Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139392e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139392e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          9srO+dkShD/j9PO3k/+v1m+BFJNHXusjSQotMPrIkss=
Subject key identifier:   79:CA:0F:40:2A:4B:2B:42:B1:63:A3:5D:95:2B:94:89:09:18:35:87
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       086EAD0E8304F7811CE800F39F7977A5F8365214
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139392e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:15 +0000
ROA not before:           Tue 05 Mar 2024 18:08:15 +0000
ROA not after:            Tue 04 Mar 2025 18:13:15 +0000
asID:                     20015
IP address blocks:        200.71.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:ad:0e:83:04:f7:81:1c:e8:00:f3:9f:79:77:a5:f8:36:52:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:15 2024 GMT
            Not After : Mar  4 18:13:15 2025 GMT
        Subject: CN=79CA0F402A4B2B42B163A35D952B948909183587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:1f:34:fb:bb:d7:1c:e6:c5:ea:e5:3e:cd:
                    f9:50:df:50:38:4d:9a:a1:57:5f:d3:58:a5:81:67:
                    aa:1f:1a:fb:b0:f3:59:16:c2:97:06:c0:f1:17:b5:
                    f7:ed:88:e6:ba:ba:ce:db:f0:6c:1a:d9:f0:74:9d:
                    28:9f:8d:56:29:0b:f4:9c:0c:69:3e:bd:37:0d:db:
                    79:3a:be:a7:ea:78:62:aa:2a:25:bd:da:fe:63:c5:
                    0f:be:31:00:af:a4:86:7b:ea:4f:fd:3c:94:6f:55:
                    5e:83:82:51:d9:eb:b3:55:7f:55:80:c8:1d:86:76:
                    f0:2b:bc:b0:53:ee:d1:28:a2:79:8b:31:1e:30:e0:
                    cc:82:53:e7:a4:1b:4e:e0:21:3c:3e:31:47:19:1f:
                    73:53:ed:33:e5:24:55:c9:92:a2:95:c4:15:cb:25:
                    d5:be:d0:42:38:e7:f8:f5:f2:9f:9f:ab:a8:55:59:
                    4d:02:c6:98:ae:79:3c:96:32:a4:58:7f:74:d3:aa:
                    29:c4:bd:ba:ff:3e:46:73:a8:72:f1:40:d7:91:f7:
                    47:ee:d4:34:45:c2:95:d1:23:ef:6b:3a:47:32:0f:
                    b2:5d:15:c0:15:3d:e4:52:4e:16:15:8f:bd:bb:55:
                    12:4a:7a:c9:3c:a4:2e:9c:c9:f6:ad:70:62:52:24:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CA:0F:40:2A:4B:2B:42:B1:63:A3:5D:95:2B:94:89:09:18:35:87
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139392e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:b3:08:43:4b:93:c7:99:d6:b4:ed:f9:0b:3d:26:a8:aa:
         c2:ee:f1:a2:2f:89:ef:dd:eb:db:f0:49:0b:35:ef:0c:4f:de:
         ca:5d:97:8e:40:57:9f:e1:6f:f0:7e:26:34:04:69:a0:cb:26:
         e8:b6:43:dc:44:56:99:28:7d:f1:9d:23:f9:d7:db:f3:50:69:
         7f:f4:6c:a6:a5:e4:fe:e2:3e:ce:11:f7:99:70:26:d3:50:94:
         9f:51:c9:4f:42:f0:24:cc:0c:19:3f:dd:df:9b:38:15:09:0e:
         89:7e:cd:26:e0:28:6d:62:45:78:99:a3:33:16:b7:60:0c:62:
         19:e3:55:4c:50:3b:e5:6e:5e:48:0a:63:62:99:d9:cc:30:83:
         a0:e6:0c:de:14:74:0f:a6:2b:15:86:0d:dd:91:aa:75:32:39:
         f4:5c:4a:2f:77:24:27:30:e5:8a:61:f2:5c:c1:21:f4:18:67:
         34:0e:0f:84:57:e1:13:f4:24:21:a6:f0:12:fe:44:69:8e:b1:
         71:33:48:fb:89:19:cc:e8:48:06:87:9e:d0:ea:89:bb:49:d7:
         43:3d:39:d2:60:ac:a9:24:f0:5a:ab:6c:d9:92:2e:40:11:30:
         f3:fc:22:53:f9:5f:8d:07:26:8f:95:2d:17:18:c8:43:c0:27:
         11:3f:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org