Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa
File:                     3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa (raw, json)
Hash identifier:          i3791QPUt1zNjtscNOBNWdo6EW+d9YXNKQXZFfD8VHg=
Subject key identifier:   13:0C:E8:95:01:4C:05:E8:D2:D6:60:A2:7B:B7:2F:9C:E9:26:FB:C0
Certificate issuer:       /CN=F7D87FB819806FE80F6C92775F08B1C90C271956
Certificate serial:       07AE16471B7477170F7D9151AC4E4C517E38531E
Authority key identifier: F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa
Signing time:             Tue 05 Mar 2024 17:45:46 +0000
ROA not before:           Tue 05 Mar 2024 17:40:46 +0000
ROA not after:            Tue 04 Mar 2025 17:45:46 +0000
asID:                     264859
IP address blocks:        200.95.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/F7D87FB819806FE80F6C92775F08B1C90C271956.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/F7D87FB819806FE80F6C92775F08B1C90C271956.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ae:16:47:1b:74:77:17:0f:7d:91:51:ac:4e:4c:51:7e:38:53:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D87FB819806FE80F6C92775F08B1C90C271956
        Validity
            Not Before: Mar  5 17:40:46 2024 GMT
            Not After : Mar  4 17:45:46 2025 GMT
        Subject: CN=130CE895014C05E8D2D660A27BB72F9CE926FBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:19:31:a8:a1:0a:0d:c5:fd:d8:87:08:cb:
                    e6:7b:fc:7b:54:44:bc:a9:16:96:d6:bd:4d:c1:45:
                    87:1f:97:65:39:fe:b4:a8:8e:a8:e8:16:f8:30:54:
                    d7:d5:fc:46:b0:7a:0f:ab:5d:54:6e:b1:8f:61:20:
                    cd:c2:57:13:35:fa:a2:17:a0:38:9c:39:75:ed:7c:
                    13:55:5f:9a:22:47:2d:17:96:ee:0c:ff:55:d9:c5:
                    da:5c:a5:ea:c9:3f:39:79:42:ad:ac:ef:f7:72:6e:
                    79:65:1f:1e:82:bc:2e:27:dd:a7:6f:41:6d:32:7a:
                    d0:44:21:2d:24:f0:96:c8:ae:bf:38:4d:22:d1:d7:
                    3f:58:4f:e1:99:c6:1e:7c:8d:64:5d:de:e7:33:82:
                    4e:27:8b:a2:16:ac:66:a5:2d:77:20:ca:5c:77:3b:
                    90:ec:54:5a:3f:a1:8c:78:82:06:f5:0f:57:0e:6b:
                    e8:6d:a3:c0:e4:0a:c9:7c:0d:d1:20:5f:0c:c9:10:
                    de:f0:0b:e7:eb:65:40:0e:83:1b:e0:b9:ef:89:34:
                    bd:a7:c8:c5:49:60:9f:5e:47:32:39:a2:c9:26:93:
                    0a:00:78:0b:a7:06:79:6d:65:23:da:0a:f2:ee:7c:
                    c8:f0:53:3f:26:f8:e7:27:89:9f:4b:59:db:5b:1c:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:E8:95:01:4C:05:E8:D2:D6:60:A2:7B:B7:2F:9C:E9:26:FB:C0
            X509v3 Authority Key Identifier:
                keyid:F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/F7D87FB819806FE80F6C92775F08B1C90C271956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:2c:67:40:03:40:05:8b:bd:7f:69:08:4f:6c:db:91:92:
         f7:db:ba:01:86:58:7e:94:56:eb:99:e2:50:42:48:8d:0d:e5:
         40:18:01:2d:46:2f:cb:c1:e9:d0:01:e3:e9:4c:da:3d:d9:7f:
         00:65:3c:05:e5:47:39:08:92:d7:ff:5c:be:da:93:7c:45:79:
         b8:42:1a:90:45:c8:7e:c8:c2:5d:4e:d0:ca:e7:ad:91:15:80:
         bf:44:50:2a:e3:92:b0:69:e8:c3:71:ad:ed:2c:a4:f8:5a:41:
         12:54:7e:b1:d5:40:14:8d:d2:55:0a:5a:b3:95:d2:2d:a4:09:
         7c:06:8b:2a:b3:15:cc:62:43:28:1c:0a:c1:b3:47:b0:09:9a:
         c8:ca:a4:da:0b:fe:20:41:ff:ae:cd:2f:a6:3f:40:0b:6f:36:
         f3:69:8e:a8:e1:57:0f:00:f4:1e:ee:c2:29:e6:e4:fb:58:19:
         17:a6:b8:08:33:84:9e:80:c7:5e:02:8a:08:9d:51:48:b3:7d:
         e3:ac:28:b2:8e:94:31:71:cc:ad:f4:b7:c3:94:2a:0a:67:e5:
         71:c8:05:df:8e:7b:90:aa:6a:e9:3e:95:a3:89:3c:a1:a9:37:
         97:cc:60:c9:6c:5b:4d:37:81:01:b3:3f:89:04:4b:e5:5c:52:
         5c:e6:2f:8b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUB64WRxt0dxcPfZFRrE5MUX44Ux4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODdGQjgxOTgwNkZFODBGNkM5Mjc3NUYwOEIxQzkw
QzI3MTk1NjAeFw0yNDAzMDUxNzQwNDZaFw0yNTAzMDQxNzQ1NDZaMDMxMTAvBgNV
BAMTKDEzMENFODk1MDE0QzA1RThEMkQ2NjBBMjdCQjcyRjlDRTkyNkZCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcxkxqKEKDcX92IcIy+Z7/HtU
RLypFpbWvU3BRYcfl2U5/rSojqjoFvgwVNfV/Eaweg+rXVRusY9hIM3CVxM1+qIX
oDicOXXtfBNVX5oiRy0Xlu4M/1XZxdpcperJPzl5Qq2s7/dybnllHx6CvC4n3adv
QW0yetBEIS0k8JbIrr84TSLR1z9YT+GZxh58jWRd3uczgk4ni6IWrGalLXcgylx3
O5DsVFo/oYx4ggb1D1cOa+hto8DkCsl8DdEgXwzJEN7wC+frZUAOgxvgue+JNL2n
yMVJYJ9eRzI5oskmkwoAeAunBnltZSPaCvLufMjwUz8m+OcniZ9LWdtbHOzlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEwzolQFMBejS1mCie7cvnOkm+8AwHwYDVR0j
BBgwFoAU99h/uBmAb+gPbJJ3XwixyQwnGVYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODA2QUMyRjZBMUI0QTkwQkI3MzAyRDVDQjkzREFDRDU2
Q0JCQjkzNEE0MEMzNTlBRjZDMjJDMjhCODJBMTY0LzAvRjdEODdGQjgxOTgwNkZF
ODBGNkM5Mjc3NUYwOEIxQzkwQzI3MTk1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0Q4N0ZCODE5ODA2RkU4MEY2
QzkyNzc1RjA4QjFDOTBDMjcxOTU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTgwNkFDMkY2QTFCNEE5MEJCNzMwMkQ1Q0I5M0RBQ0Q1NkNCQkI5MzRB
NDBDMzU5QUY2QzIyQzI4QjgyQTE2NC8wLzMyMzAzMDJlMzkzNTJlMzEzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyF+4
MA0GCSqGSIb3DQEBCwUAA4IBAQBU/ixnQANABYu9f2kIT2zbkZL327oBhlh+lFbr
meJQQkiNDeVAGAEtRi/LwenQAePpTNo92X8AZTwF5Uc5CJLX/1y+2pN8RXm4QhqQ
Rch+yMJdTtDK562RFYC/RFAq45KwaejDca3tLKT4WkESVH6x1UAUjdJVClqzldIt
pAl8BosqsxXMYkMoHArBs0ewCZrIyqTaC/4gQf+uzS+mP0ALbzbzaY6o4VcPAPQe
7sIp5uT7WBkXprgIM4SegMdeAooInVFIs33jrCiyjpQxccyt9LfDlCoKZ+VxyAXf
jnuQqmrpPpWjiTyhqTeXzGDJbFtNN4EBsz+JBEvlXFJc5i+L
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org