Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136352e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          kvNQIilo+OLY4anq/Xfob2Wfw4oOc5qgocA1HifQMqc=
Subject key identifier:   47:66:A0:4A:D9:A5:64:8D:04:65:4C:58:39:00:CC:61:BD:13:96:08
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       52471DE6D69D44E4C3A9D0C5DBBD694ACB3552FA
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:18 +0000
ROA not before:           Tue 05 Mar 2024 18:02:18 +0000
ROA not after:            Tue 04 Mar 2025 18:07:18 +0000
asID:                     22541
IP address blocks:        200.75.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:47:1d:e6:d6:9d:44:e4:c3:a9:d0:c5:db:bd:69:4a:cb:35:52:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:18 2024 GMT
            Not After : Mar  4 18:07:18 2025 GMT
        Subject: CN=4766A04AD9A5648D04654C583900CC61BD139608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:73:c8:0b:0f:2c:e0:55:0c:67:79:dd:dd:
                    1e:23:03:c9:07:00:b7:f9:d1:20:3b:83:9b:f6:1b:
                    28:1e:ef:7b:53:15:43:68:45:9d:f3:9c:24:8e:56:
                    9b:3c:76:f1:6f:59:37:f1:c4:34:3b:88:6d:48:0b:
                    14:bf:49:5c:f5:98:44:04:8f:8f:83:41:94:bb:85:
                    a8:aa:f3:0c:e3:bc:e0:b1:ce:9c:71:16:a2:75:39:
                    47:01:e6:50:0a:25:43:4e:52:1b:ce:f3:51:18:0d:
                    53:60:8e:d4:1c:cd:7b:5a:d9:a0:ef:e1:7a:03:13:
                    c7:da:41:5a:3f:d2:b6:4b:45:54:14:a1:da:2d:60:
                    39:96:5d:af:00:ff:54:1a:d7:04:2b:e0:cc:b8:99:
                    f4:04:3a:91:a5:5b:0f:65:48:5c:15:6a:4e:f5:cb:
                    ac:00:d6:9e:78:c6:08:3c:df:76:ad:41:58:f9:c6:
                    5f:46:b7:07:e0:1c:f0:92:0e:d8:10:dc:1e:5a:fa:
                    c2:eb:b2:a2:85:4b:78:db:32:bb:f1:32:1a:db:f3:
                    52:8e:4c:f9:fd:8d:8c:5e:03:bb:1e:35:7a:36:a1:
                    c6:a0:cd:7e:9a:bd:45:cc:6a:0e:1e:7f:9b:35:8a:
                    77:6e:1c:c5:7a:4d:9b:c1:2c:7a:3c:8a:54:f3:74:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:A0:4A:D9:A5:64:8D:04:65:4C:58:39:00:CC:61:BD:13:96:08
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:48:62:35:7b:02:81:d7:d4:fc:1a:b5:e9:0f:0f:22:fb:
         b5:69:3b:eb:e9:93:dc:cc:ab:18:51:0a:3e:4f:0d:dd:a7:d0:
         61:46:a6:57:ae:1d:06:76:71:76:21:e3:9f:cc:b4:33:4f:bf:
         a9:eb:16:fc:e5:26:af:21:2c:11:ea:7f:3a:21:6b:c5:35:c2:
         ab:7e:54:38:7a:e8:d1:cb:92:42:ad:57:37:56:36:ee:1d:5b:
         99:6f:b8:2c:da:1a:86:73:28:84:d6:0f:0a:db:10:63:24:93:
         2b:1a:be:07:97:0f:e8:09:6a:38:f2:f1:06:23:8a:d8:02:53:
         5a:77:38:4f:bb:8c:07:46:1b:c3:d7:d0:cc:51:fc:6d:fd:8a:
         f8:49:e3:a7:d8:69:fc:4b:b9:42:a8:4c:b5:af:2f:79:ec:a6:
         65:b9:82:cb:e2:3b:1e:5a:25:91:ef:42:ea:2c:ab:03:b6:91:
         44:ce:da:4c:8a:77:36:bb:d6:33:fa:80:3d:5c:9c:7c:12:2e:
         ce:40:e4:f2:62:07:ec:a0:dc:da:c7:61:1f:93:11:e6:f4:b5:
         07:ae:cf:1f:b1:7b:06:25:41:94:ad:32:2a:2e:82:99:4f:81:
         30:26:b2:4c:6d:bd:c8:1e:c5:ea:53:e8:7a:2e:4a:ef:16:fe:
         30:5b:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:58 2024 by rpki-client on console-ams.rpki-client.org