Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa
File:                     3230302e302e3138302e302f32342d3234203d3e203237373835.roa (raw, json)
Hash identifier:          /1FX4G7YcqFnPRx6VxQnIYJ8JFobodv/xxPJz72Raxg=
Subject key identifier:   FD:D6:EC:16:DF:C8:ED:31:3F:81:01:DD:E5:9B:16:A8:83:8A:F4:68
Certificate issuer:       /CN=5B27DC5DCA271F090A9487CAECE6F2248F5836AF
Certificate serial:       741FB01E664BB0B58EA2AD63207F6E623AED421A
Authority key identifier: 5B:27:DC:5D:CA:27:1F:09:0A:94:87:CA:EC:E6:F2:24:8F:58:36:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa
Signing time:             Tue 05 Mar 2024 17:48:03 +0000
ROA not before:           Tue 05 Mar 2024 17:43:03 +0000
ROA not after:            Tue 04 Mar 2025 17:48:03 +0000
asID:                     27785
IP address blocks:        200.0.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1f:b0:1e:66:4b:b0:b5:8e:a2:ad:63:20:7f:6e:62:3a:ed:42:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B27DC5DCA271F090A9487CAECE6F2248F5836AF
        Validity
            Not Before: Mar  5 17:43:03 2024 GMT
            Not After : Mar  4 17:48:03 2025 GMT
        Subject: CN=FDD6EC16DFC8ED313F8101DDE59B16A8838AF468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:c2:17:ce:fc:67:d8:b2:36:84:1b:d6:f9:
                    15:41:f9:98:52:11:58:7c:50:ef:5f:f2:90:7d:10:
                    b8:0d:2a:f9:13:b0:2b:7b:f9:4b:eb:99:c9:15:1c:
                    7f:25:9a:bd:61:5f:af:fa:0a:80:1c:a5:15:6d:0e:
                    02:63:b8:0a:f2:d9:d9:e4:be:dd:b3:2a:92:0c:5d:
                    91:be:88:a5:7e:56:5a:f2:28:46:df:20:06:c2:9a:
                    00:19:44:d9:25:69:3e:40:f4:f9:ab:93:47:92:65:
                    3a:35:c1:a5:21:56:1c:9d:f5:82:e6:37:ee:75:83:
                    7e:c3:89:54:aa:84:7a:c6:96:ee:81:01:e9:49:98:
                    ae:64:4e:4e:54:59:cd:b3:8b:3b:ef:4a:a3:33:6a:
                    1e:b0:18:35:1c:a5:cb:e6:54:48:e2:e3:d2:3a:69:
                    b5:ca:f5:87:93:02:75:5a:e6:f7:f7:1c:a4:40:a9:
                    43:53:88:13:ac:09:75:84:bb:23:25:2f:65:2b:32:
                    bc:8f:4d:17:d5:b4:69:a7:06:38:1b:6b:a9:21:e5:
                    f6:2e:78:23:e4:ce:8e:d6:59:5d:88:67:1e:33:ee:
                    6c:f3:93:8b:db:a7:57:a7:49:d1:30:ab:90:d5:f7:
                    73:ed:f8:73:8c:2b:d8:09:b1:43:7f:23:80:12:2a:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:EC:16:DF:C8:ED:31:3F:81:01:DD:E5:9B:16:A8:83:8A:F4:68
            X509v3 Authority Key Identifier:
                keyid:5B:27:DC:5D:CA:27:1F:09:0A:94:87:CA:EC:E6:F2:24:8F:58:36:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:3b:51:a5:a8:e1:bd:54:06:04:c8:44:e9:24:fe:d1:1b:
         63:6f:24:51:1e:41:fa:2d:d2:8a:20:c9:33:ec:f7:ba:14:c1:
         1a:15:a2:d7:8a:91:87:7b:17:04:5e:a6:43:85:ab:d7:88:1f:
         7a:3a:b7:75:bb:69:88:f5:af:e9:72:06:41:0d:25:c7:70:15:
         60:8b:14:71:ad:88:6d:76:67:7f:04:ce:4a:b3:18:f7:da:6c:
         e2:c0:c6:b3:f5:6a:fc:8e:84:69:93:33:69:92:72:89:b4:a1:
         ee:b6:de:a3:7d:9c:2f:d1:40:1c:58:f5:fe:99:ae:7f:9e:3a:
         ed:d2:d8:be:7d:16:f7:f6:fe:77:35:2d:53:a0:fc:06:f9:68:
         5e:a0:fc:82:b9:59:bc:19:04:f5:3a:7a:72:6e:9e:7f:29:e8:
         1a:be:01:11:34:f2:64:ac:24:5c:b7:12:92:70:4e:0f:e9:1a:
         f0:4a:9c:ab:a8:59:9c:44:a5:ed:cc:96:c9:94:20:88:ea:c0:
         b9:23:69:1e:05:c9:cc:3b:35:15:9d:ff:52:c7:2a:d1:86:96:
         23:38:62:b2:c0:f9:f5:9e:13:df:9a:ce:51:47:a5:38:c7:be:
         f1:1b:60:ed:4f:35:aa:e5:78:90:18:a4:41:05:48:44:a1:68:
         9e:e3:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org