Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32302d3234203d3e203136373332.roa
File:                     3230302e35392e3139322e302f32302d3234203d3e203136373332.roa (raw, json)
Hash identifier:          SWe+VCqz25wNcDxwmt8Tmn4zcZgqw6TJqIcb62oIpxw=
Subject key identifier:   1A:7D:0C:9F:CA:A5:31:55:05:03:16:A4:42:E2:A6:5C:0A:EB:51:F9
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       718FECCF5DC60EF2A9AFF7B6CB257E03348AEECD
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32302d3234203d3e203136373332.roa
Signing time:             Tue 05 Mar 2024 17:46:56 +0000
ROA not before:           Tue 05 Mar 2024 17:41:56 +0000
ROA not after:            Tue 04 Mar 2025 17:46:56 +0000
asID:                     16732
IP address blocks:        200.59.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:ec:cf:5d:c6:0e:f2:a9:af:f7:b6:cb:25:7e:03:34:8a:ee:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:56 2024 GMT
            Not After : Mar  4 17:46:56 2025 GMT
        Subject: CN=1A7D0C9FCAA53155050316A442E2A65C0AEB51F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:b1:94:bc:e9:2a:88:27:7c:1a:68:22:dd:
                    89:d7:88:d7:d2:37:94:d6:39:6f:a0:55:d5:32:b1:
                    f7:55:0e:23:ad:0f:4a:53:c7:9e:55:38:54:3c:7e:
                    9b:e8:a2:41:57:ff:b2:ba:e5:2d:3e:1f:13:df:39:
                    ef:65:e3:01:d6:d7:72:a9:5e:e6:ee:37:4f:88:6c:
                    50:30:9b:0e:92:30:51:70:f4:af:ab:cf:04:70:98:
                    74:96:6e:b0:f9:b2:2e:6f:5e:fe:cb:1d:5d:9c:f0:
                    04:3f:8f:00:8a:da:90:52:6b:ea:cd:cb:fc:2c:b5:
                    b6:17:f7:11:05:93:1c:a4:c8:39:80:4c:67:7f:42:
                    61:36:00:14:a9:6b:a7:f7:e9:ac:c2:67:3b:57:aa:
                    9c:06:34:8c:7d:2a:41:1c:be:60:90:86:45:fe:c2:
                    c6:92:cf:02:23:c7:b0:01:8e:5e:b7:ec:89:bb:d6:
                    cc:c2:84:31:8a:8e:2c:5a:02:56:29:ba:0a:8d:b0:
                    3f:b8:13:1e:2a:35:82:e7:9c:c0:ca:3d:91:16:ea:
                    72:aa:5f:46:fb:30:db:68:37:cb:e6:35:04:3b:10:
                    f3:99:b5:22:18:ff:e1:91:82:e7:61:e2:f1:95:e6:
                    a3:7e:69:ae:6e:91:42:71:2d:e5:cf:01:19:08:5e:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:0C:9F:CA:A5:31:55:05:03:16:A4:42:E2:A6:5C:0A:EB:51:F9
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32302d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:7f:02:f9:10:21:d0:79:74:fb:4e:c9:43:fc:f1:60:52:ab:
         97:9c:1f:eb:31:75:43:3f:85:1a:a3:3a:7e:f3:9d:e3:62:bc:
         af:d4:d1:66:84:9d:21:71:98:89:a4:eb:4e:62:5d:43:99:7b:
         db:d6:b4:6a:81:af:1a:0d:bc:85:0b:90:4b:5e:76:b9:53:26:
         19:94:56:2b:8f:ec:ac:47:6f:15:47:8d:38:8f:85:ca:3f:8e:
         18:93:35:00:3c:a2:d0:90:fd:4c:07:a5:25:5a:b4:e9:51:c5:
         e3:a6:5c:a3:7b:36:08:d2:9e:ca:d5:aa:b6:45:d4:5b:19:a9:
         96:d3:21:bd:89:b0:a6:63:f2:2f:d9:58:26:e2:8a:a9:0a:8d:
         a3:8d:f5:6e:0e:9e:a8:e5:e3:8b:09:52:6b:ab:f8:20:9b:7e:
         b1:7a:84:c7:22:e2:40:a9:36:3a:0a:fe:de:15:be:97:37:6e:
         34:02:01:a7:d2:4e:67:6a:ef:d2:14:cc:c7:92:d1:7d:47:df:
         12:ec:59:29:6c:b4:bb:65:23:d2:34:df:31:a7:0d:9d:1c:fa:
         2a:4d:81:c5:2f:f0:8d:48:07:d1:5b:5a:0f:a7:b4:d1:d4:8c:
         5e:36:72:e0:b4:44:ec:4c:f3:33:fc:de:19:01:9e:7e:3c:8a:
         1a:35:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org