Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa
File:                     AS20305.roa (raw, json)
Hash identifier:          JsS/cQfCzGg1PrUxExxroUF/fQqk9eZUzJcG+LjswDw=
Subject key identifier:   C0:5E:C8:E3:B3:75:AE:75:5D:DA:C1:62:14:E3:49:BC:3E:28:BE:27
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       01C59E922E4EFD67805FF69B9967EF2BFFD51D4D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     20305
IP address blocks:        200.0.252.0/24 maxlen: 24
                          200.70.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:9e:92:2e:4e:fd:67:80:5f:f6:9b:99:67:ef:2b:ff:d5:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=C05EC8E3B375AE755DDAC16214E349BC3E28BE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0e:2c:50:be:ad:5b:36:66:31:a3:22:f5:b7:
                    1e:b8:23:f7:65:14:c6:30:f8:b2:97:38:d2:67:90:
                    a7:a6:76:6a:e0:8f:f3:01:81:b9:74:b5:03:ad:22:
                    75:a0:49:02:64:1c:bf:1e:fc:25:43:4a:59:f9:a4:
                    bd:9b:e5:e0:a8:3b:a9:ce:d9:7f:6d:a7:c4:fe:8b:
                    d0:4d:96:77:41:5b:33:e6:b1:ce:9b:c5:4c:90:92:
                    04:f7:0f:7f:35:a2:16:12:4e:71:3c:d4:96:6f:11:
                    45:82:a9:9d:e4:02:b3:0b:76:45:d1:36:5b:68:5e:
                    1b:95:65:c3:ea:d6:7f:2f:47:00:d9:60:9c:07:ae:
                    88:11:fb:00:bc:57:e0:a3:9f:bc:ee:ce:08:ae:8a:
                    74:cd:3a:52:b8:12:15:5f:7b:c1:96:5d:1a:22:3e:
                    ea:d3:aa:96:00:0e:be:32:9e:0d:a8:4c:1b:11:92:
                    ff:d2:30:b1:2d:db:9a:85:78:5f:d6:cb:31:1a:f3:
                    e6:a7:7f:32:36:47:aa:98:2c:9d:57:9e:7d:7d:29:
                    3f:de:d9:21:3e:c5:39:c6:7e:24:77:d7:3a:3f:0b:
                    15:85:dd:a3:4d:c4:72:32:61:52:12:5a:02:22:23:
                    fe:4e:1d:53:62:d0:c1:e4:eb:4b:94:3a:e3:22:54:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5E:C8:E3:B3:75:AE:75:5D:DA:C1:62:14:E3:49:BC:3E:28:BE:27
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.252.0/24
                  200.70.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:da:7b:fe:08:3f:a8:61:c9:d4:dc:22:e6:66:6c:51:92:90:
         32:97:d0:5f:69:75:60:cd:54:8f:b6:63:30:51:23:b2:37:10:
         5c:28:40:3c:66:45:25:19:1a:7e:13:dd:ef:fb:b4:56:95:58:
         95:f0:d8:7e:6a:d9:06:dd:0b:26:72:95:9b:8e:fa:7d:14:24:
         15:83:d8:3c:6c:32:9b:f4:20:b3:84:00:a4:9f:cf:b1:18:f2:
         b7:26:6b:5c:f3:45:98:14:a4:da:d7:5a:ea:69:4c:39:46:e9:
         0a:4e:b4:9f:64:8b:90:08:4b:8c:59:d6:fb:c2:26:21:e9:da:
         2a:e0:18:7e:9d:6e:76:cc:94:52:26:95:1e:63:ea:f7:df:02:
         9c:3e:95:09:84:60:2f:4f:d5:d7:9d:d0:59:83:4f:c2:2b:ba:
         e2:7a:0e:68:70:16:dc:e3:69:d3:34:ac:7a:ec:18:35:60:4a:
         c4:bb:31:80:b7:d9:70:b9:2a:6f:3b:5b:cb:59:d0:3a:58:ff:
         4e:8b:d3:cc:a9:10:40:b0:61:d1:a9:ce:4d:a6:7f:0e:47:92:
         f2:51:60:18:19:d3:30:18:7d:5d:9f:31:52:6b:36:e2:80:19:
         4d:74:16:37:92:30:4e:de:cb:0b:29:be:b3:91:1f:33:25:ee:
         4b:2d:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org