Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa
File:                     3230302e3130372e38302e302f32342d3234203d3e203238303535.roa (raw, json)
Hash identifier:          5WQENN7e4XDcVzoqUauyQnJ9aAfP1jflg2d1leZOsGc=
Subject key identifier:   E8:B5:23:16:28:D0:EC:38:35:AA:63:A7:27:95:95:D1:E9:34:02:F5
Certificate issuer:       /CN=7C4C6EE5589457742CB9D92B3B4C697DB229C555
Certificate serial:       0A774EC41519536732FFCCDA4E688973FD41FD68
Authority key identifier: 7C:4C:6E:E5:58:94:57:74:2C:B9:D9:2B:3B:4C:69:7D:B2:29:C5:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa
Signing time:             Tue 05 Mar 2024 17:41:53 +0000
ROA not before:           Tue 05 Mar 2024 17:36:53 +0000
ROA not after:            Tue 04 Mar 2025 17:41:53 +0000
asID:                     28055
IP address blocks:        200.107.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:4e:c4:15:19:53:67:32:ff:cc:da:4e:68:89:73:fd:41:fd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4C6EE5589457742CB9D92B3B4C697DB229C555
        Validity
            Not Before: Mar  5 17:36:53 2024 GMT
            Not After : Mar  4 17:41:53 2025 GMT
        Subject: CN=E8B5231628D0EC3835AA63A7279595D1E93402F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:2b:57:bf:66:a2:d5:85:88:d8:6e:a9:2f:
                    6f:0c:99:0c:35:b5:5b:0f:72:29:1e:06:0a:d8:08:
                    54:02:68:87:7c:f9:62:4c:83:e7:58:af:63:9e:c0:
                    6f:68:27:79:a0:fe:4f:d0:e3:2b:bb:a8:50:d0:75:
                    e2:da:7b:19:fd:86:28:b6:9e:43:ec:5c:5b:df:ea:
                    8a:4f:f4:ae:11:85:a9:44:9e:75:58:da:06:a3:1a:
                    e8:de:2c:6d:f1:48:1b:27:35:27:33:ab:4c:96:64:
                    57:a6:34:04:ae:3e:67:84:08:d6:25:c7:7a:e4:88:
                    4a:ce:74:1d:0f:6f:d0:27:a3:72:8a:af:db:e2:ef:
                    c4:a3:92:d4:cb:85:d4:dc:0a:88:ce:06:80:b1:02:
                    8a:75:17:bd:bb:80:df:3d:39:48:1f:08:9c:73:2f:
                    2b:45:07:49:9d:32:e2:ea:07:d8:43:f3:d9:ee:d7:
                    87:09:c9:00:94:a8:34:b8:5e:91:80:b0:5b:36:69:
                    0c:9b:a3:1c:a8:2b:9d:51:cb:be:19:77:96:19:8b:
                    b2:00:ab:3f:92:fa:f5:04:5c:28:55:bf:60:2c:59:
                    a3:53:36:52:ba:5d:ac:4e:b6:06:bb:b4:49:f5:48:
                    e2:08:86:82:1f:44:b9:37:da:89:3f:ef:b0:a0:4e:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B5:23:16:28:D0:EC:38:35:AA:63:A7:27:95:95:D1:E9:34:02:F5
            X509v3 Authority Key Identifier:
                keyid:7C:4C:6E:E5:58:94:57:74:2C:B9:D9:2B:3B:4C:69:7D:B2:29:C5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C4C6EE5589457742CB9D92B3B4C697DB229C555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B157FC268DD913D5210B604F6FFBBC425110FEB3E88C1BCEE39F296C51AD8B5/0/3230302e3130372e38302e302f32342d3234203d3e203238303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ed:d0:ec:24:83:2b:66:b3:c5:27:c5:bf:7f:ed:0a:34:12:
         2e:0f:17:d9:7f:4e:8f:fe:9a:09:f1:ae:79:b5:2d:d4:ae:55:
         cb:57:cf:02:57:70:64:e1:e1:cb:fa:9a:8f:4c:eb:c9:87:1f:
         2c:5d:a5:b4:fa:59:99:65:13:9a:db:2b:43:55:2e:c2:87:af:
         33:19:fd:31:82:ca:0e:a3:7f:be:67:6f:39:df:39:3b:a0:2b:
         dc:f3:7c:d9:ad:f5:7e:2b:64:8e:6b:9c:35:a9:8f:ff:eb:3e:
         46:36:40:67:e6:fd:c5:75:18:b0:84:48:88:ac:cd:9b:6b:ef:
         5c:14:08:20:83:36:f3:e4:8f:03:55:57:f8:8e:e6:cc:48:b8:
         bd:03:3a:70:79:83:19:b2:97:06:bd:72:63:e8:c7:2b:5c:ce:
         86:aa:db:70:2a:e8:da:ec:5f:e5:33:6c:6b:d8:64:1e:ec:3e:
         e6:2f:c7:04:b3:a6:ce:16:c8:e9:95:d6:5a:29:3b:63:4b:8a:
         c6:54:7b:27:29:76:fe:d7:4a:c9:04:9f:90:e5:8b:c2:b0:f3:
         45:ef:ac:af:5f:f5:71:f5:68:4d:07:53:b0:1f:88:d0:e0:98:
         85:a3:f5:19:ce:89:69:8b:45:d3:0b:8b:e2:a4:2f:9f:47:fb:
         3a:90:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org