Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
File:                     3230302e38312e3135322e302f32312d3234203d3e203237383531.roa (raw, json)
Hash identifier:          77QO+KrWAQUblX2oit1wTHtDYWzmb4XVsTq0y5F2B8k=
Subject key identifier:   A5:2D:E2:1A:1B:AB:FB:85:12:B5:F5:C1:0F:05:DE:0A:25:51:E3:91
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       63F847A5A0D71DC1565632772EB1ABFA5A9C65CC
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
Signing time:             Tue 05 Mar 2024 18:12:45 +0000
ROA not before:           Tue 05 Mar 2024 18:07:45 +0000
ROA not after:            Tue 04 Mar 2025 18:12:45 +0000
asID:                     27851
IP address blocks:        200.81.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f8:47:a5:a0:d7:1d:c1:56:56:32:77:2e:b1:ab:fa:5a:9c:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Mar  5 18:07:45 2024 GMT
            Not After : Mar  4 18:12:45 2025 GMT
        Subject: CN=A52DE21A1BABFB8512B5F5C10F05DE0A2551E391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:76:ce:d4:f2:a9:ff:87:cd:fb:9a:d1:1b:
                    a6:9b:4d:6b:d7:24:f3:79:04:d5:ff:0a:cb:57:f0:
                    e9:8a:c3:66:e9:38:fd:66:ca:f9:b4:ab:4a:f8:09:
                    9b:92:64:73:f8:a0:d4:0c:0e:92:14:9e:82:91:57:
                    cc:5f:ee:7b:24:ed:6c:a1:e5:40:79:15:4d:23:14:
                    80:4e:5c:10:42:9f:39:2a:61:25:dd:62:64:9a:90:
                    d6:cb:86:a3:20:4e:d2:df:dc:fa:31:94:19:db:e8:
                    3d:7b:72:5e:73:66:a2:ad:6a:5d:50:12:82:e6:47:
                    30:d5:74:20:35:f5:e8:ec:3e:78:fe:99:d2:47:64:
                    7d:90:58:28:09:0e:b7:9a:fe:af:2a:cc:54:36:44:
                    91:0c:05:1a:7b:97:6f:1c:2d:2b:72:64:82:be:11:
                    ca:35:83:1d:37:e5:17:91:31:e7:26:0e:9e:22:cd:
                    bd:32:ab:6c:de:bd:b1:a5:85:d7:a1:62:e9:38:6d:
                    41:40:88:31:ac:24:c2:7d:d6:36:1a:fc:33:59:a1:
                    3a:80:0b:c0:dc:6e:fd:39:3c:84:97:92:57:c3:3e:
                    7b:45:b1:bb:ed:97:6e:ea:c6:11:ba:8e:33:83:20:
                    0e:c6:29:1b:52:7d:2c:6f:71:2f:3f:0c:dc:cd:37:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:E2:1A:1B:AB:FB:85:12:B5:F5:C1:0F:05:DE:0A:25:51:E3:91
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:90:a4:89:1d:34:3c:ab:5e:0f:da:0f:07:f8:79:c5:82:
         a3:49:46:37:87:47:2c:07:5e:09:db:04:eb:4f:9a:87:4c:b0:
         59:30:30:07:6f:25:9a:51:d9:50:8e:0d:b3:27:4c:74:9c:18:
         83:62:54:40:24:33:8e:e1:83:1d:5b:27:cb:68:51:98:8b:08:
         2e:1a:55:f2:78:65:b7:d8:e1:70:18:ab:64:62:e8:27:ee:6b:
         68:9c:73:f2:cd:94:eb:b7:b9:99:ec:6f:74:7b:42:2f:62:2c:
         8b:ef:e0:c3:13:be:56:23:a0:7f:20:db:51:b6:f8:bc:99:53:
         87:f5:01:f2:27:51:3d:2e:38:00:b9:68:33:60:42:ef:d1:45:
         53:6d:3f:62:7c:81:1b:ff:de:3e:e1:27:08:a5:75:44:c1:6f:
         05:41:a6:8c:f5:a1:30:d5:18:d7:3b:7d:d0:34:80:0a:15:5c:
         97:e8:6c:39:f2:74:4b:02:be:ac:3d:ea:1f:49:7a:da:07:f5:
         ce:e8:3e:05:02:bd:b0:38:0e:1c:18:6a:38:c5:5c:41:30:23:
         f9:32:73:38:d1:79:87:4d:1c:f2:fc:e5:22:e7:3c:2f:27:45:
         4c:8d:0d:35:40:23:cb:4c:17:5c:5f:c6:8b:45:11:d1:f3:fc:
         90:b0:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org