Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203237373834.roa
File:                     3230302e302e36332e302f32342d3234203d3e203237373834.roa (raw, json)
Hash identifier:          cK7PDNqrU9BMUvtbNZ5IjcJPWtmeqnSzLxUZ7ndnSPo=
Subject key identifier:   71:94:25:7B:76:48:4F:76:AD:73:AE:C3:9F:78:1F:B7:43:DD:96:BD
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       63A09713A3F4C4157D47AE04E677B89078892F42
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203237373834.roa
Signing time:             Tue 05 Mar 2024 17:44:15 +0000
ROA not before:           Tue 05 Mar 2024 17:39:15 +0000
ROA not after:            Tue 04 Mar 2025 17:44:15 +0000
asID:                     27784
IP address blocks:        200.0.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a0:97:13:a3:f4:c4:15:7d:47:ae:04:e6:77:b8:90:78:89:2f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:15 2024 GMT
            Not After : Mar  4 17:44:15 2025 GMT
        Subject: CN=7194257B76484F76AD73AEC39F781FB743DD96BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:87:9d:1d:a4:7f:bb:56:60:09:01:04:67:f5:
                    7b:44:2e:4c:75:6c:b2:1f:68:41:19:25:97:3a:1c:
                    83:b8:9d:57:c0:80:af:43:af:11:d5:0c:af:6e:07:
                    bd:5b:65:46:59:be:fa:7e:7f:0d:52:5c:98:32:c0:
                    cc:25:63:cc:d1:d3:b8:43:42:05:4a:62:01:a3:93:
                    4d:8b:78:eb:b3:9a:aa:07:45:eb:65:b0:28:62:b5:
                    4a:c6:b6:20:08:e9:b0:ff:75:ff:5c:eb:23:7b:00:
                    5f:b9:c8:70:05:e2:42:2c:96:e2:6a:0a:55:30:f2:
                    02:4e:66:04:64:95:46:cf:c1:c4:c0:d9:2d:5c:d9:
                    2b:1c:d0:6a:18:4e:34:79:6d:b3:ca:b2:73:b2:0a:
                    33:49:1b:97:3e:e2:bf:73:09:2e:b3:0a:bd:d1:f7:
                    f8:61:9f:72:5f:1d:11:90:9d:62:fa:4d:dd:47:39:
                    8e:43:78:0d:01:f3:ac:70:55:4d:c0:1d:47:d8:0b:
                    b6:71:53:c4:a5:6b:98:8b:d1:37:86:f3:37:68:b7:
                    07:d7:4c:66:35:b9:a7:8b:57:19:4b:33:30:6b:c5:
                    2c:37:69:05:a7:9f:e9:3a:9d:2f:5a:57:d5:ec:80:
                    65:fd:11:6e:eb:74:9b:d9:02:05:e6:f4:69:a9:31:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:94:25:7B:76:48:4F:76:AD:73:AE:C3:9F:78:1F:B7:43:DD:96:BD
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:96:26:4e:6c:c6:4d:6d:0c:59:1d:18:e6:67:e1:b2:42:
         f0:2c:c9:d4:66:0a:58:43:02:85:ba:9e:f1:3b:4e:81:27:9d:
         4f:0b:07:73:f3:71:74:bf:43:7f:b6:d6:1e:b3:47:9a:03:b6:
         51:be:13:62:1e:c7:1d:9f:82:fb:9c:7f:af:db:d5:aa:fa:af:
         cc:c2:38:f7:c9:ab:fb:73:72:05:e6:4d:67:ba:6c:93:ea:08:
         d4:86:48:82:c5:ee:98:20:1f:59:ab:84:ff:72:17:ff:18:02:
         36:63:45:bc:e5:0e:fd:52:c7:78:c3:54:ae:0f:dd:fd:39:8a:
         ad:49:a0:b1:36:85:c6:7a:1b:96:55:69:2b:bf:5e:48:01:82:
         99:cc:61:53:6f:3e:0c:26:cc:b0:7f:84:5c:eb:b4:07:e6:a0:
         8c:31:29:d5:c4:f9:78:fc:50:dd:61:b0:e0:dc:24:68:6f:37:
         26:e3:21:76:ae:1d:c9:d9:16:3e:b7:a5:70:ef:96:51:34:ed:
         24:61:62:d2:8c:54:2c:6a:4e:d6:b0:e5:61:7e:f1:00:e1:39:
         10:7c:c4:7e:ed:ed:4c:16:3e:a9:75:40:1e:9f:80:46:7b:f1:
         5b:1d:9f:47:8d:7c:ec:49:a8:ea:26:ce:94:63:c4:47:7e:5a:
         79:81:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:36:44 2024 by rpki-client on console-fra.rpki-client.org