Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132332e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3132332e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          7hpAQXYpg12ObdlD1NKa/GQhZIXqeKIaUhuqEzlWDhE=
Subject key identifier:   46:1E:69:1A:E1:E1:53:57:7E:F0:E0:C4:FD:88:15:D5:6A:34:1C:8F
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       28E2FFDA835051CD85F48B3173D31AA25E3F138B
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132332e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:02 +0000
ROA not before:           Tue 05 Mar 2024 17:35:02 +0000
ROA not after:            Tue 04 Mar 2025 17:40:02 +0000
asID:                     27823
IP address blocks:        200.58.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e2:ff:da:83:50:51:cd:85:f4:8b:31:73:d3:1a:a2:5e:3f:13:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:02 2024 GMT
            Not After : Mar  4 17:40:02 2025 GMT
        Subject: CN=461E691AE1E153577EF0E0C4FD8815D56A341C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e0:d4:7b:75:6f:bb:82:ea:d3:2b:b6:18:e7:
                    a0:8a:59:28:a6:c3:d1:2a:da:80:cf:eb:ec:b1:03:
                    a0:83:6e:3d:95:27:8b:ad:a3:6c:27:f7:4b:7e:4f:
                    59:a1:21:02:25:dc:0f:55:c7:da:23:b9:71:db:4f:
                    12:52:ca:da:9d:90:20:4e:3a:78:f2:2e:86:13:0b:
                    c8:70:fd:9a:49:41:df:40:22:1e:ad:28:ef:4c:49:
                    be:ab:91:31:53:98:4d:00:38:9e:e0:8e:9b:28:e0:
                    0f:fb:33:7c:8c:bb:0b:58:3e:2c:30:51:0b:9d:fa:
                    71:33:b1:a8:c2:88:33:3d:7d:3f:cb:2c:6d:78:dc:
                    48:ac:4e:6a:b6:52:ed:80:b4:42:42:78:90:92:7b:
                    b1:8a:77:e6:5d:2b:b0:75:d3:fc:2d:59:6c:b7:50:
                    e2:32:57:8f:62:4f:bd:c6:d1:88:79:e0:32:63:87:
                    b9:de:a5:00:6e:d5:e7:53:49:af:8f:f6:10:68:86:
                    a4:ce:4e:77:a4:01:f4:2c:64:5c:c7:c7:67:be:bb:
                    43:8f:b3:c8:0b:f0:06:39:0d:fd:01:19:c6:90:28:
                    8a:9f:91:13:e3:b6:f4:11:b8:8d:e6:45:c2:e5:e9:
                    af:ea:38:00:21:50:7f:c4:2e:c2:0a:6e:79:f0:0f:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:69:1A:E1:E1:53:57:7E:F0:E0:C4:FD:88:15:D5:6A:34:1C:8F
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132332e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:b5:8f:7d:90:d2:c9:cb:38:8e:9e:4a:6f:4e:89:30:a1:
         87:5c:4a:8e:33:55:ea:a4:d2:44:3f:e0:1e:2d:0b:79:3d:dc:
         35:5e:d7:8d:e0:4b:fb:50:fa:78:61:e9:82:fe:15:54:05:f1:
         c7:18:2b:38:c2:b2:29:e1:e3:66:63:6f:1e:00:03:3b:31:cd:
         c0:25:ca:e9:48:9f:a7:6b:31:d5:a4:41:cb:24:8e:81:d1:34:
         e3:59:7e:51:8f:78:80:d6:3a:ef:34:e8:63:f4:53:c2:2a:bc:
         5c:92:b8:e3:02:c9:49:74:0c:88:3f:38:33:69:a9:35:ec:4b:
         42:e6:00:a6:1f:26:d2:e0:3d:29:77:96:3c:21:54:3b:e4:3f:
         90:78:0d:99:e7:3d:fc:86:55:f2:2d:e8:d9:1e:1f:fe:86:0d:
         17:68:ad:6a:53:05:53:9e:10:7f:1d:78:34:54:12:29:f8:f5:
         c1:00:a1:a2:68:e0:5b:b5:33:0c:65:17:f7:b1:2f:f5:40:52:
         b5:22:bb:1e:55:25:53:dd:7b:fa:f3:d4:92:4f:0c:a9:15:cf:
         57:e6:3b:cd:ec:e9:7b:9e:3b:c5:86:47:c5:38:8f:5a:68:39:
         f6:52:54:1d:31:fd:cb:ca:25:77:c7:6a:8f:ba:04:bb:20:b1:
         3c:86:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org