Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
File:                     3230302e3132332e35362e302f32332d3234203d3e203532343434.roa (raw, json)
Hash identifier:          BFSqzfwqR50DGX4XDkelAdViOpSO67FkN3zF08m5ecI=
Subject key identifier:   BC:3A:76:56:2C:68:85:D8:46:F8:F2:33:1C:E1:4C:52:5F:A4:3D:FC
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       77C55EDE0A13C069109D5726115D5CC5A6316B54
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:22:00 +0000
ROA not before:           Tue 05 Mar 2024 18:17:00 +0000
ROA not after:            Tue 04 Mar 2025 18:22:00 +0000
asID:                     52444
IP address blocks:        200.123.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c5:5e:de:0a:13:c0:69:10:9d:57:26:11:5d:5c:c5:a6:31:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:00 2024 GMT
            Not After : Mar  4 18:22:00 2025 GMT
        Subject: CN=BC3A76562C6885D846F8F2331CE14C525FA43DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:bb:2e:0c:21:96:48:82:af:54:97:94:38:
                    16:83:f0:f7:95:f5:e5:9a:89:8d:cc:f8:68:0b:e6:
                    30:18:dd:70:7c:09:05:e2:98:16:45:a4:f7:4a:65:
                    fc:84:0b:66:cc:63:6d:aa:17:f8:fa:4c:86:06:ec:
                    34:fe:2e:eb:9a:22:70:af:13:25:3b:cb:7c:8a:20:
                    68:61:b3:76:26:64:54:fc:1a:59:93:14:50:22:a3:
                    52:4d:cc:c7:d7:e7:08:a6:c1:d3:30:dc:b8:1a:73:
                    d2:85:e1:7c:47:4d:97:b5:c3:4d:92:3a:28:db:67:
                    03:71:0c:32:77:a1:cc:6a:e3:02:3f:a3:49:80:66:
                    2f:1f:ea:1c:ab:15:ca:a4:69:d2:9e:40:23:66:9a:
                    bb:d0:7a:11:92:7f:1e:2e:e0:4d:3e:da:89:8b:68:
                    1b:9f:b5:96:5f:bc:55:e4:5b:06:c3:96:e4:61:a6:
                    ec:43:39:f6:c7:d3:e7:9b:e1:61:64:9b:24:9c:72:
                    30:40:bd:d5:f4:e1:08:f8:bc:94:db:42:db:63:2b:
                    fb:da:d8:f1:97:c3:cd:33:4d:42:5d:5b:af:5c:b7:
                    7d:76:97:c7:4e:31:4c:da:86:b1:36:f8:30:57:f8:
                    7c:2e:e0:2c:4f:c6:7d:cc:d8:db:ab:55:4a:0c:63:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:76:56:2C:68:85:D8:46:F8:F2:33:1C:E1:4C:52:5F:A4:3D:FC
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:62:1e:c5:96:4d:d3:58:b3:51:c3:fd:e7:4c:de:91:22:d6:
         ed:5c:ef:27:5e:9c:e6:69:2c:92:32:33:31:a2:4e:f6:d5:9b:
         f9:0e:58:cb:19:7e:9d:90:b7:f6:f1:7b:77:39:ea:cc:b1:cd:
         90:af:b7:83:48:ab:73:19:0f:29:30:b1:60:90:b7:57:2c:9b:
         20:b9:26:29:2a:dc:fb:84:b8:c2:b5:69:8b:aa:08:84:d6:fb:
         e4:2a:07:6e:40:fd:69:66:62:f9:7e:c6:56:2b:7a:09:2f:14:
         f1:7f:2e:49:46:3f:93:c9:36:08:87:db:70:6f:e8:9a:2d:3e:
         39:e6:8d:c9:d2:b4:21:a8:87:b7:3f:0d:64:97:b3:e1:16:74:
         f8:63:0e:90:96:da:7c:19:28:39:d1:ac:72:5e:b2:cd:46:fc:
         d1:65:3a:0a:9d:ef:98:73:3f:db:35:f8:7c:c8:68:01:96:4c:
         ee:86:66:d4:8c:78:60:a7:17:59:3c:82:74:a7:8c:b7:63:5d:
         b3:9e:6b:6e:9b:5f:80:dc:eb:59:5a:2f:e2:05:2e:b8:62:da:
         55:56:70:45:48:01:33:d3:16:dd:61:65:27:f6:3d:f6:96:42:
         61:dc:f8:94:af:e9:2d:54:79:b3:12:60:b6:4b:06:dd:7e:05:
         59:9f:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:07 2024 by rpki-client on console-ams.rpki-client.org