Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133302e302f32332d3234203d3e203237393437.roa
File:                     3230302e3132352e3133302e302f32332d3234203d3e203237393437.roa (raw, json)
Hash identifier:          QyUsPvmJHy4YGjzyl1LLSRuqMLcDZHNWfmxZDbQi1mM=
Subject key identifier:   F5:E4:7B:BC:13:5C:64:1F:7E:F9:13:87:69:06:F9:21:62:3C:D8:8A
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       0D1225A049C89987FD945D1E44631049AC0E762F
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133302e302f32332d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:46:43 +0000
ROA not before:           Tue 05 Mar 2024 17:41:43 +0000
ROA not after:            Tue 04 Mar 2025 17:46:43 +0000
asID:                     27947
IP address blocks:        200.125.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:12:25:a0:49:c8:99:87:fd:94:5d:1e:44:63:10:49:ac:0e:76:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Mar  5 17:41:43 2024 GMT
            Not After : Mar  4 17:46:43 2025 GMT
        Subject: CN=F5E47BBC135C641F7EF913876906F921623CD88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:85:60:3a:d3:10:7c:33:3a:1c:6c:19:2e:
                    d4:5b:3d:53:48:87:87:ee:c4:e2:99:aa:18:14:c3:
                    74:e3:fc:ba:42:39:72:82:77:89:36:e2:c1:9b:35:
                    4c:0b:09:4e:bd:12:52:dc:36:ba:39:64:4a:a4:a8:
                    3d:75:ca:24:6c:4c:79:80:ef:78:95:a1:07:11:a2:
                    7e:b4:62:51:5c:b2:a1:05:83:53:c7:d2:48:70:de:
                    f0:eb:3c:ee:01:b0:1e:00:03:d5:16:79:45:03:f4:
                    dd:eb:30:43:18:a2:a8:7e:02:a2:b6:5b:51:b2:3e:
                    b3:a7:70:4d:9b:40:52:48:a9:d9:f7:dc:17:1e:e6:
                    3d:d3:05:df:e5:43:1c:74:ab:8f:00:34:f7:9a:a2:
                    e0:57:c8:55:6e:98:e3:ec:a8:c0:b8:23:e9:52:55:
                    63:44:52:a1:30:79:c4:b7:3f:f2:c3:f3:37:05:17:
                    3a:72:a0:ad:19:ea:30:ba:20:fd:8b:29:b8:a1:7f:
                    73:ee:76:54:20:31:9b:0f:4d:2a:fa:0c:f1:7e:62:
                    52:a4:24:63:4f:60:a1:a9:c4:db:28:ad:4c:fe:3c:
                    61:32:58:b4:10:d2:87:d4:b8:e5:0f:b5:63:f7:3b:
                    f9:68:17:4f:dd:f0:38:84:a7:64:52:6d:4e:c9:8f:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E4:7B:BC:13:5C:64:1F:7E:F9:13:87:69:06:F9:21:62:3C:D8:8A
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133302e302f32332d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:66:27:92:ee:c9:1d:63:ea:14:f8:d2:6c:62:2b:89:60:f7:
         ed:e6:01:e8:15:84:bc:0b:ac:41:67:e5:2f:35:f1:5e:1c:e2:
         d7:3f:f4:0b:9c:94:14:aa:55:41:c9:81:72:18:c3:31:31:08:
         06:99:fe:c4:5d:9b:36:b2:39:16:fc:89:2c:75:5f:4a:09:21:
         1a:64:e2:b0:c6:4f:ba:f7:38:2a:95:06:ab:00:9a:00:ed:07:
         d4:33:51:11:eb:7d:ce:37:29:d9:0f:6f:2d:53:24:a1:ff:ec:
         62:08:42:9b:e3:92:9b:07:75:1a:5b:34:54:84:32:4e:c5:c5:
         3f:06:17:df:43:b9:7f:fb:f3:26:ae:51:e9:6d:9e:ba:11:7c:
         c7:69:97:4c:3a:63:d2:e1:4b:b9:5c:99:d2:e9:1f:49:4d:7e:
         f1:e7:e5:f3:50:04:be:2b:90:af:1a:57:8a:f0:e6:33:9e:20:
         e6:b4:87:a8:56:57:68:6a:94:47:d2:80:00:25:2b:82:3c:65:
         2f:f2:c6:f4:16:16:ae:63:62:e3:9d:aa:22:e4:bc:03:b9:91:
         b4:30:31:39:db:90:6d:87:77:74:59:5e:62:bc:51:f8:c9:76:
         91:3e:4c:b0:8b:b9:04:aa:e4:a5:9a:28:a4:16:26:0d:72:bf:
         73:21:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org