Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa
File:                     3230302e31302e36312e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier:          z4G/RfZqEhWFZDTWEWY+ENo7xlno4fGbLgUP7UnMs48=
Subject key identifier:   A9:A6:F8:B9:64:A8:25:45:CC:F4:0B:A1:3F:04:61:DB:EE:F3:59:E5
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6D571977CD97F7CF0F5AE6205583592A79B1E96F
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     28000
IP address blocks:        200.10.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:57:19:77:cd:97:f7:cf:0f:5a:e6:20:55:83:59:2a:79:b1:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=A9A6F8B964A82545CCF40BA13F0461DBEEF359E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:9d:be:41:30:20:de:f1:67:7d:11:dc:75:
                    09:b2:40:91:37:55:22:4f:71:8a:e3:69:48:35:27:
                    07:bc:4a:09:c1:c8:46:f7:87:09:1b:63:80:3f:e8:
                    66:bb:38:cf:73:ca:3a:1b:6b:70:75:bb:84:0e:15:
                    6a:26:81:de:14:33:21:64:b8:73:60:5c:b1:82:8e:
                    df:5a:8a:28:93:13:8d:b1:f4:c2:12:31:8e:f3:56:
                    2c:c5:fc:2d:db:ca:cd:82:32:ed:75:e8:00:6e:ae:
                    73:23:c5:12:4c:6b:66:39:ca:46:2b:05:dd:c4:c1:
                    68:a9:9a:94:93:99:8b:c2:72:69:5c:73:97:79:b5:
                    2d:30:b7:04:de:d4:c7:3b:bf:31:da:87:70:dd:ca:
                    e3:e7:40:44:a5:83:54:1b:a1:17:b8:9a:13:75:d7:
                    f5:11:8a:a2:a4:a2:02:18:df:ae:65:e6:02:13:86:
                    3f:c2:a4:06:51:59:91:44:41:13:56:af:64:8e:1a:
                    e1:2c:52:7c:1a:ad:10:f4:ca:84:72:46:49:fa:60:
                    75:81:d4:5f:c9:69:3e:04:c3:c1:54:c2:ae:df:62:
                    64:19:b5:53:12:06:69:27:67:94:a8:cf:db:8a:70:
                    4a:3d:9a:b9:70:12:e7:42:82:24:81:e6:24:8a:c6:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A6:F8:B9:64:A8:25:45:CC:F4:0B:A1:3F:04:61:DB:EE:F3:59:E5
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:da:a8:1a:c1:37:7b:91:f2:f7:76:99:0b:9f:ab:d9:8d:52:
         17:c9:d1:e2:48:46:aa:bb:a5:d6:79:0b:c5:2f:7b:90:e1:e3:
         8d:45:86:35:e2:57:6a:18:9e:65:aa:2f:c4:34:9c:6e:82:8f:
         bb:d4:57:79:bf:d3:56:c7:5d:1e:c6:e4:67:3a:fe:7a:b6:63:
         c9:ab:23:2a:53:49:a4:44:2c:42:57:fd:b0:8e:0b:3e:3d:39:
         e2:27:11:04:c8:27:6f:e2:4f:b9:b9:3c:e3:3f:b7:84:01:96:
         db:e9:77:3f:ad:6e:d4:a7:c8:aa:5d:3f:8f:0d:d3:70:dd:69:
         b3:ce:4c:b5:7b:74:a8:f6:40:12:75:c3:7f:49:a8:be:a6:51:
         06:49:e2:2e:52:3f:b4:29:2a:08:35:fe:f0:23:12:fb:f6:8d:
         86:1e:6b:16:35:9b:fd:1c:c7:0a:2f:93:e5:86:a5:50:e3:02:
         11:9e:73:b3:88:b5:b9:7f:35:c2:27:23:ae:ed:15:9d:d7:8d:
         20:46:ab:6b:53:40:de:e1:94:25:15:35:55:71:3b:68:df:bd:
         86:b6:9e:21:24:49:ba:27:75:97:cc:81:2f:c9:c4:4b:c9:76:
         29:a9:a2:af:3f:94:42:7d:99:85:41:f9:83:ac:92:cd:7d:bf:
         4c:91:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:24:10 2024 by rpki-client on console-fra.rpki-client.org