Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3134342e302f32302d3234203d3e203131353632.roa
File:                     3230302e37352e3134342e302f32302d3234203d3e203131353632.roa (raw, json)
Hash identifier:          KN4yZe7oMmJ+O9+YnTT/4Fx255+KxMFGGh2Kh739X1A=
Subject key identifier:   72:7E:DA:FF:3D:E3:C8:73:08:85:61:DD:2B:B9:42:A6:FC:DB:EE:B4
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       34F21F841BECCE2594B8E250C2C08A108A6D3980
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3134342e302f32302d3234203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:28 +0000
ROA not before:           Tue 05 Mar 2024 17:48:28 +0000
ROA not after:            Tue 04 Mar 2025 17:53:28 +0000
asID:                     11562
IP address blocks:        200.75.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f2:1f:84:1b:ec:ce:25:94:b8:e2:50:c2:c0:8a:10:8a:6d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:28 2024 GMT
            Not After : Mar  4 17:53:28 2025 GMT
        Subject: CN=727EDAFF3DE3C873088561DD2BB942A6FCDBEEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:75:87:6a:a0:3c:9e:7d:38:bc:8b:f7:4c:
                    c9:9b:3b:fc:c7:72:86:4a:6d:0b:f4:ff:4b:87:e9:
                    d6:bf:b1:86:f2:10:6f:bb:47:9a:54:30:3e:a7:0b:
                    4f:e4:19:90:3d:65:3c:50:70:0c:82:26:93:47:27:
                    7c:12:96:fb:0e:4a:c0:14:d5:21:06:49:21:9d:1f:
                    0e:c8:5d:05:16:24:70:7d:04:f5:fe:f2:a6:20:f5:
                    93:02:bc:1a:9d:fb:55:20:63:34:71:f4:34:86:84:
                    68:ad:54:7a:24:74:b6:3d:c5:63:f7:4e:ff:f3:de:
                    68:54:e7:41:cd:86:19:42:58:b0:df:fe:00:23:51:
                    be:0e:fa:ba:8f:91:ed:f9:74:81:2b:0e:93:a3:b8:
                    f6:19:4d:aa:2c:5e:d9:cd:11:54:dd:e0:ce:72:73:
                    ce:2c:33:06:e0:bc:4c:52:98:ea:2a:7f:a4:29:40:
                    13:7a:14:a8:35:4d:06:c0:68:a2:11:dc:d7:b0:77:
                    c9:89:1c:3d:b1:87:37:e5:dc:d6:4f:04:4b:52:91:
                    8b:e5:8d:af:fb:c5:f3:76:24:0e:cf:75:67:a3:93:
                    b9:3b:2d:92:44:04:c4:6e:4a:98:a3:c6:78:92:94:
                    42:2f:3e:55:57:8e:9e:fa:a9:63:e6:97:13:5b:8c:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:DA:FF:3D:E3:C8:73:08:85:61:DD:2B:B9:42:A6:FC:DB:EE:B4
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3134342e302f32302d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:b1:43:da:f6:5e:b9:6e:2c:42:2f:cc:1b:c0:73:81:10:
         1c:0f:bb:fc:ca:58:d3:04:a6:87:15:09:d3:3d:1f:46:b4:39:
         86:fc:eb:9b:2d:03:98:0e:92:c5:f6:c9:e6:95:b3:32:e4:1e:
         d6:47:cf:69:4e:36:43:c5:19:23:00:39:74:f8:ea:0a:6d:7e:
         b6:ab:c7:26:7f:46:33:9c:3d:e6:60:61:3b:e2:28:bc:2a:c1:
         94:b6:af:cf:7f:af:fb:12:22:d1:2a:6d:ea:77:bf:f8:34:c2:
         3f:71:31:21:c1:25:18:31:e7:1b:92:cc:54:36:91:10:76:aa:
         a3:85:3d:45:9b:21:a1:28:8b:e8:2f:20:98:90:9f:1e:bc:89:
         fb:69:2c:03:fc:e6:55:c6:37:a4:f9:9c:b8:c6:1e:b2:e1:ff:
         8a:de:6f:ef:a7:d3:4b:1d:e1:17:30:1b:bb:cf:90:2c:be:01:
         8e:97:cb:85:d3:fb:70:42:85:11:65:2f:7e:bb:0c:1d:d3:7b:
         95:ed:0d:6a:71:b0:94:46:7f:e4:e4:0e:0c:94:b8:da:67:53:
         18:53:bb:3d:e6:d0:90:8d:cc:6d:02:f4:4d:7c:bf:81:6f:b1:
         12:39:ef:da:e9:08:8b:10:4a:3a:f6:b9:99:40:17:2c:44:5b:
         c8:5b:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org