Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
File:                     3230302e38312e35382e302f32332d3234203d3e203532323538.roa (raw, json)
Hash identifier:          rwIMnWXm1+vl6H7/UmxOFXrRAqqBoIHUbEvlJYxK2Js=
Subject key identifier:   2F:FE:04:EC:77:60:BE:45:EA:C6:9B:40:88:95:4C:65:0C:9F:46:CE
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       692DAC955428A88C3B6BA39682DB8A0AA60B8E5E
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa
Signing time:             Tue 30 Jul 2024 15:45:00 +0000
ROA not before:           Tue 30 Jul 2024 15:40:00 +0000
ROA not after:            Tue 29 Jul 2025 15:45:00 +0000
asID:                     52258
IP address blocks:        200.81.58.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2d:ac:95:54:28:a8:8c:3b:6b:a3:96:82:db:8a:0a:a6:0b:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jul 30 15:40:00 2024 GMT
            Not After : Jul 29 15:45:00 2025 GMT
        Subject: CN=2FFE04EC7760BE45EAC69B4088954C650C9F46CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:81:40:b0:4c:06:0e:83:bd:e9:a5:a8:58:
                    e0:35:b0:1f:1e:8f:f0:68:7b:39:a1:e4:6c:5c:3d:
                    83:03:eb:0e:60:2d:15:21:9e:48:15:2a:5f:12:d1:
                    f7:29:e0:ff:fd:84:e8:d2:b6:b3:25:fd:78:78:76:
                    e1:eb:05:c4:ae:5a:74:91:bd:ce:1a:93:dd:66:5a:
                    38:f9:62:83:1c:9d:0e:8d:ad:02:69:5c:98:5f:32:
                    1c:23:b2:e3:1b:bf:72:e0:db:ad:24:93:39:ec:80:
                    4c:ec:0c:2e:cf:cc:01:6d:38:71:49:b9:64:74:9e:
                    1b:1c:fa:04:6a:2b:9d:50:62:f0:45:39:38:ec:08:
                    36:c0:4c:05:ad:b5:fd:bc:c2:fd:11:e7:d2:46:0b:
                    3e:bb:78:62:c8:a4:66:3b:bd:c6:ab:7b:22:c7:e1:
                    84:fd:51:4f:a9:24:d7:cd:83:fb:f2:0e:3c:9e:3c:
                    47:2b:df:dd:f5:66:00:a3:d0:85:ba:2b:c8:3c:d6:
                    71:22:26:a4:0e:fc:9f:a2:55:18:9c:18:25:98:65:
                    7d:d1:fe:69:7d:8e:39:c9:cf:b2:b6:18:9b:a1:3d:
                    2c:a8:21:32:a3:13:2c:65:2d:a8:b4:2d:45:bf:64:
                    22:76:d8:0d:fe:1b:c7:07:75:1f:f5:85:07:7c:7f:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FE:04:EC:77:60:BE:45:EA:C6:9B:40:88:95:4C:65:0C:9F:46:CE
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35382e302f32332d3234203d3e203532323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:cc:82:6f:14:6a:28:25:03:93:a6:9f:85:5d:b4:37:5f:
         a6:40:8c:01:9b:3a:d8:eb:48:70:23:c1:f5:b4:b5:6a:61:b9:
         62:32:8a:c9:09:7b:b1:c4:b3:5e:5a:b1:42:56:eb:20:57:77:
         ba:51:6b:ae:98:46:f6:32:77:83:af:79:97:7a:b6:e5:df:e7:
         40:0d:16:b1:07:44:7b:93:08:31:93:af:96:69:55:fa:63:84:
         64:3c:72:5e:03:34:31:62:77:87:93:e8:e9:84:c3:cc:12:87:
         a3:34:12:e9:3f:d3:6a:a8:bc:d9:e6:29:1e:7b:de:2d:c5:7d:
         a2:81:66:59:fa:b6:3e:b8:b5:12:ed:67:f6:2d:9b:f9:a3:d5:
         dc:e7:2b:26:40:d1:e5:6b:60:7e:13:e7:00:19:85:bf:d9:50:
         ee:20:29:50:f1:cd:d9:ea:12:8b:84:39:f2:d3:2c:2c:1e:df:
         4a:2b:0f:80:d4:64:1f:65:11:89:1b:8b:0a:b5:e0:2d:71:a2:
         6f:e4:1c:cf:07:83:01:b6:82:c0:54:89:c5:d5:b0:ab:04:89:
         f5:14:bc:20:0f:9a:34:26:c0:62:52:73:7a:a2:1a:0b:49:c9:
         3c:7b:b7:31:30:88:ef:20:d5:7e:92:8b:79:14:1a:9a:4d:15:
         68:67:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 08:07:40 2024 by rpki-client on console-ams.rpki-client.org