Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130322e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130322e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          WIEoVFrqK+6A0RVfQooyuZxbywBrAtGTDc2whYE4voI=
Subject key identifier:   75:5A:C5:6D:C8:D2:43:B4:EB:66:F6:47:5E:97:DB:68:BD:F4:C5:E8
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       12C54D40523AA9F8DBD40AE3517030956D5EA96F
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130322e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     27823
IP address blocks:        200.58.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:4d:40:52:3a:a9:f8:db:d4:0a:e3:51:70:30:95:6d:5e:a9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=755AC56DC8D243B4EB66F6475E97DB68BDF4C5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:d7:77:8f:90:5f:e0:95:a2:87:71:a0:4b:
                    98:6a:2e:71:9b:6a:e9:48:4c:91:85:bf:53:18:d2:
                    fb:aa:e8:c2:59:84:f2:55:b6:87:f0:c9:7e:77:44:
                    1e:a0:0b:66:36:bd:ae:f0:f5:31:28:a9:20:f4:d1:
                    61:d8:e2:b1:b3:90:4e:63:99:3a:58:06:bd:7c:c8:
                    88:31:2a:a2:48:ae:6f:40:5b:a4:9c:08:0d:00:6c:
                    29:03:ef:ec:0e:d5:ef:8a:08:cb:24:02:4f:4d:b5:
                    c9:d8:6f:76:99:74:7d:b4:f6:83:c5:d6:e3:5d:18:
                    72:d3:a7:34:69:bb:28:78:cb:f6:86:c3:62:33:bb:
                    dc:a8:1a:9b:31:5a:e4:26:1c:96:77:c7:14:3d:85:
                    32:90:d3:1d:4f:fb:18:8a:5f:59:66:7a:85:8f:b5:
                    07:1f:4c:48:c4:da:74:f6:82:93:e9:d2:93:db:3d:
                    db:fb:61:65:54:14:be:f4:9a:02:19:52:e1:c0:59:
                    39:b8:39:94:e2:88:28:9e:c3:08:d9:e1:24:fb:32:
                    74:b1:1a:9b:d8:0e:4f:9f:fa:6c:2f:96:5e:9f:2c:
                    a7:9b:36:ce:ca:37:f4:05:05:1d:7c:d8:c9:6f:b0:
                    a6:a4:34:aa:34:72:0b:ae:10:0b:87:ac:93:58:a5:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5A:C5:6D:C8:D2:43:B4:EB:66:F6:47:5E:97:DB:68:BD:F4:C5:E8
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130322e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:0f:90:5e:e3:5e:bf:c6:78:98:36:bc:d6:99:7b:de:ca:
         a8:7e:e0:8e:88:c0:7b:09:e2:58:d7:51:62:ee:41:8f:fe:4c:
         a0:a7:07:e7:73:38:10:60:57:30:32:de:e4:c4:47:b5:95:33:
         49:24:09:80:08:9f:d5:68:43:21:15:92:5d:96:c4:36:29:0e:
         86:c5:8b:9e:4c:b4:65:bc:0d:08:5d:00:e7:12:7f:b1:0f:f8:
         6e:2e:97:cf:82:cd:78:a0:26:54:62:15:9e:10:2f:b9:2f:b4:
         a0:44:d2:c4:24:a0:aa:49:18:21:64:be:0b:8f:db:56:86:c9:
         cc:e4:de:66:95:4c:55:85:06:7b:a8:af:09:3e:cd:0b:78:72:
         a2:8c:50:4b:b6:96:de:41:fd:0a:40:5d:e4:5e:f5:d7:3b:d1:
         b9:c9:7b:9b:7c:91:44:23:aa:74:d2:23:35:c5:1c:61:83:b5:
         da:0d:fd:7c:0f:36:3d:6b:11:a1:d1:ca:6f:3f:7c:7e:d3:2d:
         ba:06:06:06:cd:ee:1d:d5:35:8d:15:58:3e:23:bb:c5:c5:54:
         fe:98:49:b9:49:c1:ca:bb:92:29:c1:cb:0d:a2:9a:3e:41:cd:
         7a:31:cc:04:be:24:60:dd:91:92:b4:cb:8f:3b:e8:3a:c2:fa:
         7e:01:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 06:21:07 2024 by rpki-client on console-ams.rpki-client.org