Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa
File:                     3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa (raw, json)
Hash identifier:          OdRxe1rS0rYgvJkgfLb1dQBgATVTzsJpNXpIXEug9Uk=
Subject key identifier:   1B:BB:87:66:5E:43:C5:8B:D2:9C:7E:0B:06:B3:09:CF:79:DC:F0:79
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       6509F8249FE4C5F1EE74D4D1547777837FF2B90A
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa
Signing time:             Tue 05 Mar 2024 18:23:33 +0000
ROA not before:           Tue 05 Mar 2024 18:18:33 +0000
ROA not after:            Tue 04 Mar 2025 18:23:33 +0000
asID:                     52314
IP address blocks:        200.124.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:09:f8:24:9f:e4:c5:f1:ee:74:d4:d1:54:77:77:83:7f:f2:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Mar  5 18:18:33 2024 GMT
            Not After : Mar  4 18:23:33 2025 GMT
        Subject: CN=1BBB87665E43C58BD29C7E0B06B309CF79DCF079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:bb:57:a5:2a:e8:cf:71:fb:29:62:71:56:
                    13:bf:25:21:63:4f:40:5e:51:52:3f:f9:fd:5a:89:
                    e3:a3:6e:2a:c3:82:23:7a:70:48:05:9f:03:7b:71:
                    56:7c:86:f9:d4:bb:5e:9c:7d:21:e8:29:c9:76:71:
                    d0:49:f7:e6:c0:52:dd:4f:f3:10:77:3c:10:92:5f:
                    45:6d:e4:7d:46:1d:0d:3e:18:bb:46:db:40:68:3b:
                    20:84:7d:ee:de:a8:20:3d:13:51:95:d6:f9:83:ae:
                    47:34:69:93:f7:6f:94:59:fc:63:6a:ac:1d:b3:4f:
                    02:2e:e3:9e:e3:7a:d9:4a:70:0a:e1:36:bc:e5:a7:
                    5e:78:a1:e8:bf:4a:04:1a:86:9a:b9:80:dc:9a:aa:
                    1a:e8:e9:22:63:93:26:54:5b:61:64:ed:7c:f1:7e:
                    6b:35:ec:8f:89:ad:b0:c4:11:b8:b3:d5:eb:28:79:
                    dd:b7:57:fd:94:a3:46:1d:c0:9a:e9:5c:e0:46:9d:
                    12:66:45:c5:06:25:91:33:84:ef:a4:e7:12:20:2a:
                    19:1f:90:83:3b:8f:eb:14:57:a0:77:af:07:5f:23:
                    47:c6:1f:ac:dc:fa:23:60:6f:ba:64:a7:62:ce:f1:
                    b3:7f:c0:4f:43:f9:7f:0e:4a:24:28:ec:0d:59:eb:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:87:66:5E:43:C5:8B:D2:9C:7E:0B:06:B3:09:CF:79:DC:F0:79
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e3132342e3137362e302f32312d3234203d3e203532333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:b3:67:27:1b:80:1b:b2:bf:21:1a:4e:23:06:d3:44:d6:
         aa:5a:8a:24:00:cb:0a:74:56:ca:24:9c:e7:a1:e4:48:dc:16:
         94:87:66:48:1a:7e:b4:e1:4e:b9:a8:33:7a:0e:61:23:2f:cb:
         d3:75:a3:a0:7d:40:51:e7:c2:fd:3b:7e:c8:72:3c:4c:48:b3:
         c2:6a:73:f2:89:f6:6a:e7:4a:8b:dc:f1:19:1c:18:15:71:15:
         71:3a:4e:75:2a:b0:eb:ce:69:34:e8:23:74:ce:8a:48:65:bb:
         24:cb:7c:e2:2e:4a:f0:de:52:3a:c0:28:ab:83:87:1c:ff:e4:
         bb:45:d2:7b:1f:05:f2:61:9e:cd:49:3c:a9:56:85:4e:07:2b:
         01:32:be:64:1c:16:99:a0:61:57:14:fa:7e:5c:fd:21:bb:85:
         2e:3f:88:d0:49:b4:08:13:77:83:0b:1b:e3:f3:58:4e:38:ec:
         55:ee:83:cf:c1:35:6a:14:5a:b4:af:35:fd:22:ee:64:42:c1:
         00:75:ef:44:a2:03:fe:a9:e4:41:72:ce:f6:f8:0e:aa:55:70:
         6e:3d:77:90:4a:8c:af:40:8d:65:87:f4:70:b6:31:3e:59:5e:
         8b:11:f2:eb:51:12:ab:e2:26:bd:e0:e5:fd:4d:5f:ef:32:ad:
         77:1c:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:17:42 2024 by rpki-client on console-fra.rpki-client.org