Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa
File:                     3230302e372e38362e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          Tls0ZbCLChHzXDrKhaS1hw6E5Gh15QMvyp/B0gj9KDY=
Subject key identifier:   CE:23:45:21:ED:A8:A0:B9:A1:D0:2A:96:42:A2:D1:E8:36:91:E9:00
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       73BAE8CBCE10019A0B5E181198053C9A87B77E6D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 05 Mar 2024 17:39:57 +0000
ROA not before:           Tue 05 Mar 2024 17:34:57 +0000
ROA not after:            Tue 04 Mar 2025 17:39:57 +0000
asID:                     52224
IP address blocks:        200.7.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ba:e8:cb:ce:10:01:9a:0b:5e:18:11:98:05:3c:9a:87:b7:7e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:57 2024 GMT
            Not After : Mar  4 17:39:57 2025 GMT
        Subject: CN=CE234521EDA8A0B9A1D02A9642A2D1E83691E900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:70:86:74:d9:53:71:a6:b8:8d:1b:e4:23:
                    3d:a4:da:b4:7a:3a:25:d4:ff:19:0d:50:a9:65:49:
                    53:66:a9:a1:77:de:6d:a4:3f:73:e3:0b:27:ec:5e:
                    d0:f1:57:14:80:12:26:4d:8c:6a:05:a7:38:65:c6:
                    59:46:e6:f3:65:f4:64:37:f7:1f:07:e2:0f:53:5e:
                    f3:df:a2:66:a9:32:b5:ad:f7:0e:eb:5c:47:57:76:
                    04:2a:09:1a:7e:f7:d6:d2:62:e5:f2:b1:02:2f:40:
                    1d:ca:3e:fc:e6:a8:b3:f0:0a:31:91:17:d0:47:9c:
                    7d:19:97:f8:46:ae:75:6c:c6:da:0d:5a:e4:2a:c4:
                    a4:5e:3b:6a:ae:3a:b1:3f:7b:3b:b0:40:66:be:cd:
                    f4:5b:5c:b4:6c:c1:2c:e5:78:50:9a:ee:2a:df:a5:
                    df:86:55:f8:44:c7:86:8c:46:fd:51:40:4d:7e:75:
                    d7:c7:3e:b8:3c:6c:26:f9:7d:2d:b7:aa:40:d9:26:
                    65:a6:4d:bd:6c:de:80:e0:98:ee:7c:dd:d7:09:e2:
                    fe:a5:72:69:dd:1f:9d:3d:29:8a:80:16:3b:be:64:
                    46:86:6a:87:93:db:90:3d:bc:8f:bc:52:4b:ff:cf:
                    0c:a1:81:ab:b0:fb:93:72:a7:db:52:a1:8e:52:41:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:45:21:ED:A8:A0:B9:A1:D0:2A:96:42:A2:D1:E8:36:91:E9:00
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:c3:db:e1:f5:88:46:15:17:b2:a8:39:21:3c:c4:ae:c8:
         36:ae:b9:8a:db:0f:7c:c0:17:51:ea:62:f5:21:72:ed:b8:02:
         a0:8b:b1:dc:38:d4:be:58:5a:78:48:eb:5b:2b:b9:8f:26:33:
         2a:9d:57:f0:74:09:40:8f:20:32:71:56:1f:8a:c8:bb:5d:cc:
         9d:74:da:1d:c8:19:93:cc:3d:a6:5b:70:7d:3a:4e:e3:18:07:
         16:38:43:06:7c:37:d0:3e:3e:eb:c8:60:3e:9a:42:19:e6:73:
         5d:ab:e3:ee:b9:6f:46:29:d7:37:cc:2e:52:f5:d4:77:15:df:
         08:db:f4:c6:9c:7d:e5:42:1b:74:d8:fa:a4:c3:ad:88:aa:7b:
         8e:c6:8b:04:d8:70:5b:13:14:32:5d:a2:58:26:93:46:77:3c:
         8e:7e:09:37:bc:34:c7:f4:3c:e2:50:f4:26:fd:66:63:9a:63:
         60:64:da:d4:cb:18:ac:4f:15:05:cc:4f:3f:ed:53:f4:20:0d:
         aa:58:25:8a:f8:d8:71:22:5c:5f:76:f1:de:bb:43:c1:d7:4c:
         36:ba:4b:c7:cc:ef:ce:ae:2e:3a:bf:93:93:57:2c:e9:2a:fa:
         2c:aa:b7:c9:a1:41:c5:28:3c:37:84:67:91:6f:4f:c7:e7:95:
         4d:1d:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org