Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/3230302e37312e3130382e302f32322d3234203d3e20323635363036.roa
File:                     3230302e37312e3130382e302f32322d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          Hi9Mp3TTqy+CKWGXyPCXB/NFInYVc1JU0+CbR3tTrl4=
Subject key identifier:   34:96:23:AD:D7:93:8F:3E:18:26:9F:B3:DF:C3:B0:2C:28:B4:A1:FA
Certificate issuer:       /CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
Certificate serial:       20C17AC886AFF6FF518E6104ACA07CA8996C9654
Authority key identifier: C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/3230302e37312e3130382e302f32322d3234203d3e20323635363036.roa
Signing time:             Tue 05 Mar 2024 18:19:58 +0000
ROA not before:           Tue 05 Mar 2024 18:14:58 +0000
ROA not after:            Tue 04 Mar 2025 18:19:58 +0000
asID:                     265606
IP address blocks:        200.71.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c1:7a:c8:86:af:f6:ff:51:8e:61:04:ac:a0:7c:a8:99:6c:96:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6
        Validity
            Not Before: Mar  5 18:14:58 2024 GMT
            Not After : Mar  4 18:19:58 2025 GMT
        Subject: CN=349623ADD7938F3E18269FB3DFC3B02C28B4A1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:89:71:f4:4a:10:6c:c0:f7:58:55:51:01:
                    b0:b0:02:83:3b:2a:7b:84:77:4a:44:31:eb:d5:fb:
                    99:d5:76:3e:16:a5:af:ce:f1:1b:c7:e6:f2:f4:1b:
                    02:e7:6c:9b:7f:16:f6:4f:ba:f4:18:84:c7:65:48:
                    1c:05:31:16:cd:d3:34:15:7f:d0:5e:30:c3:92:ad:
                    61:5e:72:62:ec:f2:ae:0f:c3:5d:85:19:28:6c:ce:
                    99:cc:83:ce:d0:b4:dd:2c:d2:10:11:05:a4:a7:a4:
                    5c:b6:47:8c:de:42:be:2b:30:5d:8f:b6:06:c9:10:
                    b9:30:a0:20:de:52:20:be:46:85:07:3f:9e:d9:ef:
                    ba:a8:12:15:11:4e:1d:da:7d:f3:5b:03:71:db:dd:
                    58:a3:07:71:8f:82:df:83:ea:3b:1d:18:e8:3b:51:
                    0d:79:b6:29:0a:a0:4a:70:37:b3:0f:89:20:70:20:
                    04:81:48:eb:13:e0:bd:18:45:12:71:2d:79:17:9b:
                    a6:c4:97:e6:f3:3e:94:ae:78:51:35:3f:e7:93:64:
                    3e:1a:97:d7:53:79:93:54:54:a4:a8:df:7b:30:a4:
                    35:b4:7e:72:bc:01:81:b5:b3:37:c6:dd:a6:3c:c6:
                    9c:3a:30:f2:d8:41:a5:91:25:1e:20:5e:9f:17:ef:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:23:AD:D7:93:8F:3E:18:26:9F:B3:DF:C3:B0:2C:28:B4:A1:FA
            X509v3 Authority Key Identifier:
                keyid:C6:40:51:3C:AB:89:8A:7B:4B:1C:A0:EA:B7:CA:AB:03:5A:E5:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C640513CAB898A7B4B1CA0EAB7CAAB035AE585C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0D21D17F8A2D38BF63D76EC2894A767C5FC1ED7BCD1DA1864C1934A4ED183D9/0/3230302e37312e3130382e302f32322d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:a9:06:5f:be:c5:05:87:89:78:7c:80:7c:ab:51:0b:d3:42:
         b1:c2:a4:df:02:b7:c4:59:a2:42:50:58:eb:28:6c:5c:3d:e6:
         cd:06:e5:f7:52:ad:ca:98:32:25:42:20:c4:41:9d:f9:a8:d8:
         8e:bd:bb:c6:1f:d8:bc:d0:d9:a7:60:0f:1a:4b:bf:84:00:d8:
         a0:01:04:c8:a7:10:7a:5e:c7:eb:c5:19:30:f0:a5:20:80:9b:
         a8:5b:4a:a2:09:e1:29:f7:4b:eb:13:6d:55:bf:8f:92:dd:3e:
         b1:e2:d4:6f:00:9e:74:a2:35:63:ac:ca:7f:9f:73:af:11:f2:
         25:6a:d4:cb:e0:66:c2:05:ff:64:7f:c9:97:ea:05:9d:31:0b:
         9e:28:f4:2c:ac:61:62:dc:c5:0a:11:d2:54:63:ce:8f:f0:65:
         f6:06:b9:bd:b9:f1:74:c7:03:4f:56:94:c3:d7:f9:96:63:ba:
         e7:10:4c:f0:0b:99:fc:a2:ba:10:df:69:4a:43:03:dd:45:07:
         f7:bb:1a:ac:31:86:cc:75:69:fd:fb:c2:b0:0b:fb:e9:01:57:
         89:8c:77:42:bc:94:21:8c:f6:eb:39:f8:6c:30:d5:6f:ac:a0:
         da:af:49:46:cb:55:f9:1b:4e:96:46:da:92:08:ca:1c:d1:c2:
         16:de:06:5c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIMF6yIav9v9RjmEErKB8qJlsllQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0MDUxM0NBQjg5OEE3QjRCMUNBMEVBQjdDQUFCMDM1
QUU1ODVDNjAeFw0yNDAzMDUxODE0NThaFw0yNTAzMDQxODE5NThaMDMxMTAvBgNV
BAMTKDM0OTYyM0FERDc5MzhGM0UxODI2OUZCM0RGQzNCMDJDMjhCNEExRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQYlx9EoQbMD3WFVRAbCwAoM7
KnuEd0pEMevV+5nVdj4Wpa/O8RvH5vL0GwLnbJt/FvZPuvQYhMdlSBwFMRbN0zQV
f9BeMMOSrWFecmLs8q4Pw12FGShszpnMg87QtN0s0hARBaSnpFy2R4zeQr4rMF2P
tgbJELkwoCDeUiC+RoUHP57Z77qoEhURTh3affNbA3Hb3VijB3GPgt+D6jsdGOg7
UQ15tikKoEpwN7MPiSBwIASBSOsT4L0YRRJxLXkXm6bEl+bzPpSueFE1P+eTZD4a
l9dTeZNUVKSo33swpDW0fnK8AYG1szfG3aY8xpw6MPLYQaWRJR4gXp8X74oXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNJYjrdeTjz4YJp+z38OwLCi0ofowHwYDVR0j
BBgwFoAUxkBRPKuJintLHKDqt8qrA1rlhcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMEQyMUQxN0Y4QTJEMzhCRjYzRDc2RUMyODk0QTc2N0M1
RkMxRUQ3QkNEMURBMTg2NEMxOTM0QTRFRDE4M0Q5LzAvQzY0MDUxM0NBQjg5OEE3
QjRCMUNBMEVBQjdDQUFCMDM1QUU1ODVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjQwNTEzQ0FCODk4QTdCNEIx
Q0EwRUFCN0NBQUIwMzVBRTU4NUM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBEMjFEMTdGOEEyRDM4QkY2M0Q3NkVDMjg5NEE3NjdDNUZDMUVEN0JD
RDFEQTE4NjRDMTkzNEE0RUQxODNEOS8wLzMyMzAzMDJlMzczMTJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEds
MA0GCSqGSIb3DQEBCwUAA4IBAQDFqQZfvsUFh4l4fIB8q1EL00KxwqTfArfEWaJC
UFjrKGxcPebNBuX3Uq3KmDIlQiDEQZ35qNiOvbvGH9i80NmnYA8aS7+EANigAQTI
pxB6XsfrxRkw8KUggJuoW0qiCeEp90vrE21Vv4+S3T6x4tRvAJ50ojVjrMp/n3Ov
EfIlatTL4GbCBf9kf8mX6gWdMQueKPQsrGFi3MUKEdJUY86P8GX2Brm9ufF0xwNP
VpTD1/mWY7rnEEzwC5n8oroQ32lKQwPdRQf3uxqsMYbMdWn9+8KwC/vpAVeJjHdC
vJQhjPbrOfhsMNVvrKDar0lGy1X5G06WRtqSCMoc0cIW3gZc
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:11 2024 by rpki-client on console-ams.rpki-client.org