Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa
File:                     3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa (raw, json)
Hash identifier:          7TGuNOIgjhbiaQX5QZGBOYVAgf0ijPDDAlOIaLZIfTU=
Subject key identifier:   0A:6F:CA:5E:05:58:7B:79:40:5E:A3:59:81:92:D4:67:B3:43:2F:8A
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       77927C602FF734C4BC091C85DFA2A9E2FD6D3263
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:51:22 +0000
ROA not before:           Tue 05 Mar 2024 17:46:22 +0000
ROA not after:            Tue 04 Mar 2025 17:51:22 +0000
asID:                     28007
IP address blocks:        200.125.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 09:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:92:7c:60:2f:f7:34:c4:bc:09:1c:85:df:a2:a9:e2:fd:6d:32:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:22 2024 GMT
            Not After : Mar  4 17:51:22 2025 GMT
        Subject: CN=0A6FCA5E05587B79405EA3598192D467B3432F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:6d:6d:c2:87:37:ca:42:a5:a1:41:7c:61:
                    1d:bc:78:1c:d7:5f:43:5d:54:d0:62:2c:44:16:8b:
                    90:39:2b:c8:c8:38:ab:74:38:81:5e:70:12:a2:14:
                    01:e1:e7:77:9f:47:c1:a7:ac:48:20:80:47:1a:3a:
                    59:ba:17:a4:7d:e6:37:c5:e0:9d:69:40:f1:94:e4:
                    1f:ca:55:e5:82:b0:1a:58:cf:0c:fd:91:dd:c4:95:
                    70:c3:ce:d1:d9:9f:d1:23:c5:45:16:92:ba:2b:b8:
                    5b:97:62:f6:f5:2b:db:67:8f:76:30:81:f0:56:c6:
                    5e:1e:39:e9:54:54:66:72:12:59:51:22:3e:72:67:
                    74:08:47:32:a0:dc:36:18:4f:13:46:32:4c:ed:22:
                    43:65:e4:99:3c:f3:3f:bc:e5:4d:81:4a:68:90:45:
                    d0:d5:06:d1:01:b7:3b:bd:fa:d6:64:44:d8:40:69:
                    2c:2a:1e:20:6f:9d:61:68:1f:aa:ee:d7:55:84:5a:
                    e1:92:45:d7:89:8f:e8:f9:18:b0:24:e5:4f:04:40:
                    02:a6:11:19:a9:eb:86:7f:81:fb:11:6b:fa:df:6b:
                    f9:e3:31:04:cf:11:b4:2e:06:8a:20:aa:4f:c1:04:
                    d9:eb:c9:a5:e7:c1:cd:6b:6b:a8:6f:3f:7f:5a:4d:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:CA:5E:05:58:7B:79:40:5E:A3:59:81:92:D4:67:B3:43:2F:8A
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:49:2f:5e:45:87:81:16:75:d5:d1:9d:4b:ee:c2:31:20:
         18:66:a8:a5:0a:19:79:63:ce:d6:51:9d:0a:64:d9:43:98:eb:
         8b:12:23:2c:a9:42:ff:c8:cf:42:f9:ae:10:95:5e:ea:6b:e2:
         d8:5f:2b:5c:3a:60:fc:b2:dc:17:5d:25:0a:81:a9:26:fb:d9:
         97:bf:21:b0:b8:c6:27:4c:ff:59:90:32:02:d3:04:08:d0:44:
         6b:57:b9:89:0b:7a:46:f4:0e:1a:97:12:24:b5:8f:4d:e9:82:
         1a:17:c7:a4:c3:df:6c:38:9c:b6:1a:77:81:06:89:70:ae:3a:
         dd:0a:a5:e1:aa:fd:1a:cf:8a:e7:ad:ef:c3:0c:c6:24:d4:1a:
         a0:fc:c1:cc:73:9b:9d:e6:ca:ed:a1:7c:4f:13:a7:7a:ef:3f:
         f2:d8:00:4b:99:50:f0:0f:4e:35:99:43:ce:d1:39:db:0b:96:
         7c:c0:65:81:29:02:09:4d:32:15:62:21:8e:0f:f1:29:34:98:
         54:84:43:d9:b7:c4:3d:42:f3:9f:94:3f:4a:77:88:6a:75:5c:
         a1:c8:c8:f6:5d:08:36:b1:7d:48:30:e8:fd:15:16:82:9e:0a:
         5b:b8:b0:39:a4:4f:95:21:ea:16:d9:b2:7f:9e:c4:a7:0a:55:
         17:e5:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:13 2024 by rpki-client on console-fra.rpki-client.org