Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa
File:                     3230302e332e302e302f32342d3234203d3e20323633313832.roa (raw, json)
Hash identifier:          O2KIQag6sC7bBHOpDQU8iy/3OesyPql3fO+0TlgibWw=
Subject key identifier:   69:02:15:D7:D6:19:25:02:96:8B:E1:25:4E:FA:13:2C:2F:EE:53:99
Certificate issuer:       /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial:       274C6410DD83B2783D7CF0EA7FBC259689659CA1
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa
Signing time:             Thu 21 Mar 2024 16:45:00 +0000
ROA not before:           Thu 21 Mar 2024 16:40:00 +0000
ROA not after:            Thu 20 Mar 2025 16:45:00 +0000
asID:                     263182
IP address blocks:        200.3.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:64:10:dd:83:b2:78:3d:7c:f0:ea:7f:bc:25:96:89:65:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
        Validity
            Not Before: Mar 21 16:40:00 2024 GMT
            Not After : Mar 20 16:45:00 2025 GMT
        Subject: CN=690215D7D6192502968BE1254EFA132C2FEE5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:e7:ee:8b:28:2c:5d:ca:98:79:a2:67:41:
                    68:d7:5e:73:59:31:6f:0c:44:06:5b:b8:b2:5c:f1:
                    88:80:57:24:c1:07:0d:bf:c7:b3:5e:0b:86:82:56:
                    42:d4:ea:d4:ca:05:59:17:2a:85:57:dc:ce:d6:9c:
                    37:58:35:04:fd:ab:9e:e6:6c:6a:23:69:2a:1c:68:
                    9f:1c:76:fa:78:af:7d:89:58:fa:fd:a1:7e:c7:51:
                    73:ed:90:ec:b7:5c:ec:5d:88:c8:75:9b:1f:97:13:
                    57:6a:01:6c:e6:fe:2b:05:a3:a2:aa:ea:48:a5:ef:
                    c0:fe:9c:7e:d9:23:08:4d:91:1a:ae:e1:3e:d0:13:
                    7d:ee:22:0f:fc:58:2b:cf:06:71:5e:9a:a3:fc:aa:
                    68:25:57:30:79:fa:2b:52:52:ee:bd:7d:ba:6e:40:
                    1e:c9:c8:4b:b6:8b:c9:36:d8:23:65:c4:41:0c:c7:
                    6a:ce:ab:ce:9c:6f:9c:36:a8:4e:e9:81:2e:77:fc:
                    29:94:2b:af:98:67:66:d8:1f:cb:fc:6f:5e:eb:d2:
                    40:ce:78:96:6e:7d:13:7c:53:50:b0:a2:f7:f2:87:
                    e1:d9:12:6c:89:65:7f:26:39:c9:45:0b:60:92:0c:
                    a8:77:15:b8:ba:a5:21:0e:21:06:b7:73:d0:e9:3d:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:15:D7:D6:19:25:02:96:8B:E1:25:4E:FA:13:2C:2F:EE:53:99
            X509v3 Authority Key Identifier:
                keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:03:47:05:17:fa:b6:2d:87:89:17:07:9d:b2:44:8c:ea:
         25:09:71:50:1e:e8:7e:01:90:c5:4b:c5:b4:b0:18:22:02:97:
         c6:4f:85:a6:89:f0:a1:95:ba:29:c4:66:fb:63:29:ab:3c:04:
         17:78:5c:19:be:0b:75:bc:1a:b7:91:a8:87:38:c5:87:b1:51:
         7e:b3:d7:23:dc:8f:71:7b:f0:f4:b4:51:5c:50:56:8a:22:41:
         45:60:d8:94:5b:b4:f5:06:2c:df:01:7e:12:57:af:4b:94:ac:
         3e:60:d2:44:77:b3:d3:48:85:08:f0:2b:79:b2:d8:6a:87:6e:
         9d:2d:17:ca:2d:a3:78:37:e9:ef:df:22:d0:41:b8:17:39:9d:
         9e:13:91:5b:8a:fa:81:7c:76:d6:fe:4d:d8:8e:a0:24:e2:48:
         28:c9:36:f3:37:d8:72:6c:3d:47:e6:dd:13:f1:fa:86:4e:38:
         35:8b:09:75:f7:ae:62:32:0f:73:d7:6d:01:dc:10:a9:c5:c5:
         b6:22:47:c7:58:f2:8c:97:1d:c4:9a:dc:6c:f2:88:d7:eb:07:
         bc:ec:9e:9c:ad:80:fe:17:a6:f2:d2:2a:d5:5a:ae:e3:fc:59:
         b2:7e:f0:6e:4d:92:ec:89:3f:c6:9c:ca:66:6d:7c:95:95:89:
         f2:ac:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org