Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132312e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          td1IqE+TCRxxRjCG5rNI9VNOJyX0E+NIe6bZK51bgjs=
Subject key identifier:   3E:79:60:68:20:B4:43:A2:5A:B6:E8:83:95:15:18:6C:4E:24:B5:09
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       1CA0DB51E8987831503ACCE4B3E8517DE9B1794E
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     27826
IP address blocks:        200.16.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:db:51:e8:98:78:31:50:3a:cc:e4:b3:e8:51:7d:e9:b1:79:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=3E79606820B443A25AB6E8839515186C4E24B509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:55:92:a3:d7:7c:dd:f6:79:19:fc:49:0c:
                    7d:a5:8d:42:76:f6:2f:e4:7f:49:20:19:b5:77:2c:
                    23:81:6e:be:76:6b:0a:86:1b:2d:f3:1a:fa:24:85:
                    41:c4:ac:9e:cc:d5:4e:0f:ef:01:23:4b:f1:1c:08:
                    e4:6b:d1:75:27:71:60:5d:25:d0:4e:59:8a:fb:20:
                    67:ab:cf:7b:17:92:1d:6a:e6:02:d1:76:0e:6a:ba:
                    5f:10:15:ab:6c:f0:3d:07:41:5e:30:04:3e:51:6a:
                    f5:ab:d1:04:5b:a1:6a:fd:ec:01:2b:c2:4b:49:1f:
                    0f:61:8e:d3:a0:f9:b5:e7:c6:64:a4:92:20:52:93:
                    f0:7c:52:60:62:d6:36:e0:8d:f6:a7:6f:38:61:7c:
                    13:84:8d:aa:0b:b8:76:ea:4a:d9:58:b0:d7:e3:58:
                    43:03:c6:b1:3b:46:f1:25:ba:ec:79:ac:3c:f3:74:
                    a7:26:c0:a5:8d:b7:ae:f1:19:63:47:a2:d6:1a:29:
                    be:39:1a:01:02:84:b2:58:21:61:ac:7a:82:b5:c4:
                    b0:47:17:5a:df:7a:f0:2b:ee:76:ad:89:b4:5e:7f:
                    d7:22:84:86:22:1f:b3:29:f4:c9:53:40:8e:3d:94:
                    99:20:dc:b0:64:31:ef:8f:14:37:6e:39:ee:03:42:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:60:68:20:B4:43:A2:5A:B6:E8:83:95:15:18:6C:4E:24:B5:09
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:f0:c7:8c:6b:37:a4:40:62:9c:bc:c4:c6:09:46:1e:d6:
         51:fd:a6:11:4c:ce:61:b9:f5:18:e7:b1:88:de:cc:da:5c:b1:
         18:71:a0:55:85:06:b1:f1:b6:8c:7b:a2:b8:44:27:b5:3e:01:
         c6:7e:0e:f7:ae:59:42:9e:da:a4:af:9c:d2:6c:27:77:7d:c1:
         6b:81:ab:d4:4d:f5:ed:8d:57:b6:c0:99:1c:8c:e3:57:05:f7:
         33:35:85:2b:f8:60:fc:c6:68:c6:ec:43:3e:81:d8:ff:c6:dc:
         ff:c4:cc:78:ba:6b:26:e9:24:26:ea:a9:cd:92:b9:19:78:f0:
         bb:26:e3:e7:cc:8f:e1:5c:fc:29:61:b4:e9:c9:43:5b:4a:3c:
         8e:c9:ea:7d:71:4b:fc:f1:47:4b:4a:d2:25:03:de:52:56:5d:
         39:9d:e1:3e:48:e1:64:69:ae:15:bc:f9:52:81:6e:41:62:94:
         10:db:ca:56:2b:31:76:04:87:bf:08:8a:a6:6e:7f:6f:08:f0:
         48:ff:df:0e:96:e0:77:a2:fc:0a:7d:06:9e:ef:5a:84:17:d2:
         d3:4b:04:bd:8e:34:ac:45:99:f7:65:54:5e:eb:99:8c:58:ab:
         8e:0b:1f:a4:f1:88:82:dd:27:25:a7:f1:f7:9d:55:58:c2:8d:
         a9:b2:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org