Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3234302e302f32302d3234203d3e203237373633.roa
File:                     3230302e32352e3234302e302f32302d3234203d3e203237373633.roa (raw, json)
Hash identifier:          ad09arZX4GUV1ju+NGOmOjR/Ps3zqEHPQKVptJFt0jg=
Subject key identifier:   3C:3A:38:B2:D3:36:9C:3F:08:19:2A:20:CA:33:6E:7C:58:6B:D4:24
Certificate issuer:       /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial:       170EA40ED7193BF75A493A35790B6CD26A449A6E
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3234302e302f32302d3234203d3e203237373633.roa
Signing time:             Tue 05 Mar 2024 17:58:36 +0000
ROA not before:           Tue 05 Mar 2024 17:53:36 +0000
ROA not after:            Tue 04 Mar 2025 17:58:36 +0000
asID:                     27763
IP address blocks:        200.25.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0e:a4:0e:d7:19:3b:f7:5a:49:3a:35:79:0b:6c:d2:6a:44:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
        Validity
            Not Before: Mar  5 17:53:36 2024 GMT
            Not After : Mar  4 17:58:36 2025 GMT
        Subject: CN=3C3A38B2D3369C3F08192A20CA336E7C586BD424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:f7:de:8f:be:3f:d2:14:5c:5e:dd:4a:69:
                    54:5d:3b:0c:75:f1:5c:0a:db:06:60:00:b5:84:f5:
                    18:47:0a:b2:53:ec:07:51:56:73:03:55:be:14:1a:
                    60:bd:7b:74:e3:9a:50:0d:cf:39:9a:29:cf:7f:3b:
                    15:02:9b:87:20:7d:e9:26:1b:29:45:97:d3:68:f1:
                    10:99:77:13:14:ce:bf:97:cb:55:d7:d1:50:f8:72:
                    78:d8:7f:84:3e:32:e0:3f:f8:3f:53:d5:f0:95:b7:
                    92:2c:eb:c9:20:c0:d5:20:c9:e5:69:03:76:47:a1:
                    a4:6c:75:0e:a5:74:49:50:30:ca:04:ff:6b:db:05:
                    5b:25:67:24:f3:bc:dc:a2:f6:16:18:81:98:82:d8:
                    21:2d:67:fa:00:ec:03:09:3e:2b:f1:40:0f:4b:06:
                    3a:b9:a7:b2:54:a2:4e:97:22:61:a4:28:45:9c:62:
                    ee:8d:23:fe:f7:4e:ae:7a:2d:3a:ae:04:16:c3:b5:
                    4b:01:15:33:fa:99:db:a9:2e:e2:6b:18:64:34:cd:
                    0d:24:ec:c4:e9:ab:65:ce:10:ae:91:2e:56:97:03:
                    be:e8:3f:cf:7e:3a:c7:2a:b1:23:da:56:ae:cc:66:
                    5c:e4:e3:43:1c:93:0d:6b:97:74:72:91:74:48:21:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:38:B2:D3:36:9C:3F:08:19:2A:20:CA:33:6E:7C:58:6B:D4:24
            X509v3 Authority Key Identifier:
                keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3234302e302f32302d3234203d3e203237373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:65:fb:30:c2:7f:43:2e:5f:f5:62:e5:8d:eb:c0:b6:a4:
         df:26:db:56:29:fb:63:aa:6d:4d:05:07:c5:c7:a5:eb:ed:4a:
         71:10:df:76:c5:cc:c4:e4:be:a5:d1:d5:04:22:51:f5:30:18:
         17:48:0a:51:ee:fd:74:0c:a9:28:57:7d:44:4a:93:81:04:ac:
         df:05:c4:e1:cb:fe:a9:f8:74:08:d8:70:8b:1a:e2:a2:ca:70:
         30:aa:15:37:10:a2:f9:d3:06:ed:3d:4c:dc:80:8a:d1:f8:ef:
         d3:91:0c:73:60:a5:25:34:4c:0e:f8:25:ef:d3:6c:46:56:58:
         30:56:dc:d1:fb:75:ac:05:b8:d1:dd:61:79:a5:f2:32:bf:43:
         ea:83:c1:13:01:4f:7f:b0:2c:bd:c1:0f:34:9f:26:84:cd:a3:
         f6:6a:5b:c9:5b:ef:4b:f8:60:23:41:10:3a:84:88:e8:d2:4e:
         45:a5:a6:69:98:a7:b3:27:4b:4d:d1:01:c4:08:ab:28:f6:57:
         8d:53:f5:9b:a2:0f:09:e8:cf:76:72:bd:20:71:9d:dc:36:71:
         e4:c3:ba:16:e4:49:7e:2b:66:a8:8c:98:9a:4e:a7:04:07:aa:
         28:89:a0:e5:01:8c:ed:3e:2c:8f:3c:86:5c:20:d2:e5:63:58:
         3a:b0:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org