Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133332e302f32342d3234203d3e203237383735.roa
File:                     3230302e31322e3133332e302f32342d3234203d3e203237383735.roa (raw, json)
Hash identifier:          8h4DPiJZRJ5R042Z0rm+7D3LFOZv/RN34lkYaxcm2bc=
Subject key identifier:   7C:EC:16:88:FC:E9:4B:6D:AD:E7:82:77:2E:10:2C:27:94:E3:AF:7E
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       0AB2DF011F7C1BA737ABB4AAF9E72518413E2888
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133332e302f32342d3234203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     27875
IP address blocks:        200.12.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:df:01:1f:7c:1b:a7:37:ab:b4:aa:f9:e7:25:18:41:3e:28:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=7CEC1688FCE94B6DADE782772E102C2794E3AF7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:6c:92:52:c3:23:52:ab:00:dd:cb:fb:01:
                    4f:9c:89:79:97:3f:57:46:09:d3:fa:3d:0b:81:29:
                    67:f2:eb:98:63:2e:a4:41:ea:08:e3:30:fb:ed:ab:
                    9c:f0:11:31:7a:11:2e:51:5b:b5:00:39:dc:82:84:
                    00:22:54:a1:fc:d8:7c:4f:b5:23:85:9e:31:7d:f8:
                    68:c2:57:ed:b5:bc:4f:fd:86:d2:0a:8b:a1:19:ab:
                    12:26:4a:59:3d:97:0e:2a:91:8d:e7:0b:79:23:d3:
                    40:88:ec:c5:9e:00:fe:19:83:c1:d2:7f:d2:34:ed:
                    66:9b:b9:02:2d:aa:d7:b0:6c:5e:37:dc:c2:6c:f3:
                    2a:e4:34:53:e5:ce:99:01:a7:9f:3f:f6:ed:47:47:
                    19:99:bf:05:c9:32:36:67:80:dd:b7:9f:5b:a5:f9:
                    71:67:01:b8:c0:6a:8a:c1:4e:35:4a:8d:4a:9a:50:
                    f1:1a:86:a7:86:69:b4:1c:4f:e8:9a:b3:6c:83:b2:
                    d7:b8:12:0e:33:a7:27:c2:31:2b:97:ca:e3:ce:49:
                    7b:c4:be:76:30:48:cc:85:09:00:1b:94:2c:be:88:
                    b9:32:2b:ae:91:bf:1c:c6:12:5c:af:0b:f7:53:9e:
                    dc:04:14:8c:65:35:6a:6a:7b:e9:f2:a3:6b:16:f3:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:16:88:FC:E9:4B:6D:AD:E7:82:77:2E:10:2C:27:94:E3:AF:7E
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133332e302f32342d3234203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:22:15:0f:94:9f:82:6f:c2:81:68:b3:91:61:1d:4b:7a:0c:
         d1:28:98:e0:99:75:66:74:21:77:88:c9:54:bc:c3:0c:0e:6d:
         56:ea:9e:06:ed:41:aa:df:8d:c6:1d:c3:b5:f3:74:e8:5a:cf:
         af:ef:cb:75:b8:ee:e2:1f:ef:9f:19:19:b3:e2:14:c4:66:5b:
         52:bf:55:a0:94:8a:b3:ac:ec:78:ee:47:0c:a7:b5:dd:9d:11:
         ea:96:b1:4f:94:20:83:9f:72:69:18:da:38:b8:23:06:0e:88:
         38:52:7a:51:f9:cf:70:b4:75:52:48:bc:4a:10:7d:c8:e2:4a:
         81:fd:15:a9:87:16:f2:77:76:f6:56:0a:81:33:82:c0:04:0f:
         70:69:3e:15:9a:50:ac:d5:e9:da:1c:e1:0d:60:3c:50:46:f0:
         c5:e3:d1:22:9a:e8:84:0e:28:87:b7:56:35:3d:05:03:38:e2:
         69:c6:e4:d2:34:a0:2d:81:5e:f5:95:38:2c:2e:d1:01:b2:db:
         0e:2d:6a:1a:71:db:d1:f5:07:8b:f2:31:86:65:54:3e:ee:99:
         59:26:5d:8e:c9:8e:cd:95:68:80:60:70:87:40:22:b2:d0:50:
         50:fe:53:85:af:5d:d6:f5:63:c7:39:9f:69:f7:cb:1a:00:6a:
         a6:0a:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:06:02 2024 by rpki-client on console-fra.rpki-client.org