Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
File:                     3230302e3130372e38342e302f32322d3232203d3e203237363934.roa (raw, json)
Hash identifier:          C7TP0QqziNQZodb3r9nCpuXM5aedg9+Tu1X738REcWo=
Subject key identifier:   2C:92:B9:A6:7B:39:BB:B6:69:0D:A6:65:07:1B:B0:BE:7B:FD:1B:FF
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       699243E8E7BD8EF4FD1A73F0986D2F1098C98569
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa
Signing time:             Tue 05 Mar 2024 17:51:20 +0000
ROA not before:           Tue 05 Mar 2024 17:46:20 +0000
ROA not after:            Tue 04 Mar 2025 17:51:20 +0000
asID:                     27694
IP address blocks:        200.107.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:92:43:e8:e7:bd:8e:f4:fd:1a:73:f0:98:6d:2f:10:98:c9:85:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Mar  5 17:46:20 2024 GMT
            Not After : Mar  4 17:51:20 2025 GMT
        Subject: CN=2C92B9A67B39BBB6690DA665071BB0BE7BFD1BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:71:4b:e3:21:53:b4:ff:06:19:8b:f6:d8:
                    65:65:ce:8a:bf:f4:49:cc:98:b4:ff:04:e1:fb:ed:
                    2a:e9:d0:ac:1f:b7:89:5f:40:b6:08:54:07:86:e2:
                    e4:30:29:18:47:91:07:34:70:ae:30:2c:05:76:27:
                    70:b7:23:0e:9a:db:1d:6f:11:b5:c2:98:e1:85:a1:
                    6f:71:bc:c5:d9:cb:b0:03:65:63:f6:9d:1e:09:9b:
                    a0:a4:c7:d3:b3:2f:32:c8:a0:18:d7:b1:20:e5:c0:
                    99:e8:fc:43:20:b3:04:3d:9b:59:9b:1b:a9:9a:33:
                    f2:bd:fa:4e:25:6a:50:45:a5:f2:cc:21:20:92:44:
                    16:25:bf:f8:f9:b3:1b:c5:d4:6d:e0:13:17:e0:e4:
                    a5:36:e0:aa:52:10:ef:8e:53:0d:1d:2d:18:c6:49:
                    49:a3:36:2c:6e:3d:4e:6c:5d:59:fd:ce:59:0c:21:
                    ba:79:e4:b5:ae:eb:fa:8b:fb:72:d3:54:4f:af:07:
                    48:3f:b8:59:c5:86:77:8e:00:38:b8:44:ee:c1:49:
                    ef:1d:55:d4:8a:02:6e:5f:32:34:4d:9b:bd:e2:c9:
                    05:53:44:60:94:93:79:c1:0e:af:d6:50:ee:8d:b4:
                    96:32:4e:d6:c0:73:56:0d:c6:eb:b1:44:32:6d:a5:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:B9:A6:7B:39:BB:B6:69:0D:A6:65:07:1B:B0:BE:7B:FD:1B:FF
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e3130372e38342e302f32322d3232203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:bf:b3:99:09:13:f1:35:1b:14:a1:ab:4d:82:f8:c9:cd:
         eb:fd:a2:c4:0f:81:df:12:d3:eb:92:db:ef:b9:bd:8a:0c:08:
         9e:40:51:3b:5d:bc:40:73:a9:88:59:1a:81:66:58:13:2f:87:
         69:24:8f:66:32:ae:13:21:ec:aa:f1:7b:40:ac:8a:26:6a:84:
         be:52:0c:73:9e:0b:b3:e6:93:c2:df:3e:63:ba:44:1d:58:ec:
         3f:aa:94:3c:78:8f:e2:d4:ba:6c:d7:84:8b:f2:86:da:4c:47:
         3c:32:8e:72:61:5f:ca:62:84:51:40:92:90:d0:2d:c1:3d:06:
         b9:a0:9d:75:f9:29:43:57:98:a0:e9:f5:da:e7:9b:fb:10:1c:
         8a:86:0d:b3:8e:33:ef:fe:12:af:3e:51:5a:41:68:30:37:fe:
         dd:b2:25:78:a6:08:12:b5:99:dd:fb:2b:60:b1:2b:2d:96:b9:
         71:09:c4:2a:79:90:7d:91:94:88:17:d9:26:49:b9:d8:c9:0b:
         d4:a5:9b:26:46:cc:46:df:26:a7:56:d4:4a:ce:30:d2:42:73:
         57:56:42:af:cd:80:86:f7:9e:92:82:62:3f:19:34:52:31:6b:
         a8:f8:e1:d7:b9:be:0d:98:e4:05:7f:94:81:58:d8:ed:90:a8:
         e0:55:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:01 2024 by rpki-client on console-ams.rpki-client.org