Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132352e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132352e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          X+8oCHwteQ4Welg17Oa8vOg6iOMFnJbAVQS+JWDrveE=
Subject key identifier:   31:54:DA:19:04:49:FC:E9:7F:01:B0:D6:53:3B:05:D0:21:90:19:1E
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       5C069DB9A033A393D4EE17A397B5A0DE569B5E87
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132352e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     27826
IP address blocks:        200.16.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:06:9d:b9:a0:33:a3:93:d4:ee:17:a3:97:b5:a0:de:56:9b:5e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=3154DA190449FCE97F01B0D6533B05D02190191E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:0b:c5:cd:22:7a:15:3c:18:6d:d6:d2:0f:
                    11:ea:46:50:5d:aa:05:46:3b:37:0c:f3:c6:da:3f:
                    fe:d9:c9:95:3b:bf:05:92:f4:bd:c0:85:80:c2:f7:
                    b7:bb:7d:c8:ed:6a:da:1a:39:2b:67:f0:b7:53:fb:
                    de:7e:54:7e:da:4d:1d:0e:e0:a3:1a:69:26:58:63:
                    f1:14:53:45:04:88:ab:08:e4:cb:02:4f:ce:ad:99:
                    ee:c3:e4:23:2a:54:bc:72:97:04:19:88:d2:61:86:
                    1e:a2:27:e4:04:13:76:82:2e:1c:c7:10:c1:c3:01:
                    d6:4d:e6:8d:53:87:92:7d:9c:2f:ad:a5:40:a2:c5:
                    f7:9f:30:eb:93:d8:15:a1:29:2a:14:38:90:36:3e:
                    58:98:f8:71:fc:8b:69:1b:dd:cc:87:d4:f4:5b:77:
                    38:3b:f1:a9:78:26:97:ed:64:f2:42:63:51:3c:b2:
                    3e:19:38:7f:ae:f8:1e:e7:78:e9:5a:40:b8:b3:76:
                    60:41:04:00:ad:cb:9f:bc:73:53:1e:6e:c9:85:a2:
                    65:08:c3:20:ab:0d:c2:6e:88:bc:ff:34:6d:78:8b:
                    0e:10:33:70:ce:87:f0:30:e9:c7:bf:fe:a5:df:c8:
                    cf:83:aa:a4:5b:a1:24:93:2d:d6:67:3a:86:fd:01:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:DA:19:04:49:FC:E9:7F:01:B0:D6:53:3B:05:D0:21:90:19:1E
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132352e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:71:40:da:7d:48:e1:ae:49:a7:d6:75:cf:49:14:d6:13:
         f0:34:fb:b3:56:6e:58:37:35:08:fc:3e:93:44:59:ff:1e:98:
         e1:3d:d3:48:a3:b7:b0:64:f6:ca:4d:5d:c6:42:76:17:35:64:
         e8:be:ff:17:d6:fa:68:3f:af:77:7d:cf:a0:fa:6a:aa:ec:81:
         28:86:85:27:0e:3e:d5:16:0a:d6:1d:06:36:dc:04:a6:c3:ee:
         ae:63:7d:62:9a:ca:1c:a8:3b:95:b4:57:e8:98:04:ae:70:8e:
         bb:bb:61:26:6b:22:67:d4:b3:52:bf:93:50:ec:c3:7d:c8:e1:
         9e:e5:fd:14:49:4e:35:06:e0:a5:d8:4a:66:3f:d8:ea:d2:33:
         a6:c3:1a:99:3b:01:52:bb:75:f7:34:63:e1:5c:0f:9c:54:f7:
         74:4c:0b:c7:53:39:85:7c:65:6f:79:9e:bd:9f:fe:c4:9d:29:
         b5:10:b3:64:63:ab:c7:69:b9:54:32:0d:a1:48:3a:bb:95:e2:
         65:26:f8:d5:7e:8c:e9:ca:2a:5c:a5:da:a9:3f:77:ec:53:0e:
         9c:b2:ce:30:12:e7:3d:a6:6b:d9:36:c3:9d:2f:4b:df:74:c0:
         06:a8:0c:44:cb:bc:87:b7:bf:90:a4:3e:c0:93:04:65:84:56:
         2c:88:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org