Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136312e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          EeXtc7nyYbeEMGalRGhBAPRB2EMdM67uIniS3Sw6WLo=
Subject key identifier:   BB:72:6A:73:45:71:11:05:72:E6:09:DD:34:F0:90:94:36:B7:CE:F4
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       3F5E73D1DB0DA63347E034E84DB25DCCF7185889
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     22541
IP address blocks:        200.75.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5e:73:d1:db:0d:a6:33:47:e0:34:e8:4d:b2:5d:cc:f7:18:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=BB726A734571110572E609DD34F0909436B7CEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:8d:59:e5:a1:59:15:2f:c6:00:b9:15:8c:
                    02:bc:f5:a8:9f:5b:31:57:2d:9c:1b:cb:d5:28:b8:
                    f2:ef:ce:8f:4b:01:11:9e:75:6c:a8:fe:45:56:5f:
                    6d:d6:84:48:82:8e:97:2e:77:bb:a4:74:97:e7:0a:
                    00:6e:eb:de:c6:e4:a3:13:f0:39:83:ad:3f:b5:33:
                    9d:ea:ba:8a:e0:c7:d0:d3:1b:08:c2:d5:14:8b:df:
                    6f:ab:52:68:2b:6f:cb:18:aa:6f:3f:03:bc:17:86:
                    4f:98:4d:36:6e:5f:ef:e5:6a:49:7a:bc:fc:f6:8d:
                    de:85:23:35:5d:79:9c:16:77:a5:79:41:20:92:a8:
                    63:1a:c6:5e:49:34:9c:f0:8d:72:79:b2:d9:3e:a7:
                    bc:df:6c:5d:c0:e7:9f:c7:c8:ec:31:9b:70:df:cd:
                    6f:c0:6b:2b:23:42:a6:b2:ce:9b:d4:f3:aa:45:56:
                    5b:df:e0:db:11:a0:cf:a1:a2:42:b2:47:16:5a:41:
                    42:b4:e8:6a:72:e0:af:d4:ae:1e:96:16:7e:0e:63:
                    bd:40:29:f6:a0:34:d3:34:5e:16:d0:4c:55:5f:3c:
                    6b:35:9c:cb:d7:4a:59:ce:9c:80:81:e0:39:ff:69:
                    7a:f9:87:06:91:bc:90:ec:ca:97:eb:e0:a0:b3:a3:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:6A:73:45:71:11:05:72:E6:09:DD:34:F0:90:94:36:B7:CE:F4
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:77:89:e0:b8:0a:5a:2c:52:c1:ad:15:91:b3:6a:4d:98:e1:
         29:fa:2b:0b:01:3c:0a:76:b5:68:46:5b:56:4c:20:b4:18:0d:
         0b:aa:52:b3:9c:1d:86:34:4e:14:f7:3e:c8:87:fb:6c:48:22:
         47:cd:12:47:d2:2b:8d:f2:c0:45:cc:41:a9:30:eb:4e:ec:f4:
         f5:37:c2:1b:57:34:48:d1:c1:87:c3:1a:36:aa:7a:15:f9:eb:
         aa:47:9a:b3:76:ab:ad:d9:cb:1d:04:bd:3a:a0:52:84:bf:3a:
         bf:b4:a2:18:f2:b7:d8:de:a0:7a:8e:62:e3:a8:84:b3:14:46:
         18:de:e1:8f:9d:30:38:27:ec:4b:af:9e:72:4b:1c:14:89:3e:
         6f:a8:3e:48:6d:a4:99:79:21:39:57:60:56:36:97:d5:52:21:
         85:4d:6d:5a:cf:85:ac:7f:54:06:26:cf:54:d5:e5:e2:c7:ac:
         72:9e:93:e4:ef:e9:8a:ec:0e:5b:40:a8:50:ad:b6:87:ec:00:
         0a:0a:5e:4f:8c:fe:d1:5b:65:9e:ba:9d:f3:07:5c:06:24:91:
         4a:ce:2a:9f:02:7c:07:12:c7:97:89:65:fa:fa:f0:40:25:1e:
         b5:31:47:63:ed:67:19:56:34:ee:82:d9:f2:62:d1:3e:91:9a:
         a7:52:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org