Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
File:                     3230302e34392e3132302e302f32312d3233203d3e203237393630.roa (raw, json)
Hash identifier:          PFMj5ePXUJNQG+WZft8ZkZFHEwnrdDXKhpEnH+ejFgs=
Subject key identifier:   9F:55:A0:6D:78:26:23:91:9B:7E:4E:70:72:3B:9A:F7:24:3D:2C:30
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       44DFEF59B028366C1B2BACF1D3935CD3F71D3ECA
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
Signing time:             Tue 05 Mar 2024 18:07:46 +0000
ROA not before:           Tue 05 Mar 2024 18:02:46 +0000
ROA not after:            Tue 04 Mar 2025 18:07:46 +0000
asID:                     27960
IP address blocks:        200.49.120.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:ef:59:b0:28:36:6c:1b:2b:ac:f1:d3:93:5c:d3:f7:1d:3e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Mar  5 18:02:46 2024 GMT
            Not After : Mar  4 18:07:46 2025 GMT
        Subject: CN=9F55A06D782623919B7E4E70723B9AF7243D2C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:05:4c:44:90:af:4e:82:86:37:df:1c:16:
                    44:d5:8d:d5:3d:a3:9f:bc:14:d2:7f:95:a4:e5:a1:
                    0f:53:a8:9c:2f:78:42:51:ea:08:a8:72:fe:3e:13:
                    84:b9:62:b8:60:2e:e8:ae:02:d9:5e:54:59:f7:7d:
                    e0:23:7c:66:c8:45:fd:22:9a:eb:36:b8:4f:1b:1b:
                    3e:15:b9:bd:1f:ee:f7:81:42:7a:55:6d:b9:54:2d:
                    12:95:81:42:65:9b:0a:cb:90:ec:2b:81:14:92:06:
                    7c:8e:79:ec:08:1b:da:70:d0:af:93:ef:6d:cc:df:
                    67:51:42:cb:f1:e7:c6:4e:52:f3:66:62:41:cf:37:
                    3a:af:93:fa:af:82:83:8e:80:72:5a:47:ec:45:5d:
                    66:ea:bd:a2:92:51:ac:15:0a:da:dd:62:bc:a9:12:
                    27:d5:ba:55:27:a8:ff:51:35:d5:14:65:fe:ac:5d:
                    55:48:00:fb:ba:68:05:c9:71:e9:7f:cb:b1:c2:bb:
                    09:5d:50:08:f9:95:49:d8:1e:fc:2a:f2:66:08:38:
                    1a:9b:a3:97:17:18:4c:da:b9:e3:da:4f:89:d9:bb:
                    8d:6e:ff:82:39:fd:0a:81:cc:45:0d:17:bd:3b:a2:
                    0c:21:6e:dd:96:e8:f5:7c:63:8d:1f:83:16:0a:98:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:55:A0:6D:78:26:23:91:9B:7E:4E:70:72:3B:9A:F7:24:3D:2C:30
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:46:4d:d2:aa:5d:d7:fb:3f:66:dd:d0:92:c8:a1:50:e1:61:
         77:96:0a:89:e2:b0:c4:e7:9e:b1:f9:e3:e4:e9:85:dd:01:2c:
         a1:fe:fc:d5:fe:62:73:92:5f:5c:eb:39:aa:b4:dd:b2:72:11:
         2f:47:da:f3:04:3e:fd:89:7d:3f:0e:05:b2:e8:70:0f:82:b0:
         c7:19:df:e8:01:ba:5c:f7:c5:7e:69:24:93:29:51:1d:5d:ef:
         c6:c1:d2:c0:25:c2:12:ee:5d:d1:84:52:56:76:a4:b2:d1:6b:
         94:62:30:f8:37:30:9a:dd:d9:8d:cc:fc:38:fb:26:22:5c:cb:
         7a:6c:8c:0f:9d:14:12:48:d1:7b:f4:fa:32:97:8a:ae:16:96:
         68:f6:df:29:52:ca:9d:3d:ba:0d:58:76:e2:04:60:57:43:af:
         5b:96:63:29:79:1b:8d:54:d9:5f:3a:d3:c6:e5:34:86:df:e8:
         92:2f:68:99:3b:f0:3e:0e:ed:40:4e:90:4b:17:54:92:0c:c4:
         8c:8b:49:4a:cf:e3:62:17:8a:80:57:f5:91:48:44:82:4b:b2:
         77:26:7f:94:0b:6e:c0:e5:57:06:49:13:fd:5f:d9:60:52:7f:
         a1:d9:e4:2a:35:24:da:11:3c:34:6f:1f:89:bc:19:bc:f4:99:
         4b:ea:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org