Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa
File:                     3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa (raw, json)
Hash identifier:          vyffEEzxZr1Q0RWUJj9Y5BdrwFFkLsChE0bM/mXT54M=
Subject key identifier:   22:7E:56:36:15:90:77:A5:A6:B6:22:BE:37:14:0E:CE:CF:4C:B4:64
Certificate issuer:       /CN=A792140672C8F8E1F00F7A465B0394E9D2AAEC27
Certificate serial:       54C592C6B152D343B7B5D6DC10775CB48FA3151B
Authority key identifier: A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa
Signing time:             Tue 05 Mar 2024 17:58:17 +0000
ROA not before:           Tue 05 Mar 2024 17:53:17 +0000
ROA not after:            Tue 04 Mar 2025 17:58:17 +0000
asID:                     52401
IP address blocks:        200.124.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:92:c6:b1:52:d3:43:b7:b5:d6:dc:10:77:5c:b4:8f:a3:15:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A792140672C8F8E1F00F7A465B0394E9D2AAEC27
        Validity
            Not Before: Mar  5 17:53:17 2024 GMT
            Not After : Mar  4 17:58:17 2025 GMT
        Subject: CN=227E5636159077A5A6B622BE37140ECECF4CB464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:ef:f0:17:1a:b1:46:82:7b:78:8f:b2:b1:
                    e2:0e:ee:57:65:ab:e7:e3:97:96:d2:74:a3:92:ba:
                    ea:1b:7f:51:25:01:69:4b:7a:7d:43:04:49:2d:aa:
                    b7:bf:67:3f:6e:0a:c0:64:06:1d:8d:e2:92:1c:3a:
                    50:87:04:bd:c7:9f:05:b0:31:84:b8:17:fc:26:73:
                    cb:bd:e2:1a:38:c9:20:b1:53:c9:b7:2b:8c:5d:db:
                    ff:6c:b0:f5:75:6a:b6:3c:18:ed:f5:d2:18:19:e9:
                    29:2d:b5:b2:03:dc:bd:6b:64:9e:1e:98:1e:f5:cb:
                    0c:56:64:09:19:31:e1:13:9a:62:48:66:4f:ce:34:
                    17:03:b1:e8:e3:e4:2b:bc:22:c1:a5:2c:82:53:8b:
                    eb:f6:0d:3b:72:fd:6c:62:f0:58:26:f7:8c:cd:d3:
                    19:aa:18:6e:50:d5:d2:21:b4:44:c5:e0:c0:fa:5b:
                    ba:87:56:2f:3b:30:cb:05:fb:5e:63:df:79:c9:84:
                    83:7d:97:f4:5b:e4:0c:d9:5a:46:65:bf:97:71:b9:
                    1e:a1:16:d9:54:96:60:0b:62:00:71:80:76:4e:3b:
                    07:99:a1:c8:79:4e:3d:99:62:b3:7b:59:30:bd:65:
                    45:7a:43:5a:3c:c4:7a:51:f2:b2:d5:a2:2a:40:58:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:56:36:15:90:77:A5:A6:B6:22:BE:37:14:0E:CE:CF:4C:B4:64
            X509v3 Authority Key Identifier:
                keyid:A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:64:95:90:42:30:b5:fa:2f:b8:6a:e9:fe:c2:cb:f8:04:30:
         6e:93:67:67:da:76:fc:a2:a0:ec:78:56:b0:b8:e9:48:38:39:
         1e:bf:8f:ef:b3:de:32:96:b7:33:f1:ff:ac:01:90:68:05:88:
         6f:73:e6:9a:f7:7b:27:38:13:e5:43:e6:95:56:c8:5c:6c:27:
         2a:52:d7:1f:11:d7:47:57:20:65:7c:9c:56:90:40:a3:71:bd:
         3e:e8:04:de:9d:4d:42:f8:8f:78:9e:2d:6c:21:33:b3:d1:69:
         6c:c9:94:da:c9:10:6e:a4:21:81:45:95:83:b0:2d:40:8a:bd:
         7b:9e:23:f9:02:d3:a4:1b:b9:2f:59:97:af:ae:46:4d:4f:48:
         2d:71:54:fc:8e:6f:a7:89:ef:07:ad:21:6f:b7:0c:85:ed:8b:
         7d:21:65:f7:02:89:41:3c:cb:f9:59:d2:c6:f4:91:7b:bd:7d:
         9a:50:61:21:07:81:da:78:cd:27:4c:4f:39:91:4f:f0:bc:00:
         2b:45:82:d2:f6:0e:50:a9:7b:25:27:ae:a0:e7:2d:a9:63:7a:
         6d:99:78:b7:5b:11:d0:03:08:3a:60:90:1e:1a:e5:e5:70:da:
         de:2c:5d:fb:91:2b:46:9a:f1:c4:f6:7d:ba:c2:7f:fe:17:9c:
         12:35:a8:c5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVMWSxrFS00O3tdbcEHdctI+jFRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5MjE0MDY3MkM4RjhFMUYwMEY3QTQ2NUIwMzk0RTlE
MkFBRUMyNzAeFw0yNDAzMDUxNzUzMTdaFw0yNTAzMDQxNzU4MTdaMDMxMTAvBgNV
BAMTKDIyN0U1NjM2MTU5MDc3QTVBNkI2MjJCRTM3MTQwRUNFQ0Y0Q0I0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUku/wFxqxRoJ7eI+yseIO7ldl
q+fjl5bSdKOSuuobf1ElAWlLen1DBEktqre/Zz9uCsBkBh2N4pIcOlCHBL3HnwWw
MYS4F/wmc8u94ho4ySCxU8m3K4xd2/9ssPV1arY8GO310hgZ6SkttbID3L1rZJ4e
mB71ywxWZAkZMeETmmJIZk/ONBcDsejj5Cu8IsGlLIJTi+v2DTty/Wxi8Fgm94zN
0xmqGG5Q1dIhtETF4MD6W7qHVi87MMsF+15j33nJhIN9l/Rb5AzZWkZlv5dxuR6h
FtlUlmALYgBxgHZOOweZoch5Tj2ZYrN7WTC9ZUV6Q1o8xHpR8rLVoipAWChrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIn5WNhWQd6WmtiK+NxQOzs9MtGQwHwYDVR0j
BBgwFoAUp5IUBnLI+OHwD3pGWwOU6dKq7CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkMyMDEzODMxMzRGRjE5OUFDMUNEQ0ExNDcyNzE4Rjg3
NzVBRjE4QkU3RDVDQUQzQkIxNDdGMDA2QzdDOTAxLzAvQTc5MjE0MDY3MkM4RjhF
MUYwMEY3QTQ2NUIwMzk0RTlEMkFBRUMyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzkyMTQwNjcyQzhGOEUxRjAw
RjdBNDY1QjAzOTRFOUQyQUFFQzI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDMjAxMzgzMTM0RkYxOTlBQzFDRENBMTQ3MjcxOEY4Nzc1QUYxOEJF
N0Q1Q0FEM0JCMTQ3RjAwNkM3QzkwMS8wLzMyMzAzMDJlMzEzMjM0MmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyHy4
MA0GCSqGSIb3DQEBCwUAA4IBAQBUZJWQQjC1+i+4aun+wsv4BDBuk2dn2nb8oqDs
eFawuOlIODkev4/vs94ylrcz8f+sAZBoBYhvc+aa93snOBPlQ+aVVshcbCcqUtcf
EddHVyBlfJxWkECjcb0+6ATenU1C+I94ni1sITOz0WlsyZTayRBupCGBRZWDsC1A
ir17niP5AtOkG7kvWZevrkZNT0gtcVT8jm+nie8HrSFvtwyF7Yt9IWX3AolBPMv5
WdLG9JF7vX2aUGEhB4HaeM0nTE85kU/wvAArRYLS9g5QqXslJ66g5y2pY3ptmXi3
WxHQAwg6YJAeGuXlcNreLF37kStGmvHE9n26wn/+F5wSNajF
-----END CERTIFICATE-----
Generated at Fri May 17 10:57:47 2024 by rpki-client on console-ams.rpki-client.org