Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
File:                     3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          an4jVyk9axlDnP9GZK161g5dDj3es5nkIqUmk8NW99A=
Subject key identifier:   12:47:5B:18:B9:FD:21:28:A2:AE:A6:6B:F3:84:45:26:32:7F:C4:55
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       0F1C3B9DA3921CBF5D95C9749C6358A0FC5B6D9F
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     6461
IP address blocks:        200.123.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1c:3b:9d:a3:92:1c:bf:5d:95:c9:74:9c:63:58:a0:fc:5b:6d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=12475B18B9FD2128A2AEA66BF3844526327FC455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:53:0f:fa:56:9b:87:6e:e4:00:fb:fc:f8:
                    43:8b:af:f0:3e:d3:11:07:e5:8c:10:aa:88:79:c4:
                    b2:73:9c:a6:f0:25:6e:d8:d8:f6:75:8c:3f:de:42:
                    c1:33:37:fb:06:9f:0c:49:25:ec:fe:eb:0d:73:22:
                    7a:e5:24:1d:73:cb:bd:bd:ed:18:aa:05:b1:8d:38:
                    33:8c:4b:24:70:7c:28:99:cc:0e:ab:46:c5:b6:92:
                    c0:81:39:63:45:5b:3e:fe:d5:b2:09:78:be:32:7b:
                    e8:1a:a9:53:78:d9:aa:78:69:79:5c:d7:c9:54:c8:
                    2f:79:2b:72:ac:cb:ed:e6:f8:dd:a8:38:29:15:42:
                    1b:8c:23:8f:d4:91:96:40:21:d7:ba:0e:5f:33:20:
                    77:5c:10:00:3b:e6:fc:11:91:9c:7a:64:dc:81:12:
                    52:aa:00:d7:9e:89:d1:62:6e:04:5f:4e:d1:6a:a6:
                    b9:29:5b:3d:03:56:10:c2:1d:a0:52:59:5b:2a:56:
                    43:4b:d0:7c:4d:2e:04:d9:94:73:50:4e:b3:9e:11:
                    52:f7:84:e1:70:fd:e8:9a:66:85:b6:a6:0d:ca:ab:
                    62:0c:52:73:c7:6b:a2:66:c6:c3:07:06:fa:26:4f:
                    fe:b5:d7:0c:db:be:20:f9:ee:e0:62:d1:19:4e:b5:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:5B:18:B9:FD:21:28:A2:AE:A6:6B:F3:84:45:26:32:7F:C4:55
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:42:c0:e9:f2:af:41:dd:36:c1:4f:d7:70:91:c7:6c:4f:94:
         c1:fb:d1:8e:53:6a:cd:0b:63:b2:da:7e:7b:b9:b4:2c:7d:c1:
         0d:6a:c7:7d:cc:a0:3b:3e:f3:6d:c3:aa:66:06:37:8c:90:7c:
         da:e0:14:2f:ab:74:05:81:77:24:a5:46:3b:8e:93:0c:f2:b6:
         d3:ed:36:f8:7b:0d:cb:8f:fd:63:47:e9:84:19:50:e0:85:22:
         9f:e6:15:74:8d:f6:23:aa:d3:0b:13:75:72:d9:80:c9:20:6c:
         ec:9b:7d:de:aa:e0:d1:64:05:bd:5a:1e:b4:8a:27:e8:78:d8:
         2b:b4:b9:f1:3b:b5:20:6d:37:6d:0f:ed:d6:2d:14:5c:59:c5:
         0c:d9:95:2f:5b:f9:5b:ef:84:55:90:76:ba:97:ba:4d:cb:1d:
         a5:7b:89:2e:65:42:d0:ba:37:c2:29:3a:35:78:20:43:0b:75:
         d1:76:2f:c2:c0:00:99:f9:9e:0b:7f:85:93:b4:81:ab:9a:77:
         8c:82:ff:09:bb:fb:e5:39:53:30:f0:0c:90:4c:09:80:bc:82:
         9e:c1:92:f9:0d:14:57:d8:7e:01:f8:41:2e:04:c7:35:94:c2:
         87:aa:3d:64:8a:0b:ea:dd:72:cd:ac:8c:20:5e:b9:4d:f1:b2:
         d5:f3:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:31:47 2024 by rpki-client on console-fra.rpki-client.org