Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3230302e312e3130342e302f32312d3234203d3e203237363635.roa
File:                     3230302e312e3130342e302f32312d3234203d3e203237363635.roa (raw, json)
Hash identifier:          6h2AfdXH0qMpmhMLprX4JWIg1JEBrkJ5bQM7lKRZZMs=
Subject key identifier:   6D:93:D9:59:EB:EE:70:EE:DB:08:14:7E:3D:6A:00:97:9C:97:B9:00
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       3708208984BC5685F65CD8D0186B4052B4888BF4
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3230302e312e3130342e302f32312d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:12 +0000
ROA not before:           Tue 05 Mar 2024 18:10:12 +0000
ROA not after:            Tue 04 Mar 2025 18:15:12 +0000
asID:                     27665
IP address blocks:        200.1.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 01 May 2024 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:08:20:89:84:bc:56:85:f6:5c:d8:d0:18:6b:40:52:b4:88:8b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:12 2024 GMT
            Not After : Mar  4 18:15:12 2025 GMT
        Subject: CN=6D93D959EBEE70EEDB08147E3D6A00979C97B900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:fd:15:da:cf:bc:e1:0f:ab:77:05:b5:f2:
                    fc:b2:4c:aa:f0:f7:e4:18:d1:a6:78:15:bf:ca:63:
                    d5:96:3e:5e:29:6a:5a:0c:ff:27:a2:21:51:92:ab:
                    87:52:b3:45:5f:fd:ca:28:5a:9b:98:5d:da:48:7a:
                    ca:2f:68:37:9a:13:b2:fd:59:46:fc:46:f7:47:31:
                    91:97:37:94:33:6d:30:ff:ac:0c:44:3b:9b:4e:2a:
                    43:d9:b7:cb:95:75:ab:2e:dd:82:75:d1:56:39:6e:
                    0a:b7:a3:f8:67:a8:34:c6:34:64:87:81:f2:48:3a:
                    e2:fd:2e:5c:ca:16:44:ba:e7:60:f5:1f:4e:bf:ea:
                    8d:15:a4:e8:75:af:f8:00:2f:99:ea:82:ad:d7:54:
                    90:df:f8:55:80:1b:a8:fc:a2:3c:dc:8b:30:2a:a7:
                    7d:be:63:91:62:b4:09:35:9c:7f:e6:c5:27:53:fd:
                    4d:ee:bd:a8:81:41:3f:45:57:ee:80:8e:b1:83:f4:
                    3c:aa:4a:59:c2:1c:c2:86:8d:77:fa:27:28:d4:d4:
                    9c:92:64:f7:49:61:79:59:5d:7c:77:dd:28:31:c5:
                    c6:6a:0c:aa:13:42:b7:89:f0:f5:6b:41:72:b4:8b:
                    d5:7d:cf:c9:d4:9e:0d:35:e8:f4:d7:3b:f2:d1:a6:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:D9:59:EB:EE:70:EE:DB:08:14:7E:3D:6A:00:97:9C:97:B9:00
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3230302e312e3130342e302f32312d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:d3:6e:71:3f:0a:64:16:2c:90:ec:77:42:d8:46:fc:07:
         52:ed:00:35:a1:ad:be:55:ca:db:97:b8:b0:bc:a6:ec:4c:57:
         40:4b:36:68:bc:4c:61:93:b0:75:85:38:24:03:25:62:19:ef:
         a6:4d:eb:86:e6:7d:da:3f:4b:ca:72:5f:93:cf:4f:2a:bb:c3:
         61:96:d1:2b:97:cb:75:d6:28:77:e3:ee:03:6a:9f:44:55:f0:
         d5:cf:8a:6c:4f:c0:64:c8:d8:11:7b:2e:a3:fe:f2:52:19:05:
         d2:a2:f6:03:fd:5a:c0:03:92:e5:f3:01:b5:2f:7f:1c:4f:50:
         be:86:5d:bd:49:27:c4:af:fe:b7:6e:d0:10:5b:a6:e8:65:c1:
         5f:f4:62:72:d8:e7:26:36:88:f7:be:97:4e:26:4e:57:c4:f2:
         19:cd:29:ad:9d:96:be:e7:2c:b7:b7:b5:14:a4:5c:93:a2:9d:
         56:94:f7:97:8f:03:96:27:fb:c6:d0:ee:0a:7b:43:a2:42:68:
         9f:04:3f:92:c5:ed:c5:f2:3f:f3:1e:6c:9d:83:ad:7f:c2:6b:
         d6:68:b8:6d:84:4d:5a:b4:27:c3:26:21:e3:d6:39:ef:87:53:
         8b:c8:36:42:74:de:b0:db:bd:0d:a2:6f:35:98:cb:f8:b0:6a:
         20:f0:80:5b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNwggiYS8VoX2XNjQGGtAUrSIi/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCMTkzNjY0QjFBOTZDNkY5M0M0NzcwQTJENjNGNjQy
NThFNjJCNzAeFw0yNDAzMDUxODEwMTJaFw0yNTAzMDQxODE1MTJaMDMxMTAvBgNV
BAMTKDZEOTNEOTU5RUJFRTcwRUVEQjA4MTQ3RTNENkEwMDk3OUM5N0I5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Cf0V2s+84Q+rdwW18vyyTKrw
9+QY0aZ4Fb/KY9WWPl4paloM/yeiIVGSq4dSs0Vf/cooWpuYXdpIesovaDeaE7L9
WUb8RvdHMZGXN5QzbTD/rAxEO5tOKkPZt8uVdasu3YJ10VY5bgq3o/hnqDTGNGSH
gfJIOuL9LlzKFkS652D1H06/6o0VpOh1r/gAL5nqgq3XVJDf+FWAG6j8ojzcizAq
p32+Y5FitAk1nH/mxSdT/U3uvaiBQT9FV+6AjrGD9DyqSlnCHMKGjXf6JyjU1JyS
ZPdJYXlZXXx33SgxxcZqDKoTQreJ8PVrQXK0i9V9z8nUng016PTXO/LRpntXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUbZPZWevucO7bCBR+PWoAl5yXuQAwHwYDVR0j
BBgwFoAUi7GTZksalsb5PEdwotY/ZCWOYrcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMjhGOTFBN0I1REM1RTc3M0U0MkVFNzY5MEVDODA5RTkx
MzdCQzg4RTU5NkEwQUJDQzQ0MzFCRjRFMkRFODM5LzAvOEJCMTkzNjY0QjFBOTZD
NkY5M0M0NzcwQTJENjNGNjQyNThFNjJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QkIxOTM2NjRCMUE5NkM2Rjkz
QzQ3NzBBMkQ2M0Y2NDI1OEU2MkI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjI4RjkxQTdCNURDNUU3NzNFNDJFRTc2OTBFQzgwOUU5MTM3QkM4OEU1
OTZBMEFCQ0M0NDMxQkY0RTJERTgzOS8wLzMyMzAzMDJlMzEyZTMxMzAzNDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczNjM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIAWgwDQYJ
KoZIhvcNAQELBQADggEBAD8G025xPwpkFiyQ7HdC2Eb8B1LtADWhrb5VytuXuLC8
puxMV0BLNmi8TGGTsHWFOCQDJWIZ76ZN64bmfdo/S8pyX5PPTyq7w2GW0SuXy3XW
KHfj7gNqn0RV8NXPimxPwGTI2BF7LqP+8lIZBdKi9gP9WsADkuXzAbUvfxxPUL6G
Xb1JJ8Sv/rdu0BBbpuhlwV/0YnLY5yY2iPe+l04mTlfE8hnNKa2dlr7nLLe3tRSk
XJOinVaU95ePA5Yn+8bQ7gp7Q6JCaJ8EP5LF7cXyP/MebJ2DrX/Ca9ZouG2ETVq0
J8MmIePWOe+HU4vINkJ03rDbvQ2ibzWYy/iwaiDwgFs=
-----END CERTIFICATE-----
Generated at Sun Apr 28 20:43:25 2024 by rpki-client on console-fra.rpki-client.org