Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa
File:                     3230302e322e382e302f32312d3234203d3e2037393635.roa (raw, json)
Hash identifier:          EBn4T3ulMD/tgKFbSBJAQPUjJQS1FG2wQanlJyQIkxc=
Subject key identifier:   68:18:EB:5E:C8:40:2D:8E:FF:69:F4:29:9F:67:46:E9:7D:A5:77:44
Certificate issuer:       /CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
Certificate serial:       17E313CD31BFB46525AA18118D70AC1136B121AC
Authority key identifier: BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa
Signing time:             Tue 05 Mar 2024 18:05:52 +0000
ROA not before:           Tue 05 Mar 2024 18:00:52 +0000
ROA not after:            Tue 04 Mar 2025 18:05:52 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e3:13:cd:31:bf:b4:65:25:aa:18:11:8d:70:ac:11:36:b1:21:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
        Validity
            Not Before: Mar  5 18:00:52 2024 GMT
            Not After : Mar  4 18:05:52 2025 GMT
        Subject: CN=6818EB5EC8402D8EFF69F4299F6746E97DA57744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:02:e7:ee:54:c2:38:03:7b:54:8d:87:2e:
                    be:b8:15:55:68:fb:20:1e:00:0f:15:97:cc:0e:83:
                    69:c8:c6:a5:a9:a1:62:0a:5b:c6:81:d9:a7:f5:9b:
                    71:91:40:49:a1:7a:a8:07:f6:38:63:38:80:8a:3b:
                    02:1c:d0:78:1b:fe:31:46:59:da:a1:55:a5:72:4e:
                    48:c0:28:a8:c6:e5:1a:b7:3e:56:66:2b:89:36:b5:
                    8d:9a:05:aa:34:fc:9e:2e:38:15:32:d3:05:17:eb:
                    cf:e2:9a:25:f6:53:aa:34:0b:f2:f8:9f:63:bf:91:
                    61:3b:8b:bd:41:93:be:af:ca:ca:cd:a1:9e:5d:d6:
                    a6:7b:e7:d5:03:e3:cd:35:48:ce:a9:e7:89:31:d1:
                    27:b7:f3:5d:3c:13:aa:92:26:75:07:c1:3b:f6:92:
                    c0:94:32:1c:5a:b4:be:f1:dd:bb:49:95:1f:73:43:
                    71:5a:e9:fe:06:c9:01:e1:db:bf:b3:86:11:27:08:
                    55:86:ca:07:b9:b5:d0:cb:5f:69:e7:76:10:5c:04:
                    ad:31:26:ef:9d:8c:22:1a:3f:50:4a:e5:ad:ec:77:
                    80:05:fd:5c:9d:62:bd:71:c2:df:a5:66:89:25:04:
                    5f:d0:52:0c:7e:e9:0e:08:06:90:84:01:e1:16:0c:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:18:EB:5E:C8:40:2D:8E:FF:69:F4:29:9F:67:46:E9:7D:A5:77:44
            X509v3 Authority Key Identifier:
                keyid:BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:e7:cb:cc:cf:01:85:a3:30:63:0e:03:3a:18:79:9b:93:
         8b:9f:e5:69:79:61:f2:89:3b:e5:4d:a9:55:b8:0b:1b:25:f2:
         95:38:ad:23:91:ca:80:00:e2:fa:ec:ef:73:be:bc:4b:34:22:
         94:4e:89:f2:f4:c3:89:eb:1c:80:73:1f:50:65:23:0e:f7:df:
         c0:cb:42:d0:95:5c:15:fa:d8:2e:65:b8:b9:55:cb:40:cf:9a:
         61:98:45:55:a3:8b:f0:f0:66:ba:0b:b1:99:b9:51:fe:75:fa:
         4a:2a:30:32:fc:0b:49:45:a5:04:7b:b1:98:e4:4a:20:4b:1c:
         62:0a:24:5b:59:97:d2:b5:86:a6:43:b8:7b:59:d3:61:6b:96:
         cb:e1:03:0d:75:88:8a:98:2f:00:a8:b6:82:f6:65:c4:97:8e:
         d4:b3:d7:81:f1:e2:61:d8:fc:a9:7c:4c:bc:5e:6d:0f:bc:c4:
         90:c2:9f:47:db:f2:e5:29:0b:eb:74:b4:94:3d:47:bb:0d:06:
         27:4f:ae:ea:83:45:c3:19:32:2a:c6:7e:53:43:77:e0:77:b3:
         8e:c8:1f:bf:11:3e:fb:85:30:5e:96:b6:5a:48:ca:d6:a6:6c:
         ae:18:f9:ab:a4:b2:97:b6:d8:0d:07:25:d0:7b:da:b1:3d:3f:
         46:bf:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org