Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa
File:                     3230302e31322e3230382e302f32312d3234203d3e203237373936.roa (raw, json)
Hash identifier:          OJlgcdSE5Vg9yopSEo6bBLG7ekvYdMCpacP3dT5QtFk=
Subject key identifier:   59:14:A3:48:F8:C0:4F:7B:9F:E4:56:21:9C:AE:31:47:0F:0E:8C:09
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       0BB6647081305197ACB9B91103C68E4F8BA365C2
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     27796
IP address blocks:        200.12.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b6:64:70:81:30:51:97:ac:b9:b9:11:03:c6:8e:4f:8b:a3:65:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=5914A348F8C04F7B9FE456219CAE31470F0E8C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:6c:9f:3a:13:dc:72:91:97:12:3b:24:75:
                    b2:b4:7e:1d:7f:ac:13:c6:33:2f:de:7b:5a:db:e6:
                    dc:37:03:fd:1a:56:60:03:3d:fa:9c:b1:97:33:fc:
                    82:f7:5b:16:63:69:0d:dc:4f:a7:95:a0:38:6d:d8:
                    ca:91:66:4b:a3:fa:0d:d5:83:e0:ab:c9:f1:de:51:
                    e2:e6:35:1d:10:42:98:c0:93:b2:fd:23:2f:3a:16:
                    1f:64:ff:7d:71:6a:9b:8a:36:41:80:51:71:ea:a5:
                    24:ea:6f:be:96:0d:62:42:c3:5c:b6:e5:00:58:7b:
                    c3:2f:dd:c7:c1:f7:9e:e1:9c:53:1a:02:ad:af:53:
                    2a:b0:21:0d:2d:80:57:b4:e5:39:30:35:d5:2b:28:
                    0b:cc:50:25:b6:b2:9a:00:e1:b9:53:48:de:6a:e7:
                    da:ae:f7:93:14:dd:69:e2:d8:24:ca:83:51:fd:b0:
                    6c:bb:fe:a5:ae:dd:92:a1:f3:c2:f2:36:64:99:5e:
                    af:02:53:f2:b3:e3:aa:b8:88:c4:b3:db:a5:9d:c2:
                    f9:15:9d:0b:0b:13:ab:39:42:9c:01:7a:79:3f:8a:
                    81:2f:1a:b1:f5:19:02:8d:8c:da:b5:6a:8c:f5:2a:
                    ac:ac:d5:24:1e:d2:be:75:d1:e8:2b:b2:16:9e:8c:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:A3:48:F8:C0:4F:7B:9F:E4:56:21:9C:AE:31:47:0F:0E:8C:09
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:fd:5b:ec:c4:df:76:6f:22:04:05:2d:e7:9d:db:cc:c7:
         6e:3c:56:81:7b:c1:fa:0e:8b:01:5b:99:04:75:eb:94:f4:98:
         0c:41:a6:eb:9a:f8:ef:07:0d:c4:08:e1:59:b3:20:71:f7:77:
         1d:aa:90:c7:9b:75:c1:d1:6b:42:c4:87:c0:8d:af:5b:13:93:
         91:6a:5d:8c:41:d2:0e:08:77:66:72:8b:06:ee:c4:b9:0d:76:
         69:b9:ce:b7:2c:ea:f2:d6:22:29:e9:4c:d0:1a:de:c2:f2:6d:
         df:30:de:a3:4b:93:e0:d1:9e:c1:5b:21:92:19:16:8b:e8:ea:
         65:e4:4c:94:1e:1b:f6:3d:da:5f:56:f2:e2:72:22:b6:df:c6:
         7a:6b:64:bd:14:c8:eb:9c:af:bf:55:00:97:b6:4e:fd:fc:db:
         a4:9e:1a:23:e6:15:1b:16:4a:d6:a3:8c:d5:3d:f3:6b:62:c6:
         25:7a:79:7d:4b:0c:5d:c7:04:da:5f:8c:31:d1:15:f9:02:07:
         95:73:76:b3:6a:9a:16:de:7b:55:e0:4b:f3:b1:08:24:56:eb:
         5b:ec:3b:50:6e:39:a0:91:d1:c0:fc:8f:34:93:75:37:93:1d:
         82:9e:07:c2:24:c0:2b:2c:a9:01:68:65:6e:a6:e3:0f:3e:6c:
         e6:8b:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:05 2024 by rpki-client on console-fra.rpki-client.org