Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231372e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          guvCiF2nJCVYE2bDaBlyY5uR1NsUTyilLhYHrosVqdY=
Subject key identifier:   1C:44:B1:A5:B0:AD:61:F2:0D:A2:BF:EC:81:B1:E4:A5:10:8C:71:E1
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       4CDB579D2CD82E256BC0B40853FCCB4C2C328829
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:16 +0000
ROA not before:           Tue 05 Mar 2024 18:08:16 +0000
ROA not after:            Tue 04 Mar 2025 18:13:16 +0000
asID:                     20015
IP address blocks:        200.71.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:db:57:9d:2c:d8:2e:25:6b:c0:b4:08:53:fc:cb:4c:2c:32:88:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:16 2024 GMT
            Not After : Mar  4 18:13:16 2025 GMT
        Subject: CN=1C44B1A5B0AD61F20DA2BFEC81B1E4A5108C71E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:4b:13:1a:11:e6:53:4e:8c:62:3a:8f:1d:
                    5f:53:c4:b8:d9:70:41:bd:1e:78:10:2d:7e:61:bd:
                    8d:b7:76:fd:be:3f:43:50:4a:2a:2b:42:7e:e9:7f:
                    c4:04:ee:f5:b5:1a:d4:6f:50:0c:27:55:31:d1:14:
                    1c:93:a5:81:0c:4e:a6:57:b4:66:cb:0e:d7:da:58:
                    00:9d:30:2a:dd:c1:6f:26:83:4b:c6:1c:18:3f:ad:
                    27:e0:4f:86:34:b0:0a:40:98:28:d6:42:66:ff:3c:
                    6f:a7:21:dc:4d:6e:ae:09:a9:4b:23:4b:54:8d:e8:
                    9c:4f:65:0e:fe:6d:c6:88:1f:e9:64:64:d5:b9:94:
                    ff:0e:0f:50:02:7e:94:5c:6d:f4:f8:41:81:e3:76:
                    9b:4a:aa:bc:10:da:ef:ae:d5:04:e5:c3:3f:26:31:
                    b2:c0:a7:62:85:54:3b:aa:05:cd:3e:52:4b:33:43:
                    eb:17:f8:36:49:d2:9d:30:9f:82:57:c2:9c:ca:fb:
                    94:04:3d:20:6c:48:d9:10:50:76:6b:5f:00:ef:62:
                    b0:e0:8d:c1:18:9d:3b:57:ff:05:0d:8d:4c:5f:23:
                    23:63:d2:88:de:b4:a1:15:d6:b2:bc:58:49:07:f3:
                    72:e5:57:c6:13:0f:0c:63:ce:49:ca:f4:79:5b:78:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:44:B1:A5:B0:AD:61:F2:0D:A2:BF:EC:81:B1:E4:A5:10:8C:71:E1
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:a5:0a:ed:1b:41:62:1f:8d:e2:e3:19:40:fd:9f:f8:3a:
         b8:a4:f6:71:f6:39:a6:6a:3a:ba:d3:43:50:70:78:af:7a:f8:
         d1:ee:05:e8:eb:15:56:b1:60:5f:48:9e:9b:88:ae:7f:86:41:
         38:0c:bc:c8:97:bd:3a:b0:f7:e0:df:f8:f1:57:c5:16:00:df:
         1e:dc:db:fb:ec:90:1e:40:93:f7:c5:2a:c5:b4:3a:79:2d:32:
         9a:52:35:0d:4d:52:db:90:6c:88:b0:45:69:23:7a:eb:b9:47:
         88:fe:12:e8:39:3f:c4:e9:af:0a:e0:49:db:c9:6a:47:dd:6b:
         c9:83:1a:ba:c8:65:52:fe:55:63:19:06:a4:05:a3:53:e2:0b:
         22:28:21:33:f2:42:86:ce:2c:1f:13:dd:7c:98:ce:97:8d:d4:
         2f:08:a2:1b:a6:02:bb:50:b1:4d:07:35:e7:cb:8d:ff:2f:a5:
         80:a4:0d:4e:27:d1:ce:99:1a:ec:f5:3a:f1:e0:76:97:75:87:
         96:78:97:7d:ca:2e:50:c2:d4:31:aa:c2:71:c1:b4:00:ef:93:
         36:53:9e:2e:b4:b4:62:43:97:95:7b:ab:17:ab:c3:a4:26:b5:
         f1:93:a6:a6:9e:90:15:65:d3:a5:b6:e4:13:84:c0:9a:6c:82:
         31:b3:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:35:25 2024 by rpki-client on console-ams.rpki-client.org