Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa
File:                     3230302e312e3135362e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier:          mb2OknlzrqDdm8+eb77wO3KmhA20fRROMmgx6OLdJHU=
Subject key identifier:   91:DF:EB:87:B6:D0:70:3C:9C:35:B9:4C:54:5B:5F:56:A4:64:68:4E
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       6A574DD9540BF185F44C224B9E3B999135B6ABAF
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa
Signing time:             Tue 05 Mar 2024 17:41:32 +0000
ROA not before:           Tue 05 Mar 2024 17:36:32 +0000
ROA not after:            Tue 04 Mar 2025 17:41:32 +0000
asID:                     27775
IP address blocks:        200.1.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:4d:d9:54:0b:f1:85:f4:4c:22:4b:9e:3b:99:91:35:b6:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Mar  5 17:36:32 2024 GMT
            Not After : Mar  4 17:41:32 2025 GMT
        Subject: CN=91DFEB87B6D0703C9C35B94C545B5F56A464684E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:fa:87:2b:cc:a2:64:ab:f0:1b:50:dd:7e:
                    74:8a:32:9a:71:fa:14:51:cd:5d:e4:f7:bd:a8:f0:
                    3c:af:fc:75:a3:64:b5:d1:61:ba:c7:8d:05:b8:10:
                    f8:7c:79:6d:a0:f5:b7:82:1f:32:ae:f7:b7:e5:a6:
                    46:dc:e2:ac:23:55:97:04:f0:e6:fe:37:29:10:75:
                    d8:ac:a1:6b:a1:4c:2a:df:24:81:a7:62:e2:70:28:
                    01:5c:98:ea:e6:3b:fc:3b:d7:34:62:a4:88:52:58:
                    27:32:fe:14:28:33:64:2e:d4:37:ee:37:10:99:1e:
                    52:df:12:3c:df:26:19:ca:11:8b:d3:ec:8d:3a:f1:
                    45:12:4a:38:e4:b1:60:73:d9:4c:0d:bf:56:bb:5f:
                    6a:da:41:12:26:63:f7:3c:24:d5:55:6c:f2:8b:d8:
                    7d:f2:e7:ed:bd:f5:73:dc:44:c4:45:a1:88:44:64:
                    79:fb:42:d1:71:0d:e0:24:6f:31:36:f5:a6:31:e9:
                    55:f4:10:85:01:df:71:30:ea:d9:68:74:ce:9f:a8:
                    5b:e8:6c:3a:14:f7:b6:1a:19:b9:79:df:d2:b6:04:
                    c7:4e:3f:cd:f8:cc:55:d7:fe:a4:a2:02:2f:4a:1d:
                    ba:07:d7:4b:75:c6:4e:39:5e:fe:de:fd:b3:53:e8:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DF:EB:87:B6:D0:70:3C:9C:35:B9:4C:54:5B:5F:56:A4:64:68:4E
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3230302e312e3135362e302f32322d3234203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:f0:e5:7e:39:f4:e9:35:45:fd:5b:1c:a8:05:5a:e1:07:
         fd:d9:d0:11:13:00:6e:42:5a:43:2f:93:a5:f3:1a:75:84:7a:
         18:49:86:b0:5d:f3:a7:18:a2:17:6f:82:3d:53:70:a1:dc:a6:
         5c:c2:86:dd:f8:ff:7e:17:dc:82:5f:b5:ad:7f:d8:26:4c:fa:
         19:8a:24:5c:f6:1a:50:fc:a7:8d:96:eb:ca:a3:3a:e3:e3:c7:
         80:08:c6:df:d9:04:35:b8:23:e1:8c:37:cc:b7:26:87:d5:92:
         1c:35:61:e7:20:57:8a:ad:7a:e7:40:5e:49:21:95:3d:0f:be:
         41:1e:c5:87:46:a1:4b:00:72:fb:65:0c:ce:71:6f:53:85:71:
         40:06:8d:cc:eb:f9:0e:0a:69:9d:81:a7:b5:01:14:eb:58:60:
         7c:b1:ec:e0:cd:e1:26:c9:55:4d:18:2a:d0:72:3a:83:8e:e7:
         5d:ff:b9:9c:f8:eb:55:08:06:5b:b6:5b:c9:8b:18:0f:a4:95:
         78:dd:7f:a5:09:d6:c9:e4:ea:70:0e:c7:99:c5:35:00:41:39:
         cc:d2:0c:27:a7:d4:9e:c7:90:cd:ee:f8:bc:cf:d0:7d:b0:b1:
         17:39:14:e6:46:e5:ca:2e:11:40:22:72:37:87:d9:40:40:ed:
         e9:0b:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org