Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3230352e302f32342d3234203d3e203237373131.roa
File:                     3230302e38302e3230352e302f32342d3234203d3e203237373131.roa (raw, json)
Hash identifier:          Sj09dQ8hk0wUXlTLL+lWrQfRV9uqh0hQ9g+FcsfTXIg=
Subject key identifier:   F6:59:B4:AF:87:47:2E:54:88:FA:51:93:C0:9F:1B:D2:76:5E:91:A3
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       41F0116AB1C37FC2A1EFD69C598D72F13972FF0E
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3230352e302f32342d3234203d3e203237373131.roa
Signing time:             Tue 05 Mar 2024 17:49:51 +0000
ROA not before:           Tue 05 Mar 2024 17:44:51 +0000
ROA not after:            Tue 04 Mar 2025 17:49:51 +0000
asID:                     27711
IP address blocks:        200.80.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f0:11:6a:b1:c3:7f:c2:a1:ef:d6:9c:59:8d:72:f1:39:72:ff:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Mar  5 17:44:51 2024 GMT
            Not After : Mar  4 17:49:51 2025 GMT
        Subject: CN=F659B4AF87472E5488FA5193C09F1BD2765E91A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:c3:0f:f4:d2:1d:5e:90:8a:8e:39:f2:a4:
                    1f:b0:d4:fa:a4:3c:a0:9f:d4:ee:b8:18:47:07:40:
                    6f:e4:42:7a:d1:69:b9:bd:cf:29:a3:b5:c7:6e:70:
                    2f:9b:ff:13:1b:fa:c0:be:65:ed:51:34:a8:8a:62:
                    ef:0d:38:79:7c:4a:16:f7:83:07:92:c3:a3:6c:cd:
                    9e:2c:7a:62:4e:25:8c:af:be:c2:03:69:e9:36:52:
                    ab:a1:26:64:5e:3d:f7:09:de:11:39:5e:8e:db:d9:
                    25:98:0d:7a:91:c7:91:3d:eb:63:b2:67:7b:bd:6b:
                    e1:fe:ae:db:e0:07:15:57:e1:12:b7:50:47:39:74:
                    c1:1e:c6:bb:04:0f:8a:6c:ed:08:43:22:52:80:b3:
                    e7:20:3d:cf:06:18:84:58:54:88:86:1d:d9:08:6b:
                    a3:86:2c:38:c4:db:05:35:f8:1a:26:1c:74:71:3d:
                    d1:6f:0f:13:ee:6c:47:9a:62:9b:df:ed:03:d7:ea:
                    70:3c:aa:06:fb:dc:d6:d0:d4:84:3d:87:91:88:23:
                    69:66:cd:8f:c9:d8:7e:3d:b6:30:88:11:64:3a:cb:
                    28:fa:c1:52:5e:b9:ff:8a:38:e7:cd:15:68:9b:4a:
                    42:cf:94:dc:1e:b3:2e:d9:65:e1:0c:7a:85:01:85:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:B4:AF:87:47:2E:54:88:FA:51:93:C0:9F:1B:D2:76:5E:91:A3
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3230352e302f32342d3234203d3e203237373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:df:4a:04:90:aa:2e:47:f1:87:42:d1:ef:93:cb:8e:de:
         83:7d:a6:ab:09:65:33:cf:9d:99:ed:51:9b:44:82:a9:74:01:
         75:c1:5d:35:ea:ec:13:b9:b1:47:24:08:83:78:93:87:e9:09:
         06:8a:d3:24:f0:89:ce:56:bf:2a:1b:75:8a:7b:bf:a3:6a:e1:
         38:70:e9:ca:d4:c6:83:f4:ab:59:31:63:c2:7f:18:5d:06:f7:
         c7:f8:1b:11:91:2c:30:05:a6:fd:06:f4:f3:3d:6d:22:66:81:
         b3:64:64:e4:8a:c7:cc:bc:ed:0e:2e:a7:58:0b:2e:6e:f4:26:
         10:fc:51:5c:76:9c:e7:f9:6f:9a:a3:2c:52:aa:29:d3:fe:35:
         39:43:3c:5b:d7:08:43:6d:32:c3:9e:3b:a1:77:1a:89:bf:70:
         33:ae:67:50:8d:67:cb:5e:06:85:2f:64:93:05:87:a3:0f:29:
         fc:21:a5:59:17:9e:f3:82:8e:f4:b0:f4:c0:4e:35:62:36:ac:
         b4:e2:29:a0:67:5d:03:19:e2:cb:fb:63:fa:cf:7d:33:f3:29:
         1b:80:0d:1a:3f:95:66:63:e7:c8:09:70:fe:44:66:0f:91:5c:
         ca:0c:64:ba:a0:5b:46:ba:23:ef:45:f4:2e:40:06:1a:2a:80:
         34:a9:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org