Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa
File:                     3230392e34352e32302e302f32342d3234203d3e20323733313132.roa (raw, json)
Hash identifier:          BpzSBBOViZ5e1NAw5swvMCtVFW2LIQHAJjPsyN/Zo84=
Subject key identifier:   F0:3C:10:43:F2:7F:7F:C2:C5:0E:57:0F:46:16:30:9B:D2:99:90:25
Certificate issuer:       /CN=830123DD60A275D6932F9910FF8F5827E6D8A206
Certificate serial:       61FAB3C6E86150D2BC4C52D27131F0C5DCA5022A
Authority key identifier: 83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa
Signing time:             Sun 18 Aug 2024 04:35:00 +0000
ROA not before:           Sun 18 Aug 2024 04:30:00 +0000
ROA not after:            Sun 17 Aug 2025 04:35:00 +0000
asID:                     273112
IP address blocks:        209.45.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:b3:c6:e8:61:50:d2:bc:4c:52:d2:71:31:f0:c5:dc:a5:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830123DD60A275D6932F9910FF8F5827E6D8A206
        Validity
            Not Before: Aug 18 04:30:00 2024 GMT
            Not After : Aug 17 04:35:00 2025 GMT
        Subject: CN=F03C1043F27F7FC2C50E570F4616309BD2999025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7f:c3:3b:1a:ae:ee:79:7e:17:7f:f6:bd:3e:
                    c9:83:33:c6:c3:a3:eb:91:bf:46:61:60:10:1d:92:
                    e8:c6:5c:26:d4:cf:7b:af:3e:21:70:23:09:db:45:
                    98:95:e7:bb:6d:25:e0:17:a2:e2:a8:34:2a:93:42:
                    d6:47:d8:b8:59:7c:cd:3c:ac:b6:22:33:54:47:3f:
                    22:54:61:57:5d:ae:d1:8f:0b:a2:67:d3:ef:f6:e0:
                    a9:35:c6:e9:90:d3:c8:ab:79:c9:39:41:67:6d:84:
                    84:03:bb:6d:56:cc:29:32:2f:39:1d:e4:a3:2d:60:
                    45:99:bd:18:4f:0b:f0:0e:9a:5c:01:df:95:17:bb:
                    76:3a:bf:66:0c:52:f7:a2:b0:b3:34:f6:a4:9a:9d:
                    84:f6:5f:ee:da:01:01:ea:55:fe:03:1b:d7:23:c7:
                    2f:a8:14:d5:eb:c9:c7:0a:11:44:65:89:b5:3a:e6:
                    27:25:fb:1d:b7:5b:c6:a1:1f:f9:9b:d3:3f:d1:01:
                    ac:02:94:37:79:51:5d:3d:7e:ee:0e:48:ef:75:4f:
                    9f:02:fd:e5:7e:5f:3b:94:a5:6d:21:cd:a8:14:0e:
                    a5:98:14:04:f0:f6:4f:31:c7:f5:7e:4b:93:6f:c2:
                    56:de:18:5f:48:b1:b8:43:2e:3c:9e:4c:4b:2a:2d:
                    91:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:10:43:F2:7F:7F:C2:C5:0E:57:0F:46:16:30:9B:D2:99:90:25
            X509v3 Authority Key Identifier:
                keyid:83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.45.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:87:cb:48:b1:6b:ed:b2:a1:1b:ad:f5:d9:76:48:ca:37:
         00:ed:34:43:2c:24:e6:55:56:5c:80:ee:89:54:0c:2f:57:28:
         b3:08:33:8b:28:14:7e:72:3e:3a:28:8c:d7:b5:5c:8c:b8:24:
         16:7a:ae:54:6b:5c:de:19:ed:5f:b1:2a:f1:96:50:21:c7:73:
         82:84:56:e1:b6:49:89:99:fc:83:46:22:68:59:93:3a:14:5f:
         f9:a5:33:8f:be:e3:8f:e7:bd:d8:21:72:76:58:39:f9:d2:7b:
         d9:61:e3:65:c9:32:69:0d:e5:f1:52:f1:6d:58:56:67:fc:51:
         21:98:95:0e:20:30:b6:98:60:58:62:5c:22:41:1a:b0:1f:eb:
         b2:ce:2f:2d:e7:05:5d:19:b6:68:d7:fd:9d:ec:80:86:9f:61:
         f1:98:34:c9:da:65:3b:fc:90:7f:c6:a5:15:75:d6:ca:11:b0:
         c3:7d:5f:aa:c1:9b:3d:eb:eb:eb:b8:5d:f9:b7:7c:11:28:95:
         d3:a7:f8:c2:b5:aa:49:b3:eb:07:6b:53:8a:42:38:a8:5d:6d:
         49:07:ee:75:71:68:70:4f:79:79:a1:2e:e1:e4:b4:f7:dd:06:
         7a:fe:5d:ce:f0:d9:8e:64:d6:57:cc:92:2e:6d:80:bb:8c:59:
         ca:07:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 01:36:28 2024 by rpki-client on console-ams.rpki-client.org