Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
File:                     3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (raw, json)
Hash identifier:          wjm5TMgOquI9Dw4NEx25TNUG1OE4Gt/fpgF15gQ+rBk=
Subject key identifier:   44:27:CA:31:FA:78:7B:0D:53:76:55:E3:41:08:21:71:F5:97:AD:AF
Certificate issuer:       /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial:       4E520B935DAD67E1072E9263996A6637194938F4
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
Signing time:             Tue 05 Mar 2024 17:57:05 +0000
ROA not before:           Tue 05 Mar 2024 17:52:05 +0000
ROA not after:            Tue 04 Mar 2025 17:57:05 +0000
asID:                     270078
IP address blocks:        200.71.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:0b:93:5d:ad:67:e1:07:2e:92:63:99:6a:66:37:19:49:38:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
        Validity
            Not Before: Mar  5 17:52:05 2024 GMT
            Not After : Mar  4 17:57:05 2025 GMT
        Subject: CN=4427CA31FA787B0D537655E341082171F597ADAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:cf:00:06:32:6d:42:9b:d7:b0:87:fa:8f:
                    66:01:0c:2b:8c:8b:2a:0d:a5:27:b7:af:61:c3:a3:
                    87:5a:75:00:83:95:6a:62:2a:f7:95:db:f5:ba:82:
                    64:09:8e:0f:cd:36:70:9f:4c:ab:41:3e:5e:12:52:
                    a1:12:d2:3a:fd:06:6b:f9:94:8a:d4:f3:ca:f0:72:
                    a5:c4:43:16:c1:20:2d:b8:d1:74:37:39:4d:c7:d1:
                    1e:1b:7f:93:a9:88:0c:82:f4:02:a8:08:15:34:6b:
                    6b:27:3b:3e:d2:93:e3:bb:5e:b7:ea:78:6b:d8:31:
                    40:04:ee:20:ce:86:ad:f8:01:db:f5:c2:3f:99:7e:
                    a3:2e:1b:4c:79:7b:b5:b4:5c:64:60:e2:24:45:b3:
                    5b:98:6c:56:92:1b:e5:bd:78:40:88:a4:80:e6:16:
                    f9:2b:1b:bf:59:a4:5f:b1:34:27:e2:80:e7:b2:01:
                    b2:7d:a9:af:77:6c:46:80:cf:fa:e0:c4:d5:88:de:
                    60:5d:fd:5f:bd:99:fa:f0:d6:36:35:54:03:2f:57:
                    94:2f:27:2b:d2:92:cf:51:be:af:83:59:c3:96:b0:
                    cf:84:67:49:17:b8:61:c1:e9:eb:36:75:ac:9c:fb:
                    62:9a:64:6b:bc:74:58:65:c4:24:fd:9d:f7:12:40:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:CA:31:FA:78:7B:0D:53:76:55:E3:41:08:21:71:F5:97:AD:AF
            X509v3 Authority Key Identifier:
                keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:11:1c:63:fe:3f:65:09:59:31:92:31:3b:9d:d5:b9:48:
         ff:48:a2:79:d7:e6:e8:03:14:70:cb:f9:8b:3b:99:0b:39:4b:
         b8:65:de:74:7f:30:aa:ec:c0:4a:a5:4f:f1:c4:f4:0a:6c:e7:
         8a:31:d5:46:01:47:aa:ae:6e:30:24:77:3e:00:0f:9e:fd:dc:
         91:dc:14:86:cb:3d:d0:97:74:ea:4c:90:2c:71:17:81:bb:85:
         15:4b:59:52:0d:70:7c:20:a1:82:72:f0:b6:0a:69:58:eb:35:
         1c:84:12:c1:5f:16:5f:7b:eb:21:80:f0:38:e2:55:3b:b5:70:
         cf:44:39:7d:d4:46:ca:d9:d9:77:9b:ab:a6:df:7a:f4:a7:d4:
         cd:2e:fb:20:d7:cf:4d:98:d4:39:a9:be:4d:64:16:a5:37:f8:
         b2:0c:7f:a3:8d:c9:cd:a6:d1:7d:24:22:04:90:02:b6:7b:0f:
         0e:7b:cb:67:69:78:c7:69:f2:48:8e:ef:e3:98:38:27:ff:f2:
         85:76:8c:ce:8f:bd:1c:7e:49:0b:43:59:0a:d4:3f:e5:51:f3:
         36:4f:e7:9f:9d:74:10:b0:c8:fb:2c:05:56:d1:2c:1a:12:91:
         e3:f0:31:b6:91:c7:89:0d:20:40:db:72:6c:17:c4:6d:3b:3a:
         a4:ff:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org