Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
File:                     3230302e312e3131362e302f32342d3234203d3e203136373031.roa (raw, json)
Hash identifier:          KidwGU7Z0FrwiZkrdEEpIf0MPy8IKaiuSz9j/a8NIF0=
Subject key identifier:   7A:C2:BF:06:BF:85:76:D8:CB:FE:4A:1A:AE:2D:9D:AB:18:B6:4B:3E
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       7D77218D16F12628FC3568D7A639080B042382D0
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
Signing time:             Tue 04 Jun 2024 19:20:00 +0000
ROA not before:           Tue 04 Jun 2024 19:15:00 +0000
ROA not after:            Tue 03 Jun 2025 19:20:00 +0000
asID:                     16701
IP address blocks:        200.1.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:77:21:8d:16:f1:26:28:fc:35:68:d7:a6:39:08:0b:04:23:82:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: Jun  4 19:15:00 2024 GMT
            Not After : Jun  3 19:20:00 2025 GMT
        Subject: CN=7AC2BF06BF8576D8CBFE4A1AAE2D9DAB18B64B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:f8:68:22:bc:ab:b9:92:5f:6e:e4:ff:28:
                    8a:cc:02:63:f4:65:8f:13:4c:22:8d:f3:00:74:04:
                    ed:13:d5:d7:c2:73:af:2a:8a:83:2b:65:b8:fb:c5:
                    79:b0:d4:0c:03:3b:84:a3:d6:ec:06:ac:ff:68:d6:
                    d4:d4:39:66:cb:44:4c:b4:0c:fa:62:d8:c2:4b:1f:
                    7a:5b:dd:6b:d6:a8:53:de:cb:2a:68:2a:af:c4:c7:
                    ed:bc:a1:5a:a9:35:4a:8b:f5:a8:ec:a2:e1:43:29:
                    71:82:13:18:57:e3:67:48:95:12:1e:b4:1b:c2:bb:
                    4f:9d:9e:47:12:28:6a:7c:ea:3c:14:a6:d2:73:5b:
                    6b:c4:95:c5:d9:f9:69:bf:f0:81:20:32:d6:9b:05:
                    97:e3:da:d9:58:64:3e:b6:fe:7c:f1:53:d8:80:99:
                    1a:8c:c2:f7:81:ca:f3:6f:53:dd:42:5f:ef:93:99:
                    9a:78:f7:5c:7c:3c:0d:10:3a:ad:cd:15:c5:cb:16:
                    44:f4:74:72:f9:b3:bc:ae:34:c3:0d:85:6e:49:b9:
                    bd:c9:70:a7:00:74:6b:b4:8c:e8:e3:87:d0:8c:90:
                    ab:2e:4c:f0:1d:83:79:02:8c:27:0b:a7:7c:6e:86:
                    1b:bf:35:af:e0:66:61:1f:b9:a7:cd:01:a8:fe:a5:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:BF:06:BF:85:76:D8:CB:FE:4A:1A:AE:2D:9D:AB:18:B6:4B:3E
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:5a:b1:bc:54:ce:b7:5a:2e:1a:f3:f1:fe:65:f2:36:86:
         41:a5:d7:c9:05:79:35:9a:58:d7:81:8c:0d:be:9c:f7:e4:32:
         ea:b5:5f:86:b1:8f:94:58:58:fa:73:d5:96:3d:0e:3a:34:29:
         f3:80:33:ed:b4:6c:7a:bb:ca:bb:c1:92:79:b7:5c:fe:5b:68:
         6b:4d:15:04:b0:6b:da:66:fb:bb:db:d6:de:d4:e4:69:14:d7:
         c2:0e:e0:7d:c2:df:17:89:11:95:3d:cc:f8:9a:48:ed:93:ef:
         63:c6:13:74:53:dd:0c:51:98:03:d5:b3:7c:06:e8:f4:75:04:
         00:05:0b:a6:f7:bd:b8:27:97:59:0b:86:7a:6b:83:6d:f1:30:
         38:50:42:a5:a3:c2:77:ea:c9:a2:42:98:89:38:2b:6c:02:1e:
         b9:a5:ae:83:29:35:61:25:4a:e7:da:fd:39:ff:01:2c:80:40:
         2a:08:31:6d:d6:a3:cb:c4:ac:f1:83:13:8d:6d:35:4e:b1:5e:
         2f:97:d2:19:a4:be:f5:82:37:10:39:7d:c2:8b:92:79:3a:07:
         55:02:9a:5c:66:89:e3:f3:23:ce:18:a5:53:fb:8c:c5:b8:23:
         83:aa:d7:a8:61:3d:e2:06:5c:bd:3b:d0:ca:31:6a:d5:c5:01:
         be:40:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 10:46:06 2024 by rpki-client on console-fra.rpki-client.org