Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
File:                     3230302e38312e3132302e302f32312d3234203d3e203237383133.roa (raw, json)
Hash identifier:          5JdmxRrwS6z7iZ/0wMBdakFUvP2gHY9BAyMupgHr8c4=
Subject key identifier:   0C:FD:60:B2:01:E5:10:19:F2:29:3F:96:3B:04:14:E8:4E:F2:C3:9B
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       47AA33226CBF183030C44EB5F8D69383A24D66B9
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
Signing time:             Tue 05 Mar 2024 18:12:26 +0000
ROA not before:           Tue 05 Mar 2024 18:07:26 +0000
ROA not after:            Tue 04 Mar 2025 18:12:26 +0000
asID:                     27813
IP address blocks:        200.81.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:33:22:6c:bf:18:30:30:c4:4e:b5:f8:d6:93:83:a2:4d:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Mar  5 18:07:26 2024 GMT
            Not After : Mar  4 18:12:26 2025 GMT
        Subject: CN=0CFD60B201E51019F2293F963B0414E84EF2C39B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:a3:a9:a7:36:c2:14:64:57:06:53:9a:4f:
                    93:3b:af:fd:bf:12:d3:18:f5:b9:c3:84:5b:57:b9:
                    bc:04:cd:b6:1e:d2:14:c8:b7:87:4c:48:fa:0d:28:
                    30:e6:a7:4b:99:00:00:16:38:74:b8:23:37:32:9c:
                    67:76:98:50:a2:15:3b:33:e3:1f:0e:5a:42:fe:37:
                    69:7c:25:b7:a1:3c:9c:a2:2a:df:03:a8:38:d2:43:
                    a9:06:59:db:19:8f:61:a0:cd:d2:51:50:36:95:c4:
                    05:96:34:73:23:51:ae:03:45:b1:ba:1b:bc:a5:5a:
                    24:8c:ba:4e:59:1b:f5:8a:2c:02:2b:7a:c4:c5:13:
                    a5:c0:ba:1a:28:84:39:44:7c:9c:b6:62:28:d2:ea:
                    31:b6:3a:32:e7:4d:0a:e6:77:30:5a:d0:cb:54:56:
                    a2:5a:bf:f1:12:47:04:72:86:f4:e5:7b:f1:38:55:
                    44:88:47:ef:a3:cf:d8:f6:c7:ec:0b:31:a9:c2:f9:
                    89:11:df:ed:3a:53:71:f8:73:94:5e:77:e3:b6:c7:
                    50:81:a1:3a:cb:2d:66:13:81:37:9e:e5:f5:f7:1e:
                    8a:e9:99:ad:0a:cb:94:3c:69:57:30:b2:c8:07:01:
                    84:fe:87:a4:c3:bb:dd:94:f9:0e:6c:be:b5:da:9c:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:60:B2:01:E5:10:19:F2:29:3F:96:3B:04:14:E8:4E:F2:C3:9B
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:61:b9:61:e4:11:eb:ce:98:18:e8:62:a6:e0:91:cb:6e:
         58:b6:33:ee:b8:a5:2b:a1:cb:a1:b4:08:b6:eb:cb:c4:43:c2:
         e4:ca:32:b8:50:2e:30:69:29:b0:81:97:ee:77:e3:43:6e:26:
         45:9d:03:93:b4:2f:84:91:11:e9:47:57:d9:ec:7f:01:b6:09:
         f4:89:88:db:fe:63:20:92:5c:0b:c7:98:6e:1c:6d:0f:ed:70:
         e2:66:40:cd:08:b6:8d:6c:9f:7a:6e:47:58:bc:0a:28:74:74:
         f6:47:a8:68:40:69:4d:74:5d:a5:c2:55:b8:38:3d:25:a4:24:
         91:44:67:6c:8d:a1:c0:f8:35:f7:d2:f7:67:e3:22:0e:54:e2:
         52:51:1e:5c:4f:4a:93:5a:df:f1:aa:b7:fd:aa:e7:20:6f:e9:
         77:06:d1:07:59:23:12:7d:9f:da:19:49:6f:77:f9:d2:c5:0c:
         e8:66:5d:11:70:68:66:a9:44:df:19:d8:27:52:7f:d0:ed:15:
         76:75:7d:01:e9:56:a7:ac:6e:8b:21:ff:ca:3c:5b:66:69:f5:
         09:dc:5e:d9:c1:96:be:a0:a9:d9:22:29:85:2f:e1:ee:b4:83:
         14:0c:65:83:84:dd:db:88:3e:c5:1b:58:1c:bf:ce:86:30:7f:
         2c:53:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org