Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa
File:                     3230302e35392e35322e302f32322d3234203d3e203136373332.roa (raw, json)
Hash identifier:          DQAy9TPlCZiowigqtNegSe1vLmzECU7XLJMHosGDNG8=
Subject key identifier:   E3:02:AD:59:CD:67:DB:1D:2A:5C:22:BF:4E:3B:33:47:07:74:1C:77
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       17C22947F98BEEC7A99CCCF5D5F4377CACAD3E23
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa
Signing time:             Tue 05 Mar 2024 17:46:59 +0000
ROA not before:           Tue 05 Mar 2024 17:41:59 +0000
ROA not after:            Tue 04 Mar 2025 17:46:59 +0000
asID:                     16732
IP address blocks:        200.59.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c2:29:47:f9:8b:ee:c7:a9:9c:cc:f5:d5:f4:37:7c:ac:ad:3e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:59 2024 GMT
            Not After : Mar  4 17:46:59 2025 GMT
        Subject: CN=E302AD59CD67DB1D2A5C22BF4E3B334707741C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:6b:4f:e6:4e:b3:38:9a:a8:14:c7:b0:7f:
                    f6:5d:91:c3:0e:aa:ea:6f:a5:a3:d5:df:12:7d:67:
                    9b:fd:cf:9d:7a:28:04:bb:90:b0:7c:40:da:15:5a:
                    66:81:a0:ef:ed:0e:6a:b2:9f:d6:b3:f2:b6:c3:fe:
                    60:5f:80:c9:4d:73:47:9b:49:55:52:63:f8:ac:2a:
                    53:bf:2a:bc:5f:d8:7f:2f:f6:c4:6d:66:7f:dc:07:
                    99:80:26:fc:56:c8:b7:af:d0:d1:c3:9e:a8:7b:29:
                    09:ec:b1:15:6e:e4:d4:61:a8:0c:05:3d:eb:7a:1b:
                    2f:62:af:cc:1e:fd:85:b2:54:0e:14:80:ef:a4:60:
                    f2:f3:20:dc:58:03:3c:5e:5e:66:6e:f1:45:b8:c9:
                    16:15:70:5f:2c:fd:4b:cf:5a:b6:08:be:8d:1a:9b:
                    63:fc:cc:76:53:6e:e4:4e:98:98:62:52:86:02:fd:
                    16:b1:d4:52:15:cd:e3:88:e7:95:04:57:61:9a:24:
                    f0:ae:64:59:c1:00:59:07:df:7b:e8:85:7a:aa:70:
                    21:a8:11:81:be:49:6b:ee:00:30:fa:18:a1:64:ce:
                    07:b2:7f:bf:c9:2e:08:6f:af:5e:37:ff:a1:23:45:
                    ed:8d:09:57:c3:00:56:84:ea:d0:e6:79:da:21:46:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:AD:59:CD:67:DB:1D:2A:5C:22:BF:4E:3B:33:47:07:74:1C:77
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:43:ad:9d:b8:2f:77:ea:b6:e5:d0:69:3d:c7:77:e1:02:
         42:dd:8e:7e:2d:b4:da:00:d7:76:87:dd:87:64:93:7d:04:49:
         7d:5f:51:76:df:89:2e:78:bc:a6:f1:a8:ff:48:81:86:11:60:
         e1:cf:e7:a0:59:4e:3b:cc:3c:ae:e6:22:72:a0:26:17:f8:14:
         ff:0d:4d:cf:be:50:30:c0:82:93:87:79:0e:1d:77:7d:bd:1c:
         0f:25:60:13:61:5a:7e:bc:fd:49:de:90:7b:0b:63:8e:b4:48:
         9e:c8:5f:8c:e9:65:8f:1d:d0:e4:54:18:c8:a3:18:a7:2d:f4:
         cd:c5:4e:5f:97:a9:71:52:1b:9f:48:85:f0:64:e6:45:09:9d:
         e2:4f:ff:90:c6:c1:78:62:36:75:0e:f7:e7:6c:38:38:50:30:
         03:c5:3b:c9:c0:54:2f:07:94:9a:1d:05:81:07:6d:26:58:0a:
         96:cb:c4:41:ec:39:33:a8:ff:33:9d:5b:9b:49:aa:81:2a:ed:
         cc:60:8e:1d:c4:f5:a7:bf:1f:ff:7b:b2:0c:fa:6a:3b:06:af:
         b3:25:b2:06:3f:68:22:35:42:2b:1d:82:30:05:99:23:de:21:
         bd:ba:cb:34:fa:9b:4b:27:0a:09:8c:63:ed:4e:20:d7:7a:74:
         f0:72:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org