Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e2038313030.roa
File:                     3230302e362e3135322e302f32312d3231203d3e2038313030.roa (raw, json)
Hash identifier:          XxnlhsdM+VP5MUGQA7093BelnJduO1+gUyfbWWPVF2k=
Subject key identifier:   42:6E:00:50:02:8A:8E:82:FD:C3:9D:7F:32:23:3A:E3:0B:8A:7C:49
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       70DE2D130678CC89430FDC4491CE50032AE5B81F
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:14 +0000
ROA not before:           Tue 05 Mar 2024 18:08:14 +0000
ROA not after:            Tue 04 Mar 2025 18:13:14 +0000
asID:                     8100
IP address blocks:        200.6.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:de:2d:13:06:78:cc:89:43:0f:dc:44:91:ce:50:03:2a:e5:b8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:14 2024 GMT
            Not After : Mar  4 18:13:14 2025 GMT
        Subject: CN=426E0050028A8E82FDC39D7F32233AE30B8A7C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:3f:20:32:6a:53:51:8b:9a:97:e1:c8:49:
                    e9:37:41:e6:ae:7c:2e:71:42:e5:78:37:87:8d:1d:
                    24:d1:ac:b2:06:44:9c:13:7c:bf:86:6d:e5:44:89:
                    e8:28:90:da:52:1d:2e:19:be:cf:bf:54:b8:f8:1a:
                    df:6b:d9:4f:94:9b:c7:91:8c:b2:81:4e:1c:2a:a4:
                    f3:81:72:49:7a:4c:32:45:80:d3:c7:5e:75:35:d1:
                    88:ca:d1:ba:d0:57:3f:8e:8e:3f:d2:97:e9:bd:ec:
                    da:7a:49:63:13:ac:c2:e2:86:15:54:2a:17:49:48:
                    1c:f3:db:1e:39:04:06:18:10:2b:38:af:29:6d:f4:
                    40:93:85:4b:5d:d1:15:4d:fb:fd:34:6b:15:44:7c:
                    e1:11:22:1a:25:22:8e:dc:ce:2d:ea:84:e2:d5:94:
                    34:b3:ab:3e:0e:bb:14:8e:77:b2:24:1e:90:69:31:
                    3e:fc:84:cf:17:d7:dd:72:e1:2e:3d:f9:b9:ad:1c:
                    10:86:67:dc:14:45:30:68:2a:bf:5e:49:f2:c6:17:
                    61:0a:bc:a0:f4:09:72:0c:8b:3b:36:f4:d5:9f:69:
                    42:fe:39:ce:aa:99:85:71:c9:12:c2:c1:70:85:d2:
                    83:30:f1:09:0e:0e:b0:f3:00:09:6e:6c:34:3c:37:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6E:00:50:02:8A:8E:82:FD:C3:9D:7F:32:23:3A:E3:0B:8A:7C:49
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:48:39:d3:29:1d:26:f7:67:ed:69:70:a6:53:ce:52:af:52:
         3c:fd:da:2a:25:dd:56:fe:39:16:a7:9c:cf:e5:c6:08:4a:b4:
         d6:a1:9e:a6:91:83:4b:87:f2:ab:6e:fa:e8:0a:47:b2:ec:9f:
         1c:1a:55:f9:a5:72:f8:8e:9a:3c:6c:d8:a5:22:6a:a8:34:ed:
         60:af:e3:9d:ca:95:67:3e:51:bf:bb:cb:85:a5:1d:3d:2d:f1:
         03:2c:51:7a:08:6a:29:08:51:9d:5b:72:9a:ee:04:aa:b4:d8:
         d6:ed:e0:77:b7:a9:f2:58:8c:60:0a:ff:ab:95:a8:ea:96:10:
         5e:b3:e7:b0:2a:1a:ae:af:a8:f0:56:01:7a:47:6b:ee:2c:df:
         21:06:d7:89:fd:a4:8b:18:c8:5b:7c:4d:6e:16:eb:c2:5d:eb:
         44:7b:7d:00:83:0d:ea:5b:9d:90:e4:95:37:36:b2:b3:78:bc:
         ca:0e:5f:50:df:24:3d:bf:b4:ad:e0:2c:26:db:3e:94:e1:28:
         88:41:71:e7:ef:5b:99:f0:5b:1a:2c:75:9d:6f:5c:f8:00:50:
         19:ad:8d:f1:91:47:b6:4f:83:1a:49:7f:f0:d1:00:40:ff:c4:
         fa:05:ff:fc:cc:06:3f:76:b0:47:1a:78:d1:bd:15:7e:b8:d7:
         b1:5b:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:38 2024 by rpki-client on console-ams.rpki-client.org