Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa
File:                     3230302e38302e3232342e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          YQk3EXAl5Vey1VkAfqiiLfZaEEWVgrMD38TEl+C0abU=
Subject key identifier:   89:A7:F1:E8:EF:FF:C1:7D:C9:98:68:EA:EC:67:12:D0:5B:03:E0:FB
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       4E7D8FFD69F278768A94504A78778E740BE223FA
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 05 Mar 2024 17:49:50 +0000
ROA not before:           Tue 05 Mar 2024 17:44:50 +0000
ROA not after:            Tue 04 Mar 2025 17:49:50 +0000
asID:                     27754
IP address blocks:        200.80.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:8f:fd:69:f2:78:76:8a:94:50:4a:78:77:8e:74:0b:e2:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Mar  5 17:44:50 2024 GMT
            Not After : Mar  4 17:49:50 2025 GMT
        Subject: CN=89A7F1E8EFFFC17DC99868EAEC6712D05B03E0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:ae:e7:c2:10:19:cf:fa:c3:fa:ae:b6:bb:
                    f8:d1:85:78:63:1f:95:a6:5a:7b:68:0d:a3:a6:9a:
                    a9:08:a6:26:c8:9d:5d:8f:ef:f1:5f:f4:67:ba:91:
                    2d:a2:5c:3e:3c:a4:ee:a6:16:c8:2e:76:d2:45:22:
                    d1:44:7d:9e:e4:3e:08:31:23:d8:06:f4:2a:48:93:
                    86:6e:10:a0:9e:8e:53:39:c4:f7:32:ec:77:c7:1e:
                    7b:49:53:86:36:77:0d:5e:d8:9d:ee:28:c7:d5:7f:
                    8e:fe:d7:c1:a3:87:60:24:1c:c6:71:ee:13:21:55:
                    1f:62:f8:ca:1a:7d:79:64:41:c0:7e:08:05:66:ac:
                    3a:21:0f:7b:64:1b:c0:ec:47:af:9c:3c:b4:13:ab:
                    23:af:85:d6:3c:47:cd:16:58:e2:1c:5c:3f:21:68:
                    34:55:86:d1:e6:5f:c5:f3:3e:0d:82:ad:34:70:59:
                    6b:e3:b5:e2:0c:08:55:e3:bf:a3:99:7b:f0:74:91:
                    94:fe:17:d3:4e:eb:98:8c:7e:9b:94:e6:d4:15:d3:
                    b4:3b:c6:0a:33:b4:43:1d:f5:1f:f6:05:14:0c:d9:
                    10:8e:a1:ad:ea:bf:c1:14:b7:db:13:16:e3:c7:92:
                    e7:a9:8a:59:14:6c:36:28:94:e7:25:4b:aa:48:af:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:F1:E8:EF:FF:C1:7D:C9:98:68:EA:EC:67:12:D0:5B:03:E0:FB
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:f4:d4:6a:b7:13:a9:f4:ec:d5:be:c6:14:7c:fa:6d:3a:
         04:33:0c:70:e3:67:58:16:d8:80:38:79:2b:e8:a0:17:01:76:
         93:96:32:49:be:29:27:b9:f0:8d:92:ea:13:21:0a:0a:00:49:
         59:e4:67:b2:d2:74:0b:9b:cb:0c:66:ee:46:6e:82:86:86:9d:
         fe:32:ac:80:da:c6:88:b6:07:6e:2e:58:33:51:88:ac:65:a0:
         b4:a2:3e:13:64:2a:6d:12:54:7b:16:00:dd:be:5a:6f:d7:52:
         77:18:de:1f:92:06:8b:33:8f:79:35:65:79:36:a1:ec:51:9e:
         78:fd:e2:8e:9e:97:ae:3c:fd:cf:a1:1c:d4:70:ab:d8:d5:de:
         f4:8c:a0:69:4e:6e:5f:43:7f:fc:cb:48:e1:6c:90:a3:aa:de:
         83:4a:0b:c6:f3:3e:a3:b1:c6:2a:9c:d5:e9:ea:e6:cd:4b:f7:
         b2:80:5d:85:ad:6d:78:c3:ea:33:70:63:73:1b:30:e8:99:9e:
         ce:59:b0:e5:69:2f:63:c9:96:c5:a7:a9:3e:22:9f:bd:a9:81:
         a1:c0:00:d3:c8:48:38:d2:0f:2b:5d:7d:20:01:75:0a:bd:40:
         b9:5c:2e:3a:9d:3d:c8:72:1e:3e:9e:49:ea:2a:8c:67:1a:d5:
         5e:08:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org