Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e35382e302f32342d3234203d3e203135333131.roa
File:                     3230302e36382e35382e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          HPlUoKStamdrF8fJVTpsv+m4GBMTeLLfHHWmF185AKU=
Subject key identifier:   10:15:20:6F:E3:81:D8:09:58:0C:20:A3:78:54:9B:ED:DA:97:96:65
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       656761BAFEE237999BAD1190C7CB43122A3C3715
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e35382e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:51 +0000
ROA not before:           Tue 05 Mar 2024 17:46:51 +0000
ROA not after:            Tue 04 Mar 2025 17:51:51 +0000
asID:                     15311
IP address blocks:        200.68.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:61:ba:fe:e2:37:99:9b:ad:11:90:c7:cb:43:12:2a:3c:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:51 2024 GMT
            Not After : Mar  4 17:51:51 2025 GMT
        Subject: CN=1015206FE381D809580C20A378549BEDDA979665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:a1:49:13:d2:f1:c5:b4:94:ad:26:67:c6:
                    39:f9:2f:71:16:7c:c3:39:e1:d9:4f:72:b7:87:5f:
                    da:74:82:a7:e5:91:71:7c:10:30:07:ea:e2:80:71:
                    3b:3c:46:d8:2d:c4:a0:e5:d5:96:f5:2c:2f:e4:40:
                    e2:d6:af:f6:a8:4e:d9:77:e1:c5:a0:9c:08:4d:fd:
                    04:15:02:3c:47:9a:e7:84:d5:d0:61:b8:61:2f:7f:
                    23:a5:dd:34:2e:0d:c4:22:b8:13:e2:0a:b4:12:ac:
                    34:b7:a4:26:1a:85:6b:a6:33:64:6c:9e:30:6f:81:
                    cf:62:97:86:a9:22:76:0c:cb:ab:83:af:4a:d3:0d:
                    cf:ad:80:d4:30:92:4d:7f:34:d9:04:7d:8a:08:72:
                    28:ce:a7:76:95:2a:dc:7f:cc:01:44:b4:d2:e2:10:
                    d5:d3:be:7e:a8:3b:88:d5:f7:be:36:2f:08:e7:f4:
                    f4:11:62:11:20:a8:c1:d8:80:88:15:49:df:6a:15:
                    2e:99:c8:ed:98:25:fc:b8:da:39:82:96:43:4a:47:
                    ba:97:c9:33:24:ed:21:83:9f:7f:9b:84:37:29:b4:
                    b1:7f:79:56:72:62:2b:56:3c:a2:1f:d3:be:00:8a:
                    e4:48:e7:8e:55:44:87:f3:a0:28:54:ae:02:ed:45:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:20:6F:E3:81:D8:09:58:0C:20:A3:78:54:9B:ED:DA:97:96:65
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e35382e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:6e:a7:8e:63:d2:74:1e:ea:9f:8c:3f:8d:35:b1:9b:45:
         d1:ae:29:8e:45:a1:34:b3:8a:f0:f2:f6:68:08:dd:c9:04:fa:
         58:ad:05:92:6c:a8:e4:61:25:b0:d8:d9:10:07:11:5b:1a:0b:
         92:65:73:c7:81:b6:a4:e8:b6:c4:61:6b:87:e9:eb:8f:6c:77:
         bf:16:f9:f1:62:d5:82:a4:16:43:ce:af:8c:46:67:f8:45:01:
         8c:11:61:73:d5:23:78:e5:8f:db:9e:09:98:be:21:cb:e5:7d:
         bb:ce:7f:7b:94:10:55:61:81:30:1c:f7:e6:9c:db:8f:ff:6b:
         36:75:38:57:9e:3c:b6:2f:20:46:fd:73:1b:f7:da:83:7b:44:
         72:65:ea:f6:4f:5f:b9:ff:8d:df:f7:7d:5a:00:81:c5:4e:83:
         ba:9e:2c:fc:07:5f:e0:cc:c3:17:02:e4:a0:4f:26:d1:2e:8b:
         23:76:3a:9e:4d:b5:d2:16:da:4b:65:7b:e5:d2:52:82:44:92:
         d8:2a:b0:d4:52:01:3e:e3:c4:f9:d0:3a:5d:43:53:ed:0a:a1:
         31:4b:52:2b:d1:8e:0c:c5:9f:4a:0f:9a:f2:2e:31:72:76:e0:
         60:27:ac:3d:d2:be:bf:f3:74:e8:b9:9d:ec:fc:f4:f8:aa:a5:
         45:2b:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org