Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203133363832.roa
File:                     3230302e3131392e3132382e302f32302d3234203d3e203133363832.roa (raw, json)
Hash identifier:          BwiwvoJ90T6UIrVS/9dxOsXlw4+hJUEkM8rfEUtBagc=
Subject key identifier:   D6:A3:10:CF:43:30:3E:C0:15:57:2E:98:93:4C:A6:9B:74:00:8F:2F
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       458BFBD67B7C9F34DD5FDB4F4D2F2E36C24F9A57
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203133363832.roa
Signing time:             Tue 05 Mar 2024 17:42:22 +0000
ROA not before:           Tue 05 Mar 2024 17:37:22 +0000
ROA not after:            Tue 04 Mar 2025 17:42:22 +0000
asID:                     13682
IP address blocks:        200.119.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:fb:d6:7b:7c:9f:34:dd:5f:db:4f:4d:2f:2e:36:c2:4f:9a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:22 2024 GMT
            Not After : Mar  4 17:42:22 2025 GMT
        Subject: CN=D6A310CF43303EC015572E98934CA69B74008F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:a0:bc:76:ed:06:78:69:a0:1a:6f:6b:8f:
                    2b:e0:c0:2b:37:fb:45:da:5e:02:c6:1c:cb:97:95:
                    2e:73:b0:ad:4a:1d:ed:c0:7a:06:8d:58:27:06:d0:
                    92:f0:a0:88:e2:fb:f2:af:21:6a:b4:4c:88:77:da:
                    6c:0e:a1:ec:0f:4c:95:d9:1c:72:03:94:1c:a3:7c:
                    07:2f:f6:40:3c:22:bd:93:9a:4f:92:53:a3:8e:7f:
                    d5:b0:30:22:22:0d:21:04:b3:08:ca:fc:df:26:d4:
                    b6:16:2b:24:f8:81:e0:3a:9f:ba:bb:1e:fb:bb:d1:
                    e1:30:a0:9e:c9:72:28:e2:27:37:26:64:e1:d1:d0:
                    a4:b9:2b:96:01:18:28:49:ba:2f:31:28:6d:f1:57:
                    8f:4d:e2:23:03:92:0d:79:e6:34:89:20:30:47:1d:
                    12:90:da:1b:60:79:26:31:d5:c2:40:d6:b4:b9:92:
                    0c:1d:f3:3d:78:23:a9:37:0c:02:ff:af:f7:44:f7:
                    d4:62:bd:de:02:6d:85:fe:82:44:78:00:bc:37:c9:
                    19:0a:50:54:c3:68:1b:67:61:c1:ce:6a:82:9a:a7:
                    c2:b3:16:a9:7c:6e:eb:b2:f3:32:b5:f8:33:8d:7c:
                    76:30:09:18:73:61:1e:56:44:4d:da:3d:d5:2f:9e:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:10:CF:43:30:3E:C0:15:57:2E:98:93:4C:A6:9B:74:00:8F:2F
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:e5:89:8b:84:e8:d8:e9:5d:26:1d:b1:ed:4c:9c:39:a3:
         f7:66:3f:38:ed:a5:1a:d4:f6:9f:7c:53:1e:69:05:c7:0e:4f:
         e1:e9:88:91:a8:54:a5:b1:58:72:67:1f:6f:a5:41:47:75:1d:
         18:36:b8:9c:b5:fa:00:d6:4f:86:5b:62:99:15:c3:38:0f:4e:
         71:e8:bf:8a:1c:74:9d:d4:3b:5c:9a:0f:62:fc:3f:84:9a:1f:
         25:77:4f:85:59:3b:12:8e:17:14:2d:23:e6:cd:cb:b1:c3:2f:
         14:ab:cf:6c:63:4a:c8:53:2e:b8:ef:14:1a:4e:21:db:1b:5b:
         6b:5e:7f:c0:a0:1e:de:d2:c8:89:24:05:8c:e5:57:64:a0:c7:
         94:30:bd:a4:95:bf:e4:1f:ee:03:ae:ea:1b:c9:22:d6:c8:70:
         f1:b5:ff:7a:4e:ba:0f:cf:c4:f3:a7:44:65:c8:dd:f4:ba:6c:
         94:03:8d:53:d1:f8:40:bc:28:d9:6b:b8:84:db:30:11:57:81:
         b2:cb:b1:f1:8a:a3:ec:0b:b7:78:16:58:24:eb:f8:da:48:9e:
         40:dd:19:c0:82:71:da:97:34:c5:e5:8c:bb:a2:16:ad:4f:02:
         e5:0a:40:87:f8:0b:78:f5:bf:7a:89:10:36:6a:c3:34:b9:c3:
         63:96:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org