Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
File:                     3230302e35392e3230362e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          fKki8/VNLRp52eb9BPACfmGJIJjYZBWEzSS+lE6SAfA=
Subject key identifier:   78:86:C5:CE:6B:06:51:3A:92:AE:19:57:73:07:C7:88:CA:50:35:62
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       34C84FAC4E98A51E11FD5F3064794F60C3976E3D
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 05 Mar 2024 17:47:00 +0000
ROA not before:           Tue 05 Mar 2024 17:42:00 +0000
ROA not after:            Tue 04 Mar 2025 17:47:00 +0000
asID:                     7049
IP address blocks:        200.59.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:4f:ac:4e:98:a5:1e:11:fd:5f:30:64:79:4f:60:c3:97:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:42:00 2024 GMT
            Not After : Mar  4 17:47:00 2025 GMT
        Subject: CN=7886C5CE6B06513A92AE19577307C788CA503562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:22:02:a0:87:83:93:2a:75:ad:9a:40:b5:
                    9b:a4:48:77:6b:ff:ce:02:6c:51:61:ab:15:57:3a:
                    cf:3c:49:00:f2:f5:10:78:df:55:21:d0:ef:f4:6d:
                    9c:91:fd:06:d0:fe:3a:77:1e:7b:4f:d3:41:1d:25:
                    c0:1a:06:14:66:fc:13:81:6b:24:32:fa:7e:0a:37:
                    08:fe:60:36:69:44:71:d9:f6:a1:4d:3c:51:fe:81:
                    a7:e9:da:2e:1a:7e:e5:f3:ff:a3:00:11:2f:05:78:
                    04:39:25:de:1d:7c:41:61:13:c3:35:48:6a:5e:23:
                    78:07:e2:64:98:cf:1a:c3:e1:ec:34:e6:81:9c:25:
                    75:b6:d4:d5:e5:fa:e8:13:da:61:af:a8:7a:34:d9:
                    b0:98:a1:39:90:7c:92:25:dc:43:87:05:f0:25:3e:
                    9a:ce:42:89:00:94:08:7a:4b:14:24:e5:f0:ee:e5:
                    af:37:88:a3:3a:5e:48:89:71:99:f5:b3:fe:34:82:
                    b8:72:64:e5:45:23:f2:3e:65:4c:fe:01:4a:18:23:
                    48:30:3b:91:56:8e:58:1d:d4:21:72:4c:87:e0:ae:
                    ea:c3:c0:e1:23:1f:34:89:af:fb:67:6b:50:22:1b:
                    e0:0b:df:e1:48:22:60:df:de:7c:6e:ed:6a:7b:0c:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:C5:CE:6B:06:51:3A:92:AE:19:57:73:07:C7:88:CA:50:35:62
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:21:22:02:c3:89:21:d9:18:92:69:e0:b1:09:4c:47:41:6d:
         8c:b2:42:5a:22:dc:8a:6e:5b:94:30:93:62:9c:f2:14:73:d5:
         10:2b:73:a1:25:c4:d2:9a:f2:87:02:d6:3b:19:5a:0f:4b:15:
         72:00:18:e5:d4:2f:a3:f7:00:61:ae:bd:8c:27:af:4c:c7:0a:
         e4:b7:ed:0d:d8:bd:bc:01:73:51:54:85:44:f0:b1:4d:0c:2f:
         8c:46:65:48:57:96:d5:7b:fe:ea:96:dc:f9:35:ad:0e:3c:52:
         73:fe:d3:ab:a8:83:a8:d3:38:48:c0:68:51:f7:94:ae:91:00:
         0a:72:73:42:7d:6a:d4:fb:7d:b0:04:ee:00:a6:5b:b6:8c:fe:
         5c:29:d6:d2:41:de:88:5e:c3:95:be:6a:6c:25:e8:24:62:b7:
         9e:fe:91:bc:68:4d:22:45:6c:de:26:af:8d:01:6c:02:23:16:
         2b:5e:31:4a:d7:f6:56:69:68:78:86:c7:59:00:ad:b5:6d:e2:
         b1:97:06:c0:2c:2e:19:93:e1:68:26:5c:53:10:7c:26:7b:f3:
         be:9e:a2:2d:d7:d9:12:4d:d1:8c:2e:9a:d6:cb:9f:8a:94:82:
         d1:dd:4a:81:2a:c7:c8:62:b7:f5:ce:15:34:8d:de:00:36:8a:
         b0:9d:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:51 2024 by rpki-client on console-ams.rpki-client.org