Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa
File:                     3230302e35322e3131322e302f32302d3234203d3e2036353033.roa (raw, json)
Hash identifier:          hGcXonOqLUNhF/w6e/ID062fJUbPM8Sdw1VPb8rgO4A=
Subject key identifier:   72:94:38:BA:1F:BD:E0:9A:31:BB:76:5A:B3:C7:63:39:F9:EF:46:F2
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       194E0B5AFF6C2389AB92C3EB4DC97CF088A3A139
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     6503
IP address blocks:        200.52.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4e:0b:5a:ff:6c:23:89:ab:92:c3:eb:4d:c9:7c:f0:88:a3:a1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=729438BA1FBDE09A31BB765AB3C76339F9EF46F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:f6:d9:2c:6f:d7:24:30:0e:aa:4c:65:66:
                    ee:07:59:cb:52:3f:a8:e6:31:48:86:49:7c:31:3a:
                    ce:e4:07:5b:8c:a8:64:fe:3e:ba:27:0c:79:5b:42:
                    cc:f1:d5:12:0d:c4:65:46:ce:f8:a0:5c:ef:25:f3:
                    4a:33:53:ab:c7:ef:37:ef:46:98:fb:fb:a3:a6:8a:
                    b7:09:f6:64:fb:2d:da:46:4a:29:34:df:6a:43:f4:
                    e3:ae:3b:de:d4:fb:20:05:69:3c:c4:50:c5:23:2c:
                    28:72:3c:4e:3e:c1:9b:29:6d:37:a2:9e:db:97:ad:
                    92:94:de:85:65:2b:07:68:cc:27:06:0c:2f:e3:b7:
                    53:61:9f:ab:0b:15:63:70:18:dd:6e:e3:e1:77:65:
                    29:77:57:e7:68:e4:30:53:1d:c4:ef:a0:eb:f2:cd:
                    e5:4c:e5:47:08:06:68:8f:73:c1:24:72:06:bc:f7:
                    a6:93:04:21:4c:31:e6:5d:4d:d2:f8:96:76:b1:67:
                    7e:f3:cd:13:f1:c6:57:e5:62:4e:c3:e3:df:e1:c0:
                    c6:1b:9a:c7:3f:7f:d0:72:5f:94:71:aa:d3:d4:34:
                    57:2b:9c:fe:05:ca:4d:64:c4:aa:c9:1f:9d:ce:04:
                    41:16:d4:be:68:3e:8f:8e:7a:5a:8d:05:76:9c:e3:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:38:BA:1F:BD:E0:9A:31:BB:76:5A:B3:C7:63:39:F9:EF:46:F2
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:86:78:09:15:c1:36:0c:45:aa:8c:b5:2d:93:b4:c0:1f:
         e7:c9:09:f8:fa:a7:9a:4b:6c:35:2d:bc:58:03:0f:75:8c:d7:
         1e:ab:dc:97:fc:cb:a4:2b:4f:8c:00:86:99:5a:43:94:d3:c1:
         c8:67:a5:5f:f3:69:fe:8e:a0:a1:9d:98:7c:5c:a9:87:68:d1:
         8a:5c:5a:51:1f:7a:34:e2:3b:a8:b6:71:63:22:41:be:96:d0:
         c2:a0:80:21:f4:59:ba:16:57:14:07:ec:a2:0d:ff:ab:74:43:
         e0:5c:a2:f0:63:27:3c:68:81:87:fd:76:e9:37:00:d7:76:65:
         79:08:42:9b:41:8d:47:a1:67:d8:dd:bd:d9:cf:a4:ed:18:a2:
         c7:21:81:ad:36:fa:9a:96:f2:72:af:75:88:6f:b0:e5:05:b3:
         b4:4d:50:cd:de:7d:f5:08:d2:ce:64:75:07:43:d6:f2:fd:9a:
         e9:14:29:c4:2d:da:a4:9c:14:ea:00:e6:5e:31:1f:e2:62:2b:
         3c:f9:f5:0b:8d:fc:35:50:a8:2b:95:c5:03:da:53:10:a2:8f:
         23:c1:da:45:1d:d3:ab:c4:89:ac:b4:45:83:57:ad:93:1d:12:
         a0:2f:06:c1:41:1e:05:43:d4:d2:e3:c1:bf:71:c9:df:22:ac:
         c5:9b:42:23
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGU4LWv9sI4mrksPrTcl88IijoTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNDAzMDUxNzQ5MzRaFw0yNTAzMDQxNzU0MzRaMDMxMTAvBgNV
BAMTKDcyOTQzOEJBMUZCREUwOUEzMUJCNzY1QUIzQzc2MzM5RjlFRjQ2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDfbZLG/XJDAOqkxlZu4HWctS
P6jmMUiGSXwxOs7kB1uMqGT+PronDHlbQszx1RINxGVGzvigXO8l80ozU6vH7zfv
Rpj7+6OmircJ9mT7LdpGSik032pD9OOuO97U+yAFaTzEUMUjLChyPE4+wZspbTei
ntuXrZKU3oVlKwdozCcGDC/jt1Nhn6sLFWNwGN1u4+F3ZSl3V+do5DBTHcTvoOvy
zeVM5UcIBmiPc8Ekcga896aTBCFMMeZdTdL4lnaxZ37zzRPxxlflYk7D49/hwMYb
msc/f9ByX5RxqtPUNFcrnP4Fyk1kxKrJH53OBEEW1L5oPo+OelqNBXac46fBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcpQ4uh+94Joxu3Zas8djOfnvRvIwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMyMzAzMDJlMzUzMjJlMzEzMTMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzYzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATINHAwDQYJ
KoZIhvcNAQELBQADggEBABPNhngJFcE2DEWqjLUtk7TAH+fJCfj6p5pLbDUtvFgD
D3WM1x6r3Jf8y6QrT4wAhplaQ5TTwchnpV/zaf6OoKGdmHxcqYdo0YpcWlEfejTi
O6i2cWMiQb6W0MKggCH0WboWVxQH7KIN/6t0Q+BcovBjJzxogYf9duk3ANd2ZXkI
QptBjUehZ9jdvdnPpO0Yoschga02+pqW8nKvdYhvsOUFs7RNUM3effUI0s5kdQdD
1vL9mukUKcQt2qScFOoA5l4xH+JiKzz59QuN/DVQqCuVxQPaUxCijyPB2kUd06vE
iay0RYNXrZMdEqAvBsFBHgVD1NLjwb9xyd8irMWbQiM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org