Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e34302e302e302f31362d3234203d3e2036303537.roa
File:                     3230302e34302e302e302f31362d3234203d3e2036303537.roa (raw, json)
Hash identifier:          DO1zEzjkZxUylS7H2dyFIvzATAhGIHGZY93bKn/K0Lc=
Subject key identifier:   E9:BA:D5:49:AE:D1:F4:14:02:A1:1D:64:BB:55:D6:E8:FF:D0:BB:65
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       6FAC6CE992E882568D76FB619D52C8882B5674F9
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e34302e302e302f31362d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:01 +0000
ROA not before:           Tue 05 Mar 2024 18:15:01 +0000
ROA not after:            Tue 04 Mar 2025 18:20:01 +0000
asID:                     6057
IP address blocks:        200.40.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:6c:e9:92:e8:82:56:8d:76:fb:61:9d:52:c8:88:2b:56:74:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:01 2024 GMT
            Not After : Mar  4 18:20:01 2025 GMT
        Subject: CN=E9BAD549AED1F41402A11D64BB55D6E8FFD0BB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:74:c3:71:2f:61:ff:9b:f8:39:b6:d8:52:
                    8f:9d:b3:e8:25:f0:d1:b6:bf:a9:9e:a2:46:8a:48:
                    4c:ed:f0:56:4e:db:5d:6b:cc:4a:11:d2:c1:c9:02:
                    6f:72:1d:3d:12:2d:5d:e5:9e:3a:9f:c2:9b:96:12:
                    91:1e:b7:5f:5b:bb:a9:df:de:8f:54:f4:17:65:23:
                    75:d9:d2:be:84:c7:48:e5:cf:69:d1:a2:c8:58:8d:
                    f3:ae:b7:56:0d:68:24:ef:67:ef:8a:57:65:08:62:
                    61:75:e2:2c:60:82:11:d0:be:43:ea:12:e8:13:9b:
                    28:25:a9:e1:f1:90:8d:93:e3:f0:9b:99:40:d3:53:
                    60:ac:e7:40:43:f0:ad:be:ae:a8:5b:01:3e:99:93:
                    dc:a6:9f:f2:96:69:c6:06:38:78:ba:4c:40:59:bb:
                    14:f4:67:ec:f8:01:e4:c4:30:9a:2e:6e:1b:91:0d:
                    65:c8:e8:74:6d:4d:b2:a5:bb:49:f3:53:6d:96:99:
                    31:a7:92:54:a2:fc:f5:9c:a8:19:43:62:5a:fb:a3:
                    d7:a3:ad:e2:28:94:51:c3:de:f0:1b:90:28:eb:62:
                    67:36:27:c0:3f:32:a5:23:68:4f:f7:9f:c7:d2:6f:
                    23:68:e7:56:14:04:f4:1c:68:7a:56:bf:36:86:a0:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:D5:49:AE:D1:F4:14:02:A1:1D:64:BB:55:D6:E8:FF:D0:BB:65
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e34302e302e302f31362d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:56:f1:9d:04:c1:5f:03:87:7a:a4:d9:8f:f6:c6:cc:c8:ce:
         66:d7:ed:b5:e8:20:a0:d0:a3:79:2b:f3:dd:4e:9e:23:a7:ce:
         bb:c0:c8:d2:d5:60:94:2c:fc:be:84:20:1a:29:35:d5:d1:a9:
         a0:96:88:92:7e:08:09:3a:59:33:21:7e:09:29:bd:81:bf:88:
         fa:68:b8:d6:0c:fd:e7:32:6d:42:30:9a:d2:c5:73:55:c8:39:
         34:30:fd:48:e5:c3:37:8c:fc:47:4c:0e:81:25:ea:05:3c:69:
         62:25:32:00:35:e4:61:44:77:f4:8e:9c:48:07:60:6a:a4:d1:
         1d:bb:e7:c6:f0:8d:c1:5b:6b:1c:d6:18:7e:d4:54:23:36:47:
         c7:49:25:73:14:15:bd:65:52:23:96:24:b4:53:ba:5b:b4:02:
         f2:91:4d:9a:d9:1e:ec:de:71:91:84:0f:ae:15:29:81:89:82:
         d4:b7:e5:b3:a4:54:0f:f9:74:07:ac:b6:e0:5b:19:fb:b0:bd:
         b5:fb:cc:5e:e7:85:84:2b:44:a3:9a:0a:cf:a8:94:16:44:5f:
         76:f0:16:8c:30:7b:22:0e:2b:ee:53:99:e3:c9:03:c2:99:f3:
         fc:ac:13:8a:d5:c7:b1:85:5a:ca:e8:01:ea:fe:35:c6:88:cc:
         fa:24:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org