Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
File:                     3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          wNOPc/gua0h6HiCBX2AzheIoKdDvTs7wGt3D/KuSGsw=
Subject key identifier:   7B:1E:AA:3C:75:F2:B5:83:21:E1:67:A8:AC:49:F9:7A:B8:88:86:74
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       4603486B7157896D4AA055BB8211C8BC8AC7F065
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 17:53:58 +0000
ROA not before:           Tue 05 Mar 2024 17:48:58 +0000
ROA not after:            Tue 04 Mar 2025 17:53:58 +0000
asID:                     269931
IP address blocks:        200.125.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:03:48:6b:71:57:89:6d:4a:a0:55:bb:82:11:c8:bc:8a:c7:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Mar  5 17:48:58 2024 GMT
            Not After : Mar  4 17:53:58 2025 GMT
        Subject: CN=7B1EAA3C75F2B58321E167A8AC49F97AB8888674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:d8:c2:41:92:9c:31:e1:7b:6b:80:32:a5:
                    f6:73:da:9e:26:81:02:bb:a8:09:d5:3c:18:84:d0:
                    35:5e:cb:5a:6d:a6:41:9d:7b:ef:10:0f:e8:98:a6:
                    0e:93:85:dd:50:f5:88:62:7a:32:27:c7:e9:da:78:
                    80:ca:42:19:7c:ab:16:39:db:f3:4c:7d:5b:dd:c8:
                    68:38:6f:09:27:51:e2:c0:56:0a:df:34:fd:95:84:
                    8d:c3:c6:45:f4:e3:10:bd:d5:be:cc:3f:30:10:01:
                    70:72:ad:b4:ca:81:4e:b1:40:ba:d3:96:a8:6e:52:
                    ed:b2:de:ec:3b:80:43:b0:b7:a7:e8:4a:91:da:36:
                    1c:8b:3e:e6:05:58:41:9b:e8:86:4f:f9:71:13:ed:
                    ae:79:56:7c:bd:09:90:e7:89:c9:6e:db:64:f5:cd:
                    2a:75:76:f7:85:f7:7e:7b:48:3c:8c:35:67:01:c8:
                    c8:c1:ca:11:61:a6:01:78:d5:fe:fb:61:a5:f6:e5:
                    6a:e3:22:f5:53:8d:e3:82:13:30:d2:58:54:b0:6f:
                    2b:15:58:8e:d8:3f:be:6c:13:2d:04:af:05:d9:47:
                    6f:62:e5:1c:bf:53:74:63:18:73:17:1e:76:78:aa:
                    0e:0e:c6:19:5c:fa:68:03:a5:88:74:b7:6f:4d:94:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:AA:3C:75:F2:B5:83:21:E1:67:A8:AC:49:F9:7A:B8:88:86:74
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:12:a6:b4:ff:bc:16:b7:c1:f1:2f:25:e0:d5:a6:42:92:
         03:15:e0:b3:67:40:d2:8f:cd:5c:1a:37:69:8e:67:b9:24:fa:
         a9:32:99:18:dd:f0:72:20:30:31:0d:de:0a:8a:49:53:51:1e:
         a1:af:c2:17:34:7a:b2:f2:5a:df:a7:be:70:7a:e2:11:a2:2a:
         0e:a5:13:80:b9:57:46:9a:b5:8d:0f:ed:cb:81:d7:fe:d1:7d:
         c0:24:f7:fb:31:26:48:13:bb:1b:61:a8:68:53:ec:8a:ad:42:
         80:9a:bb:85:4b:89:3c:fa:68:c5:aa:ec:f7:af:6d:33:49:99:
         7c:d7:fb:ad:d4:ba:d0:5d:a8:7e:c0:a5:08:66:01:38:04:ce:
         da:02:ac:b9:43:58:75:91:d1:9d:dc:b5:60:82:85:9e:73:56:
         d6:52:ba:0e:49:95:c0:f8:b2:cf:b9:23:76:7f:a8:f1:ff:90:
         18:b8:d0:f7:8d:36:0f:1a:27:ab:47:a8:93:bb:c0:a7:3e:76:
         7d:8a:7a:ee:da:b9:59:c9:d3:1b:43:f4:60:6b:57:63:06:96:
         e6:a8:68:66:1e:bf:15:b9:70:46:eb:c6:c2:dc:f2:34:58:cd:
         d9:ff:cd:dd:7e:c4:fa:05:33:af:87:bb:ff:a2:2c:25:dd:58:
         29:7a:cd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org