Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          uNx7hKUobaiSAT4WxANSsSpG6//PCNNq0HpIQAq6vQE=
Subject key identifier:   1D:BD:FC:99:A8:28:28:E1:AD:7D:C2:AD:F5:8A:D4:34:CC:5D:FD:B1
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       1DDC13B6658F0B5CD2F176D07F2FFF9A91A37A75
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:20 +0000
ROA not before:           Tue 05 Mar 2024 18:08:20 +0000
ROA not after:            Tue 04 Mar 2025 18:13:20 +0000
asID:                     20015
IP address blocks:        200.71.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dc:13:b6:65:8f:0b:5c:d2:f1:76:d0:7f:2f:ff:9a:91:a3:7a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:20 2024 GMT
            Not After : Mar  4 18:13:20 2025 GMT
        Subject: CN=1DBDFC99A82828E1AD7DC2ADF58AD434CC5DFDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:a3:94:df:29:c1:6e:b5:82:48:74:14:e4:
                    cb:51:af:02:54:ea:64:a2:d0:8b:e5:97:51:2e:05:
                    a3:f1:49:fe:ff:23:e5:80:50:fc:47:b4:f3:5d:c4:
                    11:65:5a:4f:21:7d:1e:f5:af:92:f7:e5:69:a4:de:
                    d5:ac:85:96:3f:10:01:09:c6:d7:06:e4:69:f9:70:
                    8b:32:42:79:8a:c8:1e:95:86:c0:19:aa:a3:ec:58:
                    0e:5c:86:0f:61:02:8d:38:5d:be:f1:7a:b9:e0:9e:
                    87:02:67:e9:05:2e:36:9c:40:0f:db:a9:8e:32:ab:
                    0f:8c:43:ba:af:2f:b1:a2:b1:b7:26:8f:bc:ee:23:
                    15:5f:cb:11:14:33:2f:88:4d:73:bd:dc:2e:49:0e:
                    1a:4a:eb:59:1e:de:db:03:1b:28:ff:a1:7d:94:86:
                    ef:4c:9a:fe:32:ce:f2:26:c2:9b:2f:4b:2f:3a:c7:
                    ac:a4:49:91:aa:7f:86:b4:16:00:19:84:cd:bc:8b:
                    e2:ee:ed:2a:6c:db:e3:6c:a3:86:71:f5:ae:12:46:
                    45:1c:68:e0:c8:83:08:c3:31:a0:cd:10:ef:b1:37:
                    b8:ce:c4:81:9c:3b:82:05:c6:df:29:29:be:90:cd:
                    da:67:bb:a7:30:b5:dd:69:7e:30:0f:fd:19:d2:32:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:FC:99:A8:28:28:E1:AD:7D:C2:AD:F5:8A:D4:34:CC:5D:FD:B1
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:02:e3:e4:48:00:8a:d5:7f:98:2d:62:51:91:b8:d2:57:
         7b:8d:58:b6:5f:b8:b4:94:1c:83:11:9a:3e:27:70:77:2d:b5:
         c7:c5:e8:a5:fa:eb:24:7c:86:2a:a9:c5:dc:cf:d4:88:ee:c6:
         a1:ce:0a:b9:fe:73:18:09:17:30:b4:27:47:9a:b2:2b:92:bb:
         dd:63:cb:0f:d2:2b:ad:b6:7e:ab:da:e9:d5:8a:77:aa:0f:c5:
         e2:70:bf:d1:1f:cd:92:5d:78:c2:fe:c9:9b:80:94:cf:14:15:
         44:03:88:a0:ad:1c:ae:91:f3:7a:db:09:e5:fa:8a:2a:50:51:
         a1:c6:3e:38:07:56:44:46:52:96:f3:39:7f:1d:9b:94:97:ad:
         bb:2f:1b:74:10:32:d3:08:de:5c:f9:a4:a1:8f:83:3d:8e:41:
         45:18:1a:0e:08:89:06:34:27:33:d6:27:f9:60:82:5f:1c:52:
         5e:85:80:bc:b1:b3:69:9c:8f:2c:31:09:e2:b6:f2:d3:15:2c:
         8d:9d:22:c3:5e:d1:1c:ee:be:af:81:ff:32:fa:0b:d5:86:db:
         3a:27:ab:60:7a:e1:65:91:5d:7e:c3:14:3d:08:61:3f:8a:46:
         f4:44:1e:3d:0d:e2:4a:cc:0b:15:6e:a3:63:bf:1e:c9:c2:aa:
         23:76:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:31 2024 by rpki-client on console-fra.rpki-client.org