Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32342d3234203d3e20313938393439.roa
File:                     3230302e39332e3232362e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          iABkY0K+6WsRWFBdowNZWq8TNQMvkNa46D0vnyxev0U=
Subject key identifier:   C9:AF:BF:E5:81:FA:B7:BC:C5:A8:B1:0E:25:43:6F:AE:B7:AB:60:1C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5AB386DD7819291EFB12C88ED24EB154DA03D9B6
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     198949
IP address blocks:        200.93.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b3:86:dd:78:19:29:1e:fb:12:c8:8e:d2:4e:b1:54:da:03:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=C9AFBFE581FAB7BCC5A8B10E25436FAEB7AB601C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a5:4f:97:a8:0e:e7:b6:d9:12:ad:77:6e:8a:
                    95:be:70:f4:58:c8:a3:5c:8d:58:60:9b:a2:39:ad:
                    2d:29:55:60:d3:3f:d7:6b:08:a3:fb:0b:14:c8:8e:
                    1e:ce:85:ec:1b:bc:87:bc:d1:14:00:c5:fb:8c:74:
                    26:ff:64:78:05:a7:08:c0:c7:b4:69:60:26:eb:2b:
                    d2:bb:8e:51:ce:7b:1e:b5:fb:fd:65:f6:01:99:6c:
                    bd:f7:f1:04:cc:2c:72:9a:94:28:0a:55:85:dc:68:
                    7b:9f:51:4e:e4:d0:9b:29:18:e7:e2:a0:78:9a:c9:
                    02:ee:2e:bf:fe:6d:b4:9a:64:81:67:7e:2a:c6:62:
                    df:f3:80:ed:81:e5:c1:14:26:b2:b3:62:91:dd:a9:
                    cd:cd:62:de:fe:86:75:aa:5b:6e:c2:e7:1f:69:62:
                    0d:ee:f7:b1:70:1c:6f:82:39:0b:22:cc:29:00:46:
                    ad:b8:d5:c1:e5:00:5d:9d:1c:40:93:4c:c1:8e:1d:
                    d3:2c:b1:a8:7a:cc:6a:f9:07:cf:23:96:31:ad:fc:
                    3d:84:05:89:d5:f3:28:10:29:4a:67:94:12:d2:0a:
                    8b:d4:cb:b9:a1:ca:ad:ce:c7:af:b8:c8:90:e2:9e:
                    81:68:4e:19:9c:1f:22:0d:6a:c5:f6:be:a4:c0:5e:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:BF:E5:81:FA:B7:BC:C5:A8:B1:0E:25:43:6F:AE:B7:AB:60:1C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:2b:cd:20:c5:e5:55:96:49:6a:2d:c1:55:a2:a6:e1:bb:
         ce:a1:ff:d1:b7:93:09:bf:1d:ac:c5:d5:79:b2:04:10:56:f8:
         74:76:b4:ba:92:2a:2a:f2:6f:da:d5:c6:73:59:fc:aa:66:9b:
         0f:b3:6e:dc:95:fc:59:d1:0a:cd:26:ea:56:14:23:c8:b6:fb:
         01:16:f7:78:10:02:38:bd:26:8c:df:df:9b:70:1d:0e:98:06:
         c3:04:28:2a:d8:e5:38:e1:72:22:57:8d:38:a7:61:c2:46:56:
         f5:aa:b0:13:b3:62:6a:c2:09:6c:32:76:22:b2:4f:3f:5e:8b:
         fa:33:18:13:18:93:ce:20:2f:f5:d0:c0:36:ac:50:c0:9b:d1:
         c7:a4:71:08:91:60:3a:d2:80:92:8c:a7:4e:78:6d:5b:9c:d7:
         d2:f8:20:85:c7:c3:22:54:c0:a6:f9:34:f2:e0:18:44:5a:9b:
         5f:32:22:07:b3:25:d6:6f:a1:a9:15:d4:23:b9:68:92:ea:53:
         c8:13:55:2d:8e:9c:87:ce:08:11:ed:0f:9f:60:8c:9d:34:50:
         f9:6a:5b:ec:31:ad:de:4f:02:3b:4c:ca:23:37:61:4c:2b:99:
         a6:05:d1:15:35:8a:4f:7a:b4:5a:45:e5:18:03:0b:24:ef:7c:
         b4:55:03:50
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWrOG3XgZKR77EsiO0k6xVNoD2bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MjlaFw0yNTAzMDQxODEwMjlaMDMxMTAvBgNV
BAMTKEM5QUZCRkU1ODFGQUI3QkNDNUE4QjEwRTI1NDM2RkFFQjdBQjYwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpU+XqA7nttkSrXduipW+cPRY
yKNcjVhgm6I5rS0pVWDTP9drCKP7CxTIjh7OhewbvIe80RQAxfuMdCb/ZHgFpwjA
x7RpYCbrK9K7jlHOex61+/1l9gGZbL338QTMLHKalCgKVYXcaHufUU7k0JspGOfi
oHiayQLuLr/+bbSaZIFnfirGYt/zgO2B5cEUJrKzYpHdqc3NYt7+hnWqW27C5x9p
Yg3u97FwHG+COQsizCkARq241cHlAF2dHECTTMGOHdMssah6zGr5B88jljGt/D2E
BYnV8ygQKUpnlBLSCovUy7mhyq3Ox6+4yJDinoFoThmcHyINasX2vqTAXgPBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUya+/5YH6t7zFqLEOJUNvrrerYBwwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMyMzAzMDJlMzkzMzJlMzIzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzkzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyF3i
MA0GCSqGSIb3DQEBCwUAA4IBAQCB1CvNIMXlVZZJai3BVaKm4bvOof/Rt5MJvx2s
xdV5sgQQVvh0drS6kioq8m/a1cZzWfyqZpsPs27clfxZ0QrNJupWFCPItvsBFvd4
EAI4vSaM39+bcB0OmAbDBCgq2OU44XIiV404p2HCRlb1qrATs2JqwglsMnYisk8/
Xov6MxgTGJPOIC/10MA2rFDAm9HHpHEIkWA60oCSjKdOeG1bnNfS+CCFx8MiVMCm
+TTy4BhEWptfMiIHsyXWb6GpFdQjuWiS6lPIE1UtjpyHzggR7Q+fYIydNFD5alvs
Ma3eTwI7TMojN2FMK5mmBdEVNYpPerRaReUYAwsk73y0VQNQ
-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org