Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136322e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          RScXbWKNEjSxK7lglAd12mttplnZM9+P1zb3NBsGM7U=
Subject key identifier:   5D:33:B5:ED:83:09:5B:84:59:05:CD:66:6A:C4:5C:2C:5F:4F:3B:B6
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       5333BE149C40B5D879879A61B6435F137A667B14
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:22 +0000
ROA not before:           Tue 05 Mar 2024 18:02:22 +0000
ROA not after:            Tue 04 Mar 2025 18:07:22 +0000
asID:                     22541
IP address blocks:        200.75.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:be:14:9c:40:b5:d8:79:87:9a:61:b6:43:5f:13:7a:66:7b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:22 2024 GMT
            Not After : Mar  4 18:07:22 2025 GMT
        Subject: CN=5D33B5ED83095B845905CD666AC45C2C5F4F3BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:ff:b6:38:7b:c0:20:68:32:94:80:3e:ba:
                    12:f8:66:ef:51:cb:e0:c9:58:64:04:86:7e:ed:6e:
                    32:1f:be:94:4d:f3:46:58:e5:98:1f:2b:8c:f5:39:
                    51:b5:0b:1a:ed:d4:47:d3:6c:9c:3f:e8:da:88:4e:
                    2a:f5:9b:4b:f8:4e:43:bb:41:7e:35:92:d7:92:6f:
                    4f:d9:80:69:d0:dc:b6:9d:3f:f9:a3:df:c8:70:55:
                    1d:7d:da:d6:33:d8:ee:95:0f:7e:2a:c8:1e:a8:9f:
                    a4:ac:82:b0:0c:23:ae:e1:44:ed:76:57:52:de:48:
                    d6:97:ba:1a:71:28:27:bf:65:e2:2d:d4:a3:cb:4a:
                    81:de:a5:28:3c:4c:38:4f:b5:81:4f:0c:9b:e9:e8:
                    b5:ae:93:7f:c3:02:a4:e2:eb:2b:58:05:c3:35:0c:
                    c6:f6:5d:4a:2f:24:20:33:31:43:09:14:1c:52:df:
                    8b:90:a7:6a:bc:07:35:28:14:7c:14:2c:13:a5:b2:
                    1d:e8:28:15:c5:73:aa:75:7f:aa:73:91:57:28:9f:
                    5a:8c:7e:79:e5:20:93:15:aa:f9:c3:31:34:1a:17:
                    eb:26:d9:18:01:b9:2c:1c:b2:95:83:af:5e:8b:1b:
                    2a:6c:94:f9:9d:f0:6b:44:ee:fa:93:1c:f3:f9:45:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:33:B5:ED:83:09:5B:84:59:05:CD:66:6A:C4:5C:2C:5F:4F:3B:B6
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:7a:d2:31:bc:9c:d4:b5:c6:98:0b:25:d0:bf:19:03:a1:
         06:2f:50:3a:12:63:78:b1:04:93:d6:90:70:1f:1a:69:0c:18:
         3c:a7:ec:0c:88:c6:b1:64:d0:b2:5d:8b:87:c0:ab:ba:14:b7:
         e9:e9:32:55:aa:83:25:8d:a8:67:49:f1:3e:99:77:0d:23:4f:
         23:49:db:30:85:da:9b:52:66:f2:d8:2f:96:9d:b7:61:67:6e:
         9f:24:da:96:43:00:81:93:2a:32:74:b3:62:59:2d:3c:23:7b:
         b9:21:25:d9:e7:68:59:2d:17:f6:7b:f5:e2:40:58:38:b8:ec:
         1b:d2:47:93:de:36:89:e7:c3:7f:23:8b:fb:2a:3a:a6:21:9e:
         6e:38:52:ac:dd:53:52:0c:f9:58:f3:ca:bb:53:0a:73:f4:e8:
         29:ab:a7:6a:dc:5f:ce:bd:7e:72:c9:aa:b8:0c:15:d6:e6:99:
         6e:79:77:3b:0c:97:0d:f8:07:78:b3:99:e4:af:c7:52:45:83:
         6c:2b:d5:2d:e6:67:6d:6c:ae:bc:72:4c:e1:5d:56:fd:d2:fd:
         b3:71:e0:cf:b6:f3:14:5c:cd:7a:2f:60:b1:63:33:69:58:9e:
         61:c7:9f:f8:d4:90:f4:c5:8d:75:b8:d6:7e:09:01:0a:9b:b0:
         47:3e:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:36 2024 by rpki-client on console-ams.rpki-client.org