Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3137362e302f32312d3233203d3e203130363137.roa
File:                     3230302e38312e3137362e302f32312d3233203d3e203130363137.roa (raw, json)
Hash identifier:          VKrlQ58BKJZXGxhgprGXQX+lZbJ53AnMpxQrKDCU5Zw=
Subject key identifier:   40:90:84:EC:A7:5C:DC:A1:30:DB:28:DE:D3:8E:1B:81:57:48:B1:05
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       71AA30BE4B4082286E2F42E4D15C4EFA2E1738DD
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3137362e302f32312d3233203d3e203130363137.roa
Signing time:             Tue 05 Mar 2024 18:15:21 +0000
ROA not before:           Tue 05 Mar 2024 18:10:21 +0000
ROA not after:            Tue 04 Mar 2025 18:15:21 +0000
asID:                     10617
IP address blocks:        200.81.176.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:aa:30:be:4b:40:82:28:6e:2f:42:e4:d1:5c:4e:fa:2e:17:38:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Mar  5 18:10:21 2024 GMT
            Not After : Mar  4 18:15:21 2025 GMT
        Subject: CN=409084ECA75CDCA130DB28DED38E1B815748B105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:ee:72:e2:5f:bf:48:aa:e6:cc:62:e3:74:
                    ef:e3:e5:7f:cb:97:50:4c:b9:b2:70:27:4b:70:b1:
                    ab:18:2a:05:02:67:79:f1:50:45:4c:e5:44:ca:14:
                    58:2f:3b:a6:c3:6b:b2:59:af:44:69:28:92:57:52:
                    16:b5:a0:9d:33:bd:fc:ef:8c:4c:19:91:c8:33:5a:
                    31:d1:df:2a:b1:89:23:d4:57:24:f1:0a:db:25:6f:
                    e1:51:ce:ae:20:ba:fb:fb:5c:20:16:5f:2a:11:8b:
                    49:1e:08:fc:40:bc:2b:71:ed:9d:1e:1a:3b:01:09:
                    83:b0:96:96:df:59:25:16:e6:b2:a7:55:7b:6f:c3:
                    96:01:56:93:b6:1d:84:89:1e:bd:2f:a3:25:ed:c2:
                    0c:32:85:44:03:0a:7a:44:0e:27:d2:61:e6:39:30:
                    7d:b6:62:2d:bc:14:f5:36:45:a9:17:de:c8:4b:6a:
                    5f:0e:15:e5:a1:8c:9a:73:a6:12:c5:6e:02:c8:54:
                    7e:07:c8:84:2b:f9:00:c9:49:09:a9:9c:8b:ea:42:
                    24:f3:33:b9:37:59:b8:02:75:b9:bc:dd:6a:26:e0:
                    b9:4c:02:25:70:fb:69:3d:64:a8:c1:db:c9:3b:13:
                    7e:a0:ca:d2:76:1b:8d:11:fe:89:a0:91:f7:3a:e7:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:90:84:EC:A7:5C:DC:A1:30:DB:28:DE:D3:8E:1B:81:57:48:B1:05
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3137362e302f32312d3233203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:bd:d2:de:3e:c8:a8:b6:80:f8:b9:4b:07:cf:f4:3e:a5:
         bf:b7:19:90:17:c4:1f:66:fd:86:3f:d4:16:ca:29:91:63:a7:
         5a:e3:1e:32:d7:83:d9:82:f9:d1:b2:1f:03:aa:04:65:59:75:
         5c:9f:02:84:68:72:63:29:a6:80:43:65:d6:58:1d:f7:48:17:
         44:d3:9b:6b:24:4a:64:8d:2d:90:ce:6c:3c:a9:cd:15:c0:95:
         91:bd:0a:8e:fb:9f:96:16:fa:d5:f2:a3:b5:c7:1f:b7:5e:b9:
         a1:e1:e3:d8:54:04:5e:55:7a:d2:77:a8:e6:67:94:5f:e4:0c:
         45:de:3e:4c:79:f6:e9:88:60:c9:4a:b8:7f:01:f8:0f:c2:42:
         bb:3a:b1:2c:87:8c:8f:2d:74:8b:f0:bc:43:2d:9b:ab:a3:33:
         9c:96:7b:e9:bf:6e:cb:fc:1e:1d:5a:9c:4e:36:3f:81:74:89:
         67:d9:53:8c:e5:18:d3:1a:78:e1:83:7c:93:0f:11:4e:70:db:
         37:dd:93:e7:ec:28:db:ca:4c:07:cd:87:25:95:26:a5:c3:60:
         9e:02:fd:d2:8a:e2:6f:e8:6e:b5:08:7a:63:87:4c:2e:54:2a:
         5c:a5:e2:ba:f4:d2:ff:b4:84:70:56:8e:df:e1:cb:e1:bc:59:
         e1:74:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org