Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132312e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3132312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          aWD2TlQHAM7LULG0hv4HXPpI71RDoYZxKy/1OrO2s00=
Subject key identifier:   A8:0E:08:DA:F1:93:8E:81:95:93:64:C3:31:7D:39:E2:42:56:AD:09
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       7F109F62B7156F33679C7347E1EBAD4D59635679
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     27823
IP address blocks:        200.58.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:10:9f:62:b7:15:6f:33:67:9c:73:47:e1:eb:ad:4d:59:63:56:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=A80E08DAF1938E81959364C3317D39E24256AD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:9b:43:22:ca:80:57:43:c0:22:c0:f7:87:
                    81:50:20:ee:13:b7:20:a2:ed:37:32:e2:f0:44:6e:
                    ef:8e:3b:8d:e0:a3:eb:73:b9:de:af:17:0f:37:89:
                    71:38:c5:0f:81:10:62:60:f2:ba:95:5e:ab:e4:36:
                    dc:d7:f3:8f:6c:44:d9:07:12:1f:38:e7:b2:57:82:
                    b1:de:b5:5b:94:68:bd:5f:85:cd:7c:2f:3e:96:c0:
                    22:18:7b:11:b4:23:70:62:f7:e4:de:87:13:53:ff:
                    7e:cb:28:fa:08:07:65:9f:04:d2:36:74:14:cd:36:
                    65:ab:6f:c3:28:e8:79:07:1d:68:ec:f8:7e:17:40:
                    5e:ef:04:b6:e7:fa:9a:e6:ef:34:eb:d5:b3:3b:d5:
                    1c:42:07:96:12:07:32:5e:2b:b4:55:fd:a1:23:e0:
                    ef:0c:24:93:fa:36:65:7e:3f:2f:89:dc:c4:2a:a5:
                    aa:9f:05:38:d2:c2:59:83:a7:c3:33:0a:31:81:a1:
                    ce:07:5d:cc:0c:1c:dc:61:88:23:bc:bb:04:95:f2:
                    de:cd:08:2f:00:98:a9:22:06:df:2a:fa:b7:7e:3c:
                    87:d9:d9:f8:e3:f0:f8:b9:e2:e3:62:c7:fe:c4:ae:
                    78:98:1b:ed:3c:14:59:44:43:3e:4f:8b:44:1b:b9:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:08:DA:F1:93:8E:81:95:93:64:C3:31:7D:39:E2:42:56:AD:09
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:d9:0b:35:fd:57:12:7e:a2:25:3f:a1:df:0d:73:a8:3f:4a:
         92:71:eb:c9:e3:86:5d:d6:2d:78:ec:bb:40:83:ce:49:c3:74:
         7a:57:ac:a6:8e:c2:71:db:36:23:8b:7a:09:2c:15:fb:2c:de:
         86:68:ed:14:ea:9f:86:d0:18:1e:22:50:d0:01:78:05:be:5a:
         55:24:22:58:6d:43:04:f5:b8:9e:2a:a6:d8:e0:6a:40:1c:fd:
         7d:e1:63:21:d1:67:3c:4f:bf:a5:56:28:c1:9c:ef:d1:89:51:
         af:5f:76:98:58:9e:cd:2d:00:5a:3c:ea:bc:54:f7:9c:29:db:
         2d:71:13:ab:15:50:cf:72:64:6e:59:7b:19:69:a2:4b:94:cf:
         b4:cb:55:e3:ac:3a:66:e7:b3:d0:88:9f:61:60:9d:ff:fa:f4:
         84:6e:2d:41:ae:1d:fb:24:cb:1a:87:d0:9d:2f:5d:5c:08:e4:
         9e:ce:c6:e5:ac:dd:25:f2:45:56:31:f2:1e:ab:bd:0d:83:ca:
         6e:b1:52:e6:38:71:8b:b5:de:28:8b:ea:cd:4f:3f:95:a9:2d:
         9a:4a:f0:41:36:db:8e:9c:3b:74:cd:17:b2:90:ac:e0:24:ba:
         b1:c6:e3:ba:90:00:b0:12:4c:cf:1e:11:87:71:0f:4d:8a:d5:
         bf:10:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:58 2024 by rpki-client on console-ams.rpki-client.org