Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e382e302f32342d3234203d3e203237393537.roa
File:                     3230302e332e382e302f32342d3234203d3e203237393537.roa (raw, json)
Hash identifier:          eFZgChwE0KpsC+mHkOrNlgXVrPcYjGrr4nVnuzBavEQ=
Subject key identifier:   BD:5B:9C:12:9C:8A:4B:20:FC:DE:85:0D:3D:B4:48:D0:DD:DD:BD:EE
Certificate issuer:       /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial:       17BA90D88A3B2127DC069C4AD46E6CEE6F44E1E8
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e382e302f32342d3234203d3e203237393537.roa
Signing time:             Tue 05 Mar 2024 18:01:20 +0000
ROA not before:           Tue 05 Mar 2024 17:56:20 +0000
ROA not after:            Tue 04 Mar 2025 18:01:20 +0000
asID:                     27957
IP address blocks:        200.3.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ba:90:d8:8a:3b:21:27:dc:06:9c:4a:d4:6e:6c:ee:6f:44:e1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
        Validity
            Not Before: Mar  5 17:56:20 2024 GMT
            Not After : Mar  4 18:01:20 2025 GMT
        Subject: CN=BD5B9C129C8A4B20FCDE850D3DB448D0DDDDBDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:da:2d:3c:3c:28:b0:1d:74:a3:20:90:d9:
                    c2:9e:8e:e0:ee:df:aa:f3:54:fd:12:86:2f:34:36:
                    bc:c8:e2:ab:15:b8:2f:27:4e:13:5e:ab:3d:ba:5a:
                    99:30:e0:57:8a:9f:14:99:27:b7:76:87:16:41:49:
                    15:53:0e:63:e6:87:8b:8f:0c:bb:1f:b5:22:ef:09:
                    a3:2b:5a:0b:39:34:5c:7e:f4:f5:03:31:7e:8d:c6:
                    53:19:7b:36:7a:cf:6f:ff:fb:35:09:77:3a:8e:0a:
                    52:b4:3e:41:7d:81:22:18:b4:1f:4c:ce:26:6f:d2:
                    27:e8:ca:74:1f:7d:5f:61:b2:26:ef:38:5d:78:44:
                    98:a3:ed:94:22:bb:56:ad:66:31:1b:da:32:a2:7d:
                    c5:43:74:09:26:0e:49:2d:07:e9:f9:71:36:f4:ce:
                    cf:f1:8a:ca:38:09:35:f6:6f:d4:fb:77:3b:48:98:
                    6c:d1:78:21:0c:45:4d:77:29:5f:94:27:a1:fa:68:
                    10:f7:67:af:f8:30:de:95:85:29:3f:a1:53:ba:f6:
                    ce:d8:00:31:94:8c:fa:3d:a1:d4:aa:01:fa:d0:bb:
                    42:14:a1:09:43:6d:b9:d4:01:57:28:0d:30:e7:17:
                    ac:26:73:cb:7c:b6:00:fe:22:f5:08:85:26:e2:47:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:9C:12:9C:8A:4B:20:FC:DE:85:0D:3D:B4:48:D0:DD:DD:BD:EE
            X509v3 Authority Key Identifier:
                keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e382e302f32342d3234203d3e203237393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4c:d9:06:76:a7:99:15:8d:f3:89:b3:87:a3:8d:67:c0:61:
         8b:2c:77:e0:44:81:b9:52:c8:0d:15:5c:80:97:ca:9e:1e:9a:
         f3:cd:5b:b0:96:a6:d0:2b:86:09:93:ed:b6:fb:c9:41:19:2d:
         71:bc:bf:47:4d:f5:57:ad:de:16:61:b1:14:44:52:3e:84:92:
         1a:42:6d:27:f3:7b:dd:1e:d2:fc:5b:9c:bd:77:1a:e7:79:dd:
         ae:39:46:95:c0:ac:ff:74:11:d4:28:50:6d:e9:c6:77:5d:bd:
         be:85:c1:5d:73:16:2d:f9:ce:42:4e:f1:b0:f7:98:fc:31:5c:
         a4:06:e7:07:7e:9a:26:bd:6a:38:d3:92:7b:9a:9a:65:ff:15:
         c6:77:a7:c4:e0:65:6d:87:78:cd:46:0d:42:7b:b5:84:2a:73:
         ac:94:11:90:b7:88:49:ee:4c:61:1d:c5:9b:df:fa:b4:17:c9:
         5d:9e:50:ef:f9:5d:ff:76:36:e4:05:3c:d3:75:cc:09:91:81:
         fd:02:a5:8a:34:95:dc:b5:49:5a:2d:9c:61:17:ca:44:76:81:
         fb:cb:3a:83:ee:d5:9c:46:b6:0c:0c:c3:7c:74:09:fc:45:58:
         b1:a8:aa:65:a4:e5:8d:bb:bb:e5:b1:ac:05:a9:06:6b:74:51:
         35:b4:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org