Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132352e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3132352e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          HSFpiX3tx7ODWGZBSJesw3OH2huulya5/ugo0gnhxmA=
Subject key identifier:   5C:FB:02:F2:1A:C7:ED:05:7F:64:D4:A4:0D:19:A5:9B:BA:99:D2:8D
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5188839395FC7D73D7A288B3446426B2BF0D8AEF
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132352e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:19 +0000
ROA not before:           Tue 05 Mar 2024 17:35:19 +0000
ROA not after:            Tue 04 Mar 2025 17:40:19 +0000
asID:                     27823
IP address blocks:        200.58.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:88:83:93:95:fc:7d:73:d7:a2:88:b3:44:64:26:b2:bf:0d:8a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:19 2024 GMT
            Not After : Mar  4 17:40:19 2025 GMT
        Subject: CN=5CFB02F21AC7ED057F64D4A40D19A59BBA99D28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:b2:62:89:16:e1:bf:19:85:19:d5:1d:f6:
                    ee:db:60:db:64:ed:19:1b:b9:c4:ff:5f:88:2f:96:
                    7a:32:53:40:ac:e2:d2:a7:2a:1c:ff:e0:ef:c7:d2:
                    99:78:22:a6:40:f9:ee:0f:43:af:3d:cd:5c:85:0a:
                    31:0f:4c:82:52:34:81:38:6e:88:37:4a:e3:0b:99:
                    df:1e:ca:dc:c5:df:24:af:c3:bc:9e:d8:82:83:74:
                    1f:ce:a3:23:f1:0e:1e:0a:f9:df:94:e0:d9:69:fe:
                    3f:a6:7a:9e:14:04:6f:98:1f:0d:78:f7:a2:a7:a7:
                    71:92:32:6a:03:f7:de:e2:89:a5:b1:ad:b5:79:b1:
                    7b:23:1c:45:86:fd:6e:da:70:18:e1:9a:d7:fe:d0:
                    b9:c3:15:4f:69:80:8a:b1:ca:88:1b:71:0a:74:c0:
                    26:c1:0f:48:af:f6:86:b5:48:da:5b:a7:28:e0:a4:
                    0a:b5:7d:aa:0e:8e:1c:d1:37:bf:23:13:7a:fb:85:
                    b7:a2:85:df:a5:42:5e:59:4b:51:ef:53:04:55:ee:
                    a2:95:3f:4d:26:4e:cc:e2:40:13:ee:7f:06:8a:15:
                    ad:af:32:ec:4b:ba:19:75:1c:0d:bc:1f:88:4c:02:
                    d3:0a:4f:64:bc:ce:5a:cc:30:cf:85:cb:d1:5c:73:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:02:F2:1A:C7:ED:05:7F:64:D4:A4:0D:19:A5:9B:BA:99:D2:8D
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132352e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:32:a5:8f:ba:17:9d:d2:10:30:3d:c1:d1:77:61:4a:a6:ae:
         c2:09:38:33:13:8a:cb:61:db:84:c7:38:36:54:a9:09:37:97:
         9a:22:3e:e6:f4:86:79:f4:0d:5d:66:e8:a3:e1:84:53:63:be:
         39:9e:73:bf:95:1a:02:b7:9e:e1:ad:48:f2:c6:2a:4c:d4:dd:
         4e:ed:e7:0a:34:86:5a:45:1e:66:38:6e:5d:be:b4:25:a6:79:
         78:ed:72:2a:6b:17:a3:20:45:56:3a:b7:e4:3f:19:8b:f9:68:
         fc:e0:ee:c8:1f:99:14:c2:39:28:e5:e9:8f:76:f1:33:c8:f9:
         2e:cf:63:9a:c6:b8:86:67:23:bb:ae:e0:38:17:ba:1a:05:2b:
         bd:b4:1e:34:10:0a:a7:0f:c7:bb:45:08:27:25:7b:8b:39:76:
         cc:3e:5c:c1:cb:d5:40:69:3b:1e:40:60:91:53:f0:a9:97:5f:
         5c:2c:25:57:b5:53:e0:4e:19:83:93:aa:39:23:e8:27:59:6b:
         f7:5f:c4:d0:fa:eb:22:c0:5c:28:83:ba:6f:d9:56:5f:f9:bb:
         34:fc:21:03:94:32:e0:de:eb:2f:82:97:f2:a5:5e:e9:bf:f7:
         46:4a:60:6d:b4:eb:93:e6:4e:c2:b4:11:fa:8a:b3:95:96:b6:
         ad:5e:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org