Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa
File:                     3230302e362e31332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          LMnklnar5qBgrp7QukBCR69C4KlwpS0qCvWqLNol920=
Subject key identifier:   FC:98:F7:8F:4A:5D:F4:CA:5D:F4:F1:DF:C6:4E:5D:6E:9B:8D:66:33
Certificate issuer:       /CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1
Certificate serial:       76C2E5DDC249AAA573F083B60DB5F25F00348695
Authority key identifier: 22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:06:15 +0000
ROA not before:           Tue 05 Mar 2024 18:01:15 +0000
ROA not after:            Tue 04 Mar 2025 18:06:15 +0000
asID:                     27947
IP address blocks:        200.6.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:e5:dd:c2:49:aa:a5:73:f0:83:b6:0d:b5:f2:5f:00:34:86:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1
        Validity
            Not Before: Mar  5 18:01:15 2024 GMT
            Not After : Mar  4 18:06:15 2025 GMT
        Subject: CN=FC98F78F4A5DF4CA5DF4F1DFC64E5D6E9B8D6633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:32:f0:2c:24:49:02:98:c8:25:4b:1b:2c:
                    f1:4e:6c:6e:96:69:d7:35:a1:2b:31:1c:9f:36:68:
                    f5:01:c7:e6:93:b4:a1:dc:e2:ab:24:d6:61:1b:37:
                    c2:24:df:38:37:ac:78:8a:c6:d2:04:5f:71:02:fe:
                    41:8c:44:49:ee:82:dd:82:be:2b:f7:99:4c:c9:fd:
                    d6:15:15:a5:b0:87:9c:92:ba:6f:63:7d:2f:1b:b2:
                    2c:10:fd:e0:10:5f:9d:25:d5:52:f0:9c:88:38:21:
                    d1:23:20:a4:cc:e0:bc:0d:41:c4:74:d1:a4:8e:ce:
                    cd:6b:6e:8d:26:c2:fc:26:42:7b:82:18:ec:16:c0:
                    31:e4:9a:96:17:ec:2d:5d:7f:91:21:1d:64:83:9e:
                    1f:09:e8:70:03:38:65:0f:4c:20:ec:64:1b:5d:c9:
                    14:8e:1b:c5:85:1f:aa:a9:d2:32:0b:23:16:ac:b9:
                    2c:37:58:a0:f8:e4:b9:80:ff:ec:e7:3d:ab:8a:52:
                    8f:d0:84:2b:64:15:8e:99:79:e4:2d:9d:26:64:94:
                    32:4e:97:06:ea:f5:85:ea:96:04:14:29:81:e9:1b:
                    f8:24:77:57:23:c1:a0:c6:be:39:4c:0d:8c:73:b6:
                    d1:4d:d1:83:0f:09:a5:32:24:04:fe:68:72:f1:03:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:F7:8F:4A:5D:F4:CA:5D:F4:F1:DF:C6:4E:5D:6E:9B:8D:66:33
            X509v3 Authority Key Identifier:
                keyid:22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:35:09:bd:77:66:9d:84:26:b1:d5:14:81:76:1d:45:b9:
         15:3b:d2:9e:cf:d3:a3:85:a3:3b:06:09:dc:d2:c3:1e:7c:77:
         dd:5b:56:84:8b:1d:87:d4:c3:a4:72:a2:f5:6c:99:02:43:4d:
         67:80:1a:01:3e:16:40:6a:1b:1d:4f:a8:01:c7:2f:68:72:c9:
         06:7b:c3:57:2c:92:29:78:64:0b:f3:5f:2f:f2:6e:08:08:e6:
         15:e8:f0:a4:d8:15:b0:02:d6:3f:6a:2e:7a:3e:db:68:a4:e1:
         a7:d3:fd:49:76:83:29:5f:d8:79:9e:97:f8:6a:4c:e7:57:4e:
         6a:89:09:79:c7:d2:31:cc:4e:2e:74:13:f1:da:1e:de:33:9e:
         f9:66:bb:55:06:ba:b6:b6:ff:66:15:bf:ca:7c:8a:e0:e8:b6:
         20:af:2b:5d:87:74:bd:76:34:15:f6:0e:e6:cd:90:51:a8:42:
         1b:77:5d:8a:1c:76:5d:3f:1b:98:e0:d1:bb:a9:3f:70:db:d6:
         85:a6:4e:ae:80:fc:13:a4:fd:5d:9e:04:51:fa:31:3a:e9:2d:
         83:23:61:f5:10:7c:a3:07:a0:0e:02:6b:0d:be:84:73:69:4a:
         38:b0:dd:66:95:e8:8a:4a:f9:5d:99:52:48:5c:61:69:4f:da:
         e6:f9:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org