Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
File:                     3230302e372e3132382e302f32302d3234203d3e203237373730.roa (raw, json)
Hash identifier:          WrwstIanDZkYCwlDku+66jcj297BsKSqmN4MjnAY8P8=
Subject key identifier:   6B:CA:9B:0C:AB:23:A6:B5:5C:C3:B1:25:43:46:4D:47:AA:02:91:20
Certificate issuer:       /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial:       469E55ABC08F95B3F65E114CC7939960D6C2B25D
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
Signing time:             Tue 05 Mar 2024 18:02:44 +0000
ROA not before:           Tue 05 Mar 2024 17:57:44 +0000
ROA not after:            Tue 04 Mar 2025 18:02:44 +0000
asID:                     27770
IP address blocks:        200.7.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:55:ab:c0:8f:95:b3:f6:5e:11:4c:c7:93:99:60:d6:c2:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
        Validity
            Not Before: Mar  5 17:57:44 2024 GMT
            Not After : Mar  4 18:02:44 2025 GMT
        Subject: CN=6BCA9B0CAB23A6B55CC3B12543464D47AA029120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:86:37:4a:06:66:72:a0:09:c9:e3:93:0b:
                    18:b4:27:ba:fb:b7:b1:d6:66:fb:c7:2c:87:45:af:
                    b0:44:76:7f:16:0d:4e:47:c1:b3:76:d1:60:73:75:
                    81:bf:98:0e:bf:89:c4:f7:ec:08:a7:9f:dd:b4:1c:
                    99:36:cc:53:eb:eb:78:51:a8:c4:36:51:83:0a:b3:
                    47:f7:8e:d5:53:7f:9b:c1:3a:2f:71:d0:2a:51:35:
                    83:2e:45:77:80:a5:69:ae:fe:4e:27:2c:b5:62:b1:
                    cb:48:38:1a:8c:f4:2d:4e:9c:1c:f7:5e:6f:eb:4c:
                    ac:3b:50:72:b0:b4:0b:af:28:11:19:ad:99:bb:d6:
                    e7:88:8e:d6:06:2b:25:72:40:57:2d:05:a5:82:a9:
                    43:34:f2:0c:1e:cc:c5:4e:32:6e:7e:8c:bb:41:81:
                    7e:eb:69:72:57:f9:a3:4b:c5:90:fc:71:7f:0e:75:
                    a2:19:1a:d4:ea:a4:fa:91:d1:8e:4c:03:31:3b:3d:
                    26:3e:84:66:5b:2b:2f:f5:3e:1f:01:fb:0f:e8:a2:
                    41:75:5e:7c:55:30:05:b7:5c:29:c9:11:40:cf:d4:
                    60:ba:dc:6a:55:36:7f:2a:54:b4:24:7e:35:b6:55:
                    08:a0:06:da:da:c5:41:2f:ef:7d:f2:5b:29:ce:ad:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CA:9B:0C:AB:23:A6:B5:5C:C3:B1:25:43:46:4D:47:AA:02:91:20
            X509v3 Authority Key Identifier:
                keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:65:a0:cd:78:87:23:ca:ac:93:67:fe:b5:82:6b:16:58:
         f7:42:8b:54:dc:18:74:85:ae:ad:2e:c7:28:1e:ba:54:ff:b5:
         54:bb:97:7b:0d:d6:27:16:27:fb:e1:b3:13:8e:be:54:d1:18:
         93:5e:ea:da:1d:fa:cd:61:77:40:fb:30:55:df:b4:e4:a1:6e:
         08:91:80:ed:87:30:37:fe:47:a5:a4:64:f7:68:5e:e6:c4:32:
         78:29:97:54:e6:0d:49:ed:91:de:ad:5c:31:1a:0c:90:64:63:
         ae:c2:b7:8e:5f:95:83:bb:38:0e:36:e7:e3:df:bb:14:55:c0:
         75:59:4b:f1:f4:da:85:d2:37:10:ab:bd:ce:ea:df:22:98:2f:
         0c:a4:5c:14:cb:15:80:53:bd:33:aa:6d:5d:03:d1:d6:0a:2e:
         6e:84:cc:8a:1f:77:1a:49:0d:51:3a:58:6a:fd:0d:0f:22:c4:
         e3:49:a7:62:86:7d:a6:46:b4:75:ad:62:45:c6:e1:19:ae:45:
         a2:64:0c:ea:a1:53:2f:5c:ec:81:22:a0:fb:a5:dc:eb:32:79:
         d7:ef:0e:8e:49:22:4a:a6:76:87:b8:b0:2f:f7:78:27:ba:7d:
         be:64:8b:54:85:de:eb:ce:dc:78:85:a8:14:84:73:b1:ec:fa:
         a1:56:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:44 2024 by rpki-client on console-fra.rpki-client.org