Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa
File:                     3230302e3132332e35392e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          sHSKAQajiYjyWBZ1LkU9mec8Kld/nIjGVZzMmkUasm4=
Subject key identifier:   D6:6D:8D:5F:E8:B2:E7:4E:F9:C1:CE:0E:0D:4A:65:4B:D9:C1:5F:A5
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       7A7BE0D5C97B1E445C832B2416D10D7E92680E47
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa
Signing time:             Tue 20 Aug 2024 01:00:01 +0000
ROA not before:           Tue 20 Aug 2024 00:55:01 +0000
ROA not after:            Tue 19 Aug 2025 01:00:01 +0000
asID:                     10617
IP address blocks:        200.123.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:e0:d5:c9:7b:1e:44:5c:83:2b:24:16:d1:0d:7e:92:68:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug 20 00:55:01 2024 GMT
            Not After : Aug 19 01:00:01 2025 GMT
        Subject: CN=D66D8D5FE8B2E74EF9C1CE0E0D4A654BD9C15FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:bf:3f:18:ed:33:99:93:df:d8:ac:4e:a5:
                    e3:a4:dc:ba:9e:ee:00:d1:5e:3e:75:8f:e7:f4:4a:
                    f5:a2:2b:fb:b0:fd:55:0d:18:8d:87:45:11:21:a7:
                    98:28:9e:44:2f:fa:ae:07:83:ff:65:25:31:37:88:
                    c8:15:62:4b:21:9c:20:7b:c6:17:2d:a0:3e:0b:72:
                    cd:78:30:4f:a2:63:c5:dc:bc:62:ce:2d:77:d0:83:
                    48:10:98:c1:29:1b:6f:63:2b:ee:9b:22:4c:9f:d3:
                    18:85:72:9d:8a:af:68:d4:14:94:67:25:2b:ae:73:
                    4c:b8:8a:b4:45:ff:76:e9:e1:ed:ef:ed:6e:3a:80:
                    9c:94:d2:5d:e0:ac:22:18:5f:c7:84:23:12:5b:25:
                    9c:a7:f5:98:51:c3:8f:3a:5d:a9:d3:0b:06:47:e8:
                    15:5c:2d:34:bf:6d:10:11:a8:3e:b1:16:00:d8:a4:
                    cd:31:62:20:11:bb:06:2c:d5:6f:48:c2:8c:2f:0d:
                    6a:eb:f5:f5:f5:9f:58:21:f9:c2:ba:55:9c:de:a5:
                    be:01:ef:52:d1:a3:68:8a:3f:ed:92:d7:b7:64:c9:
                    1d:60:1b:58:b8:b1:a7:67:dd:f5:04:47:0a:fd:ee:
                    cf:6c:14:6f:15:cb:24:7d:8f:09:85:b4:19:10:18:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:8D:5F:E8:B2:E7:4E:F9:C1:CE:0E:0D:4A:65:4B:D9:C1:5F:A5
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:fc:7b:6d:95:1d:60:2e:21:5a:88:08:e7:d3:4c:02:60:
         5b:45:56:b5:85:0a:b6:ca:ce:ed:96:67:5c:11:ee:bc:e4:89:
         21:25:30:85:58:0e:da:9a:c5:a0:ba:8e:1a:40:e9:27:f0:84:
         a9:67:97:ef:34:fa:f4:7f:f6:9e:1a:e2:ac:c1:b7:e7:6d:28:
         ef:31:2e:2b:49:63:a6:40:9a:94:a5:4c:0a:e6:c5:d8:f8:f3:
         2a:18:1a:2b:80:92:68:33:c4:9c:64:09:7e:b2:dd:46:32:53:
         be:47:5c:f6:d6:67:4b:21:95:1a:b3:4d:a2:e9:33:52:c4:5d:
         af:91:65:fd:33:ff:fb:37:b2:15:ba:d5:df:ab:85:de:a5:b5:
         e7:79:0d:bd:c9:33:8d:57:c4:e6:cd:a5:fe:57:e8:d3:07:c8:
         b8:07:de:77:86:fb:63:89:cb:01:24:e5:e6:8a:b3:2c:bf:d8:
         40:4f:64:2f:60:6e:81:f3:46:25:9c:8e:66:99:91:1d:57:55:
         33:17:b0:0a:20:1f:cf:49:5b:06:af:f1:cc:2f:e0:b8:89:86:
         d1:51:35:c2:3c:78:8c:d0:6d:01:08:07:0d:f8:9b:06:a0:4e:
         59:f5:a6:43:6d:b5:df:14:08:cb:ae:fd:cb:16:b5:98:ee:75:
         bd:ed:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org