Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
File:                     3230302e36312e3136302e302f31392d3234203d3e203136383134.roa (raw, json)
Hash identifier:          SLo+DQhi8gXCoC1+B0mUZdSQVUEEbnsSFU5K46Pahsg=
Subject key identifier:   4B:E4:6F:2B:73:8C:4D:45:6E:D0:BE:01:CB:23:B6:46:B0:51:B7:7F
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       554CF5E46A41B39CD0E2E0F1C0E64F454DEC8727
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
Signing time:             Tue 05 Mar 2024 18:12:10 +0000
ROA not before:           Tue 05 Mar 2024 18:07:10 +0000
ROA not after:            Tue 04 Mar 2025 18:12:10 +0000
asID:                     16814
IP address blocks:        200.61.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4c:f5:e4:6a:41:b3:9c:d0:e2:e0:f1:c0:e6:4f:45:4d:ec:87:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:10 2024 GMT
            Not After : Mar  4 18:12:10 2025 GMT
        Subject: CN=4BE46F2B738C4D456ED0BE01CB23B646B051B77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:97:36:81:f7:b3:a0:c4:39:e6:9f:84:e4:
                    74:bd:6a:f6:75:15:ae:39:5a:ac:5b:e5:74:86:ee:
                    d9:31:a7:ce:4f:f3:4d:01:2d:e5:a6:65:b7:e4:2d:
                    ea:92:54:0d:55:c2:56:d5:88:9e:a1:26:f1:6c:af:
                    a3:ad:35:4e:08:2a:f8:ee:c9:f9:a6:a8:64:79:e5:
                    69:2c:4d:de:49:02:bc:27:ba:de:34:f7:9a:9d:2a:
                    50:66:6e:59:66:75:1b:34:b1:84:79:b8:2c:ea:0b:
                    af:ed:cd:d0:51:8b:21:70:47:13:79:7e:dd:e2:8c:
                    64:25:91:65:0d:31:b6:f3:fb:e1:37:b8:43:49:3e:
                    26:03:2a:14:8e:0b:5a:c1:48:09:29:b8:8a:9b:d3:
                    f4:7a:f6:05:f0:5c:95:2b:cc:7e:a4:ed:3f:4f:f8:
                    7f:b5:9f:e0:ba:98:2a:4a:86:19:74:6d:6b:69:a9:
                    9e:d3:71:94:d8:68:48:0a:a9:a3:0d:e8:cf:71:c7:
                    9f:e2:8c:8e:64:c9:86:23:b4:d8:0a:d5:26:da:cd:
                    d0:58:2c:ae:a5:ff:d6:df:dd:19:1a:a0:b7:7c:6c:
                    ee:b2:2e:5f:9f:5a:53:e0:df:6d:08:6b:7b:93:0e:
                    a6:cc:f0:98:3f:8f:bb:cf:a5:e1:dc:5f:af:38:6e:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E4:6F:2B:73:8C:4D:45:6E:D0:BE:01:CB:23:B6:46:B0:51:B7:7F
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:3d:41:94:90:e7:30:85:d7:8a:ec:c9:1a:9e:dc:d6:b7:
         b2:f0:60:cf:92:3b:09:02:5b:92:06:28:ae:a8:93:21:95:2e:
         2b:c3:6d:4e:8b:56:17:38:11:cb:b3:c2:2d:42:f9:52:f1:51:
         0b:6a:dd:6e:61:e1:fd:91:17:7c:00:9d:66:ef:69:7d:f6:6b:
         88:95:eb:20:f8:f1:3c:d4:4d:6e:35:41:1e:e8:c4:c0:c8:19:
         35:2f:71:8d:62:92:8c:c1:99:a5:84:6c:76:d1:78:32:c2:ec:
         d8:5d:e8:43:f1:8c:a0:e6:6e:63:44:b1:49:d6:94:2e:a2:62:
         35:da:30:c5:64:f5:1e:56:ad:fb:ed:8f:f1:ee:ba:cd:75:10:
         3a:c6:3a:40:cb:fe:e9:e7:c7:51:e2:82:57:ea:0f:d6:e0:ca:
         23:35:d0:f3:64:e1:86:fd:89:26:ff:24:8b:45:ca:8d:6b:2d:
         ca:e5:26:90:75:6b:29:e7:11:18:64:de:3d:54:95:f1:fc:e3:
         83:ba:c6:35:b1:bf:77:d5:bb:2c:de:c2:0a:6b:82:e5:d3:2f:
         63:14:ab:f8:06:62:ff:cf:a1:19:cf:f4:06:8d:d1:c5:54:65:
         40:9d:61:e4:c1:4f:74:59:50:c9:f7:aa:15:93:27:ee:53:75:
         fc:43:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org