Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133342e302f32332d3234203d3e203237383735.roa
File:                     3230302e31322e3133342e302f32332d3234203d3e203237383735.roa (raw, json)
Hash identifier:          KQq69xIKx0UseTvIQKrToNW1dHq5toRqewMxwJQPlqI=
Subject key identifier:   A9:95:B6:CA:27:34:EA:00:0A:BE:79:17:19:9D:DD:74:1D:9D:93:1C
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       732C9A85649FBEF0051C7DAC43079B5B5630A7C1
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133342e302f32332d3234203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:25 +0000
ROA not before:           Tue 05 Mar 2024 17:48:25 +0000
ROA not after:            Tue 04 Mar 2025 17:53:25 +0000
asID:                     27875
IP address blocks:        200.12.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:9a:85:64:9f:be:f0:05:1c:7d:ac:43:07:9b:5b:56:30:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:25 2024 GMT
            Not After : Mar  4 17:53:25 2025 GMT
        Subject: CN=A995B6CA2734EA000ABE7917199DDD741D9D931C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:7f:a4:3a:6e:fa:c2:d5:4f:2c:0a:46:47:
                    03:15:0d:58:04:c6:a8:c9:6b:66:46:ae:6e:2e:e1:
                    d1:fd:ff:fb:06:9e:cd:65:1b:b6:59:6a:73:09:1a:
                    33:97:a2:db:c2:be:d1:f8:0b:09:5b:60:24:27:ba:
                    3b:c5:3a:04:10:80:7f:48:fe:ad:5e:28:d0:25:11:
                    ad:b7:2d:13:de:94:29:77:9a:24:5f:4a:c0:35:a5:
                    57:98:e7:76:a7:5f:e5:ee:de:86:f4:35:e5:51:50:
                    15:84:ef:09:e5:cb:e9:17:46:45:38:23:f1:b2:67:
                    df:1b:ab:6b:6f:f1:ae:63:85:e8:7a:14:6e:2f:7f:
                    0a:60:26:22:0e:ce:ce:e7:6e:94:ee:97:66:01:72:
                    6b:65:39:42:8a:b8:63:7e:48:cd:19:3a:55:2c:60:
                    40:82:de:35:ba:98:e1:ae:5d:2a:c1:c9:f5:58:ba:
                    e3:c2:51:d2:48:fe:7b:e3:4e:de:c2:ab:24:8d:08:
                    99:07:ed:cb:de:11:0b:70:a6:46:3f:e8:a6:0e:4d:
                    fc:00:d5:69:df:89:bd:0e:6f:55:b7:dd:30:98:2e:
                    52:45:95:ef:ed:e0:15:3b:f2:02:29:f7:c2:34:2b:
                    50:d2:b3:ff:04:dd:6d:97:db:4d:07:64:8c:01:39:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:B6:CA:27:34:EA:00:0A:BE:79:17:19:9D:DD:74:1D:9D:93:1C
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133342e302f32332d3234203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:39:de:0d:39:f9:f9:e9:61:4d:0f:54:9f:26:3a:aa:5c:
         85:7a:0e:9c:ba:34:87:f4:f5:ce:78:ac:f6:82:5d:42:4d:74:
         dc:f7:40:af:a7:94:7b:3d:f3:84:f6:40:82:a4:b4:c2:e3:43:
         58:c5:3f:5a:b2:5e:7e:5c:31:41:7f:c2:07:0e:3d:5b:ef:1a:
         f2:2a:0d:b1:dd:d4:bc:fa:80:85:fa:6d:54:01:04:cf:9f:b5:
         b7:32:25:99:53:35:89:cc:62:84:44:69:b9:3c:c8:58:17:08:
         53:72:2d:ef:da:53:98:1c:a1:fd:2b:9a:cd:96:52:79:ea:26:
         36:61:87:aa:70:80:2a:69:b6:af:36:a1:1b:25:b7:15:6d:a1:
         22:6d:8f:3a:9b:88:67:f9:e6:a2:47:17:db:8f:cf:50:3f:6e:
         50:a0:cf:cb:03:41:51:ab:75:b5:40:4a:fe:31:12:80:19:f8:
         82:24:59:65:09:78:6b:a0:b7:78:9f:83:ff:a6:73:ac:bb:18:
         09:bf:72:5a:91:8a:ee:96:39:e5:ef:21:80:75:ed:64:51:44:
         d8:15:2b:da:5e:03:c0:93:41:3b:b8:24:b9:80:78:47:dd:ec:
         6e:74:da:d0:df:aa:6f:d2:82:fc:fd:84:93:3c:b3:be:7f:b7:
         9e:c2:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org