Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa
File:                     3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          eVhM408Bj0c8wj2drLDfN8M5gOlwrfE/ktw7mPYokJw=
Subject key identifier:   F8:87:84:9D:96:34:2F:64:66:22:88:A1:4D:D1:0F:76:7F:27:4E:83
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       4721E66B0DD4717D58F84417F68BF92F568082B1
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     27947
IP address blocks:        200.125.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:21:e6:6b:0d:d4:71:7d:58:f8:44:17:f6:8b:f9:2f:56:80:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=F887849D96342F64662288A14DD10F767F274E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:04:96:53:5a:fb:c5:d5:82:cb:2b:d7:72:
                    d2:e6:31:3e:7c:4f:cf:5e:7a:c3:8d:bf:df:c9:0e:
                    45:8d:a4:40:ca:18:69:4d:83:01:0e:d8:9e:a6:ce:
                    e3:5f:8b:5c:b9:0b:08:69:3a:3c:d2:2e:92:d5:5d:
                    b7:50:db:7f:d0:23:65:51:df:74:dd:35:f7:89:73:
                    12:90:30:60:8a:82:c5:9c:b0:5a:d9:7b:62:40:84:
                    e2:9f:7c:d8:96:27:45:94:e0:67:75:6e:8e:bf:eb:
                    f8:7b:79:71:ce:c5:4f:7e:74:dc:8a:92:f7:45:e6:
                    67:ac:8e:a2:04:29:81:f6:39:6d:2d:80:1e:e2:2c:
                    de:01:45:90:7c:dd:96:45:c5:d8:c5:dd:8c:86:b7:
                    03:33:1b:d0:4d:31:48:f3:12:ff:a6:80:5c:1b:d6:
                    89:d6:60:e7:e5:13:2c:f4:6f:28:e6:d8:47:cc:4d:
                    a1:23:18:3b:df:f3:a0:f9:f6:db:49:4b:f5:de:c4:
                    3b:6b:95:50:58:c5:83:74:85:0b:60:95:8f:9c:a8:
                    ce:fe:75:64:a5:d6:24:1b:5e:0a:38:8a:1f:27:33:
                    09:4d:06:b8:98:ff:12:74:bf:a5:2c:80:3f:d4:7c:
                    98:ff:de:d8:fe:8a:a9:af:0d:2a:e7:1a:6b:64:d2:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:87:84:9D:96:34:2F:64:66:22:88:A1:4D:D1:0F:76:7F:27:4E:83
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3133332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:93:06:5e:ec:5e:62:62:20:c5:a3:e3:dd:22:f3:45:78:
         2d:1a:c3:ab:6c:55:22:f2:d6:7d:0c:89:77:5d:cb:c0:d5:ba:
         60:94:b7:3e:f3:be:2f:22:88:35:55:56:37:b3:28:97:c9:80:
         c9:71:33:bc:25:b8:f1:87:7f:a5:28:cf:5e:ff:9f:ee:f6:f9:
         9b:37:b0:00:11:ba:db:e7:ad:89:09:0c:46:a0:74:19:fb:b4:
         ca:69:f2:7d:8d:16:7c:50:81:6c:ae:b0:79:16:89:b7:57:f7:
         4a:86:ce:4c:c5:5d:59:74:1b:fd:4a:c6:0f:97:c5:ea:19:62:
         e3:e4:81:7d:39:54:a6:fd:c0:69:d4:61:5d:5f:b5:f7:cb:09:
         95:51:cd:67:ea:3d:e5:c1:36:0f:29:df:48:af:e9:db:4b:45:
         91:22:cd:21:8e:2a:34:f1:a6:aa:a7:ca:e2:21:dd:7c:2f:32:
         5a:93:a9:45:f4:56:88:a2:df:84:7d:bf:94:0d:bf:f2:20:95:
         86:55:f6:5b:8b:40:94:1a:70:96:41:09:8b:3c:39:34:8b:39:
         ab:22:90:67:23:dd:2c:e0:5a:dc:f4:61:ce:66:4a:ba:96:f9:
         e5:c8:30:bd:af:af:9d:35:29:11:bc:21:5a:9a:00:bb:db:eb:
         3c:e1:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org