Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32312d3234203d3e2037303439.roa
File:                     3230302e35392e3139322e302f32312d3234203d3e2037303439.roa (raw, json)
Hash identifier:          7IjbjTEkdVIEm5rLS7tY7TkGcjEHwuIpBIUHB8EXggU=
Subject key identifier:   FD:30:21:73:52:19:C7:63:42:A9:DA:A7:6B:5A:7E:1B:0A:BB:CF:0D
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       38DCA168BB53484DFC2872C68BC1070B60D2824F
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32312d3234203d3e2037303439.roa
Signing time:             Tue 05 Mar 2024 17:46:57 +0000
ROA not before:           Tue 05 Mar 2024 17:41:57 +0000
ROA not after:            Tue 04 Mar 2025 17:46:57 +0000
asID:                     7049
IP address blocks:        200.59.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dc:a1:68:bb:53:48:4d:fc:28:72:c6:8b:c1:07:0b:60:d2:82:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:57 2024 GMT
            Not After : Mar  4 17:46:57 2025 GMT
        Subject: CN=FD3021735219C76342A9DAA76B5A7E1B0ABBCF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:40:93:38:14:ac:c9:ee:1d:3b:34:a4:62:
                    30:f3:6e:54:b6:4d:95:a2:26:0c:4b:d3:ce:04:1e:
                    07:59:e3:ee:48:44:62:3a:dc:f8:4b:36:79:b8:d8:
                    fe:3d:02:40:85:bf:61:c2:55:77:d1:1a:c0:69:8c:
                    16:4c:7f:df:48:3f:cf:eb:15:3d:10:65:b5:15:2b:
                    35:50:bf:b3:4f:26:1d:69:b8:c6:0f:89:22:b6:5e:
                    40:21:7c:b8:b4:39:ad:ba:e1:9b:1c:23:d7:3e:13:
                    b7:86:88:e8:a7:d2:b6:61:61:9f:05:8b:85:2e:26:
                    bc:7e:c3:f5:5e:68:40:6c:aa:52:c4:c3:17:0d:d9:
                    cb:7a:49:db:5f:54:b8:b6:8a:13:33:8e:2c:36:49:
                    82:00:66:29:a6:ab:b5:5e:23:cd:8a:90:88:09:a5:
                    be:96:20:15:37:b2:76:0f:0d:2b:c4:3e:fd:bc:f9:
                    26:47:e2:c0:22:84:36:99:21:0a:97:ea:7b:a9:0e:
                    d8:a2:ce:42:bb:c7:04:8e:cd:01:c8:51:e1:39:db:
                    98:4f:f0:8e:04:78:91:02:83:fe:ed:48:83:ce:2e:
                    e2:76:a8:02:ac:63:79:37:d4:53:58:fa:f4:d8:b0:
                    42:c6:d3:aa:2e:00:a6:04:07:8a:7c:72:cb:da:bc:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:21:73:52:19:C7:63:42:A9:DA:A7:6B:5A:7E:1B:0A:BB:CF:0D
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139322e302f32312d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:06:69:fa:4f:ef:0f:c3:7a:71:8f:09:05:97:cc:4c:de:
         ab:18:7e:fd:cc:a5:a6:6d:22:ef:ce:06:ea:74:dc:c8:ab:bd:
         ed:1e:3a:7f:3e:ec:f5:a2:2c:f1:ec:88:64:51:05:6b:f3:f0:
         66:5c:d5:c0:74:3c:57:f2:5a:a2:99:19:ea:25:1c:fb:06:8b:
         4a:af:14:be:9a:7a:a3:d9:71:31:66:74:22:02:f5:4c:75:52:
         91:d4:3a:1d:a4:f6:ac:ca:13:e7:16:7a:d1:42:95:95:6c:8b:
         39:9e:aa:e6:c6:ea:f3:73:be:bf:8b:c0:16:98:25:a6:3e:51:
         54:12:43:c3:61:71:53:aa:e5:03:8f:9d:1b:41:c3:85:14:50:
         0f:3a:a7:04:25:59:a0:6e:ce:6d:65:4a:12:49:3a:3c:72:e5:
         0b:bc:c0:01:f7:2c:9e:a5:be:e5:b0:8e:94:bd:05:4e:23:ad:
         e3:62:b8:c0:b7:37:1f:67:52:ce:7e:d6:f1:cf:02:ab:8a:46:
         a6:43:d7:bc:91:47:ce:2d:47:95:25:ef:34:6a:23:93:8d:b9:
         56:58:8c:79:bd:a3:df:d7:b2:ac:05:d5:e3:f4:5b:32:2a:8c:
         0a:3d:7b:1a:b1:cd:24:b8:2c:5b:98:38:e2:61:45:cc:f7:de:
         de:20:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:51 2024 by rpki-client on console-ams.rpki-client.org