Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa
File:                     3230302e332e31322e302f32322d3234203d3e203238303031.roa (raw, json)
Hash identifier:          dNl9QBfW1RHXPsEctHLePHDUJ2OLdLk1DK2qhvn2GIE=
Subject key identifier:   B9:7C:9E:73:AA:5A:F2:10:6B:B4:10:E0:50:88:9D:3E:8B:DD:73:C4
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       3B65FBA9FBAEC761F2BFC285206AA23E71AE29E7
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa
Signing time:             Tue 05 Mar 2024 17:39:59 +0000
ROA not before:           Tue 05 Mar 2024 17:34:59 +0000
ROA not after:            Tue 04 Mar 2025 17:39:59 +0000
asID:                     28001
IP address blocks:        200.3.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:65:fb:a9:fb:ae:c7:61:f2:bf:c2:85:20:6a:a2:3e:71:ae:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:59 2024 GMT
            Not After : Mar  4 17:39:59 2025 GMT
        Subject: CN=B97C9E73AA5AF2106BB410E050889D3E8BDD73C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:9b:5b:96:58:76:42:69:cd:37:b6:a0:4a:
                    27:4a:d8:99:a7:3e:69:60:2d:aa:b5:ce:1c:37:52:
                    da:05:a8:c3:14:ff:00:29:48:7f:0f:3e:09:9d:b0:
                    de:8c:54:d0:7e:ee:85:37:7e:48:3d:5a:18:ed:0c:
                    e4:5a:f2:69:e7:6b:f0:8e:d8:de:7e:40:68:f6:50:
                    cc:19:d6:49:84:7a:f5:52:d8:61:8b:74:ce:cb:84:
                    b2:b1:f1:60:25:d5:f1:83:d1:1d:e2:99:90:b6:f5:
                    84:ab:5c:5f:4b:42:c6:2b:41:7c:40:0b:1e:43:c2:
                    82:14:31:50:68:2a:49:2a:9f:1b:8f:dc:a2:78:de:
                    75:b9:ee:23:aa:36:b7:d0:55:bd:ef:f9:df:7c:67:
                    fe:51:8d:ab:8f:7e:fd:24:de:cf:fc:a4:65:1f:d5:
                    e0:d5:58:60:7b:0c:f0:9c:6b:84:17:46:cc:4d:b3:
                    a6:02:df:fa:c2:1b:b9:a0:f4:05:64:1d:71:10:b4:
                    b8:31:0e:be:1f:7b:46:53:e5:82:81:b1:3e:43:94:
                    4b:28:04:52:5a:1c:72:75:14:9c:ca:f8:69:48:dd:
                    73:ca:da:0e:6c:90:e9:62:75:1e:b2:8e:6b:09:7f:
                    ec:5f:de:d4:51:3d:1b:60:75:d1:06:ef:20:6e:63:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:9E:73:AA:5A:F2:10:6B:B4:10:E0:50:88:9D:3E:8B:DD:73:C4
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e332e31322e302f32322d3234203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:84:37:0c:48:49:1f:53:6b:86:fe:5c:b2:29:fa:d2:43:7e:
         3d:dd:24:34:be:e8:d9:a0:8a:4a:5e:bc:ee:29:b4:bb:2a:04:
         06:55:5e:11:20:6e:09:b4:b0:10:95:43:9d:4e:3b:40:5c:bc:
         75:74:fd:b1:08:72:d6:41:86:d3:f6:c9:c7:6f:ec:8a:47:33:
         83:f1:45:01:6d:25:13:9b:53:b2:fa:a2:14:48:c4:39:ce:c3:
         91:5f:4f:b2:cd:06:8a:6a:7f:1f:f0:fc:44:6d:a9:d1:a3:08:
         bb:e0:69:89:3d:44:bd:4c:4b:d0:f1:7e:b0:a9:1a:98:cc:63:
         2f:cd:e1:ae:af:b8:45:53:71:3a:0d:2e:71:57:67:3d:94:a4:
         54:5d:f1:e6:79:43:4b:bb:6f:31:79:c9:fc:50:3d:7e:c9:be:
         82:e0:1c:7d:b7:5f:af:e4:7a:8c:1d:bf:07:19:7a:76:1f:8a:
         d9:96:b9:10:ff:3f:9b:26:56:c4:1b:a3:88:f0:1b:94:0e:59:
         e0:b7:a0:7c:5c:8c:aa:98:70:1f:4d:6b:97:b2:aa:9d:db:b5:
         83:8c:58:e7:a2:17:df:fb:c3:dc:fc:ae:fa:ac:b1:74:f0:5f:
         3e:cc:c4:56:c9:cd:c0:ce:26:08:bd:82:e5:e8:2b:be:3b:58:
         f2:be:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:31:25 2024 by rpki-client on console-fra.rpki-client.org