Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39382e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e39382e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          I7aGX6DmaE71lsCdDBvTjeZlS/N+uh32mJHEx8QYORQ=
Subject key identifier:   55:E4:FB:CE:5E:08:0A:14:A7:18:22:6B:39:73:9F:8D:EE:FF:C4:D7
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       6FA2A90932CA118AAB5E3338185EB7436507A44A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39382e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     27823
IP address blocks:        200.58.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:a9:09:32:ca:11:8a:ab:5e:33:38:18:5e:b7:43:65:07:a4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=55E4FBCE5E080A14A718226B39739F8DEEFFC4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:96:17:ce:3b:44:dc:4f:69:ce:ef:2d:f7:
                    c7:b3:25:6a:3b:38:52:86:32:13:d5:5b:54:d0:b4:
                    2a:a4:24:8d:24:51:cf:f0:c2:1d:ea:3e:f6:4f:46:
                    25:04:d0:ca:c0:df:e8:6f:4f:e5:cc:96:9d:f5:20:
                    1b:14:dc:d4:2f:2a:83:a0:57:11:ab:78:1d:e0:19:
                    ed:90:90:1b:54:d0:9b:18:40:2a:6f:81:fe:ab:a1:
                    6b:8b:70:88:67:98:f2:b3:00:b8:ce:41:02:74:a6:
                    32:e7:ca:93:81:7a:23:36:c5:9a:73:dd:03:04:60:
                    d8:c2:af:12:37:3b:0e:d1:08:ce:47:9b:10:0d:90:
                    04:2a:87:0d:8d:ac:b6:60:3f:68:eb:dc:17:9c:75:
                    9e:97:1b:88:fe:1c:6a:ae:78:37:a4:0b:98:34:73:
                    1c:06:39:83:b1:f5:29:99:88:eb:3a:20:00:5d:30:
                    99:e6:4c:33:da:84:80:c0:73:23:c6:56:f8:66:62:
                    b7:42:7f:00:d8:e6:a3:b7:58:b3:a8:6b:e2:78:77:
                    38:70:87:43:87:62:10:68:fc:9c:7e:5c:6c:70:7f:
                    03:7c:65:f8:a1:55:cf:22:02:c4:6a:dd:31:93:1a:
                    04:16:9d:42:e5:cf:ee:7a:2e:a6:2b:6a:db:30:6a:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:FB:CE:5E:08:0A:14:A7:18:22:6B:39:73:9F:8D:EE:FF:C4:D7
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39382e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:5c:03:00:cb:e6:54:20:c2:34:19:19:8d:ea:fb:d2:fd:
         0d:00:38:7c:af:5f:1a:a0:91:e9:67:78:00:fd:c6:05:71:39:
         02:15:03:23:12:a0:81:4f:66:0b:47:11:b0:80:4b:42:6a:4e:
         ec:99:90:a1:32:53:df:2f:bc:9b:a6:49:14:04:02:a8:29:06:
         df:3a:39:34:20:fd:8c:dd:01:3a:a5:c0:f3:4a:f6:e3:88:ec:
         61:0c:34:f5:99:fc:a0:b4:e1:6c:15:5e:07:41:42:ce:52:d9:
         2c:90:01:cc:eb:c8:d3:75:45:29:48:f9:df:dd:71:ac:76:4e:
         64:c5:08:14:a1:b8:3d:30:c3:4f:b2:55:28:69:5a:b6:9b:c0:
         92:d4:80:97:cc:c6:41:f0:32:5c:a5:82:c3:2c:d6:da:32:f2:
         a3:06:86:76:86:77:10:8f:42:c2:cd:ce:50:12:76:fa:7f:75:
         de:fa:54:0f:fa:3f:9f:95:c1:ae:b6:36:a2:58:e8:d9:3b:f6:
         bd:81:ca:c2:ff:3f:eb:8d:77:a7:9a:c3:8c:c4:6b:d5:7b:9e:
         69:de:45:22:87:24:49:ac:3c:bc:06:1f:71:66:e0:5f:01:28:
         b4:b7:83:e5:1e:62:c3:53:76:24:c7:8b:78:9f:e2:8b:3a:50:
         21:e1:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org