Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132362e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3132362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          oiOb0oc0D5nvU4dAlisg3ZWx24Cmv/BiqNHPTuOvKgU=
Subject key identifier:   26:E6:E1:62:A0:36:0A:E6:93:F1:DA:19:B9:47:E6:44:CE:78:F2:1E
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       59471B1795E78DE99701DA69F000E98955452F79
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:07 +0000
ROA not before:           Tue 05 Mar 2024 17:35:07 +0000
ROA not after:            Tue 04 Mar 2025 17:40:07 +0000
asID:                     27823
IP address blocks:        200.58.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:1b:17:95:e7:8d:e9:97:01:da:69:f0:00:e9:89:55:45:2f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:07 2024 GMT
            Not After : Mar  4 17:40:07 2025 GMT
        Subject: CN=26E6E162A0360AE693F1DA19B947E644CE78F21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:26:88:2f:ce:d9:bc:1d:0f:72:c3:6c:f0:
                    8c:0f:bb:c9:a9:54:98:cb:aa:1b:c8:77:7e:c5:02:
                    70:8d:80:c3:9c:c6:3b:e3:8d:13:b3:e2:e6:dc:1c:
                    4d:ab:68:ef:76:5c:ca:63:f4:5d:4c:80:c4:a6:96:
                    ef:c4:93:9e:b5:0f:65:2b:33:f2:3f:d8:4a:fa:f0:
                    71:71:13:a5:43:4a:ad:24:dc:f4:c3:cc:24:13:fe:
                    98:e3:db:42:c9:d5:6b:07:d6:92:99:96:6b:90:96:
                    3b:ed:b7:50:d8:96:32:a9:83:9f:92:40:dc:61:7e:
                    8b:d2:bb:76:df:81:f2:ad:ef:13:c8:91:b3:b4:fc:
                    c2:45:88:b9:86:18:bc:d7:26:87:51:e2:48:a5:ca:
                    c3:b5:6e:5a:b9:74:50:87:7b:bf:ee:e9:f5:32:b9:
                    0b:6d:15:eb:3d:f2:d9:f1:d9:ea:c5:a2:d6:b9:74:
                    2b:78:62:91:0c:53:c6:1a:36:90:06:ce:7a:f8:2a:
                    74:23:2d:79:fe:a0:41:b4:63:4d:bf:94:0a:e9:86:
                    81:23:8c:38:1c:bc:04:0f:c6:00:e4:8c:03:e0:89:
                    7e:93:cb:24:09:d2:9e:9d:3d:d4:f1:a5:d3:2c:d7:
                    e0:c2:52:60:88:8d:1f:cf:ea:5a:57:38:f5:4f:d5:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:E1:62:A0:36:0A:E6:93:F1:DA:19:B9:47:E6:44:CE:78:F2:1E
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3132362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:60:30:ff:09:c4:e9:2c:72:77:be:e0:5d:9d:d8:b7:b8:
         15:3c:67:19:53:e3:a6:c3:23:ac:75:c9:b1:3f:0d:73:42:85:
         2a:e2:fb:4d:c8:c7:b2:a2:f1:4b:21:fd:90:85:9a:2a:34:5e:
         3f:37:89:fe:4d:b5:a5:78:c9:86:0d:7f:63:3c:d0:fd:f6:4e:
         7b:01:8e:21:d4:81:e6:b3:ec:12:de:fa:81:76:e4:22:97:24:
         f5:56:3b:fc:58:63:22:3f:66:49:e3:71:29:17:8c:03:c5:c5:
         bc:01:bf:fc:c2:2f:d9:62:a4:02:df:5b:9a:13:b4:44:f6:35:
         1c:b5:fb:36:ab:8a:ff:4c:91:1d:24:e1:21:18:b7:f2:90:81:
         9d:db:57:d4:f4:8a:21:32:f7:a1:d0:fc:51:c5:ee:01:45:f3:
         1e:41:e7:e0:ba:f5:be:70:81:43:69:5d:99:26:00:0c:63:9a:
         77:16:3c:0e:3b:66:b1:e8:a0:f2:33:fb:9b:33:c6:5a:0f:6b:
         bc:61:86:ff:03:01:57:a5:f4:a3:67:b9:48:9b:13:db:e6:19:
         a6:08:51:fe:1b:79:9a:a8:b0:bc:c9:d7:08:43:78:94:ea:04:
         84:b7:6c:50:fb:3b:10:e7:32:72:28:7a:7b:3d:58:c7:25:d2:
         75:bd:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org