Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e36302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          lrMm0HldoiahOXJ7kvMEa4phfGhZ1mwo6pBwwlO1OzU=
Subject key identifier:   BA:D9:56:BA:63:E2:48:EA:5D:00:EC:0D:9D:61:B1:04:39:5A:6E:39
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       6E54A31FAA8F4EFB513E7E3CA3AA4188146EEA44
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:57 +0000
ROA not before:           Tue 05 Mar 2024 18:15:57 +0000
ROA not after:            Tue 04 Mar 2025 18:20:57 +0000
asID:                     6147
IP address blocks:        200.60.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:54:a3:1f:aa:8f:4e:fb:51:3e:7e:3c:a3:aa:41:88:14:6e:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:57 2024 GMT
            Not After : Mar  4 18:20:57 2025 GMT
        Subject: CN=BAD956BA63E248EA5D00EC0D9D61B104395A6E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:f1:8a:d7:9c:a2:0e:13:86:03:d7:b2:46:
                    12:a2:5c:4a:fa:b4:a5:66:8f:37:f2:f8:52:f0:33:
                    62:2b:73:a4:d7:d2:d5:34:14:b9:21:bc:0a:71:24:
                    05:ea:05:28:10:8c:9f:a3:14:b2:84:e3:db:e4:3c:
                    76:11:2a:df:e4:fd:68:f6:02:46:e1:6b:ea:a7:e7:
                    d4:e3:0f:e8:db:93:47:98:52:e7:3c:fb:44:50:13:
                    ab:a3:87:e0:94:da:f9:1e:74:66:ef:49:14:3c:c9:
                    03:d0:61:e9:34:d5:4f:11:b4:d2:8f:1e:8c:95:0c:
                    3e:fe:f5:cc:63:de:a9:75:54:0d:75:ea:a6:63:d6:
                    5b:7f:d7:e4:8e:b9:1f:97:29:5a:7c:34:bd:00:0d:
                    63:70:03:7a:7a:cc:e6:db:4b:8a:1b:7e:b9:34:77:
                    a7:eb:b9:24:b9:1b:6c:50:3a:5f:cb:37:65:c3:20:
                    3e:4b:b7:19:1f:6e:06:2b:9c:81:0b:0f:67:3c:6c:
                    93:bc:28:7a:f2:c7:c4:5a:f3:8b:6a:cf:e9:a7:70:
                    b9:69:b7:8b:d8:dc:a8:bd:73:f9:e5:f7:b6:bf:69:
                    29:59:15:d7:7c:73:60:36:77:37:01:16:c9:1a:fc:
                    9a:a7:b2:f8:c6:dc:40:83:bc:4a:58:19:9e:ad:6e:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D9:56:BA:63:E2:48:EA:5D:00:EC:0D:9D:61:B1:04:39:5A:6E:39
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:21:c1:3b:4b:0c:92:fb:5b:ca:3d:a4:6d:34:20:9f:7b:
         48:fd:67:05:69:78:22:04:b6:e1:4f:5e:6c:a9:88:2d:58:68:
         37:ca:3a:0f:3f:fc:5f:c8:b9:54:f1:1e:f1:20:44:74:75:0c:
         15:b5:2c:3f:fb:d1:1c:be:8f:f0:26:48:f5:87:38:1f:6b:d6:
         47:42:d1:3b:7e:b1:db:23:14:69:2a:5a:59:9e:13:52:ac:69:
         c0:99:27:16:fb:6c:fc:c9:df:67:1f:2c:ea:c9:c8:9d:36:14:
         62:62:30:58:f2:f1:46:b4:34:91:2c:c2:43:ac:5b:25:9d:91:
         40:43:49:42:47:0d:fd:72:40:05:8f:85:b7:04:16:e1:9b:a4:
         e9:dc:5a:fe:d1:83:04:d2:81:14:35:09:b8:99:56:0a:51:a2:
         68:aa:76:bb:8d:bd:48:9d:38:8e:35:01:4d:4b:7a:7e:39:bd:
         cd:8e:8a:be:de:b8:2b:5c:f4:c4:1a:67:a3:c1:d8:0e:b5:63:
         64:0e:ee:30:b9:23:d6:71:2f:04:e8:ab:51:b0:9d:3b:20:f8:
         bf:36:83:97:60:75:76:be:c1:a4:04:3e:31:72:c7:95:07:c8:
         98:51:37:ab:b8:8e:dc:02:b4:d2:7e:77:11:c1:15:17:77:17:
         f7:5f:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org