Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133362e302f32332d3234203d3e203237383735.roa
File:                     3230302e31322e3133362e302f32332d3234203d3e203237383735.roa (raw, json)
Hash identifier:          R9JL38LohiI1EPMGFrPfAzNOf8UzEvHjKWrLD6r3RDY=
Subject key identifier:   F6:E0:14:79:E8:07:AE:18:A8:37:12:B8:0E:49:79:5D:15:4B:19:DA
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       329B824702E83C64293CD36DAD682018C5F64E17
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133362e302f32332d3234203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:28 +0000
ROA not before:           Tue 05 Mar 2024 17:48:28 +0000
ROA not after:            Tue 04 Mar 2025 17:53:28 +0000
asID:                     27875
IP address blocks:        200.12.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9b:82:47:02:e8:3c:64:29:3c:d3:6d:ad:68:20:18:c5:f6:4e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:28 2024 GMT
            Not After : Mar  4 17:53:28 2025 GMT
        Subject: CN=F6E01479E807AE18A83712B80E49795D154B19DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:4e:ea:53:e6:77:b7:05:dc:f4:46:59:c9:
                    6a:06:c1:d0:2f:93:cd:db:aa:a9:3d:1c:3b:db:3c:
                    c9:d3:4b:84:f8:d0:a5:70:aa:64:dd:a4:3e:79:a3:
                    48:41:ec:d2:a9:2f:21:b2:7a:a0:c9:c0:bd:72:1a:
                    c4:82:37:e3:92:19:92:75:8e:25:61:65:11:03:9b:
                    9e:04:57:1e:47:c1:96:2c:c2:9a:53:16:30:d3:94:
                    47:d3:d1:37:01:25:6c:64:a4:48:9f:bd:8f:1d:75:
                    60:4d:5c:38:63:53:83:18:bd:01:f0:4a:fe:56:b9:
                    4b:eb:62:6c:22:2f:26:b9:bc:40:d9:c8:51:76:04:
                    cd:09:dc:be:07:25:d3:e4:23:e0:a5:65:e9:59:29:
                    13:73:63:7c:09:18:c2:cf:61:84:48:3a:c9:bb:f4:
                    1b:88:fe:60:00:32:25:f3:87:5b:27:c0:7d:94:b7:
                    d7:04:70:6e:35:0c:57:f4:3d:9a:1b:a4:2f:02:2c:
                    34:d5:b5:b7:0f:93:43:11:e4:ea:4e:bd:3c:4f:a5:
                    49:d7:99:91:9d:d3:4d:8e:74:af:cb:0d:1e:0c:b1:
                    da:5a:74:73:9b:96:67:0d:9d:01:0c:85:8b:31:ca:
                    ad:74:41:b6:6a:1c:10:87:30:97:56:37:57:79:ab:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E0:14:79:E8:07:AE:18:A8:37:12:B8:0E:49:79:5D:15:4B:19:DA
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133362e302f32332d3234203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:99:23:b3:0d:6d:8d:a7:fa:71:f4:ce:40:8c:78:d0:31:e1:
         2c:48:cc:74:7a:02:cf:7e:a6:3b:9f:0f:c9:f9:46:9f:7e:4a:
         62:10:dd:1f:36:ba:7c:e2:09:1f:c8:c0:a8:12:cd:29:27:91:
         a9:ce:3e:f3:12:ae:79:74:af:1c:e2:18:53:bd:a5:bf:39:d3:
         57:84:70:33:0e:fc:19:44:79:6d:62:f1:7b:ed:d2:8e:61:9a:
         2b:fb:b0:3f:ab:26:e8:6c:ae:1d:6f:37:29:f9:c7:62:6f:b4:
         a5:9a:a0:da:ba:d5:a5:67:aa:f3:b7:8f:0a:a3:7f:09:be:ba:
         07:87:9c:af:03:df:f6:cb:29:6a:17:98:02:f4:63:f0:20:f0:
         ad:b4:7d:73:c2:56:17:0e:57:06:65:70:88:c4:0c:aa:18:b9:
         01:c1:29:0b:f9:34:ff:03:8c:e8:91:42:2b:be:59:92:7a:83:
         9e:1b:7c:74:ff:5c:8b:4a:62:cc:e1:25:69:1b:5c:07:49:1a:
         cb:12:20:75:b5:77:5e:79:a9:66:bc:07:3a:13:be:97:1b:62:
         b0:b5:1e:b9:6d:45:d0:a5:14:58:b7:5f:62:99:0f:2c:16:fb:
         ea:3d:12:90:76:19:86:2f:0c:65:fd:a4:73:e0:82:ee:c6:77:
         06:e9:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 18:27:06 2024 by rpki-client on console-ams.rpki-client.org