Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
File:                     3230302e32342e31362e302f32302d3230203d3e20323733303237.roa (raw, json)
Hash identifier:          AxvMcht0DgkAliWPkMkRc8jIlU6iyi0gGt4AMAGKxFI=
Subject key identifier:   CA:3D:C7:12:72:7E:54:EB:D8:7E:DF:02:BB:E0:5E:2F:15:94:8B:84
Certificate issuer:       /CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
Certificate serial:       53EF18F998065C3990C985EFCF75B78671BF4860
Authority key identifier: B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa
Signing time:             Tue 05 Mar 2024 17:47:42 +0000
ROA not before:           Tue 05 Mar 2024 17:42:42 +0000
ROA not after:            Tue 04 Mar 2025 17:47:42 +0000
asID:                     273027
IP address blocks:        200.24.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:18:f9:98:06:5c:39:90:c9:85:ef:cf:75:b7:86:71:bf:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E5A9F08FC1D3810E3215DE0235E6957AE52076
        Validity
            Not Before: Mar  5 17:42:42 2024 GMT
            Not After : Mar  4 17:47:42 2025 GMT
        Subject: CN=CA3DC712727E54EBD87EDF02BBE05E2F15948B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:de:73:49:59:bb:a1:cd:47:c7:3b:16:35:
                    42:d1:32:b3:d6:9b:51:8a:7f:6a:77:7a:93:1a:23:
                    14:c2:2e:74:0d:c2:4f:00:88:b9:83:c9:fa:67:be:
                    11:c1:fe:46:c1:39:db:7f:d0:81:f1:13:8b:7a:84:
                    a7:14:41:0c:d7:a0:37:64:5b:00:d8:cf:93:fd:e7:
                    ac:6c:da:79:db:7c:0b:34:cd:9c:f1:3f:e4:cd:46:
                    7f:ca:ce:ce:17:f9:8c:1d:80:ce:8e:71:3c:4e:ac:
                    7e:5f:d6:0e:02:04:34:ed:78:89:b8:d3:f1:50:4a:
                    5a:dc:63:11:a3:3a:0f:8f:2a:f9:8a:be:77:09:f8:
                    c8:45:a0:e7:d9:c0:ff:f4:2c:39:1a:54:66:11:6e:
                    aa:e5:5c:1e:c5:c3:6b:ed:ed:0e:a6:75:a6:ed:1a:
                    ae:23:21:51:69:ef:c1:1c:8e:99:47:52:45:a0:12:
                    b2:e1:f0:a1:65:2c:9e:6c:8b:0f:ac:4d:d3:c0:b2:
                    63:32:82:9b:fb:b2:09:f6:5f:7d:d5:67:ff:a9:67:
                    ae:e7:f2:10:b3:14:9c:fc:ff:d3:2c:a5:32:5c:ce:
                    d5:5d:77:74:f3:e9:c4:7d:d2:82:0f:b3:80:ef:a0:
                    b9:eb:9d:b6:0c:eb:34:00:dd:11:f3:75:51:de:83:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:C7:12:72:7E:54:EB:D8:7E:DF:02:BB:E0:5E:2F:15:94:8B:84
            X509v3 Authority Key Identifier:
                keyid:B1:E5:A9:F0:8F:C1:D3:81:0E:32:15:DE:02:35:E6:95:7A:E5:20:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1E5A9F08FC1D3810E3215DE0235E6957AE52076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CC77240B380933714F88645DD3E1DAF1567171BCAA623EE56386B757C02B126/0/3230302e32342e31362e302f32302d3230203d3e20323733303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:08:ef:e2:6a:9d:32:7e:08:06:0a:3e:bc:9d:62:ad:29:
         25:18:f4:ec:43:d7:01:38:f5:e7:a1:c7:e5:91:66:0f:61:dd:
         8d:1f:9d:6d:28:71:61:2d:35:09:e0:cf:48:c7:95:c6:6c:08:
         99:18:f1:08:08:ac:d7:e4:93:55:b3:7a:3a:ac:e5:60:2f:14:
         01:6e:09:2f:e8:d1:fd:ac:c1:45:ec:c6:ab:bc:a0:5c:de:8a:
         77:b0:f8:30:56:cc:e8:73:a1:08:d0:1a:ce:c6:e2:04:b2:f7:
         3d:d9:97:2e:94:22:23:77:6c:a8:e9:0e:47:0a:c6:d3:7c:3f:
         7a:3d:cb:0d:db:1a:c6:ee:aa:cc:33:bf:60:2f:2c:4a:94:df:
         ba:20:da:56:a3:09:a5:f2:d7:2c:cc:2f:e5:41:49:0e:ae:02:
         70:ca:cd:2b:72:7a:28:ed:4f:69:c9:99:63:da:e0:57:40:55:
         ee:d9:d5:16:e4:85:a5:64:88:d8:a6:ff:42:06:d6:93:01:a2:
         08:09:44:c0:42:26:45:dc:41:54:b4:38:31:89:33:b4:57:45:
         64:ca:3e:26:fa:ef:f6:4c:54:dd:77:75:85:be:77:4c:3d:bd:
         a1:2e:3c:4a:5b:80:7f:19:ff:c8:ab:a3:86:14:71:c5:aa:37:
         c9:ed:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org