Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa
File:                     3230302e38322e3132382e302f31372d3234203d3e203231383236.roa (raw, json)
Hash identifier:          VevxHx8ODBDQOtwjRu7+vZEifANsyiUxqfZHL+05o2A=
Subject key identifier:   8A:F0:CD:20:0A:80:34:5B:25:E0:33:8D:07:CE:CD:BC:67:D4:5D:18
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       094E57A75DE250DF3348DB449419BD961FBFBAD2
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa
Signing time:             Tue 05 Mar 2024 17:49:42 +0000
ROA not before:           Tue 05 Mar 2024 17:44:42 +0000
ROA not after:            Tue 04 Mar 2025 17:49:42 +0000
asID:                     21826
IP address blocks:        200.82.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4e:57:a7:5d:e2:50:df:33:48:db:44:94:19:bd:96:1f:bf:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Mar  5 17:44:42 2024 GMT
            Not After : Mar  4 17:49:42 2025 GMT
        Subject: CN=8AF0CD200A80345B25E0338D07CECDBC67D45D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:4c:37:b7:d4:8d:a6:e1:f1:e8:66:6b:59:
                    87:c3:fc:21:68:d6:7c:e0:b8:04:c7:8e:8e:c1:39:
                    91:0f:56:d0:75:c2:f8:39:d8:e3:cb:68:4b:f3:49:
                    b6:ef:f9:e0:e0:52:86:c5:1f:3e:f0:44:30:41:12:
                    d3:43:66:f3:3b:30:ad:50:57:08:8b:d1:f3:dd:4a:
                    e7:ef:37:66:c5:86:13:54:4a:44:f9:cb:f7:a4:aa:
                    bb:9c:df:3e:c3:34:cf:8c:27:0b:c4:63:84:12:5f:
                    36:1d:dc:9f:67:a2:78:aa:44:43:9c:cf:24:10:9e:
                    ee:c7:c3:d9:f7:40:40:be:24:04:7a:12:f3:df:40:
                    b4:db:dd:c2:cb:dc:c1:b0:2b:1a:9a:31:6b:99:53:
                    b1:43:82:70:8b:5f:d3:36:5e:17:5b:55:c6:82:ab:
                    ec:cd:0d:2d:5a:2e:96:51:54:b6:7f:a1:4d:bf:64:
                    a8:00:1d:f6:b7:49:47:6c:2d:38:2a:88:72:07:98:
                    5f:31:d7:8a:42:89:d7:11:1d:8a:1b:db:38:f0:89:
                    54:1c:08:6c:fe:84:bd:6b:c2:9a:1b:9e:3b:70:8b:
                    84:44:20:a5:cb:51:d9:89:33:40:01:bd:b0:99:b3:
                    05:da:77:81:76:62:07:ad:74:64:4f:8e:c8:41:53:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:CD:20:0A:80:34:5B:25:E0:33:8D:07:CE:CD:BC:67:D4:5D:18
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e38322e3132382e302f31372d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.82.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:43:6a:ab:0d:44:78:76:2b:f2:96:9b:90:0d:bb:e4:57:
         0c:51:9e:05:54:ab:75:33:b5:3e:79:e5:24:db:68:32:c6:8b:
         95:2b:65:98:d8:b1:e8:db:66:20:aa:2c:64:7d:69:8d:f6:c1:
         8d:a2:de:e2:81:0a:b7:a3:bc:78:d9:7e:de:cb:ef:41:44:13:
         a3:45:92:f1:2c:9d:59:5e:f1:bb:f3:b8:ea:06:e5:36:f3:68:
         a1:56:75:5a:67:03:31:dc:51:71:c8:3b:a3:0b:af:6e:d5:73:
         f8:8a:36:9a:cd:0f:b8:21:fe:d5:36:bb:1f:13:4b:34:88:dc:
         0a:23:91:b7:b4:19:3c:7f:e1:e0:b6:22:4d:66:fb:8d:5a:b6:
         45:5d:11:b5:7c:c6:c6:f7:bc:c1:e8:bf:93:b0:a0:e0:12:98:
         6f:b9:57:a0:90:49:e0:12:5f:25:c8:62:04:f3:a4:89:55:c8:
         c3:70:30:94:07:89:de:bb:aa:7b:b5:d8:fe:70:48:4c:33:38:
         e4:a8:40:f8:ad:8e:a9:cb:9f:c8:6f:c8:9e:a7:7c:b3:61:f7:
         dc:e6:cc:44:2f:e8:3d:39:00:f1:50:3b:64:25:6c:a1:9e:97:
         3b:61:f6:91:6b:73:25:50:f6:03:27:e0:b9:88:75:58:50:93:
         80:03:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org