Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa
File:                     3230302e37312e3234382e302f32312d3231203d3e203237363934.roa (raw, json)
Hash identifier:          xytC75m3p8rh91XYNF6KE3z4z9ToPKlQzAYvftFTxP4=
Subject key identifier:   7A:0F:1B:AF:6C:74:C8:08:11:31:4D:F4:A9:73:74:61:2C:7A:53:B1
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       1A7137DA860E4F114D8CD03F46AE51EAEDC2D215
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa
Signing time:             Tue 05 Mar 2024 17:51:21 +0000
ROA not before:           Tue 05 Mar 2024 17:46:21 +0000
ROA not after:            Tue 04 Mar 2025 17:51:21 +0000
asID:                     27694
IP address blocks:        200.71.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:37:da:86:0e:4f:11:4d:8c:d0:3f:46:ae:51:ea:ed:c2:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Mar  5 17:46:21 2024 GMT
            Not After : Mar  4 17:51:21 2025 GMT
        Subject: CN=7A0F1BAF6C74C80811314DF4A97374612C7A53B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:b5:40:3a:b4:76:31:d4:d3:62:b4:94:50:
                    57:7e:0f:55:12:5f:3f:a0:c1:8f:66:ae:27:aa:51:
                    be:b7:de:f4:da:10:5f:32:de:3f:24:b0:88:7b:da:
                    32:a8:dd:cc:bd:84:fe:a9:4a:be:22:ac:eb:16:f5:
                    10:1a:cd:56:06:a2:a4:9e:7a:0f:f1:2e:bc:09:57:
                    c9:5e:cf:77:99:d1:15:d0:7e:5b:36:9c:40:1f:76:
                    ae:97:2f:df:c7:5e:f2:e2:b8:fc:9f:0f:ff:4d:38:
                    62:08:22:84:9c:89:b4:cd:6d:ff:01:53:56:f3:44:
                    e5:1b:d7:49:08:fe:22:c9:5a:31:57:4f:a9:39:f3:
                    ce:81:a9:03:db:9a:77:37:d2:96:03:6b:bb:d4:0b:
                    15:fe:39:62:d7:67:84:2e:08:4f:e4:84:d4:43:8a:
                    f4:26:6d:8c:c2:df:67:dc:2b:43:15:3e:1d:7b:66:
                    1b:48:37:0f:56:a3:f3:61:b3:59:89:5e:8b:8c:27:
                    eb:91:62:36:8e:83:58:9b:96:dc:0e:d9:8a:d2:50:
                    a6:25:aa:24:f6:1f:b4:96:27:a3:3b:ba:72:b0:ce:
                    65:1d:d5:8a:a8:31:7c:71:72:2d:09:51:e4:bf:da:
                    ed:80:91:37:07:ca:3c:e1:2f:15:7c:8c:78:ad:95:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:1B:AF:6C:74:C8:08:11:31:4D:F4:A9:73:74:61:2C:7A:53:B1
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3231203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:13:32:5f:fc:60:b3:61:82:05:e9:dd:af:bd:1e:f8:a9:b1:
         0e:3a:7f:5b:62:d2:e8:ed:e5:71:e2:47:e8:f2:1a:20:cf:11:
         a9:ac:b9:30:d6:e9:84:08:33:dd:79:44:b1:33:84:8d:17:b8:
         8f:4f:a0:91:11:3a:2e:49:7c:33:7e:36:25:de:63:00:50:36:
         b1:bb:55:d3:f0:76:bb:03:53:d8:05:3b:63:3e:01:a9:70:f1:
         28:ca:61:1a:67:18:8b:50:b3:b7:f9:6a:b6:12:22:1a:bb:e2:
         30:3a:b5:c3:92:05:f2:a3:59:11:9a:85:f4:c5:82:c7:c5:32:
         96:03:1f:33:dc:21:4b:5f:9c:d8:3e:5f:ef:00:12:ce:ae:6c:
         a0:cf:5d:11:aa:70:6b:78:91:fc:2b:29:c5:e5:82:34:d1:11:
         d6:e0:fe:0d:62:c6:94:b2:1e:f5:d6:2b:b2:1a:43:27:8a:17:
         31:22:e6:bb:6a:f9:44:ec:15:8c:3d:de:31:76:f2:f2:6a:23:
         46:e9:02:40:36:04:05:dc:05:b8:c7:b4:51:9b:3b:e1:4a:6c:
         d6:c6:b3:32:a8:04:a2:67:1b:72:f6:21:d6:dd:9a:95:3e:6f:
         37:78:d9:f9:ae:7b:90:e4:76:fc:24:23:6f:3b:60:7f:0b:a6:
         52:87:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:01 2024 by rpki-client on console-ams.rpki-client.org