Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa
File:                     3230302e35392e35302e302f32332d3234203d3e203136373332.roa (raw, json)
Hash identifier:          /IIMjDwH3zvmL30lthSO99OFUk/Dd9FANTXqdHa5j+8=
Subject key identifier:   65:77:CE:C7:F8:F9:BA:B0:11:CB:3B:5F:1F:5D:90:52:3C:F5:C5:82
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       3EFA82C1AA93ADA6C97DBFA1D5B5D73836432AF0
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa
Signing time:             Tue 05 Mar 2024 17:46:59 +0000
ROA not before:           Tue 05 Mar 2024 17:41:59 +0000
ROA not after:            Tue 04 Mar 2025 17:46:59 +0000
asID:                     16732
IP address blocks:        200.59.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fa:82:c1:aa:93:ad:a6:c9:7d:bf:a1:d5:b5:d7:38:36:43:2a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:59 2024 GMT
            Not After : Mar  4 17:46:59 2025 GMT
        Subject: CN=6577CEC7F8F9BAB011CB3B5F1F5D90523CF5C582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:f1:56:99:48:71:e5:a4:f5:fc:35:0e:36:
                    3f:41:19:df:f3:68:f0:51:2f:ab:ec:75:88:48:b1:
                    40:04:43:f7:49:f7:5c:ac:ab:36:e5:84:5f:89:b2:
                    fc:e8:ae:76:0e:e6:cd:70:74:88:52:8f:79:16:c0:
                    80:c6:f0:b6:22:52:cf:58:dc:ca:79:9a:26:81:f3:
                    d9:c4:b8:44:dd:26:96:41:11:b7:59:f6:14:f4:9a:
                    e5:3c:0e:6b:84:4e:ea:93:9f:21:3c:47:ce:25:f1:
                    9e:77:5c:81:b8:7a:7f:94:e7:60:0f:7f:a6:67:8c:
                    9f:e5:e4:b5:03:1d:65:43:30:d4:46:0e:87:cd:78:
                    c9:ef:12:ee:77:6a:38:e9:74:95:a1:ea:33:a9:ad:
                    db:dc:82:d6:01:3f:c7:73:a8:ff:fe:6d:db:aa:4f:
                    48:e8:bf:72:e4:bf:37:f7:51:3f:d0:5a:99:24:60:
                    78:f4:83:4d:a5:76:27:58:33:c3:cb:d2:1f:72:83:
                    9c:d6:0f:bd:12:68:5a:da:17:52:a2:43:d3:be:4b:
                    22:1c:a5:62:19:91:d6:db:a8:82:0f:11:14:98:d8:
                    97:61:c1:f4:a5:11:36:d1:c6:7b:ce:e2:8a:34:8c:
                    93:70:7d:ae:b1:fd:fc:c1:f3:19:b0:5e:ad:c3:03:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:77:CE:C7:F8:F9:BA:B0:11:CB:3B:5F:1F:5D:90:52:3C:F5:C5:82
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35302e302f32332d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:ae:83:55:58:42:a1:26:e1:9b:b8:85:a4:2f:6f:f0:da:44:
         05:f5:a4:e4:65:e6:b7:89:71:05:a3:b7:74:91:c4:cc:85:c7:
         b9:35:e2:ed:b7:f8:3c:b2:fd:f9:78:a4:ac:79:07:c0:01:19:
         ed:92:ce:92:9f:63:c6:fa:fb:fa:de:4b:1f:6a:14:37:a7:52:
         ca:f7:d5:9f:f0:34:5e:7b:2b:b1:41:c2:8d:b8:a9:37:db:52:
         a6:80:8d:cd:69:2a:28:24:cd:c3:bd:28:4d:38:36:18:e0:5a:
         96:e2:0c:29:6a:51:18:17:0a:df:f2:97:b2:66:d8:b2:8b:3c:
         fc:4d:45:1e:4c:7b:bf:fd:6a:d2:e1:2c:33:97:52:a6:8f:e2:
         7b:b0:d3:77:e7:84:58:a2:a0:1b:8e:59:ee:26:63:29:31:a7:
         44:1b:1f:45:f8:86:8e:e3:ea:20:84:38:a1:48:2a:62:b0:ed:
         ce:44:9c:f4:02:69:8f:ca:08:0e:79:8a:50:1c:c0:7e:39:49:
         ec:e4:e9:69:6a:c6:4f:3f:ab:89:94:bf:57:bf:2c:ae:f4:6c:
         1c:bc:8d:ca:a5:11:5d:28:48:81:f7:d1:f0:83:a7:68:58:e9:
         db:26:63:54:e6:64:9c:78:a5:01:86:32:b0:69:42:c7:3e:ff:
         0b:4f:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org