Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
File:                     3230302e35372e302e302f32302d3234203d3e203138373334.roa (raw, json)
Hash identifier:          xOLXo6Vpkwk7ziC4jZ6jKrcjn4i35aD9qKhWaLfN8do=
Subject key identifier:   5B:C5:8A:BE:71:87:F3:91:4E:02:8D:9D:B8:9B:CB:E1:E9:ED:3D:FC
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       0DF360221BFAA13417EDFA0EBCD0A5F3BC67DB4A
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:41 +0000
ROA not before:           Tue 05 Mar 2024 17:45:41 +0000
ROA not after:            Tue 04 Mar 2025 17:50:41 +0000
asID:                     18734
IP address blocks:        200.57.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f3:60:22:1b:fa:a1:34:17:ed:fa:0e:bc:d0:a5:f3:bc:67:db:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:41 2024 GMT
            Not After : Mar  4 17:50:41 2025 GMT
        Subject: CN=5BC58ABE7187F3914E028D9DB89BCBE1E9ED3DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:f4:e7:17:b7:ed:4c:1e:fe:e5:3a:03:f9:
                    3b:c3:fc:f3:ea:41:58:0d:88:ea:e4:e4:c2:c6:d6:
                    11:f9:3e:0c:43:4a:ef:77:cd:44:6b:fd:51:92:39:
                    a6:b6:02:da:38:ec:f9:58:a6:74:6c:f8:45:51:14:
                    f5:cc:1f:51:d7:1b:62:8d:cc:12:1f:0e:d5:e2:60:
                    e7:2e:72:9f:60:2b:3d:c3:cd:af:cd:5b:ff:71:c7:
                    97:2e:04:d7:5f:1b:10:01:83:92:67:36:02:d4:06:
                    0a:8e:56:36:d0:8d:24:f7:92:18:84:b6:1f:0a:78:
                    04:2a:4b:a7:40:0a:c0:b0:ff:91:42:ce:9a:07:1d:
                    93:f1:6a:91:d9:8b:e8:13:8e:10:c3:89:8c:59:db:
                    65:1d:ac:11:4a:c3:35:11:81:6f:87:c9:de:3a:d3:
                    04:54:e4:59:dc:38:13:49:6b:d1:3e:5a:20:30:d2:
                    8c:3b:ef:9f:2e:fc:4f:40:4e:36:b8:16:52:b6:30:
                    84:04:aa:92:31:3e:8d:ab:ce:47:9f:d1:bf:99:2f:
                    b9:dc:c7:08:c9:32:6f:80:2b:79:19:6b:c6:ba:4f:
                    14:85:b3:43:62:10:ba:25:9d:51:cf:68:f7:ee:93:
                    ae:4b:10:55:71:d6:ff:8e:a0:19:58:b8:f1:30:68:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:8A:BE:71:87:F3:91:4E:02:8D:9D:B8:9B:CB:E1:E9:ED:3D:FC
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:a4:bc:61:41:dd:81:a5:48:84:a5:c9:60:f6:9b:cc:bc:
         58:3e:51:64:b6:c4:73:54:f5:38:78:cf:54:b6:c1:a0:ac:8a:
         4d:e5:a7:7b:34:51:ff:b1:c2:03:70:60:d8:47:e1:0f:33:1f:
         b8:17:d3:78:f8:96:b3:b5:33:09:c1:c5:46:c6:e6:0a:36:4b:
         38:2f:ff:51:1f:a6:9e:b4:85:3b:e3:16:c0:66:26:34:29:12:
         b8:4c:c5:ec:25:1a:aa:d6:87:45:cf:ca:29:4b:e1:04:d5:fb:
         f0:f0:04:f7:bb:d2:c8:af:62:4f:69:5f:82:42:1f:7f:41:ce:
         d9:fe:83:75:dd:08:8a:d4:b9:f9:da:78:76:33:0e:fa:43:76:
         d2:9d:10:f3:b2:70:bd:35:cb:4d:d8:40:1d:82:e5:e0:7e:5a:
         76:f9:9a:63:f9:00:e2:7a:16:8e:e0:7d:c4:19:84:f3:bb:9e:
         f6:78:d2:7f:8c:29:88:82:4a:ec:4d:e8:6e:c3:a6:ce:a1:e8:
         c4:f2:06:31:50:19:cb:dc:b2:f9:e0:00:63:d6:f1:15:03:f6:
         41:41:e1:01:c0:f5:8c:1e:19:82:78:ee:80:3b:ba:9f:ff:ff:
         1c:c1:91:58:3e:df:ec:8b:b2:26:a2:3a:81:af:69:41:7a:e9:
         a6:a0:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org