Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e31362e302f32312d3234203d3e2037303034.roa
File:                     3230302e39312e31362e302f32312d3234203d3e2037303034.roa (raw, json)
Hash identifier:          oDFtFexNqSuqzkVTtBqh9YrMCSoOmDL0jPq7qGou5cE=
Subject key identifier:   1C:69:B8:52:3F:06:6F:11:5E:02:9E:2F:EE:8E:57:E3:2A:17:F5:B7
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       318863F3F604C50B0D55760550EA35C261666EE8
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e31362e302f32312d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:28 +0000
ROA not before:           Tue 05 Mar 2024 17:39:28 +0000
ROA not after:            Tue 04 Mar 2025 17:44:28 +0000
asID:                     7004
IP address blocks:        200.91.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:63:f3:f6:04:c5:0b:0d:55:76:05:50:ea:35:c2:61:66:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:28 2024 GMT
            Not After : Mar  4 17:44:28 2025 GMT
        Subject: CN=1C69B8523F066F115E029E2FEE8E57E32A17F5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:63:12:00:a6:06:97:8d:d0:74:1c:39:12:
                    7e:2d:73:bf:c9:4e:63:38:60:ff:cf:c9:aa:26:f4:
                    81:4d:a5:c6:8e:68:1d:4c:f8:e4:a2:bc:ce:5e:0f:
                    43:36:2a:bd:66:47:f0:e9:8f:48:10:22:1c:ca:d5:
                    4e:8c:f0:e8:60:d8:80:33:dd:a9:17:43:44:69:21:
                    8b:86:ca:c3:42:8c:0e:56:70:10:ea:a6:27:0a:71:
                    8b:fd:c8:a8:09:da:3a:59:69:7d:e2:76:1f:eb:33:
                    f1:5a:e9:85:10:e1:67:13:90:6f:88:16:29:c1:a5:
                    f9:f5:a1:35:e7:43:dc:3b:ff:2f:81:ae:1d:59:9e:
                    f2:bb:52:fe:2a:38:06:f2:ac:88:0a:68:0f:51:62:
                    26:62:ca:ab:c4:be:56:fd:64:ee:68:27:ad:24:3a:
                    50:26:7e:c1:7e:79:c6:83:f7:7a:14:62:00:46:43:
                    18:55:d7:37:7f:67:10:ae:b1:76:6d:19:ca:ee:11:
                    15:0a:ea:10:04:e0:f8:7f:76:0d:82:34:86:27:56:
                    60:5f:c5:f4:3a:1d:8c:bb:bc:c9:ba:6d:80:83:ce:
                    d8:45:7b:4f:db:ee:9a:d8:ba:3e:3d:48:98:76:9c:
                    3f:4a:21:90:d7:f7:c2:7f:e5:34:7b:e6:2c:42:46:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:B8:52:3F:06:6F:11:5E:02:9E:2F:EE:8E:57:E3:2A:17:F5:B7
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e31362e302f32312d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:74:c5:3b:8b:db:4c:98:28:63:3a:95:ee:0f:62:e7:98:9b:
         19:d4:c3:d0:03:5d:0a:02:08:8c:07:2e:f5:dc:20:03:69:d8:
         87:77:1a:80:71:2d:03:d8:85:a1:63:1d:2e:a8:c7:c8:30:22:
         58:e6:b6:1c:2f:71:77:32:55:41:35:8b:88:96:ee:63:2b:b9:
         92:ce:a3:94:dc:e1:5f:61:ee:c3:ce:f6:79:3c:a4:9b:f1:a1:
         85:7b:5e:6d:ed:a0:8c:bd:a1:eb:f4:8b:72:0c:bc:c4:69:74:
         3b:43:18:99:bf:5c:53:76:f0:3e:61:c3:08:5b:e2:4e:45:06:
         63:b1:e3:37:fe:88:82:a1:ac:81:24:d3:59:7f:c7:d2:ab:8b:
         10:e5:a2:3b:32:2e:91:1f:72:66:f3:c8:fb:0a:47:c3:25:bc:
         cc:d2:30:c3:92:6e:33:64:27:31:09:6f:ce:b2:79:81:64:41:
         ae:a5:ec:4e:bc:7c:20:be:9f:75:73:33:51:05:6e:16:22:cf:
         a2:2b:e6:f2:a3:de:3d:fc:b1:e6:ba:72:b6:39:5e:8b:5d:65:
         4f:85:9f:f2:d9:9a:f4:d1:c7:70:2f:5a:18:7c:76:47:81:da:
         8e:48:d6:81:af:65:01:5c:a9:c8:83:52:ed:e8:52:cf:23:13:
         76:01:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:46 2024 by rpki-client on console-ams.rpki-client.org