Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133382e302f32342d3234203d3e203237383735.roa
File:                     3230302e31322e3133382e302f32342d3234203d3e203237383735.roa (raw, json)
Hash identifier:          4cWQ4x23yk4b8EHab4qSGWwEEOcTjvrnVdshdVyl5g0=
Subject key identifier:   87:8E:69:0C:23:C5:FE:EF:C5:24:B6:D1:02:34:18:59:5C:69:99:2E
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       27177ED96FD0C353A9FAE3A7435028B7B50FFCF9
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133382e302f32342d3234203d3e203237383735.roa
Signing time:             Tue 05 Mar 2024 17:53:26 +0000
ROA not before:           Tue 05 Mar 2024 17:48:26 +0000
ROA not after:            Tue 04 Mar 2025 17:53:26 +0000
asID:                     27875
IP address blocks:        200.12.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:17:7e:d9:6f:d0:c3:53:a9:fa:e3:a7:43:50:28:b7:b5:0f:fc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Mar  5 17:48:26 2024 GMT
            Not After : Mar  4 17:53:26 2025 GMT
        Subject: CN=878E690C23C5FEEFC524B6D1023418595C69992E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:e1:a2:01:47:c4:c5:fc:f4:9d:4f:b1:d6:
                    1d:45:28:10:f7:b2:ed:c8:c9:62:29:31:61:53:b7:
                    4f:8e:8b:1b:4e:a9:dc:fc:c0:f6:eb:fa:e0:9e:6c:
                    7b:0e:b1:ff:6f:b3:58:e1:6f:bc:a0:79:54:6f:56:
                    e4:f6:7a:95:97:42:ff:4e:39:b7:f3:9e:87:66:a1:
                    c7:ff:c9:34:eb:cf:1c:c0:e7:5c:0e:91:d4:01:14:
                    0c:18:b4:b0:3b:76:0a:b3:1b:15:cc:f8:50:1f:63:
                    c9:e4:78:51:f5:78:42:f1:a5:02:87:a1:e8:de:7d:
                    d8:52:6f:97:c4:f1:26:f8:7b:47:50:a2:c1:48:b3:
                    68:2c:39:e2:32:70:a1:43:e9:98:b7:8e:ef:07:a0:
                    70:06:72:c1:ac:30:d3:0d:e2:ce:90:28:2f:2a:8b:
                    7f:fb:20:19:dd:9d:42:90:5f:7c:25:49:24:d5:a8:
                    72:0e:9e:f1:68:2a:5a:06:da:ef:be:be:74:e4:57:
                    f3:e6:85:2a:ae:4f:f3:c4:03:6d:7b:3e:17:f8:9c:
                    3e:a8:c3:74:13:30:0e:c5:b7:25:5b:bc:ce:a1:47:
                    99:03:b5:99:86:28:ef:7f:10:de:b8:9a:4e:43:45:
                    8f:2a:2a:a4:e9:c6:03:35:3a:4f:f4:99:66:b0:38:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:69:0C:23:C5:FE:EF:C5:24:B6:D1:02:34:18:59:5C:69:99:2E
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/3230302e31322e3133382e302f32342d3234203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:18:e1:76:b6:ae:ee:2c:f1:e0:c0:86:7c:aa:77:ec:d9:
         6c:a1:04:36:44:8b:2c:24:e4:47:c7:75:de:e1:71:2a:3c:29:
         40:1d:81:07:d8:cc:11:2a:42:1f:20:d6:04:49:54:aa:c1:4b:
         75:6c:c9:fc:75:7b:f3:d8:f0:59:81:db:21:10:94:6e:e7:25:
         33:cd:02:9a:1b:8a:87:42:14:98:19:b4:1a:7d:34:54:e2:ff:
         a1:de:5e:7f:72:8a:bc:6a:56:ff:c0:80:6f:72:33:12:f5:f9:
         54:6e:a2:34:a0:17:58:44:e9:25:7d:e4:bb:d0:de:b2:6e:1d:
         98:29:ba:32:04:4a:a4:a9:26:b8:05:43:0d:d1:91:26:90:0d:
         dd:98:55:f8:0e:2a:f8:66:52:1f:55:e8:55:e5:25:cc:25:79:
         09:02:f7:01:64:33:08:c1:0b:a6:19:39:2b:0c:52:f7:02:44:
         67:20:ed:ac:74:57:f2:c1:f9:c2:6a:71:9c:7f:36:71:14:2e:
         e8:15:fa:ee:40:89:06:f5:b0:21:27:63:6c:60:1e:7b:88:aa:
         c5:04:9b:3c:74:09:c7:f1:c5:ad:0b:a8:f3:2b:16:b6:9e:5a:
         16:2d:71:8e:ce:26:92:a2:1e:8b:cb:f6:64:8b:ad:a3:d4:33:
         4f:ea:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org