Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136302e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          vJkPf7SJhsQiwu9Fzmjq3F92GiyA2Yygj5KaTTMxoVM=
Subject key identifier:   5E:5D:7C:C8:9D:BA:5E:D9:9E:3E:7E:4B:11:19:96:03:7D:33:99:C4
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       4D5F0006B7CFA40D16027CE682DB12EAA679D983
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     22541
IP address blocks:        200.75.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:00:06:b7:cf:a4:0d:16:02:7c:e6:82:db:12:ea:a6:79:d9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=5E5D7CC89DBA5ED99E3E7E4B111996037D3399C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:65:7a:28:8d:a0:80:7c:56:7b:c7:9a:df:
                    04:bc:ad:57:af:ab:43:33:da:32:c7:da:7e:48:2c:
                    b9:5c:63:8b:c8:db:1b:c2:cb:ca:9b:b0:6c:26:e3:
                    79:c1:b2:bf:ad:6e:78:28:ee:93:a8:3d:96:1a:56:
                    5d:48:83:2e:59:40:44:06:a9:c8:c0:36:00:81:7f:
                    93:51:a0:0d:51:df:24:1f:8a:96:8c:29:02:27:49:
                    1a:75:20:6a:dd:6b:04:8c:3c:cb:59:a4:46:7b:eb:
                    4a:ff:c3:ee:dd:99:d2:55:eb:fe:b8:c3:c6:e2:1b:
                    7e:3f:eb:be:05:76:b8:67:33:29:7e:43:b3:e8:e0:
                    22:b6:7d:1f:d4:da:f9:01:8d:5d:ff:42:88:cd:f4:
                    b4:40:62:88:3c:4b:b7:66:85:a4:4a:58:e1:4e:52:
                    70:cd:b1:2e:ea:10:42:44:c3:0f:c9:5d:53:cb:fa:
                    43:f0:fd:b1:0b:4c:7f:3d:11:10:fc:a7:dd:8d:83:
                    7e:5e:39:c1:ed:7d:42:ac:85:8a:7f:b4:32:1c:eb:
                    30:f8:28:87:a8:15:32:2f:f6:2d:ef:59:5c:9c:32:
                    4c:b1:9c:55:17:c1:f3:31:10:af:4b:9c:c6:70:32:
                    36:bc:83:de:12:40:d7:84:34:c2:c6:a1:a0:d1:16:
                    f5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:7C:C8:9D:BA:5E:D9:9E:3E:7E:4B:11:19:96:03:7D:33:99:C4
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:12:8d:7b:08:6c:e5:19:1a:b5:2f:87:72:f1:c1:7d:df:
         0c:81:d7:b8:3f:be:dc:a1:ed:80:20:d4:15:93:ae:7c:6f:4e:
         f4:76:2d:46:57:6c:0e:e4:ae:0f:97:64:8b:1d:c1:cb:b2:5c:
         15:a4:30:bd:3b:98:a4:cc:03:05:65:2f:e5:06:46:75:e3:a2:
         4f:06:c2:38:d5:60:5c:ee:11:fa:f5:a1:0b:cc:90:d3:ad:2b:
         81:52:21:20:88:44:d4:95:f4:e6:bf:ad:05:7e:04:00:35:d6:
         c2:8a:a5:42:68:80:9e:f2:c2:a3:91:d6:d0:d9:ff:12:9b:0f:
         25:f4:46:90:2d:16:3d:ac:72:7f:fe:9e:f2:6b:12:88:66:c4:
         5b:8d:e2:05:b5:ef:16:71:5a:2d:83:ea:6b:e3:9a:ee:41:ea:
         3a:8b:a6:3c:12:41:e1:66:57:47:79:c7:ce:83:16:01:7c:29:
         70:03:30:5f:cb:8a:66:57:78:6a:39:a1:d7:83:76:54:78:c4:
         52:d8:74:db:d2:b5:a3:4f:96:b4:e7:cf:e3:1c:a2:02:e7:ad:
         b6:1d:b1:f4:70:11:45:b6:40:a3:80:68:42:74:0b:48:7a:df:
         ce:e2:2e:8f:33:34:61:ca:cd:98:ed:61:ff:3d:72:63:f9:12:
         f9:54:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org