Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa
File:                     3230302e31322e3231312e302f32342d3234203d3e203237383630.roa (raw, json)
Hash identifier:          waARCiyOCy3ZO2iqa142swX38T4wXKFWrd1vMqJ/P0c=
Subject key identifier:   F3:24:DD:A8:92:35:10:57:E5:46:3B:E5:9D:BF:59:BF:28:56:5A:C9
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       710B303F23F6DC17CDD9B05E35DFCFB2D492F477
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     27860
IP address blocks:        200.12.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:30:3f:23:f6:dc:17:cd:d9:b0:5e:35:df:cf:b2:d4:92:f4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=F324DDA892351057E5463BE59DBF59BF28565AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:f7:ed:ed:4c:d0:19:75:ad:82:69:d3:6e:
                    4c:a7:65:78:c6:c3:61:c1:6f:66:d9:99:b5:19:6c:
                    f1:f9:0c:a6:69:2d:93:88:67:c0:9e:7f:c2:d6:fb:
                    92:3d:06:a0:53:46:6e:28:92:d3:6b:35:49:6a:c6:
                    13:26:1a:9c:7b:5a:6a:13:8f:39:f0:fd:59:85:52:
                    8a:e4:e9:94:ef:7f:9b:c9:49:a1:7e:9e:06:10:0b:
                    2a:d4:f6:1f:bd:5f:55:58:7a:bc:b4:23:64:47:ee:
                    09:af:f8:d5:d6:97:dd:59:f8:c9:85:ee:a9:6e:58:
                    51:12:7b:ba:4a:4d:1a:9e:15:5f:46:86:20:16:f7:
                    de:9f:76:57:f5:da:56:14:30:c6:27:f7:c4:09:1c:
                    59:cc:29:fc:65:d1:bc:b0:da:4a:11:74:73:08:3c:
                    0c:7f:0e:26:ae:22:9f:57:ca:09:92:94:fd:7e:9f:
                    62:79:e5:35:ee:9e:cc:f4:02:83:2b:d0:10:31:a6:
                    36:57:38:c2:b0:19:32:48:a1:31:a6:da:4b:2b:75:
                    42:47:92:c2:63:0c:d3:61:f0:14:35:ff:f4:d9:5d:
                    30:0e:12:3c:d1:e8:91:8b:2f:e9:33:ee:20:56:56:
                    ce:71:6d:a4:cb:b5:41:e7:e0:fd:f5:fa:f4:29:b1:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:DD:A8:92:35:10:57:E5:46:3B:E5:9D:BF:59:BF:28:56:5A:C9
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:56:8a:71:90:63:ee:4e:e5:ee:82:89:31:62:99:f0:f6:38:
         15:76:3d:2e:2d:0d:1f:1e:69:c0:ee:00:44:a9:c2:61:48:5c:
         be:80:88:3d:bb:4b:a6:91:74:94:27:77:d9:3d:e5:7f:c1:f4:
         8d:86:2f:b6:5f:e9:86:d0:ad:cb:0c:bb:38:f7:60:85:99:5b:
         94:e7:ce:49:01:c6:6a:25:c7:45:ad:77:e6:75:94:78:e7:14:
         45:a1:5a:52:e8:f5:89:04:a4:b4:e3:71:49:18:5f:28:b0:03:
         4a:9e:cb:27:d4:1c:35:fa:cf:7a:e7:61:3d:d3:b8:86:08:9d:
         01:5e:99:49:74:88:17:26:0e:0c:f7:db:af:b9:88:4d:39:37:
         75:8d:95:09:71:f1:02:fa:e5:4b:e7:37:cb:f4:ce:bf:f2:1c:
         26:1f:21:a1:70:43:c2:ff:1b:1f:21:be:59:19:74:74:1d:a2:
         8d:42:7f:c3:55:e1:89:d9:79:59:f7:6f:4a:e6:2e:f7:90:cf:
         0a:b7:69:6f:47:04:b4:85:ec:4c:75:59:8c:e9:7f:ca:7b:40:
         80:24:e5:98:74:cb:b2:bc:86:b3:d6:3e:a1:db:de:d5:97:75:
         78:cb:88:e9:e4:14:63:33:12:8a:bf:cb:c7:37:fb:64:ff:1c:
         e4:d5:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:23 2024 by rpki-client on console-ams.rpki-client.org