Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
File:                     3230302e35392e32342e302f32312d3234203d3e203238303838.roa (raw, json)
Hash identifier:          BCN7IYnq0vmdoF4B/gjHji/u8OGpoYJ/rGBVGsEL3C4=
Subject key identifier:   F7:98:0D:63:62:3B:E6:98:05:89:A9:CA:AC:26:21:06:10:43:C9:FE
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       2B8F7C8236765BF323753D43F08229578CEF397D
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
Signing time:             Tue 05 Mar 2024 18:09:24 +0000
ROA not before:           Tue 05 Mar 2024 18:04:24 +0000
ROA not after:            Tue 04 Mar 2025 18:09:24 +0000
asID:                     28088
IP address blocks:        200.59.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8f:7c:82:36:76:5b:f3:23:75:3d:43:f0:82:29:57:8c:ef:39:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Mar  5 18:04:24 2024 GMT
            Not After : Mar  4 18:09:24 2025 GMT
        Subject: CN=F7980D63623BE6980589A9CAAC2621061043C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:ef:d1:3e:e9:ed:30:04:86:6b:a4:6d:9f:
                    f9:c3:58:c1:ea:ab:55:62:be:cd:c4:0f:1b:07:93:
                    91:0a:07:b9:e5:47:52:df:1d:98:aa:9d:6b:8f:11:
                    3b:67:b7:46:07:ca:79:db:8f:51:79:51:0c:81:e8:
                    04:20:41:d6:bf:ad:b0:16:71:70:5a:74:07:70:e4:
                    0a:6e:3f:7e:44:d9:49:11:f9:4c:e4:13:30:32:90:
                    a8:5b:cf:49:64:29:e8:43:4b:2f:4d:55:2b:7b:b5:
                    7f:fb:b9:14:e9:d7:c9:69:1a:4d:03:f6:37:bf:4a:
                    99:2d:1d:30:6f:95:94:f5:a5:66:f8:3e:2a:22:17:
                    ab:13:d7:be:80:f7:7b:b2:1b:00:c8:be:38:de:52:
                    11:f2:90:c5:49:d5:2e:f5:b4:89:7b:21:2d:d6:dc:
                    d4:5d:86:22:2f:4e:d0:42:80:f4:f0:f7:b0:b0:c0:
                    33:4a:c5:61:1a:42:66:d1:ec:dc:26:c8:b7:f9:19:
                    eb:94:2f:e1:34:0b:a0:0d:07:f9:7b:b3:21:f3:98:
                    44:1e:2b:69:a1:ef:fa:10:73:ea:bc:50:15:0a:fe:
                    fc:12:2d:a3:35:41:37:08:9e:6c:ed:28:e8:fb:d0:
                    4b:24:5f:f8:6d:cd:20:b0:c8:c4:7b:49:4b:89:5d:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:98:0D:63:62:3B:E6:98:05:89:A9:CA:AC:26:21:06:10:43:C9:FE
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:61:81:44:52:4a:d6:f1:ba:17:63:20:e6:b5:41:c3:0c:7b:
         47:6c:8c:92:a3:58:9b:ba:ae:87:2e:f5:5c:70:19:0d:d2:62:
         22:23:ce:0b:30:c6:53:67:14:64:97:0c:66:b3:06:61:74:d1:
         f7:29:d8:ae:df:de:dc:61:bb:74:9d:fb:a3:60:d5:d6:88:fd:
         fc:d7:71:21:30:eb:ea:d0:23:59:d1:a7:6c:c9:79:16:4f:11:
         5d:72:84:65:1e:69:23:eb:29:ae:5f:69:c4:30:27:d9:48:aa:
         de:cd:9c:eb:8b:cd:2f:64:8d:36:da:a0:c7:72:40:08:25:bb:
         fa:eb:5c:10:74:ae:ac:0e:fd:36:dd:8e:e4:95:45:7f:3b:ad:
         0b:b3:99:17:2c:00:82:20:7f:b9:68:03:be:06:64:0d:33:0a:
         7d:e6:04:35:19:bc:86:02:d0:71:77:a7:f6:95:40:f2:f7:78:
         06:4e:b7:59:a1:d7:a2:02:5c:61:50:f6:26:5b:81:c2:db:79:
         b8:d1:d1:6a:b2:42:73:8b:25:05:0a:dd:f0:7c:d4:fc:7a:6c:
         f7:2a:d7:72:b2:cb:70:39:9a:d5:a9:04:6f:4f:f4:f3:17:f1:
         0a:28:d8:b7:4b:29:ef:81:02:c2:27:3f:d9:30:e3:bc:3f:7c:
         16:a3:47:74
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUK498gjZ2W/MjdT1D8IIpV4zvOX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVENDJERkYxOTZGM0YxMUI4MjQ2NERFMUZCN0RERDE3
OTNERDIyNzAeFw0yNDAzMDUxODA0MjRaFw0yNTAzMDQxODA5MjRaMDMxMTAvBgNV
BAMTKEY3OTgwRDYzNjIzQkU2OTgwNTg5QTlDQUFDMjYyMTA2MTA0M0M5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX+/RPuntMASGa6Rtn/nDWMHq
q1Vivs3EDxsHk5EKB7nlR1LfHZiqnWuPETtnt0YHynnbj1F5UQyB6AQgQda/rbAW
cXBadAdw5ApuP35E2UkR+UzkEzAykKhbz0lkKehDSy9NVSt7tX/7uRTp18lpGk0D
9je/SpktHTBvlZT1pWb4PioiF6sT176A93uyGwDIvjjeUhHykMVJ1S71tIl7IS3W
3NRdhiIvTtBCgPTw97CwwDNKxWEaQmbR7NwmyLf5GeuUL+E0C6ANB/l7syHzmEQe
K2mh7/oQc+q8UBUK/vwSLaM1QTcInmztKOj70EskX/htzSCwyMR7SUuJXenPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU95gNY2I75pgFianKrCYhBhBDyf4wHwYDVR0j
BBgwFoAULtQt/xlvPxG4JGTeH7fd0Xk90icwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FM0E0QkY3RDE4MzcyMEREOTU3Q0E5M0M0RTA3RjRERUZC
MTAzODhGQzU5RkU4MEUzRUE4RjE1QzQwOTQ0NjFCLzAvMkVENDJERkYxOTZGM0Yx
MUI4MjQ2NERFMUZCN0RERDE3OTNERDIyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUQ0MkRGRjE5NkYzRjExQjgy
NDY0REUxRkI3REREMTc5M0REMjI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTNBNEJGN0QxODM3MjBERDk1N0NBOTNDNEUwN0Y0REVGQjEwMzg4RkM1
OUZFODBFM0VBOEYxNUM0MDk0NDYxQi8wLzMyMzAzMDJlMzUzOTJlMzIzNDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMDM4Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIOxgwDQYJ
KoZIhvcNAQELBQADggEBAGZhgURSStbxuhdjIOa1QcMMe0dsjJKjWJu6rocu9Vxw
GQ3SYiIjzgswxlNnFGSXDGazBmF00fcp2K7f3txhu3Sd+6Ng1daI/fzXcSEw6+rQ
I1nRp2zJeRZPEV1yhGUeaSPrKa5facQwJ9lIqt7NnOuLzS9kjTbaoMdyQAglu/rr
XBB0rqwO/TbdjuSVRX87rQuzmRcsAIIgf7loA74GZA0zCn3mBDUZvIYC0HF3p/aV
QPL3eAZOt1mh16ICXGFQ9iZbgcLbebjR0WqyQnOLJQUK3fB81Px6bPcq13Kyy3A5
mtWpBG9P9PMX8Qoo2LdLKe+BAsInP9kw47w/fBajR3Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org