Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34382e302f32332d3234203d3e2037303439.roa
File:                     3230302e35392e34382e302f32332d3234203d3e2037303439.roa (raw, json)
Hash identifier:          UHq86wxuJdAk4w3frbkiznyjARjYFwT/iTyZCNHDJYk=
Subject key identifier:   C8:FC:FD:CF:FF:65:07:AA:41:5D:04:99:FA:E4:BB:92:9D:99:0E:FA
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       5203A2863843034D977DB94FEA12536E4B12742B
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34382e302f32332d3234203d3e2037303439.roa
Signing time:             Tue 05 Mar 2024 17:46:57 +0000
ROA not before:           Tue 05 Mar 2024 17:41:57 +0000
ROA not after:            Tue 04 Mar 2025 17:46:57 +0000
asID:                     7049
IP address blocks:        200.59.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:03:a2:86:38:43:03:4d:97:7d:b9:4f:ea:12:53:6e:4b:12:74:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:57 2024 GMT
            Not After : Mar  4 17:46:57 2025 GMT
        Subject: CN=C8FCFDCFFF6507AA415D0499FAE4BB929D990EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:26:ab:73:b4:41:5d:34:f6:70:eb:4d:6e:44:
                    a8:3a:92:58:d5:28:49:e5:3d:11:6f:f5:b0:e9:f5:
                    ac:9a:1c:6f:3b:63:9e:90:e5:a5:80:c1:69:eb:a5:
                    e0:d5:f0:42:21:69:3e:71:09:bc:8e:d9:31:e1:63:
                    a1:ad:6c:61:f3:f3:d9:45:fc:66:a7:e4:3d:e7:b4:
                    fd:1f:ae:3b:5a:8b:ea:7e:b7:44:f8:ba:ee:23:15:
                    9b:17:94:6d:c1:d4:de:5b:de:81:4b:96:dc:04:fa:
                    78:f5:00:0e:7e:a9:d1:52:ea:17:9b:31:44:30:a0:
                    77:4f:7e:ca:fa:a0:09:60:6c:57:67:17:8f:a2:c2:
                    da:59:9d:71:c2:9a:3d:5b:de:8c:53:dc:14:d3:96:
                    e5:32:f7:54:74:28:bb:b3:98:cd:c0:ca:fc:ae:b6:
                    12:59:2a:fd:f0:d9:60:74:c7:b2:dd:35:a4:40:4c:
                    56:2f:cb:2c:69:00:df:d9:6c:7f:e4:e3:38:fc:99:
                    71:19:4a:31:89:56:9b:40:67:76:43:d6:48:e0:62:
                    a4:48:58:da:88:c3:4f:9f:31:e9:d5:b5:5b:5c:ca:
                    9f:7b:ca:da:56:de:77:1a:d5:28:d2:53:ff:b5:e3:
                    b6:46:b9:33:f0:55:5a:c9:59:18:80:f3:09:f6:e7:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FC:FD:CF:FF:65:07:AA:41:5D:04:99:FA:E4:BB:92:9D:99:0E:FA
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e34382e302f32332d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:21:6a:09:06:69:d9:82:fb:66:16:52:0c:a8:da:f2:b4:
         48:60:81:07:08:0f:48:90:b9:cd:50:9e:31:db:78:2b:e2:02:
         7d:37:85:26:70:56:69:df:22:31:9a:0a:64:48:dd:e7:00:99:
         7f:52:33:7b:d7:24:65:fe:47:66:55:85:ed:25:54:48:21:7f:
         a5:ab:20:d9:a5:5a:c1:f3:64:ff:0a:1c:5f:f0:ae:91:9b:15:
         7d:85:31:b2:10:40:27:28:ba:34:96:23:e6:d5:3b:5d:f1:a0:
         31:0f:7e:55:90:d9:39:5e:c5:91:2c:8d:b9:4b:0d:76:9e:39:
         f8:9c:e7:e8:08:67:fa:be:a8:69:d2:63:0a:e4:7f:7a:db:0e:
         36:dc:08:92:63:17:4e:a1:c0:0b:19:f6:30:4c:1a:96:46:24:
         d4:f7:a3:34:d5:8f:08:bc:43:6a:4c:06:d4:b5:26:ab:9f:9d:
         a5:75:2f:b4:5e:1b:ce:bb:02:f3:3e:58:37:32:1a:99:9d:f4:
         3c:6f:6b:28:86:46:9e:dd:40:8a:33:fa:3a:82:26:c4:f0:5d:
         32:5a:b6:24:5e:6b:f5:0a:8e:99:de:4d:f8:82:28:63:52:a6:
         69:e0:8a:50:21:cf:f6:22:03:2d:26:93:90:32:90:5d:32:4f:
         19:1d:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:37:15 2024 by rpki-client on console-fra.rpki-client.org