Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa
File:                     3230302e31322e3139372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          UJPvelRUAvmxyPEaXWiVSqN2iNdCGhXxSrPeYt04uCY=
Subject key identifier:   A9:ED:76:AE:CA:D2:F4:E4:49:B6:5D:02:66:CE:C8:0E:2D:27:CF:23
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       03B3CAAABF193DEC4A7C6EFDA020856525477203
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     16509
IP address blocks:        200.12.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b3:ca:aa:bf:19:3d:ec:4a:7c:6e:fd:a0:20:85:65:25:47:72:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=A9ED76AECAD2F4E449B65D0266CEC80E2D27CF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:d3:c0:81:fe:da:b8:03:2a:2f:5f:32:bc:
                    80:88:d5:b7:57:03:f0:e2:73:e1:17:37:fd:fc:aa:
                    88:37:ea:b0:88:ba:86:42:b4:5c:e1:3b:b1:82:6d:
                    b9:e6:43:aa:97:b4:d5:58:ef:b7:03:ca:91:a5:52:
                    4e:37:89:ea:6f:e5:5d:3f:c2:4d:4b:30:cb:fb:8a:
                    bd:95:74:90:df:0a:d9:31:d0:c7:f7:be:05:92:62:
                    6d:37:27:19:79:46:50:68:ff:10:d4:19:55:4f:fd:
                    2b:82:ff:1d:b3:e3:51:12:85:9c:13:2b:ab:21:84:
                    86:83:3b:df:71:f3:a3:57:b7:58:41:2e:fa:d9:68:
                    ed:e6:d8:b6:84:f4:26:1a:ab:38:18:5a:8f:ed:d1:
                    99:6d:46:bd:1d:21:a0:2a:45:63:a1:43:5d:3e:94:
                    6e:eb:01:3f:5f:c6:c9:8c:68:17:90:f7:71:36:71:
                    ef:ef:69:b2:0e:01:5f:49:9f:75:09:49:f7:63:59:
                    34:51:4a:92:35:6d:32:41:b2:0d:aa:1b:37:5d:3a:
                    4d:21:46:8f:d8:67:05:fb:f0:e9:41:ef:47:a8:b3:
                    56:bc:32:44:56:26:e4:69:5f:0a:bc:94:10:93:1d:
                    80:c9:58:ad:03:b9:93:87:a4:76:1c:7d:a2:a6:75:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:76:AE:CA:D2:F4:E4:49:B6:5D:02:66:CE:C8:0E:2D:27:CF:23
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:11:f3:3b:fb:5c:a8:18:70:40:0c:d4:fd:ff:29:ae:df:33:
         29:90:c7:8c:d7:52:c9:0d:e6:5a:79:23:9c:2e:b2:f2:bf:ef:
         df:ef:15:bc:1a:6e:5e:a6:f5:d1:42:7a:8a:26:bc:7d:a0:5d:
         bf:d8:a6:24:f2:2d:ca:04:8f:a4:47:d8:f9:6b:80:c3:d9:00:
         31:3d:e9:77:8e:15:e6:e2:e1:ed:8a:c4:68:51:c1:20:ec:06:
         9c:c3:a5:7f:ed:40:31:ac:5c:d4:ab:b3:fb:b0:c3:6e:43:c6:
         b0:83:c4:8d:89:98:44:38:56:c6:71:db:a1:eb:04:02:85:8d:
         d9:80:55:49:cb:be:23:48:64:c5:bf:17:6e:c1:93:db:f0:25:
         9d:1d:32:9f:03:5b:e0:47:5b:c3:dd:e2:9a:52:c0:03:c9:c8:
         ff:00:b2:78:e7:90:dd:71:40:4c:3b:d8:0a:51:01:53:a1:c7:
         ac:60:b7:eb:7d:4f:0e:0c:00:0f:eb:61:b5:66:25:80:01:b2:
         13:1c:b2:0c:e8:17:0b:c2:f9:f4:f9:09:d9:ee:b0:c5:42:cc:
         65:87:90:a7:6f:01:77:17:e8:ea:1f:83:b9:75:15:2d:70:be:
         4f:54:a8:64:39:7f:d7:a1:c2:cc:68:50:e7:9a:f6:a2:a9:8b:
         b6:62:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:21 2024 by rpki-client on console-fra.rpki-client.org