Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
File:                     3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa (raw, json)
Hash identifier:          6pfCApW1gTig8gphep23P9l7RwvpEwitRKDWWXsqIQc=
Subject key identifier:   54:81:EC:F9:15:FD:34:63:72:30:23:E9:6D:9C:10:24:83:26:4F:AC
Certificate issuer:       /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial:       27C954A7BFFD110196BA7233C3112C728107CDB3
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
Signing time:             Tue 05 Mar 2024 17:54:42 +0000
ROA not before:           Tue 05 Mar 2024 17:49:42 +0000
ROA not after:            Tue 04 Mar 2025 17:54:42 +0000
asID:                     265804
IP address blocks:        200.63.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:54:a7:bf:fd:11:01:96:ba:72:33:c3:11:2c:72:81:07:cd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
        Validity
            Not Before: Mar  5 17:49:42 2024 GMT
            Not After : Mar  4 17:54:42 2025 GMT
        Subject: CN=5481ECF915FD3463723023E96D9C102483264FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:2f:bb:6d:2c:00:eb:6a:3f:51:74:a3:e2:
                    f5:02:a8:72:52:c3:51:2d:60:8d:af:d9:79:52:90:
                    1c:52:ea:f2:1a:00:2a:c4:91:4f:4a:9c:f9:84:20:
                    83:5d:cc:02:88:4f:40:22:9b:54:aa:19:cc:19:db:
                    49:25:10:b4:a1:8e:24:26:04:69:0b:cb:b6:24:09:
                    0e:e7:38:75:b0:2a:af:61:8d:8f:08:66:df:0e:65:
                    70:65:16:7c:19:37:1d:bc:f2:46:66:b8:e8:43:1e:
                    d0:b3:b1:91:12:5a:a2:29:8d:f8:ee:32:35:b8:e0:
                    72:3f:85:5c:fe:1b:45:6c:30:8f:ae:2b:1d:c5:fb:
                    56:67:ae:11:72:95:80:c7:64:39:c0:8b:1e:a4:d8:
                    49:81:8b:62:0a:1a:1b:4a:05:47:06:08:32:6d:b7:
                    67:b0:00:8c:cc:30:56:7f:e0:9e:0f:51:b5:7b:6c:
                    72:88:76:64:4b:33:a4:a2:bc:b7:07:56:04:3d:92:
                    b3:54:8e:57:f8:d8:a0:73:c5:d7:77:db:38:5c:51:
                    42:24:34:3a:31:c6:fe:b1:e0:8c:d6:cd:ff:01:00:
                    e0:fc:28:dd:b4:75:8b:8e:61:e2:c9:5d:09:21:1a:
                    b2:98:06:1c:b3:49:e8:69:23:54:85:77:06:f7:11:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:81:EC:F9:15:FD:34:63:72:30:23:E9:6D:9C:10:24:83:26:4F:AC
            X509v3 Authority Key Identifier:
                keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:8c:72:12:33:a4:46:98:d8:91:0a:d9:c5:e7:cb:c1:fe:
         2e:03:f0:4e:22:c7:44:94:84:bd:61:68:10:1d:e2:a5:79:42:
         e4:37:a3:9a:27:66:e4:03:73:ff:1c:c4:76:a5:17:19:51:0a:
         95:a6:71:2b:61:e8:fd:71:3e:20:0c:81:5e:ea:3b:7b:12:3c:
         a1:b4:03:c4:06:e3:c4:08:38:67:bc:f4:1c:be:3c:f1:fe:ca:
         6b:06:a9:31:19:5d:33:cd:4e:8e:35:37:2a:11:9f:71:0b:f1:
         5d:47:f6:7a:2f:0a:61:ec:25:a7:05:82:bb:b5:a1:d9:06:2e:
         44:41:c9:2e:57:f9:11:a9:a9:08:5b:17:c5:2f:28:eb:80:e4:
         df:79:85:10:a5:1f:30:d8:47:14:a5:cf:7e:2d:fe:03:ad:fc:
         40:80:45:aa:0b:c4:a4:f7:d2:d6:7c:28:64:a2:fb:24:74:4a:
         e9:79:61:3c:3d:d2:b4:bb:f9:90:4b:5f:68:79:16:cb:14:13:
         47:27:b0:8c:62:16:f0:23:5c:e3:2d:51:5a:88:ea:7d:a2:53:
         db:c7:0f:93:6d:52:0d:7a:e7:56:d0:eb:8c:c5:49:1e:0a:e7:
         62:c6:fb:f5:ae:7d:dd:de:f1:e2:a6:7c:08:f4:5e:4a:6e:06:
         09:84:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:45 2024 by rpki-client on console-fra.rpki-client.org