Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
File:                     3230302e302e32312e302f32342d3235203d3e203238303137.roa (raw, json)
Hash identifier:          adpNDy1LoD/U/g7NcYQFFMr5QeHTJts9UlpYZVIcidI=
Subject key identifier:   55:16:0A:B9:09:9D:BC:70:9E:24:D0:89:52:DE:5E:44:CF:A4:38:49
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       2832EFE5F0428CD3348E9A6C2CCA77A9188F95E5
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
Signing time:             Tue 05 Mar 2024 17:58:53 +0000
ROA not before:           Tue 05 Mar 2024 17:53:53 +0000
ROA not after:            Tue 04 Mar 2025 17:58:53 +0000
asID:                     28017
IP address blocks:        200.0.21.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:ef:e5:f0:42:8c:d3:34:8e:9a:6c:2c:ca:77:a9:18:8f:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Mar  5 17:53:53 2024 GMT
            Not After : Mar  4 17:58:53 2025 GMT
        Subject: CN=55160AB9099DBC709E24D08952DE5E44CFA43849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:eb:d9:48:e9:a9:7f:91:15:a6:17:ef:06:
                    52:c4:d9:82:90:46:48:3b:bf:a9:c8:22:4c:28:ef:
                    58:43:51:88:e1:4f:55:60:d9:89:5e:0f:d8:ef:6b:
                    84:61:d5:83:9c:76:40:ec:63:f5:a2:44:92:12:4e:
                    bb:ff:0e:9f:3a:e6:b1:c0:7b:96:87:f1:a0:b0:59:
                    cf:ae:48:19:81:03:f7:31:b4:e5:67:85:5c:e0:dc:
                    e3:d1:c2:fe:ac:d2:b5:46:91:2b:68:e8:34:09:48:
                    b7:5b:f0:e5:7b:ab:2b:5b:ac:02:3f:f1:3b:73:b9:
                    83:7a:15:ff:04:ae:64:2c:fa:f5:82:b6:02:fa:22:
                    96:ad:63:48:cf:00:4a:5b:fe:4d:2c:b1:d5:6e:fd:
                    5c:a5:0f:92:02:b6:2f:78:0f:f1:47:c1:f9:d8:79:
                    81:fd:0a:82:cb:ba:22:89:71:bd:3c:13:d9:52:dc:
                    0f:35:43:9c:69:f3:9d:48:97:74:f4:50:d8:13:40:
                    d7:8e:b4:42:9a:c1:b0:e3:0e:1d:db:e6:f3:ba:7c:
                    dc:46:83:93:d1:04:a2:a1:8e:37:82:92:3e:ea:4c:
                    f9:4a:58:1c:0c:21:75:43:e8:b7:99:fa:61:6f:9f:
                    9f:4c:0f:e9:35:dc:be:00:b1:46:1d:6a:1e:65:0d:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:0A:B9:09:9D:BC:70:9E:24:D0:89:52:DE:5E:44:CF:A4:38:49
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:6d:b9:10:3e:36:21:ef:4f:48:e1:38:9f:7d:04:1f:57:27:
         16:80:2a:e1:7d:a0:4e:7e:56:57:10:35:81:7b:55:25:a8:85:
         81:98:2d:58:a5:de:45:08:65:b3:c5:e2:b6:8d:db:0b:36:69:
         f5:30:ed:c6:8d:12:81:74:82:10:dc:41:f4:3e:7f:ab:2f:9f:
         62:5b:3d:34:84:13:b4:a9:2e:52:aa:bb:30:48:a1:f9:83:0a:
         63:2c:33:06:ba:09:d8:05:a6:0d:1f:8e:6a:52:21:bd:19:f1:
         ba:d6:64:b6:09:cd:89:37:d7:83:24:09:d0:41:77:1d:ca:16:
         e7:41:64:22:d5:7e:76:84:0e:87:e7:d5:ca:a1:66:e4:00:91:
         04:73:f6:f4:45:82:ec:28:d6:56:47:32:7a:f9:59:aa:fd:d0:
         16:ce:3c:63:b3:b9:9a:ac:fc:e3:31:ff:a6:8f:f5:f0:d6:bc:
         a3:f1:3a:04:e0:31:f1:56:2b:b6:a2:7b:be:49:b8:c1:ee:48:
         20:de:1b:ac:55:87:d9:c3:a9:94:48:6e:5d:8f:30:14:93:15:
         ae:07:95:1b:e1:69:9c:34:3c:50:76:65:05:2f:bf:3a:e6:85:
         66:56:ee:7f:11:9f:11:44:9c:87:a9:03:9d:fb:28:f8:51:33:
         7d:09:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:32:53 2024 by rpki-client on console-fra.rpki-client.org