Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa
File:                     3230302e36382e312e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          p/ByzLEg88nScql294QLbeYhf4FciLGNdmtKinutf/Q=
Subject key identifier:   DC:64:68:CE:1A:02:C8:6C:A5:40:5B:2E:6B:63:76:A3:C2:1A:56:EA
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       170C702540B8594B771F1B10950E4C1CDB2E30
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:45 +0000
ROA not before:           Tue 05 Mar 2024 17:46:45 +0000
ROA not after:            Tue 04 Mar 2025 17:51:45 +0000
asID:                     15311
IP address blocks:        200.68.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0c:70:25:40:b8:59:4b:77:1f:1b:10:95:0e:4c:1c:db:2e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:45 2024 GMT
            Not After : Mar  4 17:51:45 2025 GMT
        Subject: CN=DC6468CE1A02C86CA5405B2E6B6376A3C21A56EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:21:32:8d:80:f7:c3:75:21:87:e4:03:78:
                    ac:b1:72:99:bd:6c:2b:af:9a:f3:e2:0a:a0:d7:17:
                    91:de:ef:08:4a:81:51:df:50:1f:2a:8e:f5:f9:09:
                    09:4a:a6:86:ec:22:f4:28:ad:1f:98:59:ba:11:29:
                    c9:22:ae:d6:94:32:40:16:4d:23:c5:9d:3b:b6:6e:
                    35:fe:6d:ab:96:8d:dd:34:ad:5f:dc:14:ac:e2:d8:
                    6c:83:81:dc:c3:c0:f1:fa:92:84:32:e0:d5:b9:cd:
                    ca:09:b7:5c:4d:6b:63:ff:ba:23:f8:8d:8e:25:75:
                    ea:7c:da:3a:cd:47:29:ce:03:df:82:ea:55:44:a3:
                    04:9b:aa:5b:82:11:ec:82:36:8f:98:27:02:53:3b:
                    1a:24:18:53:84:af:cf:12:1e:8c:8a:d2:a0:07:29:
                    81:77:63:75:be:59:e4:1d:89:0e:12:f2:c3:1f:c0:
                    31:a8:c7:30:c7:9e:e9:28:9f:e4:ba:1c:fe:e6:ae:
                    b4:b7:05:bb:8e:6e:bb:45:64:25:af:af:4d:77:1b:
                    58:6b:61:3c:b7:f5:60:6b:82:ab:4c:30:a4:2d:78:
                    ea:b0:95:e8:be:8a:83:38:a9:65:7b:aa:e7:21:89:
                    2e:f3:50:dc:32:8c:1f:d9:cc:59:24:e2:81:b7:bd:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:68:CE:1A:02:C8:6C:A5:40:5B:2E:6B:63:76:A3:C2:1A:56:EA
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:b3:0b:47:80:a5:84:33:d3:92:f0:ca:bc:33:c4:3c:df:
         c7:ca:d5:61:b6:43:9c:bd:ee:a9:25:6f:d4:7f:cf:3a:9c:f2:
         ed:93:9b:48:d7:e1:3f:c1:e1:9b:e8:86:88:d1:88:39:a4:9c:
         9e:cd:4f:80:07:76:4e:b7:27:fd:77:9f:d6:c3:73:e3:83:06:
         92:a9:f3:0f:95:4c:01:70:62:04:c2:20:2b:52:41:28:19:02:
         c6:d1:8a:14:e7:ec:35:02:e1:e7:79:aa:85:12:60:ed:46:dc:
         d9:77:0a:39:43:6f:32:e0:51:ed:85:93:e2:a5:7f:38:cd:09:
         58:83:c7:3e:98:aa:8b:2f:90:f9:74:bb:ab:ed:bf:88:05:57:
         2e:28:ba:62:99:b4:8c:0c:c6:cf:89:da:6f:51:ca:22:cd:8e:
         f6:8e:1d:e6:fb:ca:56:54:31:dd:97:b9:4e:5f:66:bb:f9:2d:
         fe:3f:46:bf:77:93:dc:3e:c8:23:39:7e:5c:08:33:6b:9e:85:
         1d:bb:1c:c2:0c:f4:87:54:b0:4e:d9:6d:91:8f:22:8a:7c:3d:
         80:d7:d3:2b:27:f7:40:80:e0:32:fe:d0:11:16:e7:9c:45:f8:
         40:d9:58:3f:d0:69:89:a1:55:70:48:73:a0:4d:29:d9:d9:e0:
         cc:f9:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org