Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa
File:                     3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa (raw, json)
Hash identifier:          m+RrjXldDZRR1B5Rm9eyCVMULABe0Lkax8qFu/fgqWw=
Subject key identifier:   02:96:F5:20:D2:2C:07:6D:D8:7A:FC:CF:EF:40:05:B9:36:34:8B:C6
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       4D7EB637BAD5DEDB490B62EA739CFC772B2810A8
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa
Signing time:             Tue 05 Mar 2024 18:12:03 +0000
ROA not before:           Tue 05 Mar 2024 18:07:03 +0000
ROA not after:            Tue 04 Mar 2025 18:12:03 +0000
asID:                     271866
IP address blocks:        200.36.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7e:b6:37:ba:d5:de:db:49:0b:62:ea:73:9c:fc:77:2b:28:10:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:03 2024 GMT
            Not After : Mar  4 18:12:03 2025 GMT
        Subject: CN=0296F520D22C076DD87AFCCFEF4005B936348BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:6b:c4:55:03:56:5d:cb:cb:91:89:6c:1b:
                    aa:a6:86:23:79:71:14:43:af:a1:6e:63:bb:93:84:
                    52:44:b2:16:6d:53:83:da:82:9f:a0:de:35:c0:ee:
                    08:56:4a:f0:24:36:c8:eb:78:81:1e:3e:ec:80:de:
                    95:26:85:b9:02:42:6b:36:df:83:40:51:0f:34:61:
                    95:75:73:4d:a7:cc:e8:a0:bd:18:7e:c6:63:fc:30:
                    1f:20:a1:fd:c6:6b:f3:e2:7f:a7:35:17:fa:d1:84:
                    6f:51:6f:1f:42:2f:27:cd:68:53:29:bf:51:6b:3a:
                    36:18:b2:64:ac:2a:58:1a:30:17:84:f0:76:fc:53:
                    c2:1f:0c:23:b5:4e:7c:45:c2:11:5c:42:d4:01:28:
                    bd:45:b4:80:57:ea:f3:c3:a9:b8:6b:db:a6:a1:b0:
                    f2:55:3e:e4:9c:8d:ff:a1:48:b3:09:4f:bd:29:c7:
                    40:00:aa:35:9e:83:40:8f:70:e9:fa:cb:26:dc:ea:
                    5f:ad:c0:a9:f6:39:cf:59:13:82:c5:ac:1d:9d:bd:
                    43:8b:f3:41:36:6c:88:9e:fa:f0:44:c0:59:65:df:
                    23:33:5d:e5:55:be:6b:2a:d2:a5:85:5e:be:bd:fe:
                    ac:b0:bc:67:a1:48:81:c1:d5:36:08:63:39:82:87:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:F5:20:D2:2C:07:6D:D8:7A:FC:CF:EF:40:05:B9:36:34:8B:C6
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3233203d3e20323731383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:a2:2f:d7:b9:0f:c7:b6:52:86:68:a1:10:36:99:74:9f:
         44:86:6d:c9:cb:9b:1a:e3:6d:da:e0:64:11:bb:1e:c8:a6:a1:
         f4:53:93:aa:fe:07:af:09:88:29:b5:e9:52:94:28:61:3b:06:
         d1:eb:03:8c:c7:02:bc:0b:66:d1:c6:fd:10:f8:bb:96:e9:7d:
         e5:8a:cb:2f:eb:80:56:8a:b7:3a:35:76:27:0a:73:5c:cb:26:
         59:f0:ea:d3:2a:c6:8e:bb:7f:c9:bf:64:67:ea:9a:61:24:14:
         cf:14:8c:a5:22:12:cc:d1:24:db:50:ae:08:7b:28:20:25:86:
         28:14:30:4b:c3:04:a9:a9:a3:f6:82:6f:4e:bf:ff:1f:69:0f:
         85:7b:20:36:a9:bb:ba:04:07:74:89:d7:94:19:93:75:05:eb:
         d4:d0:4a:8b:69:08:53:84:95:c0:7c:c9:12:91:0a:5d:e5:07:
         30:55:25:b8:32:c5:95:9e:7e:be:d5:bf:14:ed:4b:fe:e5:a3:
         cc:30:f5:81:51:d9:af:58:42:a0:27:6a:94:41:55:46:44:11:
         8e:3b:cc:f2:4f:21:ef:3e:d1:50:7e:a1:f7:48:04:6f:e6:80:
         c5:c8:51:e4:7e:6d:4f:59:69:75:cf:76:62:b4:c8:0b:b4:76:
         c9:7e:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org