Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa
File:                     3230302e33332e3137382e302f32342d3234203d3e203134313738.roa (raw, json)
Hash identifier:          bZQiVyWOlV0CZcMgQVg0DVmF5/dmYgrKMEI+OgwAzFk=
Subject key identifier:   55:91:96:A4:08:FF:71:3F:DE:EB:19:B7:2D:A1:D4:04:2B:A3:E2:13
Certificate issuer:       /CN=5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9
Certificate serial:       137276603D85FB888F18EFF65BFBFC878DE02F6B
Authority key identifier: 5F:7F:E9:5C:E5:CE:A7:0F:86:66:F9:48:A2:AC:E9:4C:D5:17:B2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa
Signing time:             Tue 05 Mar 2024 18:19:54 +0000
ROA not before:           Tue 05 Mar 2024 18:14:54 +0000
ROA not after:            Tue 04 Mar 2025 18:19:54 +0000
asID:                     14178
IP address blocks:        200.33.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:72:76:60:3d:85:fb:88:8f:18:ef:f6:5b:fb:fc:87:8d:e0:2f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9
        Validity
            Not Before: Mar  5 18:14:54 2024 GMT
            Not After : Mar  4 18:19:54 2025 GMT
        Subject: CN=559196A408FF713FDEEB19B72DA1D4042BA3E213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:f8:50:00:7a:01:50:52:f2:75:f7:5a:25:
                    c6:97:38:99:ae:28:b9:b4:eb:43:fc:09:a9:c9:d2:
                    46:c7:bc:a1:fa:f9:a5:80:ec:16:f7:9c:c9:12:81:
                    1e:32:5a:d5:c8:e3:9d:8a:40:31:61:58:d8:b8:7c:
                    1a:5d:16:f4:bc:0b:41:9e:18:21:ed:b2:0f:f2:1f:
                    b4:1d:ec:01:93:8b:d3:5b:24:bc:5d:b1:5b:35:38:
                    26:db:1f:47:9a:7d:a2:4d:20:bb:2f:d4:9c:57:d4:
                    78:5d:e1:25:22:cf:47:ed:bb:37:ac:b9:37:a6:8b:
                    ff:e5:3c:bd:20:45:36:e1:67:7e:3c:a8:57:f3:3c:
                    34:d4:f9:fe:00:ec:9f:f4:b7:f8:53:91:b1:2f:7f:
                    1e:5a:2b:06:26:a0:e6:fe:ad:f1:49:05:42:07:6f:
                    78:9c:03:18:6a:ba:49:8c:51:87:e2:e6:e9:e9:46:
                    1a:03:6e:cf:cc:61:82:26:f5:86:63:4f:04:9e:7a:
                    fd:8e:b3:01:7c:d4:7e:c0:89:7d:da:26:80:28:e7:
                    9b:0d:81:63:1c:16:e9:b6:b7:ba:c1:ca:b4:f8:e0:
                    33:34:ee:f0:63:7c:a8:35:42:1c:53:8a:d4:7d:d5:
                    ee:bc:bb:52:32:c5:b0:88:39:18:f7:34:e5:bb:33:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:91:96:A4:08:FF:71:3F:DE:EB:19:B7:2D:A1:D4:04:2B:A3:E2:13
            X509v3 Authority Key Identifier:
                keyid:5F:7F:E9:5C:E5:CE:A7:0F:86:66:F9:48:A2:AC:E9:4C:D5:17:B2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F7FE95CE5CEA70F8666F948A2ACE94CD517B2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/062CD906A1C1818D7991AAA790102EF33E698D3D4E71AB536F51EE1E6968E5CE/0/3230302e33332e3137382e302f32342d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:5f:e7:4a:7a:ab:c5:87:f8:22:00:fa:ca:52:85:eb:e6:
         0c:4e:f3:7d:4d:3d:f4:8b:42:90:d1:8c:d9:35:19:5e:96:c7:
         df:44:40:73:5c:4a:2c:bc:95:70:54:46:8e:43:c0:7d:c5:6a:
         04:73:97:69:57:5f:b4:21:98:b9:98:61:60:3c:bd:64:4f:7d:
         5a:de:88:dd:47:e8:67:6e:1e:fd:78:e2:ce:9e:70:e9:44:a6:
         51:60:0f:3f:81:56:54:21:3d:0f:3c:d3:bf:b3:ae:24:e4:6a:
         e0:fe:01:9c:ed:a1:a4:84:14:1b:94:a5:ba:32:b8:90:8d:6f:
         01:3e:aa:6d:87:6f:4d:50:23:b7:e2:c8:d2:92:62:3c:48:3a:
         4b:b9:ea:80:ea:01:29:e1:dd:2a:c4:9c:e3:75:95:e6:13:19:
         a4:70:37:1d:e3:39:dc:4a:1e:f6:1e:44:39:89:5f:9f:11:6c:
         5d:a8:90:cf:b1:be:26:a2:fb:fd:26:ec:20:2a:56:b1:24:5d:
         7d:f2:fd:c3:c6:df:0f:d6:47:c7:1d:fb:e6:69:ac:23:b4:09:
         de:72:8c:3c:c9:8e:af:0b:68:5b:ff:4f:32:99:ba:30:55:5e:
         32:ed:c5:ee:f4:b3:60:79:b7:2b:54:d8:e0:e8:09:71:0b:f5:
         52:69:ee:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org