJpyzPHHO
hTtqz2TCp9+Cq+V4Bsng/+3+z1tIJ1/uxqqDiVU+519AphqvjK/v+1+4GqYRvQfk
SGkigZs6X4kx2rzcnpROa2QTSZAX7k/BLvVR0tn1kp+tzjpGco1qIua19NhpVVFt
7EKr+IJkgrkorkd+QiEgBsGTmoZ2U1JIfz/FWdAAGwe628OK6gb58MXHbCcp6Sw9
ODGfWfqafPCPaIOXCxqC5GD3Z5VE/WsMTxHMGNKV
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org