Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
File:                     3230302e302e36382e302f32332d3234203d3e203631343535.roa (raw, json)
Hash identifier:          4pD450XvvXBP7LMw3RFQ48ZZqHQNbw+BY4EWk6M0RAc=
Subject key identifier:   D8:E0:AE:52:25:C7:9B:39:81:CA:9D:6C:9E:1D:D2:C3:C9:8A:4E:73
Certificate issuer:       /CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
Certificate serial:       45970E6D35CCEC4894D6B77400240472A407DFC1
Authority key identifier: 1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa
Signing time:             Tue 05 Mar 2024 17:49:44 +0000
ROA not before:           Tue 05 Mar 2024 17:44:44 +0000
ROA not after:            Tue 04 Mar 2025 17:49:44 +0000
asID:                     61455
IP address blocks:        200.0.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:0e:6d:35:cc:ec:48:94:d6:b7:74:00:24:04:72:a4:07:df:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9E1A625096FEEDCFFEA05EFC633354C2DF054F
        Validity
            Not Before: Mar  5 17:44:44 2024 GMT
            Not After : Mar  4 17:49:44 2025 GMT
        Subject: CN=D8E0AE5225C79B3981CA9D6C9E1DD2C3C98A4E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:97:a0:15:07:a7:7e:44:3d:0c:c4:9c:45:
                    5e:b9:33:94:c3:0b:af:d6:e8:ea:b1:08:fd:ef:2f:
                    92:3a:1d:b1:10:50:2d:b6:f9:6d:19:59:ae:1c:e4:
                    3a:02:1d:1c:99:42:a5:a0:5e:a8:da:e1:e8:37:e4:
                    80:18:91:93:a4:e7:fc:4f:b6:ba:94:10:d3:6c:8e:
                    36:25:05:0f:73:13:0b:21:59:d9:a1:43:cd:6b:3a:
                    5c:44:4e:e9:a4:42:ab:3a:92:fa:db:89:08:b4:46:
                    ba:a0:f0:09:88:ba:1c:d3:85:b5:80:22:c4:cf:62:
                    41:b4:1f:50:75:8b:bf:c2:09:6e:4a:86:10:44:9b:
                    c4:6d:f3:51:60:23:13:7f:06:b8:26:25:49:1e:a3:
                    d8:ed:20:4f:2f:51:40:87:2e:8d:e0:c3:c4:25:df:
                    fe:c3:23:ea:b1:fb:ca:3c:a7:07:60:54:f5:0c:18:
                    2e:9f:c5:3c:c3:e6:db:9f:0c:43:7f:0c:4b:68:9e:
                    91:da:1f:aa:d3:54:91:c5:8d:14:a3:aa:50:3f:b2:
                    46:cb:4f:19:98:83:9a:17:a1:f5:17:51:2d:7a:e5:
                    02:0f:8f:5f:e0:d2:c8:5e:5d:66:44:b3:70:3a:cb:
                    4a:b6:cb:3b:14:0d:93:1a:d1:51:bb:5f:11:d5:0a:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E0:AE:52:25:C7:9B:39:81:CA:9D:6C:9E:1D:D2:C3:C9:8A:4E:73
            X509v3 Authority Key Identifier:
                keyid:1E:9E:1A:62:50:96:FE:ED:CF:FE:A0:5E:FC:63:33:54:C2:DF:05:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9E1A625096FEEDCFFEA05EFC633354C2DF054F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F654EB8FA0B27AE7E51D7FF9E4CA52F55010F1498CA7A52C7489290CF963746/0/3230302e302e36382e302f32332d3234203d3e203631343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:5f:8a:c4:78:31:cd:3a:5d:8f:49:1c:4b:ad:99:96:7d:d5:
         ee:df:b1:f1:48:61:f8:db:47:04:62:c7:f2:20:32:1b:7a:93:
         94:68:30:98:48:d4:f0:dc:d8:b8:02:6a:09:76:88:a4:cb:3f:
         a1:74:a6:a2:f9:6f:5a:76:ec:54:bb:06:da:c2:41:84:af:d2:
         12:9c:49:82:d2:b9:a1:4d:c0:07:eb:86:78:05:67:4f:59:d7:
         a5:b1:69:a5:83:2b:a8:db:37:3d:3c:37:91:67:79:20:6b:a9:
         52:04:a9:21:38:63:21:1c:ed:3d:d7:d5:1f:14:bb:41:5f:65:
         ef:7e:17:a9:e9:39:50:aa:d0:eb:ae:dd:3c:42:f5:5d:5c:c1:
         16:74:cc:d8:f5:41:55:94:b1:97:b3:2b:26:42:70:06:bc:b1:
         37:eb:25:99:cf:41:a0:a2:c0:c6:45:a3:71:e5:71:a8:e0:03:
         31:d0:2a:35:a9:99:a8:3b:09:a7:5f:32:f4:f3:38:ca:6f:fa:
         f1:2c:5c:f8:11:ae:38:ed:e9:7e:c6:5d:f3:cb:3a:26:3e:0b:
         12:c3:62:7a:6e:e0:a3:1f:90:ad:fe:14:9c:b6:c4:0c:67:47:
         79:3d:55:68:3d:45:63:fd:9b:bc:f9:29:b4:2c:92:e4:9f:fe:
         05:bc:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:44 2024 by rpki-client on console-fra.rpki-client.org