Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa
File:                     3230302e37352e39362e302f31392d3234203d3e203231383236.roa (raw, json)
Hash identifier:          A4GK/b6Av2hjfTgKQGDRGk7wedykmUlRwCBm92V7JFQ=
Subject key identifier:   1F:C6:0D:58:D2:97:5F:86:83:E2:3B:1A:2E:32:E8:73:3A:EA:8E:97
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       74C15395439EE13778E87D94A3A4CA39BAA1136C
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa
Signing time:             Tue 05 Mar 2024 17:49:43 +0000
ROA not before:           Tue 05 Mar 2024 17:44:43 +0000
ROA not after:            Tue 04 Mar 2025 17:49:43 +0000
asID:                     21826
IP address blocks:        200.75.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:53:95:43:9e:e1:37:78:e8:7d:94:a3:a4:ca:39:ba:a1:13:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Mar  5 17:44:43 2024 GMT
            Not After : Mar  4 17:49:43 2025 GMT
        Subject: CN=1FC60D58D2975F8683E23B1A2E32E8733AEA8E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:d9:fd:2f:fc:e1:6d:9e:17:84:2e:57:cd:
                    bc:f7:65:b0:e6:05:81:89:8a:28:31:f6:8a:e8:75:
                    e0:52:de:db:3d:5f:1a:60:5c:3d:d4:6d:af:d2:d8:
                    cf:e4:2d:f9:5c:e1:3c:71:d3:6b:7b:5e:96:de:25:
                    ca:65:10:48:71:42:d3:1d:c2:dd:55:32:2a:e9:93:
                    6b:43:65:f2:93:2d:be:02:e8:f4:08:e0:4f:15:50:
                    6c:9b:6c:c8:59:1c:ff:5b:a3:38:16:d3:ec:e0:8f:
                    2a:d1:45:90:75:49:0c:dc:83:ca:b9:da:00:4a:35:
                    c8:c7:1e:d8:33:45:04:f1:53:54:d9:55:56:9e:37:
                    8f:8c:b9:02:d4:78:c6:86:66:68:93:80:79:4d:1c:
                    e6:73:af:3d:30:ed:64:51:ee:0e:f1:be:d9:d4:9a:
                    ed:45:64:4e:05:75:98:d2:51:da:10:4b:3a:b7:de:
                    e4:cb:c0:33:5c:25:b7:11:db:9e:2b:48:ab:5f:ab:
                    95:69:55:1a:79:30:bd:53:f4:0b:83:6b:ed:51:99:
                    03:1a:7f:bf:12:a7:d3:a4:48:1b:0f:f3:c0:8c:1b:
                    10:64:3e:7a:f7:63:95:76:40:7f:68:67:36:27:3a:
                    92:ff:c7:05:f7:7e:09:0f:5a:4b:8c:18:a0:2a:64:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:0D:58:D2:97:5F:86:83:E2:3B:1A:2E:32:E8:73:3A:EA:8E:97
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e37352e39362e302f31392d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:ca:b8:e0:2a:11:6b:71:5d:fb:b5:53:37:59:37:79:b9:aa:
         32:6f:96:73:9f:8b:3e:5f:7a:27:64:64:8a:8c:1d:1f:72:8c:
         97:b2:bd:6d:dd:eb:63:ab:d4:eb:43:af:09:d3:e7:a7:6d:2d:
         45:b5:86:4d:19:5b:af:50:eb:0f:8f:fb:1b:2f:ed:8e:24:f0:
         66:2c:94:24:e3:28:f2:f1:2b:17:a9:b7:ba:3d:51:4a:3d:dd:
         63:73:d8:e2:67:d3:8b:eb:0a:c0:cd:2c:10:9c:8a:37:68:50:
         d4:3a:45:3a:7b:52:c2:25:33:3e:e9:5f:d9:d1:16:1c:47:df:
         e6:39:f0:07:6c:73:44:2b:60:ab:80:88:3f:af:8d:92:e4:01:
         79:45:41:a6:20:88:1e:da:fe:14:f1:0f:52:45:fa:6a:8a:20:
         80:ae:3a:f1:8d:fc:9f:bd:ba:46:e2:29:62:29:84:df:df:4a:
         56:b8:ab:8f:78:cd:bd:c4:19:90:39:58:a6:a4:22:b4:78:2d:
         0a:4c:80:2d:00:62:5a:cd:c6:cd:42:08:7b:f6:2a:35:0f:88:
         81:7a:9f:ea:81:e9:0a:43:be:ed:4b:10:38:0a:75:3f:88:f5:
         0b:dc:9c:69:ff:f3:ea:23:ac:1d:63:3b:f6:6a:1d:d7:2c:99:
         e8:07:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org