Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137302e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137302e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          khIfHj1HXQf925zGklVEKW8iTHX/AGun23SgJioY5Do=
Subject key identifier:   91:B2:15:7E:6B:53:AB:DA:98:F5:F3:03:15:BC:12:61:C0:E3:1B:FE
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       132C22D03396B989E2BCB0CB37C38C49DCF3045F
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137302e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:17 +0000
ROA not before:           Tue 05 Mar 2024 18:02:17 +0000
ROA not after:            Tue 04 Mar 2025 18:07:17 +0000
asID:                     22541
IP address blocks:        200.75.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:22:d0:33:96:b9:89:e2:bc:b0:cb:37:c3:8c:49:dc:f3:04:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:17 2024 GMT
            Not After : Mar  4 18:07:17 2025 GMT
        Subject: CN=91B2157E6B53ABDA98F5F30315BC1261C0E31BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:70:40:2c:02:89:0b:e7:e9:1e:55:30:de:61:
                    1d:d6:06:10:af:98:1c:5f:4c:de:0b:96:e7:d6:e6:
                    19:fd:55:2d:59:f7:04:17:64:f4:8b:d9:6a:7a:d6:
                    47:80:4b:a2:bb:5f:3c:45:e2:b5:8a:7c:0c:c4:5e:
                    5a:00:d2:17:9b:6f:25:da:e3:e9:11:80:c1:b5:f6:
                    49:cd:ae:2c:de:94:9a:f5:69:5f:9d:ca:9a:6e:d1:
                    ae:4f:89:47:4d:f7:a2:83:38:db:5b:79:aa:09:4e:
                    ab:87:86:d3:ca:8b:72:38:b6:05:b1:d6:80:b4:dd:
                    17:5e:d4:2d:99:38:e6:2f:a3:74:4b:7c:64:5f:2a:
                    74:fb:b2:58:a7:3a:10:5c:2e:dc:f7:03:c0:1a:42:
                    b1:63:4e:74:4b:42:58:a5:1c:61:d0:38:67:e2:bd:
                    6c:24:8b:09:07:09:44:25:ae:6a:3e:ef:06:32:8e:
                    04:9a:cb:2e:41:96:3f:ea:26:8d:1e:eb:eb:0e:60:
                    ca:a5:68:97:31:60:a6:c7:7d:ee:9e:75:25:a6:c5:
                    70:d1:a9:1c:58:69:6c:29:9d:d6:25:fa:e6:b9:d8:
                    3e:01:ce:c4:b1:9b:15:8f:92:e4:20:d1:cc:8d:85:
                    fe:7e:a6:71:d0:42:4e:3c:4b:f2:26:1f:23:2e:28:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:15:7E:6B:53:AB:DA:98:F5:F3:03:15:BC:12:61:C0:E3:1B:FE
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137302e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:cb:2b:d9:8e:fc:16:86:ee:f6:4a:a1:f4:8f:7d:d8:6b:2e:
         f0:71:63:3e:c3:68:55:f1:03:dd:78:a9:3e:e7:76:e4:41:f8:
         28:08:71:e2:06:03:b4:6d:e2:2b:97:57:8b:76:92:db:1c:e7:
         c6:b6:b3:af:ed:5e:12:f1:dd:b5:04:99:38:d8:44:ac:ce:ce:
         fc:bc:be:18:ed:fd:ca:2d:cc:aa:23:ac:81:fb:e4:b6:40:69:
         92:4c:89:f1:2a:3a:96:44:52:49:d2:51:f7:1f:b8:5e:32:33:
         8f:02:7c:90:23:c1:2d:12:b1:9f:dc:7a:a4:5c:71:6d:34:99:
         2c:13:6a:4f:7d:4b:0c:b8:7d:f0:96:37:05:8b:c7:d2:d7:5c:
         68:1c:c8:40:7e:b2:03:fe:16:a0:01:5e:0e:8d:6b:a4:9e:ab:
         01:69:61:29:0e:87:42:4d:e5:91:67:3b:dd:35:9a:e0:45:b0:
         5e:b2:d5:06:c4:89:b2:4a:2d:d6:bc:d6:13:56:31:95:e3:fe:
         f5:ad:ab:16:b0:f0:ba:65:a2:cc:8b:06:f7:08:8c:55:23:43:
         ff:15:ec:f2:d7:a5:23:65:11:f3:aa:7f:b1:cc:e3:53:85:54:
         c0:41:a9:a3:0d:bb:b0:04:ec:12:cb:bc:01:5d:60:3b:76:0e:
         ab:8c:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:18 2024 by rpki-client on console-fra.rpki-client.org