Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa
File:                     3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa (raw, json)
Hash identifier:          ImWN9f5NJvyJ52n8Vh8V2ls19xXPiHOFzARXYcdU8/s=
Subject key identifier:   29:16:91:BF:AC:16:07:59:E9:B0:72:8A:48:4C:39:1B:EA:A3:DD:59
Certificate issuer:       /CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
Certificate serial:       51EE16E420086DA02EB80841D18C34444EEBCA67
Authority key identifier: BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 17:51:04 +0000
ROA not before:           Tue 05 Mar 2024 17:46:04 +0000
ROA not after:            Tue 04 Mar 2025 17:51:04 +0000
asID:                     28458
IP address blocks:        200.106.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ee:16:e4:20:08:6d:a0:2e:b8:08:41:d1:8c:34:44:4e:eb:ca:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
        Validity
            Not Before: Mar  5 17:46:04 2024 GMT
            Not After : Mar  4 17:51:04 2025 GMT
        Subject: CN=291691BFAC160759E9B0728A484C391BEAA3DD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:45:b8:bd:c7:b6:8e:d8:32:62:fc:74:b7:
                    a9:eb:34:78:c9:26:eb:98:47:31:86:bb:78:23:62:
                    fc:eb:d9:32:a6:d8:29:b2:99:b6:fc:7e:3e:a1:52:
                    1f:0a:0b:4f:81:98:73:3a:89:1a:58:8b:92:7a:14:
                    fa:c1:0d:cb:97:cb:60:ef:37:3a:fa:2f:5b:80:13:
                    71:2d:33:9c:4f:e2:04:c0:22:a2:ea:6a:8b:09:5e:
                    33:6e:63:a6:b3:3f:4e:fd:66:b8:c1:e2:e5:a4:6f:
                    62:76:7c:23:43:14:06:be:05:2b:59:33:48:bb:7a:
                    b6:6b:b4:e1:63:fd:85:81:5d:74:86:2c:1b:d4:50:
                    56:29:7f:9f:41:36:ef:9a:9d:01:09:bd:93:08:8e:
                    95:e5:ef:2c:38:40:82:12:62:d5:34:e3:b7:e2:01:
                    50:29:b3:b3:90:27:c9:07:dc:7d:84:04:9b:e9:72:
                    5a:a0:91:76:f4:70:ac:2b:e5:cb:e5:3b:67:d3:da:
                    ad:61:4b:24:18:67:1f:db:fe:19:57:d1:de:3b:d3:
                    f4:10:e3:42:c1:4d:95:f8:cf:e0:c7:34:da:22:7f:
                    80:af:b9:92:a6:69:c6:09:e1:69:7f:1c:d7:6a:6a:
                    8d:c4:1a:d5:90:7e:71:8a:45:6a:ab:2e:7b:fb:6d:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:16:91:BF:AC:16:07:59:E9:B0:72:8A:48:4C:39:1B:EA:A3:DD:59
            X509v3 Authority Key Identifier:
                keyid:BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:f3:b8:7d:40:ac:50:16:d8:20:a0:fa:22:9f:71:0b:ba:
         16:26:2c:57:0c:44:16:50:2a:bf:fa:4a:c9:c8:6c:37:0a:b0:
         d0:a7:17:f9:4d:28:32:20:ef:22:01:58:0f:01:f8:3f:c7:38:
         2b:b2:15:07:45:68:d9:bc:13:ba:59:cd:79:ef:2d:4f:fc:ce:
         13:01:31:bd:a1:bb:a6:29:b4:4b:b7:a0:d7:e5:de:46:72:64:
         6e:30:14:aa:35:24:70:d5:0a:21:22:79:a8:39:99:0e:0b:96:
         e5:b5:ba:ff:90:73:a9:01:c6:1f:25:ac:97:2d:ee:1c:36:09:
         5f:67:48:7d:8a:17:ef:4f:23:f9:ba:58:c6:88:7f:81:8b:b5:
         dd:5b:43:af:d6:6f:d4:ab:04:bc:1c:1a:61:87:15:d9:86:28:
         f8:4a:40:a8:7b:fd:f0:d9:cb:0c:b1:29:38:f7:42:69:c9:e9:
         58:81:b5:61:2b:c9:84:55:e8:57:8c:4a:46:03:94:d8:8e:0d:
         f6:98:ad:3d:26:b6:d9:7a:76:86:f9:cb:54:39:26:b6:fc:37:
         4a:ec:c5:d4:d8:72:6c:b4:59:d5:35:1a:8e:91:c8:4e:d5:4c:
         30:66:41:d2:8c:4b:2f:e4:b4:bc:17:06:66:7d:0c:31:13:6e:
         99:67:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org