Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31362e302f32302d3234203d3e203138373334.roa
File:                     3230302e35372e31362e302f32302d3234203d3e203138373334.roa (raw, json)
Hash identifier:          tIB8QeTTiQrGYnpnIDwSO20OdmUpgO+kTJqKUXoQKBo=
Subject key identifier:   F9:F9:F4:6B:D0:C1:2E:26:C9:EA:2C:5F:57:04:F6:EB:33:46:92:6A
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       35D0294193BF7521162C32A3B628F138BBD3C496
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31362e302f32302d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:42 +0000
ROA not before:           Tue 05 Mar 2024 17:45:42 +0000
ROA not after:            Tue 04 Mar 2025 17:50:42 +0000
asID:                     18734
IP address blocks:        200.57.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:29:41:93:bf:75:21:16:2c:32:a3:b6:28:f1:38:bb:d3:c4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:42 2024 GMT
            Not After : Mar  4 17:50:42 2025 GMT
        Subject: CN=F9F9F46BD0C12E26C9EA2C5F5704F6EB3346926A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:05:2e:14:0b:84:88:ef:3c:e6:af:a2:c5:
                    59:9b:87:3f:98:82:36:2d:ae:9c:fa:86:b2:d8:be:
                    80:a2:40:23:b0:24:c1:fb:f1:44:a9:b2:ac:d5:97:
                    6b:29:c8:b9:9f:0e:ac:da:93:07:62:d0:b1:f4:e4:
                    2a:45:1f:81:8f:fb:18:71:2a:9e:e8:0c:8a:c4:5e:
                    b0:02:b2:77:3c:ce:1e:6d:57:6d:c5:7b:64:fc:da:
                    5b:88:d2:b7:ab:9b:ec:d5:4b:77:df:16:dc:d8:bc:
                    d6:88:2a:4d:b4:7f:ea:d8:9d:31:d4:31:e3:12:01:
                    03:fe:fd:f4:77:3d:41:a1:50:1d:b7:1e:2b:57:ca:
                    94:30:03:e5:52:24:47:06:e7:31:98:37:6d:6f:dc:
                    cf:f8:a6:88:06:a5:83:b9:a9:91:6a:d2:e3:d8:1b:
                    3d:2e:83:be:87:59:f2:c8:3f:ea:63:ba:cd:ad:80:
                    8e:60:b6:0e:df:01:d7:80:42:ea:18:17:c6:fb:7f:
                    97:f0:6a:4b:e9:33:cb:be:26:64:55:53:5a:03:19:
                    ac:fa:59:c9:0a:01:d2:3e:d1:6d:f7:a3:10:4d:af:
                    7e:a0:e1:7f:a4:b3:56:42:41:d8:4e:4c:43:5a:d8:
                    49:27:71:f0:8b:51:f0:c5:8c:2e:f3:ed:f3:35:eb:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F9:F4:6B:D0:C1:2E:26:C9:EA:2C:5F:57:04:F6:EB:33:46:92:6A
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31362e302f32302d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:af:8e:86:3e:74:1d:9d:b2:bf:1c:7b:9f:91:43:2a:3d:18:
         5f:67:59:77:34:6c:25:64:ed:f6:da:c4:3f:04:f2:fd:83:d1:
         5d:2e:f4:67:50:f5:1a:1f:1e:3d:c3:37:f2:89:68:3d:c8:60:
         b8:f2:e1:f8:af:fe:4a:6d:82:f9:02:fe:94:ad:b2:91:22:eb:
         ac:2f:19:5b:ce:fd:8f:d7:f5:79:69:a7:03:0d:cc:d5:9f:d1:
         7f:25:09:ff:29:89:14:7f:00:5a:93:f8:57:70:8f:d3:a5:c3:
         7c:ab:6e:0e:3c:cd:d9:e7:ad:ae:00:9e:85:82:8d:c8:0a:d5:
         81:7c:7f:ff:5d:bf:26:bf:5d:df:7e:7c:b1:95:6a:f0:35:a3:
         07:79:27:7f:c0:9f:bb:59:81:4a:a7:66:a9:b0:06:0b:ce:36:
         44:2d:d3:c2:18:31:fe:ab:35:74:4d:ac:3f:c4:db:55:28:72:
         eb:5a:7d:d7:bb:df:77:b3:9b:bb:79:c0:c2:11:c9:dd:d0:3c:
         ac:68:0b:b8:78:f1:47:0f:c7:84:62:cc:48:4f:52:30:78:f8:
         e6:30:75:63:64:c2:87:61:57:08:07:b1:bc:71:77:0f:2d:ca:
         d6:3b:49:98:17:34:aa:3b:59:63:62:a4:fa:73:65:08:02:f3:
         fc:08:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org