Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
File:                     3230302e312e372e302f32342d3234203d3e203237393830.roa (raw, json)
Hash identifier:          oM8ZFx31r9A7kab/MJslmBq+VgTm0GNbEUOIx9QNaJ4=
Subject key identifier:   3A:DB:6E:B5:00:B7:8A:7D:A7:95:5D:50:A9:DB:85:F2:CA:F4:2A:19
Certificate issuer:       /CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
Certificate serial:       1060B596F5E83345C067B383C7C9BCB7B2BFA66B
Authority key identifier: 9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa
Signing time:             Tue 05 Mar 2024 17:41:03 +0000
ROA not before:           Tue 05 Mar 2024 17:36:03 +0000
ROA not after:            Tue 04 Mar 2025 17:41:03 +0000
asID:                     27980
IP address blocks:        200.1.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:b5:96:f5:e8:33:45:c0:67:b3:83:c7:c9:bc:b7:b2:bf:a6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
        Validity
            Not Before: Mar  5 17:36:03 2024 GMT
            Not After : Mar  4 17:41:03 2025 GMT
        Subject: CN=3ADB6EB500B78A7DA7955D50A9DB85F2CAF42A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:b5:af:0a:fd:74:a9:31:6f:93:d8:a4:cd:
                    02:b3:3b:98:16:16:55:38:84:53:f1:73:ca:39:26:
                    de:ae:cd:c2:58:71:73:d1:a7:de:b2:ac:67:84:69:
                    2c:8d:2a:b3:51:62:fe:ed:c0:f4:d2:3b:74:e1:65:
                    d0:2d:b1:05:7a:9d:c0:fa:55:0f:0e:cc:83:9e:47:
                    2f:19:38:18:9b:20:aa:8e:63:0b:6a:37:c8:0d:af:
                    74:56:d9:d4:64:b6:81:ee:49:47:e3:c8:94:01:79:
                    56:d1:48:a0:bd:6f:80:b2:95:ef:99:6c:1e:c8:49:
                    f4:10:c4:94:15:00:7e:a8:9e:f6:32:47:55:2f:13:
                    58:3c:62:fc:0b:ca:b1:a0:93:f7:5e:56:f8:41:2c:
                    a8:1a:69:e3:77:bf:16:a2:5f:8e:88:43:0c:d2:58:
                    8b:25:b9:9f:67:37:14:0d:cb:bd:4d:f8:11:b8:af:
                    7f:95:f0:22:48:eb:f1:d7:d9:8d:f6:0f:82:8e:87:
                    80:47:77:93:d5:54:0a:1f:d1:f5:a6:16:d3:21:b8:
                    3c:c0:85:2b:df:97:f7:1e:ea:60:07:8f:5a:bb:16:
                    10:05:c0:f5:23:7b:29:0a:5e:5c:3e:a7:0f:ae:52:
                    5c:07:f4:e1:a1:dd:65:6a:83:46:ac:93:7e:09:67:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:6E:B5:00:B7:8A:7D:A7:95:5D:50:A9:DB:85:F2:CA:F4:2A:19
            X509v3 Authority Key Identifier:
                keyid:9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/3230302e312e372e302f32342d3234203d3e203237393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:0e:4d:61:e0:bd:23:ed:e9:2a:ac:79:37:8a:b7:fc:da:54:
         44:22:06:65:bf:c6:c1:a3:05:91:33:6a:f5:18:44:4e:3b:df:
         af:9a:8e:a5:d1:ec:c0:31:36:57:a3:a8:09:0c:19:de:3d:93:
         bd:f8:bd:0b:f9:70:e4:78:a1:95:9e:a0:82:9f:5f:ab:a1:1e:
         28:36:c5:6a:9e:83:ed:dd:71:f5:3e:75:41:14:5d:a6:7f:d2:
         19:6a:97:e7:fb:28:6d:fd:06:e1:7b:7a:5a:cb:bb:f2:71:bc:
         0d:4b:dd:8c:ef:f9:90:9a:75:c6:91:fd:96:89:a6:8f:c0:35:
         76:b3:67:47:36:c8:82:3b:65:c0:58:ca:69:32:55:fe:a7:bd:
         8d:23:a9:04:1e:d6:06:97:ce:48:1d:fe:e4:da:f7:7b:3a:a9:
         1d:4f:8a:cd:7a:03:b5:ab:f0:65:a6:05:b2:14:a1:32:f6:1c:
         da:28:f9:aa:58:ff:01:b6:60:d2:97:7c:2e:d6:b3:52:3e:8e:
         9e:7c:4b:62:38:48:64:7a:2c:78:1e:cc:c6:dd:ec:19:59:2e:
         e0:ec:ad:ae:e9:22:45:4d:da:1f:d4:7a:c0:de:39:c4:7d:69:
         cc:cb:4e:d1:2c:24:0e:7d:2c:d6:cf:39:28:8d:c2:3d:ad:a9:
         1e:7b:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org