Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36302e302f32332d3234203d3e203532323538.roa
File:                     3230302e38312e36302e302f32332d3234203d3e203532323538.roa (raw, json)
Hash identifier:          V6/W1iVINhqmK5dAv1MIwX95V4oCrySR4puhpS1ZyFs=
Subject key identifier:   41:C9:FC:C5:22:8C:2C:FE:93:FE:01:8E:B2:EF:3F:67:7A:CB:5C:FD
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       1F72203479A6D7C3C5B2914A2AB0880A15AA0C24
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36302e302f32332d3234203d3e203532323538.roa
Signing time:             Tue 30 Jul 2024 15:45:00 +0000
ROA not before:           Tue 30 Jul 2024 15:40:00 +0000
ROA not after:            Tue 29 Jul 2025 15:45:00 +0000
asID:                     52258
IP address blocks:        200.81.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:72:20:34:79:a6:d7:c3:c5:b2:91:4a:2a:b0:88:0a:15:aa:0c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jul 30 15:40:00 2024 GMT
            Not After : Jul 29 15:45:00 2025 GMT
        Subject: CN=41C9FCC5228C2CFE93FE018EB2EF3F677ACB5CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:0b:6c:3e:0c:38:ae:05:53:79:dd:ee:d8:
                    ba:28:77:05:e8:82:e1:18:fb:21:00:7c:f8:26:3a:
                    9c:f6:34:34:44:4b:0e:cb:63:da:4c:d9:c8:e5:b9:
                    70:fd:b2:0c:97:eb:45:45:eb:c6:e1:f0:54:bd:04:
                    71:83:57:c4:84:76:6f:5e:9a:d1:7c:78:1f:70:1c:
                    8b:64:08:49:7a:16:55:29:3d:73:75:9a:ef:b4:45:
                    9b:69:58:4f:49:66:26:ea:09:09:cc:bb:27:e3:a4:
                    86:4c:88:71:88:6f:ec:71:30:99:d9:5c:8a:1d:8f:
                    d7:5e:b2:3e:4d:f1:11:62:63:62:3a:20:6c:c6:3f:
                    e1:16:3d:57:5d:ea:bb:00:2d:af:f8:e6:7c:13:8d:
                    5c:65:20:d7:c4:55:57:06:4a:ac:94:15:8b:58:4e:
                    11:e7:29:f5:3c:0d:08:17:5a:4b:ac:f2:30:de:9d:
                    52:58:da:f6:cd:cf:42:20:41:19:c8:a8:62:9b:fc:
                    c5:1c:40:79:3c:19:7e:8d:71:d7:73:f7:f1:3b:a1:
                    2b:4c:7e:34:e1:4c:d4:d8:df:6b:18:a9:d2:4f:40:
                    e8:c5:70:bf:c1:de:ad:f6:4c:93:5e:d8:5d:c9:48:
                    2c:21:19:92:be:91:0a:98:5d:27:c6:45:a0:05:6f:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:FC:C5:22:8C:2C:FE:93:FE:01:8E:B2:EF:3F:67:7A:CB:5C:FD
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36302e302f32332d3234203d3e203532323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:ed:b4:d6:87:35:9a:32:30:22:bc:05:29:81:66:05:4e:
         c3:2f:99:09:68:c9:a2:18:c6:4e:d3:d0:f6:78:5f:5b:51:6e:
         49:f1:7d:13:85:4d:08:8f:57:d9:4f:d1:b5:7b:25:c8:47:45:
         3b:53:98:0f:18:67:be:cd:ed:8f:f7:aa:28:5f:f5:ec:ee:44:
         04:60:0c:49:66:83:77:df:bc:9e:37:5e:bc:16:85:c2:d7:b4:
         62:c0:00:80:e9:d8:a7:d9:0a:33:f3:5f:e2:18:d1:88:fa:78:
         f0:33:ca:65:5b:81:5b:6a:f6:08:51:9f:aa:b0:0a:ff:87:4e:
         76:fa:8a:8f:dd:92:80:a2:a8:9e:15:de:28:a6:fe:04:78:f7:
         9f:f2:29:8d:32:97:1a:fc:1b:55:69:dc:32:8e:5f:6d:5f:11:
         eb:f9:fa:4c:ee:8f:28:57:87:7b:67:66:5c:f3:21:aa:6a:4e:
         7b:7c:66:b0:e6:22:64:17:10:a2:43:89:7d:db:8b:8f:f1:5e:
         09:3b:cb:17:72:ac:ac:fa:7c:ff:3c:a3:db:f1:70:50:5e:18:
         d5:f3:5d:80:6f:73:8e:6f:59:0c:f1:e5:99:75:26:2a:c4:7c:
         fa:23:25:20:a5:e7:01:f8:4b:fa:03:9c:fc:2f:c1:5d:c4:7a:
         96:17:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org