Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3230302e36332e3130342e302f32322d3234203d3e20323633323338.roa
File:                     3230302e36332e3130342e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          Lp0UMcjznDNYsNkEjHHBeW4bT9KAmTAm3NYUJ6m9cYY=
Subject key identifier:   23:C0:EB:CA:18:3B:E8:7F:39:C5:2A:6F:FB:0C:06:C2:36:DC:DF:CA
Certificate issuer:       /CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
Certificate serial:       259A41470704DE4CFC9C0D2A2B631D8065510514
Authority key identifier: 59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3230302e36332e3130342e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 17:58:57 +0000
ROA not before:           Tue 05 Mar 2024 17:53:57 +0000
ROA not after:            Tue 04 Mar 2025 17:58:57 +0000
asID:                     263238
IP address blocks:        200.63.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:41:47:07:04:de:4c:fc:9c:0d:2a:2b:63:1d:80:65:51:05:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
        Validity
            Not Before: Mar  5 17:53:57 2024 GMT
            Not After : Mar  4 17:58:57 2025 GMT
        Subject: CN=23C0EBCA183BE87F39C52A6FFB0C06C236DCDFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:db:13:93:41:78:e9:de:bd:69:cf:20:11:
                    0a:4e:4c:a9:06:7a:72:03:74:cb:a5:a2:86:c1:29:
                    a4:57:f1:a8:eb:18:7b:e4:ac:39:b4:65:96:b7:07:
                    66:e2:89:f4:3f:3a:cb:6b:49:78:58:27:1f:ca:d3:
                    c9:75:7f:ca:f4:df:55:4f:c6:6d:fa:17:23:87:ca:
                    61:4b:41:16:15:f9:08:f8:ed:cc:93:78:fb:d0:41:
                    03:2a:34:10:3a:2d:94:88:a5:40:0d:d9:6a:0e:6e:
                    20:e0:86:5d:2c:d5:f2:9a:77:0b:c3:5d:c3:b4:17:
                    6d:14:0b:d6:fa:0f:8b:f4:c6:f0:c9:12:51:00:23:
                    3a:98:7c:c7:bc:20:08:03:40:02:fc:3b:ab:e3:73:
                    92:31:4e:fe:72:49:56:07:16:de:06:aa:ec:c9:e5:
                    6f:81:83:40:1a:9f:8d:39:61:ee:6d:95:80:b7:ca:
                    6b:0f:7f:05:e4:a6:16:96:e1:bc:08:1b:56:ff:ce:
                    4f:01:4f:32:26:aa:53:8e:2f:c3:4c:cd:39:21:80:
                    85:e4:85:23:99:70:98:f7:5e:09:c0:cb:6e:6c:3d:
                    0b:f7:b8:02:b2:1f:37:e9:66:e3:ea:19:0e:e0:d3:
                    a4:0c:3a:2a:6b:de:aa:97:c0:66:4f:44:24:04:cb:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:EB:CA:18:3B:E8:7F:39:C5:2A:6F:FB:0C:06:C2:36:DC:DF:CA
            X509v3 Authority Key Identifier:
                keyid:59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3230302e36332e3130342e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:31:47:0a:78:2e:ac:5b:2c:c2:b0:25:e3:25:8b:11:95:5f:
         79:3e:45:8f:44:c7:30:31:b6:73:1c:27:cb:c2:8a:74:67:61:
         dc:b9:0b:34:df:94:f9:cf:01:48:15:ad:3e:c1:74:f1:96:7d:
         5d:49:60:70:65:5b:0b:9d:45:86:a7:2c:b3:c7:e5:98:7f:9e:
         4d:df:d0:97:3a:c5:75:ec:20:46:c1:e7:78:12:68:87:44:25:
         7c:84:ce:10:fa:f2:61:ff:ea:b7:c4:ec:25:55:b0:26:c0:7f:
         ca:ee:cd:82:58:17:3a:c2:d7:29:fe:11:71:5e:a2:98:a3:d2:
         52:f1:54:9e:bd:18:cc:0f:b1:d7:fe:e2:2a:ea:22:fd:34:ee:
         82:c1:6d:bd:3f:ec:92:1f:e3:b5:5c:2f:02:f7:db:e0:9e:e0:
         e0:0c:d3:c2:36:8c:4b:88:67:1d:d9:84:ae:6f:7f:bc:cd:85:
         70:fd:4e:91:cb:91:91:e8:6c:fe:e7:ff:e6:75:2f:8a:69:b4:
         c5:3c:6b:76:0a:62:49:f8:2e:f3:dc:98:62:a9:bb:a4:8d:fa:
         43:b5:98:96:2a:08:81:15:7a:21:39:a9:73:88:6e:71:75:fb:
         c2:51:d2:70:eb:4e:8f:28:30:99:53:f0:75:9c:67:3e:1b:e6:
         b7:85:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org