Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa
File:                     3230302e34312e32302e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          hXJSlLY8IR5bZKfyvK7MHUyWQ9VrJ2ZUG2zYIwT5ss0=
Subject key identifier:   E6:7D:10:D3:99:69:1B:19:BC:52:BC:E1:8D:03:62:E2:5B:D0:2E:9F
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       32063CA56AEF18AC043C19AEC38288701433BA54
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:00:45 +0000
ROA not before:           Tue 05 Mar 2024 17:55:45 +0000
ROA not after:            Tue 04 Mar 2025 18:00:45 +0000
asID:                     20207
IP address blocks:        200.41.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:06:3c:a5:6a:ef:18:ac:04:3c:19:ae:c3:82:88:70:14:33:ba:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:45 2024 GMT
            Not After : Mar  4 18:00:45 2025 GMT
        Subject: CN=E67D10D399691B19BC52BCE18D0362E25BD02E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:52:1c:82:52:2c:01:09:af:8c:27:8b:00:
                    14:c5:69:9d:d8:02:fa:30:bd:a2:28:7d:23:3b:3d:
                    02:66:a1:2d:31:40:ed:3a:37:cb:4e:02:5a:32:39:
                    fb:ac:59:53:28:5e:58:67:c3:8f:0c:09:1d:a3:a0:
                    c1:08:c3:c3:cc:21:d3:ee:3e:8d:76:f8:10:ca:72:
                    fa:85:a8:7f:f0:68:47:61:a7:73:91:e7:3f:95:89:
                    14:14:61:8f:a7:f8:fe:15:1b:75:05:52:6d:67:89:
                    be:28:02:3d:06:b6:2e:b1:4b:45:d0:1d:03:aa:98:
                    11:9c:9b:7f:26:ea:71:1e:a9:85:d9:9a:3c:86:d9:
                    2e:51:91:70:e0:f8:42:99:90:5a:13:aa:3c:da:bc:
                    2c:4e:d6:5f:18:b2:81:7c:db:34:64:9a:f5:f4:1e:
                    13:6a:a7:e3:a5:39:02:43:fa:da:f3:ea:49:f0:79:
                    c2:1e:7c:6a:ed:dd:0c:b1:41:78:32:74:28:2d:42:
                    8e:8b:a2:4a:34:d3:a3:84:4e:9e:6c:de:aa:88:4e:
                    f6:0d:80:f6:25:99:f2:d7:12:24:d1:3a:e3:75:6b:
                    29:d2:c7:64:06:92:8a:2c:73:66:dd:38:98:98:f9:
                    57:e7:55:c6:d2:08:f8:70:de:51:2e:2f:4d:53:9a:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7D:10:D3:99:69:1B:19:BC:52:BC:E1:8D:03:62:E2:5B:D0:2E:9F
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:ea:e1:c1:f8:ac:db:1c:76:95:80:69:d5:03:a9:63:3a:
         4b:ca:0a:8f:a9:e8:1d:4f:1c:86:0f:b7:12:4a:cf:b1:a4:42:
         8c:e2:4d:67:36:78:fc:af:52:5b:0b:77:92:1a:73:52:96:fa:
         78:fa:0f:8c:de:89:a7:3c:22:7a:56:e6:32:85:5e:54:30:8e:
         54:b7:52:15:1b:3a:b5:7d:cc:d9:51:7a:8c:b1:04:9f:35:3d:
         ad:58:89:90:44:8d:18:04:f3:a3:b4:af:d8:8d:b5:c6:a2:78:
         9e:67:e4:2f:20:28:ea:21:b3:34:1b:3a:f2:2a:09:ba:a0:75:
         1b:8c:59:67:2b:99:fc:58:c5:c0:e6:0f:76:70:87:a0:61:b9:
         0b:32:ac:c1:d7:61:f1:7f:1b:c7:43:6b:82:cf:52:1d:66:7b:
         8b:c1:6a:d4:16:66:97:db:e1:b3:8a:b9:2b:10:e6:07:65:43:
         64:b0:01:d8:01:b4:3a:bd:7e:69:60:7f:f5:c8:3b:df:c3:b2:
         f1:46:6b:6e:3d:f4:a4:d3:29:ba:a8:a7:1a:f5:a0:65:04:21:
         99:6e:87:4c:7a:22:bd:5f:99:e4:d2:4b:ff:21:2c:ef:43:2d:
         c0:6c:80:f2:07:4e:50:58:d6:dc:d4:cd:72:a4:84:ba:1f:56:
         60:84:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org