Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa
File:                     3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa (raw, json)
Hash identifier:          jxrZvQbYyIpqTesF1xu11ZjCgspmz6+6dUJZ7/eEH4I=
Subject key identifier:   98:E1:93:79:AD:D4:4A:B7:B5:AE:DC:09:9F:AE:4B:97:20:7F:87:87
Certificate issuer:       /CN=3291970D27DCEFC28622665006BF41C08C701A3D
Certificate serial:       2F5F2B06804287F2D644BCDDA6CA80D992E6B9D6
Authority key identifier: 32:91:97:0D:27:DC:EF:C2:86:22:66:50:06:BF:41:C0:8C:70:1A:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3291970D27DCEFC28622665006BF41C08C701A3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa
Signing time:             Tue 05 Mar 2024 17:59:17 +0000
ROA not before:           Tue 05 Mar 2024 17:54:17 +0000
ROA not after:            Tue 04 Mar 2025 17:59:17 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3291970D27DCEFC28622665006BF41C08C701A3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3291970D27DCEFC28622665006BF41C08C701A3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3291970D27DCEFC28622665006BF41C08C701A3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5f:2b:06:80:42:87:f2:d6:44:bc:dd:a6:ca:80:d9:92:e6:b9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291970D27DCEFC28622665006BF41C08C701A3D
        Validity
            Not Before: Mar  5 17:54:17 2024 GMT
            Not After : Mar  4 17:59:17 2025 GMT
        Subject: CN=98E19379ADD44AB7B5AEDC099FAE4B97207F8787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:71:a9:41:62:f2:21:35:38:12:f4:58:aa:
                    e3:7b:c1:cd:c5:4f:10:23:19:c6:67:74:12:87:ef:
                    4a:96:a3:05:49:86:e9:82:26:37:35:e5:64:8a:76:
                    47:7b:44:e1:7e:c3:e1:3d:34:e9:70:db:cd:cd:d6:
                    86:be:f7:e6:89:77:f5:b9:34:70:39:0e:34:c7:78:
                    fa:1f:a4:02:31:7d:13:eb:e3:5d:8f:84:1f:46:83:
                    ab:b7:e6:10:da:e0:4b:a8:b4:8a:e0:b9:8b:2b:27:
                    bf:8a:b2:70:e6:eb:78:c8:ca:c0:b4:aa:ac:a2:55:
                    c0:a6:39:f2:97:b7:f9:72:73:5d:74:61:a5:0b:13:
                    5f:f3:a5:9b:e1:b2:6d:fd:f4:78:25:7c:37:db:52:
                    cb:8d:6b:bc:72:35:db:16:99:ae:f8:bf:fd:bd:ce:
                    1e:00:3a:be:35:3b:28:ce:3d:77:8c:49:f0:05:0c:
                    e9:96:85:62:3d:83:8a:25:cd:cc:19:7b:c5:fd:8b:
                    b3:ba:71:86:7e:dd:d8:62:a7:93:8b:34:c7:96:dc:
                    c2:cb:8c:47:96:aa:8c:da:fc:2c:05:7a:d4:5a:8c:
                    a1:01:f8:b5:1e:4f:09:0b:a7:8a:df:7a:87:05:a0:
                    95:89:20:7a:22:25:31:9b:7c:8e:34:c3:42:e7:13:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E1:93:79:AD:D4:4A:B7:B5:AE:DC:09:9F:AE:4B:97:20:7F:87:87
            X509v3 Authority Key Identifier:
                keyid:32:91:97:0D:27:DC:EF:C2:86:22:66:50:06:BF:41:C0:8C:70:1A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3291970D27DCEFC28622665006BF41C08C701A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3291970D27DCEFC28622665006BF41C08C701A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:e5:3e:bf:e6:33:fc:bb:41:3c:9d:cb:ea:17:db:ef:b6:
         f4:67:9f:b4:82:a4:6b:7f:63:94:af:c6:e5:41:8c:8f:66:4d:
         aa:8c:78:1d:15:f5:2e:52:36:79:18:f4:67:8e:1e:b6:d9:84:
         2a:60:7e:de:02:60:a8:bc:da:f6:74:e2:28:a1:ba:2a:f2:36:
         90:3d:a0:5d:4e:65:ef:87:03:44:12:65:96:06:62:81:11:6e:
         ab:d0:3f:c2:1e:58:ea:71:fe:4b:16:34:ca:9e:df:c6:95:2f:
         f8:53:e6:65:e4:58:af:c6:d9:a5:8f:83:48:0e:cd:f4:88:04:
         d8:43:ac:be:99:23:42:d5:41:6d:cb:50:c2:65:6c:96:b5:29:
         77:da:39:1f:b4:55:7f:e5:79:c8:b4:1b:f9:9b:7d:27:92:12:
         4f:6e:ef:f9:36:5f:55:24:31:b7:2d:2d:68:08:b2:4a:9f:fc:
         20:f1:38:1f:74:e9:10:4d:99:9a:a2:46:4e:a7:cc:03:a4:18:
         a4:fc:20:38:ac:17:04:91:9d:bf:08:47:04:97:2f:16:ae:81:
         9d:c5:fd:fb:1e:2c:47:49:0e:7e:1f:b4:43:d4:3a:7b:23:e2:
         7b:52:e5:21:4f:e2:2b:7d:4c:b4:50:a3:50:4c:e0:01:b5:89:
         f0:0a:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org