Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e37352e36342e302f31392d3139203d3e203133343839.roa
File:                     3230302e37352e36342e302f31392d3139203d3e203133343839.roa (raw, json)
Hash identifier:          fPQDPONEt4AFgq3FEa2Dgdj5NB4bdtsx2oqQeK/7nV4=
Subject key identifier:   29:B6:8D:08:4C:4A:EF:95:F3:A3:B5:4D:98:1F:2B:A2:01:EC:C7:FA
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       7A1D85671436DF70FE8BF9DA66C4605EC1AC9686
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e37352e36342e302f31392d3139203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:07:02 +0000
ROA not before:           Tue 05 Mar 2024 18:02:02 +0000
ROA not after:            Tue 04 Mar 2025 18:07:02 +0000
asID:                     13489
IP address blocks:        200.75.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1d:85:67:14:36:df:70:fe:8b:f9:da:66:c4:60:5e:c1:ac:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:02:02 2024 GMT
            Not After : Mar  4 18:07:02 2025 GMT
        Subject: CN=29B68D084C4AEF95F3A3B54D981F2BA201ECC7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:3a:2c:a9:cf:5d:3a:b6:fe:f0:b6:96:45:
                    d5:b1:99:e7:7e:f9:37:e6:3e:60:a1:9b:cd:5e:3b:
                    96:a1:a2:3b:4a:c5:0b:8f:99:8d:cf:19:e6:5f:d2:
                    92:37:bb:fc:3b:f2:70:26:c6:5b:fa:81:95:01:d1:
                    78:98:88:30:1d:59:35:b0:ed:5e:f0:b9:44:50:d0:
                    2f:d9:88:88:99:a0:92:fd:b1:db:c4:29:12:e4:70:
                    9e:38:51:27:3d:6f:7e:de:a0:89:39:f7:60:93:26:
                    0d:de:cc:cf:b5:a1:b1:5d:2f:11:57:9d:10:f2:47:
                    bf:a1:b0:9f:45:e1:4e:43:b0:c3:01:ba:26:ac:61:
                    30:3f:74:9a:f0:c4:c7:e6:24:df:d8:2a:c5:bf:f9:
                    18:f8:4f:d4:f5:f7:bc:bb:74:11:ec:1d:87:5c:30:
                    91:6a:08:7b:42:b4:e6:e4:f3:e6:a4:9e:8f:40:93:
                    87:b8:c9:d6:94:61:64:94:e6:6b:2a:5a:ef:98:90:
                    57:cf:3e:b4:20:33:b7:b1:30:fc:21:9e:65:00:14:
                    69:11:b2:66:89:16:57:c0:b3:cb:4a:a0:b2:10:58:
                    96:52:de:f7:1b:ff:6c:d1:3f:9d:d1:a2:ba:1c:3f:
                    94:cb:b8:dc:28:3c:8d:4b:f6:52:35:f8:19:91:c8:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:8D:08:4C:4A:EF:95:F3:A3:B5:4D:98:1F:2B:A2:01:EC:C7:FA
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e37352e36342e302f31392d3139203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:c1:32:bb:33:17:fa:49:2d:61:3a:0e:50:61:a9:cb:b8:
         9b:6f:36:01:92:2e:6f:bf:d8:1a:47:fa:21:9b:6a:76:83:b5:
         99:82:dd:8e:ef:d6:03:71:53:a5:c0:72:b7:33:08:2d:2d:b6:
         68:9e:de:e9:05:db:9c:39:ee:1f:ca:90:04:7b:56:7a:c0:c0:
         dc:3c:5c:e6:86:02:75:b9:84:16:a0:23:a6:88:ff:c7:82:fd:
         61:f8:1d:27:ac:94:0d:22:16:c3:23:95:22:28:b0:2f:e0:da:
         3b:9c:27:74:38:45:ef:b6:34:29:84:06:e4:b4:e2:6b:4a:f1:
         f2:9e:c6:2e:de:44:1a:ee:42:29:33:ec:46:bc:2a:c8:6a:2d:
         9c:20:04:22:1d:7e:68:9b:38:e1:67:4f:d6:03:36:8e:a9:de:
         6f:f7:0d:51:41:8d:f3:50:79:d7:48:a0:bf:1f:df:01:7b:3e:
         a5:c3:ac:3f:da:f1:43:b4:99:c9:d6:b5:f8:14:8a:84:46:48:
         e6:95:b0:71:d6:39:7b:cc:f3:99:fd:c5:33:41:3f:89:da:00:
         81:b6:15:67:f2:d8:e7:e9:62:08:79:3e:23:9d:f3:09:f9:c0:
         be:64:45:88:90:e7:64:41:78:1e:54:6d:50:45:11:a0:2a:6e:
         15:ac:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org