Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131362e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3131362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          eROzlU0SfNtoirSwsksYKjnJOL7bnyQuJD+BcCFYr9A=
Subject key identifier:   B6:19:C9:05:D0:CE:22:A3:5F:78:60:B5:D2:97:CE:FA:17:B8:A3:44
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       67DA0E020419C5967FA5A572C98B502B3922CF55
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:12 +0000
ROA not before:           Tue 05 Mar 2024 17:35:12 +0000
ROA not after:            Tue 04 Mar 2025 17:40:12 +0000
asID:                     27823
IP address blocks:        200.58.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:da:0e:02:04:19:c5:96:7f:a5:a5:72:c9:8b:50:2b:39:22:cf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:12 2024 GMT
            Not After : Mar  4 17:40:12 2025 GMT
        Subject: CN=B619C905D0CE22A35F7860B5D297CEFA17B8A344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:b7:db:bc:44:44:c9:a1:b5:90:9a:ee:17:
                    6d:68:ff:0c:d8:15:78:0b:ae:f0:a9:1d:73:aa:91:
                    95:e3:d5:c6:e6:fe:63:44:9f:a2:7c:0c:84:b8:5a:
                    9a:86:ff:d9:e5:c6:03:59:5e:0a:75:69:22:01:1f:
                    38:da:e8:b8:77:ec:14:56:8e:8f:97:df:28:ea:49:
                    f4:f4:5e:08:59:8c:65:f3:7e:17:a8:17:51:cb:a5:
                    b7:21:8d:dd:4d:1d:7c:07:b8:f3:92:b9:65:8b:d7:
                    26:f9:98:e6:28:1d:a1:15:a0:7e:22:e2:9a:1f:9d:
                    20:a6:49:9c:db:51:6b:35:f7:20:6b:0e:12:67:f1:
                    d2:23:82:a0:6b:fe:46:2a:72:64:49:11:af:56:cc:
                    c1:91:38:4b:f7:e7:b4:22:3b:53:1d:57:e1:dc:5a:
                    bc:af:7e:f6:9f:25:31:5f:de:07:3f:04:4e:08:cf:
                    c2:fe:59:37:8e:5c:40:0f:92:62:22:27:94:db:7b:
                    ec:bc:22:78:8b:3b:67:8a:0f:15:2a:e3:85:73:b8:
                    1e:2c:49:d0:71:e1:84:b0:0a:17:3e:49:f7:2c:83:
                    eb:65:32:b9:d4:dc:03:00:93:56:d5:00:2b:7f:ef:
                    91:1e:c3:e1:2e:c6:e6:75:e6:d9:95:0b:ee:81:4f:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:C9:05:D0:CE:22:A3:5F:78:60:B5:D2:97:CE:FA:17:B8:A3:44
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:de:86:4a:f7:6c:1e:53:ad:c0:3e:e5:ab:1e:a0:55:16:
         9d:af:33:71:f2:04:db:09:c9:14:a7:f7:d4:9b:da:0c:f5:9d:
         cc:ad:c4:b3:78:d0:65:98:d6:f8:ec:a8:9a:42:cc:f5:35:6d:
         1e:d3:1a:53:a0:01:a4:77:b6:34:ce:8f:a0:4d:bd:5a:c9:9d:
         30:73:b9:ef:c2:2d:21:0a:a2:37:1a:28:f6:a4:fb:88:b2:a1:
         5e:7d:3f:18:d9:da:5d:5b:0b:28:cd:49:c0:8d:1b:1c:87:c7:
         7b:a8:de:94:24:b5:e6:61:a3:d3:73:ce:a5:d7:45:ed:f9:f3:
         84:24:99:33:ea:b3:48:fe:c5:23:29:08:12:1e:ff:40:9b:3a:
         78:e6:e6:e4:9c:67:40:32:14:97:1a:95:a7:a3:45:b4:30:76:
         af:58:8f:34:d3:b2:07:a2:ee:ad:12:de:5a:81:28:0f:d6:00:
         a0:7b:a3:89:e7:8d:b5:37:37:d9:83:9a:16:10:35:6a:0a:ba:
         40:f9:f6:87:3b:3c:13:19:cb:a8:1f:c3:d5:38:34:4f:c3:64:
         a9:b4:41:67:56:82:3d:98:b8:3f:7e:23:e4:bc:40:93:12:ad:
         b1:a0:25:b6:ad:32:de:13:ac:a8:66:6e:17:5d:65:72:7f:90:
         7b:96:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org