Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36322e302f32332d3234203d3e20323634373136.roa
File:                     3230302e3132332e36322e302f32332d3234203d3e20323634373136.roa (raw, json)
Hash identifier:          CmWumIZqfXB4uli9kaJ5hQyrFEe6VQYtrc35otIaxC8=
Subject key identifier:   49:72:43:81:15:9F:3B:FD:BA:D3:43:82:37:AD:90:E2:FD:0D:BE:E2
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       0C47C8EE33A1B92AA6C6E16128EBACFDC5BD984B
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36322e302f32332d3234203d3e20323634373136.roa
Signing time:             Tue 05 Mar 2024 18:22:00 +0000
ROA not before:           Tue 05 Mar 2024 18:17:00 +0000
ROA not after:            Tue 04 Mar 2025 18:22:00 +0000
asID:                     264716
IP address blocks:        200.123.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:47:c8:ee:33:a1:b9:2a:a6:c6:e1:61:28:eb:ac:fd:c5:bd:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:00 2024 GMT
            Not After : Mar  4 18:22:00 2025 GMT
        Subject: CN=49724381159F3BFDBAD3438237AD90E2FD0DBEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:8f:eb:30:f3:56:11:93:36:a5:69:52:29:
                    4b:83:c4:91:c4:ce:ac:82:e9:d9:80:93:c0:fa:13:
                    d4:54:f8:d3:26:08:bf:c1:ee:2a:a4:4b:8e:e9:2a:
                    f9:2d:de:64:c9:e5:cd:86:06:29:04:e6:22:99:c6:
                    7f:af:ba:5d:5a:f8:47:a3:9d:22:ae:ea:33:57:59:
                    eb:02:cf:2a:f3:22:0e:d4:a0:5c:da:98:30:10:60:
                    e8:39:2f:32:78:ee:e9:66:36:35:22:17:f0:bc:ec:
                    91:33:71:de:4a:a8:11:17:60:29:c6:7a:8f:bc:68:
                    73:71:31:07:84:aa:a3:de:e1:a6:db:cc:4d:d6:8d:
                    f4:62:0f:78:9e:ce:1c:ba:0a:9e:fa:08:ef:40:27:
                    3c:29:b9:57:1f:84:7e:b2:2e:51:2a:f9:d5:8c:00:
                    54:b8:fb:da:fd:f9:71:30:f6:f0:c2:21:6f:70:59:
                    85:0e:c7:57:89:5c:b2:6f:19:28:c8:ab:fa:8f:87:
                    f6:2f:8b:d5:76:ec:a3:29:c7:42:79:8d:22:bb:c4:
                    6e:40:2c:d7:76:20:e0:6b:07:1a:21:60:18:93:06:
                    0a:19:5f:3b:92:ad:78:0c:c7:e1:b8:91:34:e8:34:
                    5b:8a:9c:79:2b:06:c6:21:37:ff:9c:2e:30:7c:84:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:72:43:81:15:9F:3B:FD:BA:D3:43:82:37:AD:90:E2:FD:0D:BE:E2
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36322e302f32332d3234203d3e20323634373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:17:81:f6:ea:01:1d:ab:3e:ce:35:dc:7b:0d:5a:d5:b6:f9:
         70:fe:c7:e8:8e:71:6a:23:87:cd:f0:6a:d7:89:8b:9e:4d:a3:
         92:dc:31:d8:aa:17:61:08:37:dc:80:d1:16:a5:8d:0d:63:7c:
         c3:ac:8b:39:25:01:c0:46:6d:90:df:95:44:5a:fc:c2:f8:83:
         8b:ad:c5:e8:16:e9:b7:00:ec:89:95:5f:71:74:65:92:82:03:
         ec:d2:72:2f:f3:44:d3:64:00:bc:5a:c5:c4:76:24:4d:1c:bd:
         ca:90:6d:48:79:74:82:0d:73:18:0a:7e:b5:e8:fb:3f:d9:06:
         b4:9f:e0:4e:a9:30:fe:36:63:90:fe:c9:1a:5a:b2:4e:af:ef:
         2d:18:12:23:7a:db:fc:75:21:dc:b0:f3:be:c1:29:c9:df:7f:
         a1:b3:aa:0a:31:f9:e1:81:41:4f:83:c3:6d:55:b1:fb:90:0b:
         2d:bd:75:43:54:87:57:aa:7d:cc:eb:70:c8:26:13:64:b8:c7:
         7f:40:b3:b4:56:75:93:89:da:bf:4f:a1:e2:b1:f0:c7:64:60:
         fc:5e:b4:b3:cd:29:fc:9c:a1:e6:b6:59:06:15:43:b4:b7:e2:
         3e:c2:80:24:2e:91:86:8c:25:20:41:7b:fa:68:81:73:75:39:
         ca:03:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org