Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231302e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231302e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          l7BdaOmNpgKjzdygOpy7T+dUwS81xpW/+3kb78diZ00=
Subject key identifier:   83:2B:07:DD:7D:7E:5C:CA:4F:24:CF:21:96:38:C1:E8:69:56:BB:DC
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       2802300D61CFF6446730FF16F775DE3D2865BECB
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231302e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:11 +0000
ROA not before:           Tue 05 Mar 2024 18:08:11 +0000
ROA not after:            Tue 04 Mar 2025 18:13:11 +0000
asID:                     20015
IP address blocks:        200.71.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:02:30:0d:61:cf:f6:44:67:30:ff:16:f7:75:de:3d:28:65:be:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:11 2024 GMT
            Not After : Mar  4 18:13:11 2025 GMT
        Subject: CN=832B07DD7D7E5CCA4F24CF219638C1E86956BBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:fe:f7:96:2e:9b:8c:3a:fb:74:bd:6d:0b:
                    27:3f:b2:88:ca:5e:2a:35:ca:7d:4c:29:96:e4:ae:
                    a7:71:29:cd:43:10:b3:b2:90:7b:6e:ce:1f:2c:69:
                    f5:27:1f:8f:64:73:58:02:4e:e1:51:59:42:59:f1:
                    c6:bd:ec:83:aa:e8:ef:66:41:9b:55:95:bd:52:97:
                    40:e2:50:1a:b5:43:e2:dc:70:78:3a:be:22:97:44:
                    9f:84:29:42:27:94:e1:78:9c:2e:8c:46:03:c1:55:
                    50:87:91:00:d6:8f:7b:34:d0:1e:80:25:4c:33:06:
                    7d:89:b0:2e:ca:33:60:bc:2e:25:96:c4:6e:64:7e:
                    0e:2a:dd:e1:73:1e:12:32:e6:e6:af:a4:5a:8c:8e:
                    63:c9:4d:c2:54:7e:3c:9b:f0:07:54:f4:51:03:76:
                    7e:97:bf:5d:3f:85:eb:c2:77:cf:10:ec:44:18:42:
                    c5:af:f0:ad:1e:43:af:79:47:a7:67:43:70:bd:58:
                    f9:0a:25:32:67:9c:79:33:7c:c4:f0:4b:7b:3b:e8:
                    78:36:cf:b4:d7:f5:db:86:ee:db:2d:04:a4:db:c2:
                    ac:84:58:2e:36:6b:13:9e:e5:4a:29:b6:02:6b:39:
                    3f:b0:77:2a:a3:40:9f:5d:72:6a:94:79:63:2b:d5:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:07:DD:7D:7E:5C:CA:4F:24:CF:21:96:38:C1:E8:69:56:BB:DC
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231302e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:66:87:79:e0:e2:17:05:df:ed:d8:24:bd:c4:45:2a:10:bb:
         b4:00:a6:c8:79:b1:d1:c8:a2:89:20:9e:ba:e7:f0:ef:22:ab:
         f9:e5:0d:cf:c6:cc:91:ba:d0:dc:0f:c2:e7:69:9a:ba:c5:9f:
         1b:b5:2b:e5:1e:08:54:6d:03:fa:5e:2e:39:b5:f1:49:91:45:
         f0:81:dc:1e:a5:c5:38:30:cd:d4:31:84:dd:77:a9:f2:97:6a:
         05:df:26:32:c2:3e:21:98:1e:93:91:8f:38:01:e1:fa:de:bd:
         85:ff:75:f1:15:7d:fa:60:3b:d3:74:27:2c:2c:a0:3d:05:62:
         e1:25:ca:c1:1a:af:b8:a6:58:b0:53:d1:03:5c:f9:d9:14:fe:
         87:78:f3:12:bc:58:5d:38:f8:37:54:74:92:32:63:09:cf:02:
         9d:7d:f3:8e:83:50:b0:34:b4:de:2d:5c:7b:80:db:e9:87:48:
         e4:85:be:c6:45:c3:0e:c9:5b:ef:69:1e:64:92:98:ee:b1:22:
         81:6e:70:10:db:d8:ab:ac:c9:79:43:8b:d2:f6:b8:bd:39:ca:
         41:49:e7:1b:ec:79:e8:f7:ad:43:b0:8c:69:8f:f8:d6:57:4a:
         f9:c8:80:8e:31:b8:88:f0:36:ee:3a:20:41:5d:e7:5c:e0:e7:
         90:f8:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:31 2024 by rpki-client on console-fra.rpki-client.org