Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137342e302f32342d3234203d3e203237393536.roa
File:                     3230302e3131352e3137342e302f32342d3234203d3e203237393536.roa (raw, json)
Hash identifier:          OB/oUIbq5fBmKsiDhOlTDnGnZD+D/mUdtn034sg0wC8=
Subject key identifier:   A9:E4:D1:7A:E9:F6:0C:2D:8D:8E:81:F4:F9:B6:07:86:BF:AD:70:E1
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       7A05FD7B38E2E5546A1FB159F9673F9F277453DF
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137342e302f32342d3234203d3e203237393536.roa
Signing time:             Wed 11 Sep 2024 14:35:01 +0000
ROA not before:           Wed 11 Sep 2024 14:30:01 +0000
ROA not after:            Wed 10 Sep 2025 14:35:01 +0000
asID:                     27956
IP address blocks:        200.115.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:05:fd:7b:38:e2:e5:54:6a:1f:b1:59:f9:67:3f:9f:27:74:53:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:01 2024 GMT
            Not After : Sep 10 14:35:01 2025 GMT
        Subject: CN=A9E4D17AE9F60C2D8D8E81F4F9B60786BFAD70E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:3b:4b:f7:c9:e4:80:f4:83:b6:dc:65:30:
                    6d:bf:bd:86:1c:a8:99:cd:1d:11:62:90:d0:5b:01:
                    9c:d5:6c:bf:71:8e:ac:0e:13:1d:a0:d8:1b:f1:13:
                    5c:5b:82:99:bc:a7:d0:39:55:3f:81:c4:75:c0:d0:
                    56:66:4b:e9:d8:8b:92:1a:91:1a:5a:2b:fa:b0:11:
                    d3:a8:ad:c1:1c:9e:71:0c:17:d7:95:84:d6:46:e3:
                    6f:83:4f:63:c9:2d:9e:0e:6a:2e:aa:ef:95:0a:9d:
                    69:d8:67:ef:42:7d:01:a3:4f:b0:db:5e:3d:73:f3:
                    78:32:e2:01:73:cf:dd:c5:21:ae:ad:df:01:8d:e8:
                    a9:51:56:51:e6:a3:63:b9:c0:c3:2a:3f:88:22:64:
                    f0:bf:36:69:09:99:08:d4:74:a1:8e:8d:02:58:1b:
                    3d:ea:a1:97:77:fe:ac:25:ce:da:58:69:d5:8a:7d:
                    27:f7:1e:f3:b0:12:ce:30:e3:ed:8e:ea:f7:83:cb:
                    a6:c1:01:f7:63:83:8d:0b:40:76:eb:a8:3b:5f:1e:
                    80:fc:93:bc:be:ec:a8:73:cb:97:20:70:66:b4:0b:
                    4b:96:bd:c9:08:ba:ba:43:0f:21:e5:7c:d6:3e:e0:
                    8a:83:68:9f:3c:e4:80:63:87:22:00:63:a8:16:ee:
                    8e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E4:D1:7A:E9:F6:0C:2D:8D:8E:81:F4:F9:B6:07:86:BF:AD:70:E1
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137342e302f32342d3234203d3e203237393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:e3:7e:96:f4:a0:c5:ac:3a:0c:3b:b4:9d:35:38:34:38:
         3a:5d:f5:83:c7:75:55:06:0e:0d:52:37:1a:00:49:0d:95:d9:
         af:6c:3a:0a:49:c0:22:4f:9c:2a:e6:a3:61:63:94:27:e7:be:
         3e:f2:ba:75:2a:a4:0c:e3:c4:f5:8b:06:6e:f6:4d:08:c9:c2:
         4b:52:54:a1:34:74:5b:b9:5c:30:a8:a8:be:3d:20:01:40:e5:
         82:ff:6d:29:1e:c3:7a:d4:1a:6f:29:0b:05:b7:12:b4:85:ad:
         61:01:55:eb:fc:cc:a8:67:fb:31:c3:c0:48:1b:ee:e8:04:49:
         a7:6a:b2:7d:78:9b:c2:16:b1:f7:28:cf:c8:1b:6b:4f:70:6d:
         98:21:3d:d7:1c:1d:42:cd:0c:ff:af:cb:c2:ab:13:24:c5:92:
         d3:3e:25:3d:d8:91:a5:6e:fb:dc:50:e0:0b:48:48:82:a9:de:
         e4:49:a9:43:5d:80:40:46:13:01:27:01:50:b4:52:09:cb:29:
         10:98:7a:a6:e2:13:5e:e9:3a:72:5d:6b:bc:e5:51:53:c6:8d:
         6c:b3:38:a5:44:f4:d1:9a:2b:fd:8a:6d:34:e0:20:52:0d:f6:
         7b:2e:92:c0:b2:96:38:81:12:f4:de:cf:69:11:a2:7e:8e:31:
         09:9a:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org