Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131312e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3131312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          C0/vsG0zwLL2z9kX1BaMtIDXSrNfy5zEZ6KACyQNJfk=
Subject key identifier:   56:4B:B8:AC:37:71:86:46:28:3A:97:8C:CD:42:C9:93:4A:FC:F0:A4
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       2AEC4752857676BF8270F3117D7BA6EE4B10E5F8
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     27823
IP address blocks:        200.58.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ec:47:52:85:76:76:bf:82:70:f3:11:7d:7b:a6:ee:4b:10:e5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=564BB8AC37718646283A978CCD42C9934AFCF0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:60:9b:8d:18:5c:de:c9:b1:2b:68:8c:be:
                    0a:9b:56:0e:33:e9:84:7f:46:c3:b8:dc:2a:65:fc:
                    de:6a:32:2b:eb:89:3d:e4:2b:f7:60:43:a2:84:3e:
                    0b:b1:fd:ad:6b:97:03:ca:47:5a:a4:55:84:f9:8b:
                    98:7d:f1:a9:f5:c0:ee:a4:fa:c9:8c:7a:6c:bc:5c:
                    f6:04:72:cf:e3:63:96:a1:17:49:2f:4f:27:dc:7b:
                    9c:28:7b:d0:f9:5c:01:f8:4a:e1:0d:f2:bc:3d:7e:
                    65:05:1c:a9:be:cf:e5:89:98:23:52:a6:0a:7f:7e:
                    3f:a9:85:fb:48:f2:64:e2:52:26:7c:ce:a5:1d:13:
                    41:ad:f8:18:cf:86:6b:10:9a:a3:54:30:81:8d:3c:
                    82:5a:6c:f5:fa:d8:79:59:bb:f4:42:f6:42:6f:db:
                    a0:21:5f:68:a1:e6:f8:62:f0:34:cd:7e:f2:6d:d7:
                    b8:e4:c0:ea:cd:83:e4:0e:49:e7:65:29:5f:49:d5:
                    ef:3b:fb:69:2f:fe:90:a5:6a:66:7f:7f:e3:9c:8b:
                    ab:01:da:7a:64:64:24:df:4e:4b:e1:89:dc:ce:ad:
                    2f:9b:1a:db:49:12:d5:b3:9b:0b:8c:16:17:4e:03:
                    ea:07:fe:b1:05:27:90:e6:6f:eb:59:27:10:3c:24:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:B8:AC:37:71:86:46:28:3A:97:8C:CD:42:C9:93:4A:FC:F0:A4
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:f3:bc:bf:bc:ae:37:fe:53:38:d8:33:5e:79:69:f6:91:
         9d:e8:e1:61:55:91:12:a6:8c:2c:9c:c4:67:b9:d1:57:20:62:
         6e:93:16:eb:f6:36:f0:2a:a2:47:91:cb:39:03:cc:88:85:32:
         94:d3:45:bf:43:92:93:f2:98:c6:f4:10:9d:63:36:1c:95:24:
         d1:d9:8f:a6:3d:cf:a8:43:cd:1a:68:7f:12:70:06:ce:32:8f:
         ec:f2:bd:83:f9:d2:69:6b:98:41:cf:74:cb:1b:89:36:2d:4b:
         7a:22:cc:86:1b:ac:d5:83:43:42:ac:46:23:11:62:f8:fe:16:
         3f:e1:72:fb:d5:9c:05:b1:2b:a1:03:84:70:7c:bc:2b:9c:de:
         af:de:75:6e:cd:14:16:95:ed:fe:62:f5:6c:59:cb:36:48:ec:
         d3:c1:02:b8:39:21:f8:9e:ca:f4:07:67:36:ed:30:82:4b:57:
         0f:b2:46:df:c2:10:d1:72:e2:0b:e4:9c:1d:77:2a:10:54:e7:
         4d:ef:ba:49:31:88:62:62:bd:2e:eb:79:90:46:72:97:03:65:
         2c:a1:91:82:3f:9d:2a:08:2d:86:e6:78:90:41:06:6d:78:b6:
         c9:25:f1:b7:18:68:7d:32:c6:18:e4:57:29:fa:59:59:41:b4:
         88:36:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org