Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
File:                     3230302e372e38372e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier:          6/O0a69PaLBV3A4WjYv1d3xx5yfT+ikhpcYeRPJW8yk=
Subject key identifier:   B3:C1:50:ED:0A:19:62:98:8D:2A:40:6B:AD:19:86:49:AA:84:12:2E
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7B15955FE5B87C5B44A42ABAC48C2C2FF13DAC0B
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:49 +0000
ROA not before:           Tue 05 Mar 2024 17:34:49 +0000
ROA not after:            Tue 04 Mar 2025 17:39:49 +0000
asID:                     28000
IP address blocks:        200.7.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:95:5f:e5:b8:7c:5b:44:a4:2a:ba:c4:8c:2c:2f:f1:3d:ac:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:49 2024 GMT
            Not After : Mar  4 17:39:49 2025 GMT
        Subject: CN=B3C150ED0A1962988D2A406BAD198649AA84122E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:07:ab:29:1f:9c:22:b3:b6:c0:6b:82:59:
                    ac:62:13:42:cc:b8:02:00:5c:a5:b3:b4:75:ed:e9:
                    ed:aa:42:c4:07:3e:f0:13:64:19:82:94:df:21:44:
                    90:f9:fe:71:16:14:59:ad:0e:c3:2a:15:e2:1b:e9:
                    03:5b:bc:1a:52:5c:a6:16:d3:dc:29:20:68:29:fa:
                    3a:e7:67:bc:02:84:8f:00:69:74:56:e9:5c:9c:39:
                    4d:75:33:ff:21:e4:4b:25:4b:8c:5c:7f:8f:35:32:
                    c9:25:2e:e1:d5:8b:c7:cd:9e:4d:d5:e1:75:d7:39:
                    1a:af:85:f4:9f:63:49:30:ca:74:d3:c8:32:ca:2b:
                    e2:09:f9:f5:cf:d6:22:b7:0f:a4:91:07:66:91:d4:
                    64:11:72:82:9e:87:dd:da:a4:49:4e:1e:d9:80:c7:
                    b6:7d:46:7a:c2:28:ca:9b:d0:7e:0b:7c:d2:ab:46:
                    15:10:8a:93:14:eb:3f:50:a7:24:3f:54:af:d6:e5:
                    e7:99:31:02:06:63:73:cf:76:03:67:d1:5e:89:d1:
                    08:f7:c5:65:e9:13:7c:fd:cd:00:39:05:bd:b2:7b:
                    a8:13:2e:ff:1a:77:5e:5f:24:da:44:5b:9b:c3:de:
                    50:cc:ce:ce:0b:74:b4:8f:98:74:d1:d1:ef:b7:13:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C1:50:ED:0A:19:62:98:8D:2A:40:6B:AD:19:86:49:AA:84:12:2E
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:5d:04:d2:a2:4a:d9:2a:c4:a7:af:2e:f2:14:da:96:5f:
         3a:39:37:79:88:31:2d:ee:11:a3:59:bc:da:72:a1:5d:ce:f5:
         c8:49:a8:d6:77:4e:b0:2c:22:e5:03:11:8f:ce:87:89:e7:97:
         e7:32:ab:0e:6e:46:00:41:77:e8:eb:5b:ad:16:f0:db:cd:ea:
         7b:12:69:82:88:2a:ee:6f:93:62:e1:f8:a5:77:f8:2c:d4:4c:
         d6:72:aa:bb:9b:02:ef:b2:ff:79:72:cb:90:ed:73:cc:bf:78:
         58:c5:ca:8c:7d:15:86:f9:51:2d:dc:85:71:0a:9c:b1:7f:f1:
         71:1d:f4:75:d5:88:07:f8:12:01:d1:f2:e8:cf:a5:d9:2c:29:
         2a:de:93:ca:c6:f6:59:36:8b:a6:83:2c:b1:e9:a5:4f:a6:cb:
         7b:8a:53:d9:46:66:10:0f:98:1d:16:06:79:4b:15:ad:a8:15:
         78:3a:de:03:7a:21:b1:fa:0b:c0:58:db:f1:91:35:bc:16:90:
         c9:81:eb:9b:68:6f:95:2b:3b:ef:ad:17:92:e5:e5:30:9b:c0:
         72:83:e3:67:89:3f:b3:04:e3:cd:e4:70:68:92:94:1b:ca:c4:
         dc:e9:3d:4b:d6:b6:31:18:89:ba:01:f1:5a:2e:46:81:08:a7:
         36:79:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org