Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33362e302f32332d3234203d3e20323633323330.roa
File:                     3230302e34312e33362e302f32332d3234203d3e20323633323330.roa (raw, json)
Hash identifier:          xZtcmlr5Huosbbm4oS9gAedPUm90Qb83w0+6a/jOn2I=
Subject key identifier:   46:E8:27:84:B2:0C:3D:E6:63:8A:8E:31:B9:63:8B:B6:25:5A:2B:99
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       04E10B46B5FEF306BDF06D2243ED3F9E0E3B3A39
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33362e302f32332d3234203d3e20323633323330.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     263230
IP address blocks:        200.41.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e1:0b:46:b5:fe:f3:06:bd:f0:6d:22:43:ed:3f:9e:0e:3b:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=46E82784B20C3DE6638A8E31B9638BB6255A2B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:a9:a9:07:0a:6a:72:48:22:8a:26:c3:e6:
                    2d:ea:b9:66:86:ac:8c:9c:39:d6:77:d7:ad:df:64:
                    51:84:73:b3:a7:4e:fb:91:69:4d:2d:71:79:e9:99:
                    44:a8:9d:e2:5d:b5:47:2d:ff:7b:e9:80:c7:60:bd:
                    62:2d:30:46:08:90:57:80:80:a9:51:44:97:df:5e:
                    c0:9f:25:b2:48:ee:66:81:fa:bc:28:9b:f9:ac:c8:
                    e8:5e:83:7c:cd:63:ff:7d:4f:a8:62:fa:6f:d9:78:
                    37:1b:78:73:38:94:b9:ce:f7:92:e5:bf:7c:7f:47:
                    82:2e:1e:ce:70:b6:dc:99:fa:c3:ca:c2:19:80:29:
                    70:e6:1e:06:7f:15:88:97:82:45:4b:40:b1:89:07:
                    d4:f5:ff:f2:d8:18:1a:0a:b7:b1:33:7b:c4:2c:9f:
                    15:24:68:40:1d:8d:6a:92:85:55:9e:2b:37:97:d2:
                    3d:e4:de:51:42:e8:f5:b7:54:f8:22:0d:23:9b:be:
                    a4:fc:d1:d3:f6:57:4a:4a:1d:a0:72:eb:cc:02:ec:
                    73:a4:b4:18:e7:e6:10:63:c6:b6:b4:13:c5:32:b8:
                    dc:18:f9:46:71:3c:fa:8b:47:6d:95:3c:59:77:34:
                    79:cf:71:49:62:81:25:a8:aa:e8:a0:aa:e4:c6:f5:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:27:84:B2:0C:3D:E6:63:8A:8E:31:B9:63:8B:B6:25:5A:2B:99
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33362e302f32332d3234203d3e20323633323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:70:c1:e1:88:72:d5:7c:1b:cb:2c:50:a6:da:2d:8b:ac:37:
         e9:22:3b:97:9e:c8:00:f8:94:c2:cb:35:4b:71:c1:2c:2b:dc:
         03:b1:9f:1d:0e:ab:d9:25:6e:05:b1:18:48:9d:01:66:88:df:
         ef:4e:cd:2d:4e:8d:99:1a:e3:e2:31:af:5a:e1:5e:f1:23:9e:
         6d:69:f3:21:58:b6:4b:2b:21:13:3c:d1:21:e3:18:60:d0:ce:
         ff:21:3e:81:21:08:d5:2b:7a:dc:54:63:73:5c:ee:c5:7d:ec:
         c9:7d:18:46:5a:db:95:8c:b8:61:94:ab:fc:d0:2e:2d:3c:02:
         00:75:61:45:5a:b5:a3:a3:80:af:23:7c:47:21:17:c3:97:df:
         36:7c:73:50:a5:e0:1b:d2:55:c5:54:f1:da:83:f9:0c:a0:f7:
         da:ac:45:d4:91:c1:98:fa:b4:9e:83:03:d7:a7:03:b0:cd:e0:
         08:a5:e5:25:7b:12:7e:59:23:01:de:58:bf:d1:d4:2f:fb:81:
         c3:91:7c:de:bd:54:13:e1:64:0c:2f:6d:23:2a:c9:d4:a2:b4:
         9e:8d:ba:ba:b7:7f:1e:21:41:34:90:86:22:da:08:22:4e:50:
         94:be:88:2b:9a:9c:cb:1b:2e:57:15:8f:fa:82:e9:8d:bc:1e:
         bc:d8:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 23:04:10 2024 by rpki-client on console-fra.rpki-client.org