Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
File:                     3230302e37312e3230382e302f32302d3234203d3e203230303135.roa (raw, json)
Hash identifier:          WUOSyXtt6EZqIStrUMaP3pZ+k5vHlnO0aw6pMDGK9nQ=
Subject key identifier:   DF:5B:3A:2F:05:E6:B2:87:5C:2E:AA:BE:48:12:C6:D4:B1:3D:B5:1B
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       0FDCEF4A82251C0ADD86A6576A1307E51748CA4E
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:16 +0000
ROA not before:           Tue 05 Mar 2024 18:08:16 +0000
ROA not after:            Tue 04 Mar 2025 18:13:16 +0000
asID:                     20015
IP address blocks:        200.71.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:dc:ef:4a:82:25:1c:0a:dd:86:a6:57:6a:13:07:e5:17:48:ca:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:16 2024 GMT
            Not After : Mar  4 18:13:16 2025 GMT
        Subject: CN=DF5B3A2F05E6B2875C2EAABE4812C6D4B13DB51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:c5:62:86:b2:b5:ec:d5:5a:1f:87:f3:bd:
                    3f:88:77:9e:33:1f:15:bd:03:d0:86:d8:99:2d:d8:
                    fe:e3:e3:3b:4f:9c:fd:44:bf:d4:1d:f5:e5:4f:93:
                    01:6e:61:e6:61:93:de:f1:99:6a:71:10:63:42:5a:
                    71:9f:22:a4:76:91:38:37:1f:8c:dd:7d:16:22:02:
                    1c:1e:4b:6f:ce:21:33:12:8d:fa:13:3d:a0:a4:75:
                    90:c6:f2:24:e7:66:a3:0b:f3:16:f4:88:49:c2:60:
                    f0:db:4c:60:2c:a7:55:49:16:96:a3:ec:37:1e:9d:
                    37:5f:ca:19:41:d4:39:2c:d7:05:aa:28:a4:81:81:
                    3b:77:d9:2c:97:33:95:a0:5a:55:61:a7:d7:7d:ff:
                    c6:a2:5d:a8:c3:f7:fd:60:6a:65:33:7e:ea:d3:a6:
                    ae:ed:2d:bb:78:cb:a1:df:4e:67:eb:90:2c:54:c8:
                    75:de:a5:ea:d2:67:21:16:2d:31:91:11:d7:59:b6:
                    9a:64:cc:19:9f:ef:df:0c:f3:64:ba:e7:d5:a6:fc:
                    bf:d8:57:6a:5c:1f:1d:65:a4:d7:ec:af:b6:ca:20:
                    f6:75:f7:84:c2:40:ed:a5:66:40:55:27:27:17:8e:
                    d8:51:1a:ce:53:03:b2:93:4b:11:aa:0b:c3:82:cf:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:3A:2F:05:E6:B2:87:5C:2E:AA:BE:48:12:C6:D4:B1:3D:B5:1B
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:d9:94:d2:f3:d4:dc:f1:49:0e:e8:bc:30:61:55:08:15:
         d5:dd:84:17:b6:06:cf:ff:76:20:29:8b:dc:f9:87:b4:db:25:
         dd:66:6b:c6:ab:49:c5:e7:df:45:b8:fd:09:6f:56:40:22:b3:
         78:e2:1d:21:56:ee:cc:01:5d:70:bc:7d:13:51:9c:50:00:91:
         4f:14:d8:c1:f4:34:e3:e7:d9:e4:56:b8:5a:21:33:6c:4e:11:
         b3:4a:b0:0c:65:b2:01:c7:ab:4a:60:cf:21:4e:1d:58:fc:91:
         9c:4f:0b:14:fa:7b:f0:09:d9:0c:cc:a2:18:86:57:60:e4:0f:
         b9:86:9e:a3:e2:c4:75:43:b1:e9:3e:21:37:a7:93:7e:57:ab:
         de:a4:b2:7b:a1:99:5c:37:3c:61:52:6d:7b:38:c1:bb:f8:cc:
         11:8b:83:3b:94:59:b9:a1:b4:0b:41:ea:78:8e:bf:0d:f9:e2:
         f7:2b:8c:f8:d1:68:63:ca:41:62:39:86:f3:77:3a:52:aa:f2:
         f8:2c:a2:dc:7f:26:ea:49:2e:41:1d:06:3d:a8:45:88:6b:75:
         ba:87:c9:98:ec:30:18:bc:71:7b:cd:23:d5:8f:b0:d7:10:97:
         59:b1:5b:17:fd:e7:04:fd:97:08:ad:bd:7f:18:96:c1:cc:7d:
         be:86:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org