Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa
File:                     3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier:          H6J4jx07Ncexq9y41GSsuw5bfa+KcQ4qtjTO8IIR0Ls=
Subject key identifier:   93:3B:27:4B:75:C6:69:18:95:90:53:6C:A2:23:5E:50:58:E7:99:AE
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       74B9C93A9507041E84F5AE897E1617B836A8B795
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:23 +0000
ROA not before:           Tue 05 Mar 2024 18:06:23 +0000
ROA not after:            Tue 04 Mar 2025 18:11:23 +0000
asID:                     273111
IP address blocks:        200.50.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:c9:3a:95:07:04:1e:84:f5:ae:89:7e:16:17:b8:36:a8:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:23 2024 GMT
            Not After : Mar  4 18:11:23 2025 GMT
        Subject: CN=933B274B75C669189590536CA2235E5058E799AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:07:5f:e3:e6:47:02:b9:8a:ad:d9:b8:de:
                    f6:4a:53:e5:12:91:dc:5c:76:81:de:60:73:5f:76:
                    57:fa:a7:69:69:1b:8b:72:5c:41:df:56:5b:82:9e:
                    30:28:24:70:5c:79:d9:82:d1:67:d6:d0:94:df:42:
                    30:c1:4d:df:e8:89:1a:a8:cb:fc:40:09:7e:ba:cf:
                    b9:3b:5d:28:77:5a:c8:fd:f4:cc:1f:4b:b8:88:c1:
                    e8:18:5d:c9:1b:c3:d0:2d:6f:f6:32:f0:11:60:a6:
                    1d:28:c0:48:ea:e3:8d:6c:80:87:a9:42:f0:bb:a0:
                    f1:62:5b:89:98:59:2c:a0:01:0d:fa:a8:2d:33:3f:
                    53:1c:6d:cb:d5:9b:90:88:60:12:49:7a:fc:92:5d:
                    4e:b0:e2:96:59:5a:4b:c9:e2:53:12:45:9c:b9:e7:
                    fe:14:ca:58:ea:1f:66:3e:35:2c:d9:a5:ba:e1:26:
                    03:8e:92:c4:4a:d2:42:33:29:f6:10:67:fc:8f:23:
                    dc:f5:33:91:65:a0:f1:5e:a5:3a:5e:71:e7:f0:1e:
                    50:30:d0:58:a2:63:b7:3e:30:9d:45:e2:00:1d:55:
                    ee:ea:09:0a:73:e3:0f:2b:e2:ed:43:b2:e2:f8:45:
                    4a:fd:18:8b:cc:94:a8:23:f6:97:2c:f1:43:71:9c:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3B:27:4B:75:C6:69:18:95:90:53:6C:A2:23:5E:50:58:E7:99:AE
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:af:16:2d:fc:c7:00:33:62:51:65:b5:27:b2:25:51:4e:
         98:53:f2:11:52:d3:de:ba:eb:34:a3:52:e1:15:a9:44:e8:b4:
         2c:2c:fb:44:03:32:25:56:77:b1:64:5b:c2:7d:b5:89:05:8d:
         f0:4c:b6:23:a9:3c:eb:ca:e1:3b:ac:2e:2a:ad:b4:78:1b:c6:
         17:2c:2b:63:5e:28:bf:75:70:a0:58:68:7c:24:25:50:91:eb:
         8c:26:57:cf:76:51:16:28:54:82:0e:fd:f6:52:7a:61:0d:64:
         cb:0c:df:42:e4:d0:e2:b0:84:ed:fd:6a:a7:6c:63:12:61:05:
         13:fe:e2:7b:6a:8b:f7:3e:5b:10:fc:7e:c0:11:ca:79:ea:b2:
         c4:2c:9d:e2:11:bb:ca:56:00:d1:e5:4b:19:2d:bb:43:98:3c:
         33:1d:4f:9d:08:c3:de:79:1f:e2:34:e4:7f:b6:3e:21:30:51:
         fa:84:44:03:ee:9a:b9:b5:cb:b4:00:b0:6f:2f:47:09:20:6b:
         2d:70:4d:83:8c:19:f3:06:c4:83:57:01:b2:2d:76:3e:c8:36:
         bc:13:23:4f:61:11:37:8d:49:04:ce:de:1d:63:5d:c1:8b:55:
         59:77:77:75:f4:3d:5b:79:52:ca:8c:7d:30:65:7c:7e:02:f2:
         96:fa:d7:d5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdLnJOpUHBB6E9a6JfhYXuDaot5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCNEQ4Q0Y3QzUzRjg5M0ZBODFBMUUxMTE1QkM4RTAy
NjdGOTg0NTAeFw0yNDAzMDUxODA2MjNaFw0yNTAzMDQxODExMjNaMDMxMTAvBgNV
BAMTKDkzM0IyNzRCNzVDNjY5MTg5NTkwNTM2Q0EyMjM1RTUwNThFNzk5QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPwdf4+ZHArmKrdm43vZKU+US
kdxcdoHeYHNfdlf6p2lpG4tyXEHfVluCnjAoJHBcedmC0WfW0JTfQjDBTd/oiRqo
y/xACX66z7k7XSh3Wsj99MwfS7iIwegYXckbw9Atb/Yy8BFgph0owEjq441sgIep
QvC7oPFiW4mYWSygAQ36qC0zP1McbcvVm5CIYBJJevySXU6w4pZZWkvJ4lMSRZy5
5/4UyljqH2Y+NSzZpbrhJgOOksRK0kIzKfYQZ/yPI9z1M5FloPFepTpecefwHlAw
0FiiY7c+MJ1F4gAdVe7qCQpz4w8r4u1DsuL4RUr9GIvMlKgj9pcs8UNxnLmxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkzsnS3XGaRiVkFNsoiNeUFjnma4wHwYDVR0j
BBgwFoAU2LTYz3xT+JP6gaHhEVvI4CZ/mEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0VCMTA4N0M4QjRCQjNDQTU2NzhFNDFGNDUzOEJBQTgz
NkRGMEQxRjBDOEVFMzIzNTk2NTRERkQyQjVFODk0LzAvRDhCNEQ4Q0Y3QzUzRjg5
M0ZBODFBMUUxMTE1QkM4RTAyNjdGOTg0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEI0RDhDRjdDNTNGODkzRkE4
MUExRTExMTVCQzhFMDI2N0Y5ODQ1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNFQjEwODdDOEI0QkIzQ0E1Njc4RTQxRjQ1MzhCQUE4MzZERjBEMUYw
QzhFRTMyMzU5NjU0REZEMkI1RTg5NC8wLzMyMzAzMDJlMzUzMDJlMzEzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDKZ
MA0GCSqGSIb3DQEBCwUAA4IBAQBlSq8WLfzHADNiUWW1J7IlUU6YU/IRUtPeuus0
o1LhFalE6LQsLPtEAzIlVnexZFvCfbWJBY3wTLYjqTzryuE7rC4qrbR4G8YXLCtj
Xii/dXCgWGh8JCVQkeuMJlfPdlEWKFSCDv32UnphDWTLDN9C5NDisITt/WqnbGMS
YQUT/uJ7aov3PlsQ/H7AEcp56rLELJ3iEbvKVgDR5UsZLbtDmDwzHU+dCMPeeR/i
NOR/tj4hMFH6hEQD7pq5tcu0ALBvL0cJIGstcE2DjBnzBsSDVwGyLXY+yDa8EyNP
YRE3jUkEzt4dY13Bi1VZd3d19D1beVLKjH0wZXx+AvKW+tfV
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org