Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39392e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e39392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          TjKZHobgYWw9irbDRpNYR02v97dZ3J6JHNWHN4IZAzw=
Subject key identifier:   7E:53:E1:94:A2:2B:5B:84:DB:49:C2:9C:7B:10:7C:DE:B5:90:A3:05
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       750EF8E83E72C4CDABA738E41F0B12314D6AD88B
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:01 +0000
ROA not before:           Tue 05 Mar 2024 17:35:01 +0000
ROA not after:            Tue 04 Mar 2025 17:40:01 +0000
asID:                     27823
IP address blocks:        200.58.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:f8:e8:3e:72:c4:cd:ab:a7:38:e4:1f:0b:12:31:4d:6a:d8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:01 2024 GMT
            Not After : Mar  4 17:40:01 2025 GMT
        Subject: CN=7E53E194A22B5B84DB49C29C7B107CDEB590A305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:d6:9c:ea:74:bc:a7:cc:11:c8:5a:df:c7:
                    5f:d5:2b:66:9e:5a:91:e4:b9:1e:fd:cb:a6:e2:e8:
                    65:1b:07:0c:ea:56:44:d4:56:d2:d4:d2:15:f0:48:
                    1b:5b:b4:93:c3:7c:62:a5:4d:ec:4f:07:80:26:05:
                    17:8b:15:29:33:38:fd:ea:b4:e9:26:54:09:83:75:
                    d0:81:6e:08:dd:37:8d:c3:aa:19:24:9f:18:b0:32:
                    d8:8a:38:fb:45:e1:c1:78:23:3d:ea:b2:65:b4:28:
                    91:ec:16:57:fa:0e:dd:7f:5e:45:3f:50:5d:98:26:
                    cf:74:e3:83:fa:c5:53:96:87:71:e0:84:f9:9c:c0:
                    7b:b0:2c:56:e0:57:f2:d9:d1:08:2e:ac:30:26:db:
                    9a:ba:df:ae:02:17:4d:76:13:8f:5d:2d:f3:31:a2:
                    a0:e0:c2:f5:5d:85:3c:73:b2:39:48:c1:0a:ae:36:
                    84:03:98:76:c1:86:14:6f:6b:0f:42:a8:ac:71:e9:
                    ca:4d:d6:d7:03:7b:53:11:35:15:e5:29:f4:4c:79:
                    ac:eb:df:48:b9:91:ad:b8:f5:3c:a1:5c:bd:20:4e:
                    1e:d2:bb:b3:9a:42:fe:ac:3d:83:b7:e5:7e:03:43:
                    56:4d:dc:2b:12:91:5a:d6:80:63:6d:2f:c6:db:23:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:E1:94:A2:2B:5B:84:DB:49:C2:9C:7B:10:7C:DE:B5:90:A3:05
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:c4:64:23:28:da:2b:ab:0e:1b:95:37:31:97:cf:9a:f8:f5:
         91:13:e1:d3:c4:9b:71:5f:09:b0:52:2e:01:27:6f:d6:35:06:
         35:7d:3c:16:bb:14:4f:ea:c4:58:e7:fa:cc:86:ca:ba:c2:f3:
         7b:ac:64:e3:f8:c2:38:90:22:47:90:cf:a0:62:e9:74:3c:4e:
         7d:c6:aa:5b:0b:52:c2:9d:f8:7c:0c:8f:6b:63:25:ad:05:35:
         f5:a8:10:12:bc:55:06:d9:37:b6:3d:f0:e2:3e:bc:8c:98:70:
         00:b6:b7:af:a6:96:89:2c:a8:91:d3:34:4e:02:17:57:09:d5:
         09:e1:e3:78:67:d1:18:04:a4:d9:f3:da:50:5c:0e:38:39:3c:
         b5:a8:53:74:00:3c:ee:8f:16:c6:d4:cb:94:4b:e4:9a:cf:cb:
         55:fa:7f:66:1f:80:16:22:bf:06:3f:1a:6d:56:4c:87:82:d1:
         3c:1a:8a:85:95:b9:c8:d0:1e:65:51:8e:f8:a5:e0:2d:a2:e3:
         ad:ff:fe:ca:0b:36:ad:6e:f6:97:90:8a:09:93:f4:70:39:b0:
         52:f0:4c:80:ec:f0:d5:f8:84:2b:1e:fa:ad:76:50:7d:a7:4a:
         a4:b3:04:2c:ce:b0:62:af:3f:d7:47:02:b7:24:f6:3d:2c:b6:
         6c:f9:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org