Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e31302e3137362e302f32332d3234203d3e20323633373739.roa
File:                     3230302e31302e3137362e302f32332d3234203d3e20323633373739.roa (raw, json)
Hash identifier:          Qu+MIM7j6Ee6zz2X33mUN8e7fd/+6+9PNgqjyV0elWU=
Subject key identifier:   9E:E3:5B:F6:52:4E:E2:BB:38:78:73:A3:72:DD:55:23:67:53:75:A2
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       6A72D6F00AA3CF14A3E25E18B8E5DF12D35FE458
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e31302e3137362e302f32332d3234203d3e20323633373739.roa
Signing time:             Tue 05 Mar 2024 17:41:15 +0000
ROA not before:           Tue 05 Mar 2024 17:36:15 +0000
ROA not after:            Tue 04 Mar 2025 17:41:15 +0000
asID:                     263779
IP address blocks:        200.10.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 14:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:72:d6:f0:0a:a3:cf:14:a3:e2:5e:18:b8:e5:df:12:d3:5f:e4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Mar  5 17:36:15 2024 GMT
            Not After : Mar  4 17:41:15 2025 GMT
        Subject: CN=9EE35BF6524EE2BB387873A372DD5523675375A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:52:cc:95:99:07:1f:a2:7b:c9:35:1c:bb:
                    18:5f:e7:7e:47:e8:e7:5d:eb:83:11:ad:ed:4e:bf:
                    54:b8:1b:14:ce:77:53:2a:78:43:d0:08:ac:d7:39:
                    51:63:09:9e:8b:80:9b:53:98:83:f9:51:45:de:1b:
                    fa:83:99:3d:e2:a7:e1:58:c7:18:4c:38:39:81:44:
                    3b:03:dd:79:69:32:4e:24:c7:8b:72:1b:27:65:b9:
                    07:c9:da:70:97:17:ec:4a:ee:60:c5:78:af:59:f3:
                    07:25:32:ac:21:d9:2a:fa:49:ec:0d:7e:03:03:8f:
                    67:83:dc:48:42:9b:bd:bc:62:d2:ab:ad:71:f1:56:
                    62:cd:fb:f1:ab:8e:09:2f:1a:6f:42:cb:f3:83:65:
                    f7:5b:b0:07:82:a3:ab:80:2a:8e:b0:22:75:5d:7c:
                    0d:cf:bf:24:8b:08:11:5a:ed:80:a9:23:20:77:39:
                    77:6c:8a:f9:bc:d4:49:8d:d4:0c:e3:28:a6:a3:f3:
                    c3:4e:ed:9e:de:f4:bf:e2:30:8a:99:58:fb:98:b1:
                    ba:8c:61:e2:ca:75:d3:ac:a4:01:e2:1b:13:69:56:
                    0a:4a:ae:9c:cc:80:f9:07:b2:77:2c:e4:5f:61:53:
                    7b:05:d2:60:ce:b0:5b:59:74:91:23:f3:71:2c:28:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:5B:F6:52:4E:E2:BB:38:78:73:A3:72:DD:55:23:67:53:75:A2
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e31302e3137362e302f32332d3234203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:a3:78:83:89:5f:04:2a:51:54:97:26:44:0c:77:91:d2:
         ef:90:64:13:22:c0:4b:fd:7d:09:ce:c0:20:1a:fb:d7:86:06:
         57:68:2a:3b:74:47:c3:2f:38:e3:e8:68:44:c7:79:ce:15:cf:
         81:97:a0:47:8a:db:db:f9:c5:bc:a9:5c:8d:d0:f4:b9:c7:6d:
         38:e7:0f:d7:a9:b8:24:e5:11:df:28:16:9c:d3:ab:55:01:c7:
         32:57:b5:0c:73:3f:35:b3:e8:86:cd:0a:c7:57:e5:79:41:83:
         8e:d0:f0:8f:a8:ea:b3:20:3c:c2:f5:da:45:3c:a4:6b:c7:07:
         6e:bf:43:cf:77:4e:6d:22:9d:2c:11:3b:0b:c6:c8:d8:d1:c1:
         cb:21:5f:d1:1f:a2:e2:a1:d2:15:d4:b4:0e:17:ff:1a:4f:89:
         74:9b:eb:ed:3a:3c:b6:7d:88:f6:81:7e:46:0a:c4:eb:8b:0f:
         fd:26:41:e1:02:75:cf:34:17:f3:6d:cc:9a:47:7e:f1:a7:85:
         76:5d:5b:41:d6:3a:ad:84:a2:34:a6:fe:9c:ab:46:df:4d:c3:
         74:3e:7a:c5:8e:b1:e0:fc:f9:ba:c7:6a:a7:f5:20:56:0e:ee:
         02:4d:49:a1:b7:bf:b2:f2:ad:ab:9f:40:ca:97:da:fb:53:30:
         b2:90:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org