Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          INZbyKFpiPRQ/3Tod9xIGUzikQZJAwShIPMr0jBQOSw=
Subject key identifier:   FA:7A:ED:A2:B3:A7:75:FB:1F:32:B6:47:36:BA:8B:50:30:9A:E8:78
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       29F51584F6EC347255A16136D97A24D1E3B9BCCF
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:07 +0000
ROA not before:           Tue 05 Mar 2024 17:35:07 +0000
ROA not after:            Tue 04 Mar 2025 17:40:07 +0000
asID:                     27823
IP address blocks:        200.58.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:15:84:f6:ec:34:72:55:a1:61:36:d9:7a:24:d1:e3:b9:bc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:07 2024 GMT
            Not After : Mar  4 17:40:07 2025 GMT
        Subject: CN=FA7AEDA2B3A775FB1F32B64736BA8B50309AE878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:9b:c0:79:54:6c:a1:a6:95:1a:ba:66:34:
                    98:51:c3:89:96:ed:72:da:23:6e:42:ad:fd:52:e1:
                    80:8c:9a:df:d6:a8:dc:0f:18:27:76:94:0d:7a:07:
                    4c:8a:9b:cd:ea:2c:9a:05:fa:58:b7:ca:a5:b4:5c:
                    a4:e9:40:da:e1:ea:43:9e:d4:8d:7e:66:9e:4a:66:
                    d2:75:7a:06:9f:30:d8:56:e9:7a:e2:7a:f6:f6:5c:
                    0b:a4:15:6d:bc:31:fb:1a:1c:74:69:2c:32:c8:1d:
                    d7:94:07:e0:f3:98:6f:69:b2:6e:5b:2b:ac:f1:ee:
                    eb:9a:72:3e:cf:99:72:73:a7:6a:3c:e2:4f:0d:0c:
                    62:f0:f6:81:e8:d4:7d:e6:de:81:2f:fb:c9:5c:43:
                    57:de:da:22:a1:72:71:74:a3:77:f2:37:fe:78:b9:
                    95:3b:31:2f:e7:af:c9:d3:7e:3b:ac:91:e8:cc:4b:
                    1c:2e:0c:45:c8:88:a9:02:e8:9a:b1:58:88:ea:db:
                    a8:02:2b:ee:cb:23:34:5a:b2:86:40:79:ab:ac:31:
                    b8:c1:d0:97:d6:04:61:00:d1:63:f2:ad:54:d9:fd:
                    77:9d:b1:6e:0c:96:4b:b4:a4:2e:c0:22:95:03:52:
                    03:5b:60:48:39:53:ae:71:ac:44:3f:dc:b9:a7:8f:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:ED:A2:B3:A7:75:FB:1F:32:B6:47:36:BA:8B:50:30:9A:E8:78
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:06:dd:b4:0b:be:41:cb:af:4a:dd:d8:ad:db:91:d1:43:
         89:d2:6a:5f:8f:82:9f:9e:29:a2:eb:1d:b1:24:ba:cb:05:ea:
         02:25:ab:e6:6f:99:c2:9a:7d:76:60:08:ec:ec:77:80:eb:b9:
         3a:2f:d7:79:b0:d2:75:03:66:13:a5:35:f1:5c:fe:fe:68:f4:
         5f:97:06:85:f8:f8:b9:1c:6c:0d:f8:a2:be:2b:dd:b3:9f:57:
         a6:d2:f5:3d:e6:cd:be:26:7e:39:e2:db:ac:70:7f:ff:d3:d9:
         78:e2:71:bd:95:a3:89:72:f1:8a:90:b5:e5:e2:91:fa:f9:1c:
         ad:7e:d9:d8:9b:8b:c0:c8:6c:f9:bf:66:78:dc:42:62:3b:85:
         0f:67:7b:17:f1:6f:5d:fc:1f:53:28:38:8a:b8:c6:45:c5:f0:
         ad:19:cb:a0:bb:f6:f9:e1:25:6b:6f:b8:3e:5c:6f:a2:37:a8:
         f8:b7:4a:55:99:ca:2f:ed:e7:d5:07:7c:21:dc:f8:60:a8:db:
         36:bb:e0:c8:dd:f0:05:88:73:e8:07:59:4e:fe:de:7f:cd:88:
         1f:c4:26:09:92:92:9f:61:22:1f:a7:3d:8d:12:f8:9f:d1:42:
         fb:c8:af:51:db:11:dc:65:77:54:72:2a:1e:ed:cc:f8:a0:ff:
         ae:c0:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org