Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20117.roa
File:                     AS20117.roa (raw, json)
Hash identifier:          8p54ls9Wt7wUZYRUGx1IE7vlqj9B33S3LLUQRyNeyts=
Subject key identifier:   AB:9C:51:1C:08:FF:92:9C:F7:5B:02:3B:DF:0C:B4:7E:BD:4D:81:9C
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       2214A2A391587B52E76E96E2F3AA2B9750D666B4
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20117.roa
Signing time:             Tue 05 Mar 2024 18:07:54 +0000
ROA not before:           Tue 05 Mar 2024 18:02:54 +0000
ROA not after:            Tue 04 Mar 2025 18:07:54 +0000
asID:                     20117
IP address blocks:        200.5.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:a2:a3:91:58:7b:52:e7:6e:96:e2:f3:aa:2b:97:50:d6:66:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:54 2024 GMT
            Not After : Mar  4 18:07:54 2025 GMT
        Subject: CN=AB9C511C08FF929CF75B023BDF0CB47EBD4D819C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:12:da:d9:33:18:39:db:e8:f8:b6:21:fe:
                    2f:56:bb:ec:89:6a:9e:ab:23:80:7e:e9:24:c9:d3:
                    93:8e:5a:79:28:c1:72:48:ed:b2:a8:0c:79:55:4b:
                    9b:82:04:3d:0a:44:7d:d4:75:13:f2:d8:29:a4:2f:
                    99:cf:78:06:c8:dd:00:61:7e:a3:51:2a:bf:c9:03:
                    88:40:b6:41:5a:c2:ff:3e:d8:22:f0:f3:07:50:55:
                    64:bb:1f:76:d6:7f:30:6d:76:1c:d1:59:f4:8f:6f:
                    70:e4:25:b3:24:5d:1f:a3:3c:df:95:d9:31:84:03:
                    06:be:0f:11:24:2c:25:e8:9c:18:cb:64:2d:eb:0c:
                    dc:85:50:0c:12:3d:f0:37:6f:e3:93:d2:da:3f:8a:
                    78:49:bd:96:a7:c4:30:be:a1:92:ae:f5:1d:91:3a:
                    5a:f9:a2:dc:22:e2:b0:f6:45:1e:5a:4d:70:cf:de:
                    67:30:9f:0c:9c:d3:87:98:26:8f:8e:75:9b:63:8f:
                    3d:2f:c1:f9:82:6a:df:d4:f9:61:de:02:4c:bd:0b:
                    8c:78:4f:0a:14:41:d2:ef:9b:68:17:2f:fe:ad:fd:
                    c7:1a:3e:11:37:c5:95:d1:2b:2d:76:b2:a9:c6:8c:
                    a7:a7:8e:8e:37:56:d9:6f:e9:03:5d:0c:f3:d9:85:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:51:1C:08:FF:92:9C:F7:5B:02:3B:DF:0C:B4:7E:BD:4D:81:9C
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:31:ee:3c:50:24:04:68:a7:c8:44:12:12:a2:b4:2a:55:08:
         d6:a8:da:5f:a1:12:ed:36:c7:b0:dd:2b:39:eb:39:ed:9f:b9:
         14:3d:10:13:b2:34:36:6c:e5:45:6a:5d:11:8e:53:bf:4b:2d:
         b6:96:7b:b0:5c:14:3a:2f:96:31:2b:43:20:56:b6:0d:4c:6e:
         0f:a1:d5:20:a5:99:97:ab:5d:cf:c3:bd:b5:b4:a0:b6:db:0c:
         03:20:e0:74:48:bb:5a:4b:ff:14:39:c1:23:d9:5b:0b:31:1f:
         16:46:00:66:2c:d1:fc:13:28:6a:22:53:19:05:8d:90:7c:88:
         29:7a:ce:12:cc:3e:05:13:91:d3:5f:3b:83:7f:eb:cf:c4:a5:
         97:d9:98:c9:a2:13:ec:a9:ec:82:8d:37:1a:c3:98:a8:b1:a9:
         62:bb:13:b7:aa:76:0a:29:26:bb:77:cd:c0:c9:1a:e4:08:fa:
         a0:74:39:02:3c:4e:cc:29:8e:19:a4:46:29:5e:43:11:4f:cc:
         53:15:67:3d:a2:66:a0:11:74:fc:b8:29:d8:a2:9b:88:7e:23:
         a5:8c:0e:5f:aa:35:98:af:59:fd:a4:ea:57:3a:7f:11:45:ea:
         97:ef:d2:b5:47:c9:38:6e:4a:ff:1e:c0:5a:fa:ea:a3:cd:1d:
         7d:e4:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org