Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f32302d3234203d3e203237373633.roa
File:                     3230302e32352e3232342e302f32302d3234203d3e203237373633.roa (raw, json)
Hash identifier:          bd8pO2nd/5Zn/4N6PKBnlzqPo6p1yZBmuhsvtPv9WaU=
Subject key identifier:   FC:3A:FA:3E:E1:90:C5:52:81:CD:D8:48:D6:A7:3D:9F:2F:5C:81:71
Certificate issuer:       /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial:       2F2F80B14D5AD512830EE7F7CF889DAB5947972B
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f32302d3234203d3e203237373633.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     27763
IP address blocks:        200.25.224.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:80:b1:4d:5a:d5:12:83:0e:e7:f7:cf:88:9d:ab:59:47:97:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=FC3AFA3EE190C55281CDD848D6A73D9F2F5C8171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:65:ae:1f:aa:2d:e4:41:e5:df:12:cb:c5:
                    57:49:55:7e:c8:f2:34:e3:55:05:7c:35:2f:3e:98:
                    f0:fa:a7:66:57:ca:df:64:b2:ad:3c:2a:4d:0e:2d:
                    fc:b4:ae:ac:b0:f5:e2:cb:76:4f:79:00:4e:e6:b0:
                    18:5a:71:d7:9a:73:01:e5:03:09:23:cd:44:00:c1:
                    c1:94:aa:cc:eb:e4:f9:2a:f7:1f:72:ea:99:e0:26:
                    ea:ff:07:70:0c:7a:35:fc:39:1d:9f:ca:34:a0:85:
                    95:22:6b:01:97:62:64:f3:e3:87:45:c4:a2:a3:75:
                    eb:ef:01:95:83:39:6e:57:1e:d7:21:f4:29:d7:6e:
                    d9:5b:ea:1f:a0:e7:02:3c:22:13:b5:39:12:85:63:
                    a5:28:ca:d3:81:61:07:e7:07:af:c3:f6:9b:b4:5c:
                    e6:d2:54:91:30:fd:1d:14:4e:a3:d6:26:90:e1:3a:
                    ed:5a:01:06:73:69:e6:b2:c2:bc:15:2d:95:0e:f8:
                    ea:1b:8c:91:d3:91:f5:75:85:69:39:24:65:8a:d6:
                    a5:f8:78:48:86:78:53:10:99:0e:06:91:a3:d8:8a:
                    7c:ec:7b:f8:93:3c:65:b8:09:0d:fc:95:2b:01:61:
                    cc:a7:e8:4e:db:35:a0:f9:25:68:5f:55:33:20:72:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:FA:3E:E1:90:C5:52:81:CD:D8:48:D6:A7:3D:9F:2F:5C:81:71
            X509v3 Authority Key Identifier:
                keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f32302d3234203d3e203237373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:84:77:8e:71:ab:77:8e:f8:44:c3:8d:90:e8:8b:ba:54:
         4f:b9:63:29:89:23:30:0e:6e:2a:d9:6a:15:48:82:cb:86:5b:
         11:56:12:bb:b4:18:57:d0:a5:bb:c2:37:b4:81:df:18:25:b1:
         ca:5f:12:18:d6:75:32:1d:6e:11:a2:f7:c9:84:66:0a:12:25:
         29:c8:59:94:0e:77:a2:a2:60:f0:04:be:e4:03:df:1b:ec:a3:
         04:f5:20:4b:06:12:ca:02:dd:4a:3f:fc:87:0f:5d:c6:8c:ab:
         a7:45:c2:16:07:42:f5:5f:e8:2f:b0:14:d6:5c:fe:cf:f6:e8:
         db:3b:85:15:92:09:8c:4d:bc:62:8f:9e:08:db:99:08:53:23:
         07:8e:1c:7a:17:3d:3c:c5:85:b9:07:a7:34:73:36:81:54:e8:
         27:0f:d2:aa:3c:af:5a:51:15:72:74:e2:81:4c:9f:a9:48:35:
         da:b6:45:1e:02:7d:3e:c6:13:08:64:f9:ba:1e:7f:5b:f7:d3:
         43:b7:ec:1f:71:91:4b:c2:49:02:49:f5:2b:68:ab:5c:22:2f:
         73:36:d8:74:3b:bd:89:72:e7:af:59:f6:79:ec:46:32:76:65:
         93:a5:4a:e9:ba:fe:d8:19:6d:a6:d2:a1:27:6a:3c:b4:8e:2f:
         1e:e1:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----