Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa
File:                     3230302e31362e39352e302f32342d3234203d3e20323632313736.roa (raw, json)
Hash identifier:          vWRlmxIB+QeCdN9UdhougxcuozA68GBD0VXY0lfnyTM=
Subject key identifier:   F5:AC:FF:FB:FA:FB:37:19:F0:E5:BD:4E:58:83:EC:20:15:C8:54:5D
Certificate issuer:       /CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577
Certificate serial:       0C16FDC19B2ACB306B6E06E95FF4AA21BC802B80
Authority key identifier: FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa
Signing time:             Tue 05 Mar 2024 17:56:41 +0000
ROA not before:           Tue 05 Mar 2024 17:51:41 +0000
ROA not after:            Tue 04 Mar 2025 17:56:41 +0000
asID:                     262176
IP address blocks:        200.16.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl
                          rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:16:fd:c1:9b:2a:cb:30:6b:6e:06:e9:5f:f4:aa:21:bc:80:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577
        Validity
            Not Before: Mar  5 17:51:41 2024 GMT
            Not After : Mar  4 17:56:41 2025 GMT
        Subject: CN=F5ACFFFBFAFB3719F0E5BD4E5883EC2015C8545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:e7:fb:87:dd:8b:e8:25:f1:e7:f5:be:6b:
                    2f:56:95:ae:90:53:e8:57:7b:ef:49:62:86:b0:55:
                    0f:22:23:7c:54:25:53:14:36:6c:d1:db:fb:00:5a:
                    a2:7e:37:61:8f:2c:45:5b:43:31:13:0b:11:59:1d:
                    79:21:d4:c8:4e:73:25:ed:37:e8:5c:cd:5f:06:0e:
                    0c:a3:7f:91:ac:f7:f0:62:cc:60:03:b3:6c:72:ef:
                    15:95:e2:c4:a3:ae:9f:29:43:c3:4e:42:8f:b8:9f:
                    1a:c7:93:42:d3:08:e0:05:d7:31:fb:69:26:d0:97:
                    f4:e3:1e:82:4a:62:9d:d9:66:81:81:02:b2:67:bd:
                    f7:af:32:cb:d9:02:5f:45:c8:1a:f2:b3:91:23:bd:
                    fb:50:6a:4f:84:fe:e3:57:18:6a:12:e1:0c:71:a2:
                    0d:ca:d8:85:13:3f:07:63:f1:c3:f8:d7:d7:b2:dc:
                    ac:6d:68:87:99:fc:8e:1a:1f:30:c6:9c:fd:b9:de:
                    82:e1:30:7f:de:b0:80:9b:17:55:4c:dd:74:ab:a1:
                    b0:4a:08:da:cf:de:43:c6:d1:c9:b6:12:fd:44:e6:
                    8f:d8:33:1e:9a:9f:1e:3a:31:10:64:ce:63:9e:b8:
                    1e:c8:75:22:46:4b:fb:1d:a3:81:ab:d3:03:d3:37:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:FF:FB:FA:FB:37:19:F0:E5:BD:4E:58:83:EC:20:15:C8:54:5D
            X509v3 Authority Key Identifier:
                keyid:FA:1E:2E:36:DC:AD:6B:ED:1E:F7:07:63:BB:B1:D1:C1:9E:8E:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1E2E36DCAD6BED1EF70763BBB1D1C19E8E9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/644857C662044D38EB1557D6468BC390DF82840ECAF831F65AD33FC5E5E03FA6/0/3230302e31362e39352e302f32342d3234203d3e20323632313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:86:04:d8:fd:ab:77:cd:ce:b5:3d:b8:8a:d7:0d:2e:d8:c0:
         01:fc:95:ae:a8:dc:de:0f:f4:b7:0c:1f:86:23:3e:f6:74:fc:
         91:1d:3f:e3:e3:02:71:23:b1:61:63:17:8c:23:e2:3d:f6:4f:
         c3:2f:a2:7b:c3:ef:3e:7e:67:6c:8f:1c:cf:b3:7d:d8:ec:a3:
         fa:a7:91:a2:17:4a:67:6d:e0:5d:31:d5:ea:22:44:36:09:b6:
         cb:37:98:d0:92:86:d0:d7:21:27:07:fe:0b:75:14:24:eb:a8:
         75:ed:e1:46:1e:05:a3:a3:83:ad:27:c0:52:6e:38:08:c0:fe:
         39:0f:cd:2d:27:7f:3f:72:94:4e:7d:e6:00:c3:60:a8:0a:d1:
         f0:15:0c:90:d1:3f:5e:d7:9b:8d:00:01:aa:63:f6:bd:b3:7c:
         ab:f7:1c:6d:3e:25:2e:64:34:c1:6e:c4:c1:7b:4b:20:a5:ed:
         01:34:15:db:69:81:66:be:41:45:f4:95:3c:a8:9d:a3:3d:09:
         9f:db:cc:d7:9f:59:a8:c2:6c:42:64:a4:68:86:b4:98:bb:a1:
         2e:0a:64:6d:b4:f9:f8:06:da:5e:cf:c5:b4:3b:ba:87:ce:da:
         19:6c:99:1d:83:ea:04:75:38:99:d4:f4:5c:80:c9:bf:a5:00:
         dc:ec:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org