Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131342e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3131342e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          1+2GMjxtVv4fk9QIrnXdhi+bo0XLqXOmku0SJbbST6g=
Subject key identifier:   3C:65:60:E2:F1:71:09:39:24:5C:23:F9:9D:96:35:36:F4:DC:6D:A4
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       57A82297C3CDB9AE0540AAD0A11DCADD5F61F9CE
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131342e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:00 +0000
ROA not before:           Tue 05 Mar 2024 17:35:00 +0000
ROA not after:            Tue 04 Mar 2025 17:40:00 +0000
asID:                     27823
IP address blocks:        200.58.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a8:22:97:c3:cd:b9:ae:05:40:aa:d0:a1:1d:ca:dd:5f:61:f9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:00 2024 GMT
            Not After : Mar  4 17:40:00 2025 GMT
        Subject: CN=3C6560E2F1710939245C23F99D963536F4DC6DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:c1:1b:dc:12:92:ac:36:c6:23:29:7f:f5:
                    8c:a6:78:9e:d9:e5:4f:70:2f:48:da:87:c4:ea:d2:
                    96:f5:2c:f0:08:bd:cb:67:ef:a4:c7:aa:b6:05:2f:
                    f7:32:4c:c4:8c:fc:d3:53:6f:c2:9b:89:46:9b:9c:
                    55:48:79:f6:3f:d6:61:82:ac:9e:df:5c:d2:38:15:
                    7f:e1:c7:6a:8d:24:cb:39:46:cc:7b:c1:be:69:b9:
                    64:57:bb:6c:0d:d6:d1:62:e5:e7:15:a4:59:0a:43:
                    4a:d3:ba:45:cd:23:08:f8:13:60:86:58:d1:b7:2c:
                    87:c7:35:c9:47:45:cb:91:ef:60:1e:9b:20:26:27:
                    45:9c:ae:2a:f2:74:4c:80:97:e0:01:a1:d4:13:a2:
                    88:9a:14:11:b0:88:78:35:01:b9:30:f9:f7:30:d7:
                    6c:ae:76:43:f7:7f:69:7f:77:62:05:04:d0:b9:70:
                    91:d1:43:c8:24:e2:bb:1f:e7:e3:2f:82:35:5b:8f:
                    f0:40:43:d9:49:6b:85:3d:1c:10:d5:c1:69:58:07:
                    90:2e:25:64:15:12:41:dd:dd:68:1b:dd:1d:d7:29:
                    9f:03:92:a6:ea:5b:38:cd:50:f5:32:18:be:96:fc:
                    ba:ef:ba:f2:a6:1a:23:e4:54:fd:5c:08:72:29:84:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:65:60:E2:F1:71:09:39:24:5C:23:F9:9D:96:35:36:F4:DC:6D:A4
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131342e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:a0:e1:43:cc:53:b5:09:1d:b0:0f:3f:2f:83:7a:03:8c:
         74:f8:7a:8f:67:46:9a:c9:fb:c0:48:ef:9e:0f:aa:64:ba:5a:
         2d:38:e3:ce:95:1b:6a:7a:0c:c0:1e:cf:ae:20:d1:8e:08:f4:
         0f:35:c7:c2:40:20:1f:a9:02:0a:a9:10:64:30:c5:8d:09:27:
         d3:b9:2d:00:a4:7d:23:46:43:d5:52:ca:4d:ca:18:68:74:6e:
         c1:5a:a7:44:0d:ee:93:a6:b6:03:c0:23:5e:20:78:f8:46:03:
         4d:69:df:89:b3:fb:60:fa:c9:e5:f3:de:3e:a5:80:4e:f4:5b:
         fb:61:f9:e2:4f:6e:b7:13:0d:c6:87:0d:ad:31:00:cd:c8:22:
         c9:25:e8:1c:b3:2e:6f:e5:7c:65:ad:4e:d4:8a:77:d5:db:82:
         b4:46:2a:dc:87:9a:c2:69:af:75:08:9e:69:5e:62:f2:e5:b8:
         c8:3a:56:73:8b:1b:6f:df:24:da:11:f9:4c:04:3e:73:8f:8e:
         e6:a8:1d:4b:e0:7f:08:09:2e:91:07:09:96:b1:7f:26:36:68:
         cb:81:8f:9e:55:aa:0c:f2:f5:92:e5:4e:f4:43:8b:c2:ee:c1:
         a2:96:cc:64:ad:a0:e4:77:09:13:40:5c:c4:ee:be:ff:74:6d:
         1b:a1:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org