Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
File:                     3230302e372e31362e302f32302d3231203d3e203237363531.roa (raw, json)
Hash identifier:          13MXtmTULXTSuuOrDaV+mljzR/PTi8U7mlEO/E9ZXm8=
Subject key identifier:   EB:CE:8B:51:9F:7F:CE:26:38:75:8D:CC:F8:D0:40:08:DE:ED:22:E1
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       1D1389F093C04CA062065808253C1A7079CC2654
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:59 +0000
ROA not before:           Tue 05 Mar 2024 18:09:59 +0000
ROA not after:            Tue 04 Mar 2025 18:14:59 +0000
asID:                     27651
IP address blocks:        200.7.16.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:89:f0:93:c0:4c:a0:62:06:58:08:25:3c:1a:70:79:cc:26:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:59 2024 GMT
            Not After : Mar  4 18:14:59 2025 GMT
        Subject: CN=EBCE8B519F7FCE2638758DCCF8D04008DEED22E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:31:bf:4c:45:f7:43:e2:d0:3d:19:e4:23:
                    86:97:73:76:a4:3c:f5:04:70:3f:d4:75:1b:3c:00:
                    65:29:47:cd:2e:f9:14:dd:c1:9b:47:27:7d:e0:57:
                    db:e5:19:f6:2d:40:42:7e:73:29:45:40:13:a6:18:
                    31:4a:29:c4:b6:a5:66:c3:67:91:21:3a:9a:74:1e:
                    87:01:54:63:fb:8f:da:0b:53:09:77:6f:e9:66:e4:
                    fb:37:28:f2:b9:99:14:2a:9c:b4:1b:01:62:81:f9:
                    53:4d:dc:ef:2e:90:6f:cb:78:c2:90:c9:d1:55:04:
                    83:b0:67:1a:3f:99:84:5b:6d:4f:0b:b7:25:58:00:
                    06:ef:81:b6:99:4b:50:b0:cc:21:eb:46:d1:71:b9:
                    91:f9:08:21:d2:47:c8:28:13:43:8d:e5:b5:05:a8:
                    da:49:05:a4:99:15:f0:6d:54:ea:5c:69:73:d2:38:
                    ed:a5:1b:83:50:4d:c4:39:8c:50:68:eb:b2:23:bd:
                    b1:81:bd:65:8a:43:c9:12:94:c0:9b:24:5d:4a:20:
                    d9:e8:3d:54:76:68:d9:d3:af:9f:76:b9:3d:22:fd:
                    6d:8e:31:20:c3:31:c3:9a:e5:aa:bf:9a:aa:ce:59:
                    e0:f5:6b:cd:fc:9c:7c:49:24:6d:27:97:8e:db:87:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:8B:51:9F:7F:CE:26:38:75:8D:CC:F8:D0:40:08:DE:ED:22:E1
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:65:55:a6:d3:c5:9d:e5:ba:f9:f6:1a:5c:36:46:e0:48:2b:
         2d:8d:0b:1b:62:e2:16:f2:2d:5e:b3:41:61:95:3d:1d:62:1e:
         65:cd:9f:98:85:cd:20:53:4b:ee:05:0d:1f:4b:1c:b3:4a:8b:
         13:b4:7f:ed:19:89:c5:0a:f0:4b:78:cc:b4:62:79:2f:e5:9e:
         16:36:6a:4d:3b:2f:89:fa:05:fc:a6:13:07:f5:5e:de:3b:7e:
         bf:7a:71:d8:db:54:48:c8:15:62:71:67:82:35:55:78:20:65:
         e6:73:f1:e7:1c:36:df:d0:69:b5:01:d1:7a:7e:21:11:f6:f0:
         6e:3d:37:61:fd:8b:51:19:47:eb:a9:fb:60:d3:07:20:d6:8e:
         1b:91:9c:dc:98:c3:cf:83:db:81:24:77:d6:d3:51:40:f0:98:
         ce:ec:85:95:3a:0e:34:63:0a:f9:7e:da:e0:57:ce:9f:80:9e:
         f0:67:ef:cf:8b:d9:6d:51:30:32:38:9c:55:d8:b8:2d:e5:d8:
         0e:ce:13:ee:bd:b7:d0:36:c4:55:23:a2:1b:9f:7b:b6:f5:2d:
         c0:9a:f6:7c:b6:28:86:7a:d4:13:e7:e4:f5:7e:a5:4d:f0:7f:
         0a:98:0e:23:c8:88:33:fb:c8:38:f5:67:39:c5:6c:13:e3:95:
         42:8e:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:45 2024 by rpki-client on console-ams.rpki-client.org