Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132322e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          2sdogSLhSNjAoUalquD3tyfiXUwchqdTTnCu3DLvc2U=
Subject key identifier:   EE:7B:72:D2:33:B7:BA:EB:66:9F:10:ED:BD:D6:CA:8B:C3:47:06:C2
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       49661C99341F41DEEC855647B789F5FDD058F8EA
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     27826
IP address blocks:        200.16.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:66:1c:99:34:1f:41:de:ec:85:56:47:b7:89:f5:fd:d0:58:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=EE7B72D233B7BAEB669F10EDBDD6CA8BC34706C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:12:49:5e:5e:a2:2d:db:12:fd:a1:57:a2:
                    20:c0:af:e9:27:8d:73:a3:5e:15:fb:e0:75:2d:e3:
                    03:07:7c:e9:ab:10:e8:8f:2b:53:c2:6b:10:45:b7:
                    5d:57:0c:70:a1:8b:e6:47:ed:09:6f:82:aa:08:22:
                    4c:5d:ab:b5:09:f4:03:06:b4:38:c3:98:32:fb:c5:
                    ed:5a:5b:c3:04:43:09:e7:e1:0d:a2:54:ac:7c:1d:
                    d3:33:2d:30:8c:b7:d6:01:0d:4c:74:b3:a4:75:57:
                    2f:ab:61:8b:2e:12:76:d4:55:7e:ed:7b:d3:d3:72:
                    b7:3d:f2:4f:de:32:7b:82:b2:7e:18:ae:8e:ec:37:
                    29:29:1e:ed:41:ac:80:cf:b4:66:61:2e:31:f3:3d:
                    ba:cd:c4:54:bf:e5:af:f6:a4:27:37:ca:47:5c:f2:
                    2f:c4:9b:ba:73:a7:8b:68:0f:c5:47:c8:4c:18:91:
                    5b:4f:3b:13:2b:3d:c7:f7:82:ca:c5:6b:a4:78:1f:
                    d7:74:03:4c:e2:4f:82:1e:58:46:f4:dc:2a:9e:01:
                    ed:c5:70:8e:6b:bb:67:65:e9:30:46:94:06:3d:15:
                    af:f4:6e:0a:4f:79:8f:3a:0f:3a:9c:2c:ac:0f:90:
                    de:8c:4c:58:b2:f4:e5:f8:96:30:d8:69:3a:ac:42:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7B:72:D2:33:B7:BA:EB:66:9F:10:ED:BD:D6:CA:8B:C3:47:06:C2
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:c4:3d:8b:ec:82:c4:1e:5c:da:3a:d8:7a:c2:11:c0:f5:
         52:a9:2a:c9:0e:0f:03:10:51:5a:94:f7:de:b5:68:83:97:27:
         11:af:2c:c6:e9:1d:ab:2e:78:9d:c1:22:fa:66:59:07:0a:b2:
         c6:27:58:ea:03:4f:2c:b1:7b:a4:1b:78:75:b0:77:3c:32:89:
         76:da:5d:4e:c3:5c:83:2c:9f:40:13:30:f5:f9:d9:f3:8d:52:
         b6:e8:0a:6c:53:ae:7e:40:1a:cf:5d:cc:f4:85:b6:20:76:97:
         47:f8:12:33:1f:3b:9e:ff:b2:29:45:3e:3b:ab:59:9c:44:f9:
         17:4a:8d:f6:39:c3:a0:d4:0e:dd:ad:ef:fa:78:ad:bd:9c:a1:
         b7:ff:c7:f0:ad:09:23:cc:74:f8:c7:00:c1:d1:a8:d2:ba:a2:
         98:99:b4:4f:3e:20:92:11:8a:45:80:d9:05:a9:f9:8a:17:3f:
         ef:96:88:ba:2d:6d:91:e2:c5:7f:7a:28:13:47:d1:83:fb:45:
         e2:0c:37:a0:77:a9:85:cf:f9:4a:17:b1:ac:fd:4b:c4:45:bb:
         4a:c4:2e:3b:63:4d:b1:36:28:33:26:39:73:53:0a:11:74:04:
         4c:5a:64:43:8e:e7:a6:8b:58:4b:2b:e6:1f:f2:86:7b:00:fc:
         44:76:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:17 2024 by rpki-client on console-ams.rpki-client.org