Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa
File:                     3230302e332e322e302f32332d3234203d3e203237393537.roa (raw, json)
Hash identifier:          gyej5wB52Sq9rPIaGKAyZewYS6hziJ94D5cvcmpTBV4=
Subject key identifier:   3A:60:33:47:95:04:8F:FC:50:3E:98:41:5C:36:71:39:A1:1D:7E:2E
Certificate issuer:       /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial:       2C0397946BBDD5F99FB6CAC34FC8DCC47D9D0D3E
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa
Signing time:             Tue 05 Mar 2024 18:01:20 +0000
ROA not before:           Tue 05 Mar 2024 17:56:20 +0000
ROA not after:            Tue 04 Mar 2025 18:01:20 +0000
asID:                     27957
IP address blocks:        200.3.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:03:97:94:6b:bd:d5:f9:9f:b6:ca:c3:4f:c8:dc:c4:7d:9d:0d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
        Validity
            Not Before: Mar  5 17:56:20 2024 GMT
            Not After : Mar  4 18:01:20 2025 GMT
        Subject: CN=3A60334795048FFC503E98415C367139A11D7E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:ae:de:b7:51:72:f8:ce:27:26:2b:bc:96:
                    43:2f:88:52:2f:0c:b5:df:a9:25:20:ef:66:81:35:
                    65:d9:ba:01:66:58:66:6b:c1:8e:b7:60:62:31:c9:
                    7b:5a:ab:2f:97:1d:1b:ea:d1:b3:1b:41:b6:66:88:
                    42:16:90:8d:bb:2e:35:a3:74:6d:8f:c6:7f:f9:7b:
                    52:5d:40:9e:87:3b:eb:11:e4:8e:14:cf:b3:c7:9a:
                    06:7c:b7:57:ce:5c:7c:a6:01:59:1e:a3:5c:46:2a:
                    01:44:14:fc:03:7f:9d:a0:28:b9:72:8d:c8:6d:38:
                    8c:40:2e:78:59:89:89:cc:13:1e:8a:02:bd:18:ee:
                    b7:f2:02:65:5f:03:f5:d1:a4:54:40:3f:4b:78:78:
                    61:7d:ad:4b:4b:aa:b1:fb:f2:28:94:c6:22:5f:42:
                    33:7e:34:7d:73:9e:6c:56:ce:dd:68:65:b0:ca:9f:
                    e2:e0:ea:79:9b:22:a2:05:e5:28:0c:27:05:bd:30:
                    fb:26:61:9b:b0:5a:df:1b:5a:96:1e:16:c0:67:4f:
                    48:70:cb:4b:20:4d:d6:a1:ae:c6:26:e6:aa:43:fb:
                    5c:55:ee:72:d6:30:f1:b1:da:c0:ad:5a:cc:13:1a:
                    a6:ab:3a:3a:86:61:f3:c7:c2:b0:46:0f:ae:70:29:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:33:47:95:04:8F:FC:50:3E:98:41:5C:36:71:39:A1:1D:7E:2E
            X509v3 Authority Key Identifier:
                keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:5b:aa:22:89:4e:8a:e4:50:4a:cf:1a:ce:47:af:41:21:
         dd:e7:33:1a:fe:09:00:9e:68:75:f8:1e:79:27:21:c0:5f:2a:
         84:78:31:f4:e2:0b:8a:64:33:c8:c9:52:54:b5:7b:d5:c1:ad:
         7c:fa:5f:9b:35:f3:45:3f:60:92:26:93:03:22:bc:51:80:6c:
         16:4e:32:e5:ec:f9:52:26:aa:0d:55:95:b0:c9:f0:54:8c:a7:
         73:c0:32:16:d2:8e:6d:c3:4f:4e:59:af:d7:b6:59:54:fb:43:
         15:2c:ff:5a:01:92:79:b9:85:aa:2b:8f:22:f7:25:8b:62:a3:
         0e:2c:7d:74:d9:85:6b:ad:99:85:fd:5b:c9:0b:59:9a:82:9c:
         aa:56:58:35:a1:ac:e7:67:00:2f:b3:03:dc:e6:b9:f0:8d:a1:
         63:34:33:67:cb:5f:93:e8:0a:d3:da:bd:f0:36:01:25:5d:6f:
         0c:3b:07:b9:f5:9b:02:70:97:65:a8:09:7b:17:54:be:4a:63:
         8d:7b:21:42:05:42:36:f5:bf:ec:e3:ad:21:c5:38:8b:8f:49:
         39:5d:cf:ce:f4:37:42:97:9d:db:e6:88:cb:cd:f2:dd:9c:36:
         ac:96:e4:5a:e8:6b:b1:3a:eb:80:23:ac:a4:49:de:37:6a:85:
         1f:0d:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org