Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa
File:                     3230302e31302e3230322e302f32342d3234203d3e2033353937.roa (raw, json)
Hash identifier:          aCLOhe0LJ1UfX+FoEQY5nVYgZq13vk/5wt/DR9GmuOs=
Subject key identifier:   56:AD:BF:E9:47:E3:4C:A6:22:E3:90:FA:92:CF:FD:66:1B:04:A8:50
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       7A7949C74FFE1AE7DCF202DFA9AD695431703218
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa
Signing time:             Tue 05 Mar 2024 18:19:59 +0000
ROA not before:           Tue 05 Mar 2024 18:14:59 +0000
ROA not after:            Tue 04 Mar 2025 18:19:59 +0000
asID:                     3597
IP address blocks:        200.10.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:79:49:c7:4f:fe:1a:e7:dc:f2:02:df:a9:ad:69:54:31:70:32:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Mar  5 18:14:59 2024 GMT
            Not After : Mar  4 18:19:59 2025 GMT
        Subject: CN=56ADBFE947E34CA622E390FA92CFFD661B04A850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:f7:60:fe:81:62:bf:1e:19:e3:34:c5:aa:
                    1d:6c:d3:16:4f:38:39:66:94:23:94:d1:a5:9b:80:
                    65:47:3a:c9:81:8e:55:71:70:4a:c5:85:76:46:2a:
                    34:84:95:07:45:b8:d7:15:17:e4:ee:1a:42:7c:6b:
                    38:c6:3f:d1:c4:ca:07:e0:89:b9:fa:21:a4:1c:be:
                    29:bf:59:1b:b5:ef:18:0b:06:d4:84:c3:fa:79:cd:
                    71:9b:42:66:f0:70:b4:21:63:b6:d1:50:bd:ac:07:
                    c2:6e:16:73:e9:40:28:69:18:9b:00:ce:4a:55:82:
                    7b:0c:0f:c1:08:ec:97:86:2f:ee:b7:dd:64:2b:cb:
                    47:aa:39:6c:b3:ec:01:55:27:54:87:d7:5c:14:09:
                    57:c0:51:b6:4a:50:47:3a:00:14:3f:b5:83:14:07:
                    58:81:86:4b:c1:3a:78:40:48:7a:34:4b:0f:cb:11:
                    7b:88:66:78:d5:bc:7c:b6:88:41:42:92:f6:c5:32:
                    dc:e4:bd:82:71:dd:cd:17:89:84:fe:4e:ab:b5:1b:
                    f4:b7:f0:bb:75:09:8f:61:28:b3:e4:48:44:85:7b:
                    11:1b:3b:41:3c:b2:6b:d6:2c:68:b6:ab:92:e7:d8:
                    7a:80:18:52:e1:b4:16:5a:36:7d:d5:f2:aa:cf:63:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AD:BF:E9:47:E3:4C:A6:22:E3:90:FA:92:CF:FD:66:1B:04:A8:50
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:f9:72:54:0c:d9:c2:e8:91:c6:16:ed:ae:96:b8:0e:2b:
         2b:17:81:3d:28:ab:06:d2:33:11:55:36:5e:ff:2e:03:5b:c2:
         09:66:17:20:79:61:4f:03:0d:d8:c5:95:c8:46:e0:aa:2c:e8:
         eb:06:6e:b1:7d:c4:a0:67:09:13:d2:4e:58:06:2f:f2:11:17:
         ce:b6:f4:43:c6:85:63:98:5d:8d:ea:f1:22:7e:43:d9:a4:09:
         03:82:b8:3d:dd:74:9f:a2:8e:a8:8b:6c:b4:06:fa:62:d7:09:
         e1:a7:c8:78:83:a8:d0:12:ef:10:87:f8:f2:ba:02:1e:6d:e1:
         47:69:ff:ca:5e:df:ee:a1:4e:7a:0d:cf:c8:1f:eb:e4:35:8b:
         c7:8f:d6:f9:32:7d:f9:e3:52:96:1e:12:58:c0:9d:70:22:45:
         26:ad:4d:d5:ae:ce:6a:dd:ed:3c:32:a1:7c:f2:39:e4:88:3c:
         4d:82:58:aa:bc:4b:d7:9f:6d:64:1f:71:9b:1e:66:44:c2:93:
         81:08:70:06:61:0e:bd:f5:6d:99:11:26:ad:f4:ca:6a:84:23:
         14:ac:47:bd:fe:93:81:ce:44:9e:c7:2e:3d:38:b7:f3:a5:c5:
         af:ba:f6:de:1d:c8:ab:86:2c:34:5b:ab:cb:a7:ce:06:99:37:
         39:95:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org