Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e203237363531.roa
File:                     3230302e31312e36342e302f31392d3234203d3e203237363531.roa (raw, json)
Hash identifier:          veAqlL77K94vpf2ug6M3CB4HIcRQVqfZ2RXVjWh1a9A=
Subject key identifier:   D2:1A:CE:5C:A8:39:43:AB:49:2D:4F:D3:C8:71:6C:C7:EA:85:36:A1
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       2CA78D27C7A3B4241B83066946BD74D53BE9B3D0
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:55 +0000
ROA not before:           Tue 05 Mar 2024 18:09:55 +0000
ROA not after:            Tue 04 Mar 2025 18:14:55 +0000
asID:                     27651
IP address blocks:        200.11.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:8d:27:c7:a3:b4:24:1b:83:06:69:46:bd:74:d5:3b:e9:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:55 2024 GMT
            Not After : Mar  4 18:14:55 2025 GMT
        Subject: CN=D21ACE5CA83943AB492D4FD3C8716CC7EA8536A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:46:23:fe:dd:c4:8a:52:3f:dd:3a:b7:4d:
                    cb:8d:a0:40:fd:e9:56:58:b7:7b:1b:82:13:e3:80:
                    a8:55:72:42:3b:cb:52:4a:cd:aa:36:0b:22:2d:fa:
                    c1:11:0d:3e:97:8d:d9:b7:f0:b8:be:32:19:43:0a:
                    01:de:4c:9d:ec:66:72:ca:79:ea:35:55:ac:e8:04:
                    61:03:3e:8e:da:af:0d:48:23:10:a1:08:67:20:c3:
                    d0:d8:05:2f:2d:2e:9f:76:4e:6e:a9:23:7f:4a:49:
                    00:04:40:92:75:dd:05:55:18:f7:a5:12:a0:02:df:
                    2e:40:b2:82:26:55:da:31:5e:b0:13:9b:c9:fb:ae:
                    4b:0d:03:05:e8:e1:8e:a1:6e:1a:4d:cd:0d:d0:c4:
                    ef:3f:5f:4d:99:3d:8f:7b:83:5f:20:32:bb:06:87:
                    8f:b0:15:e8:0f:6a:3e:e3:bd:b3:48:98:e3:e5:e8:
                    8d:07:fd:ef:a0:f5:43:84:f9:82:57:44:91:18:ef:
                    06:42:a4:23:c4:ff:95:d1:f9:d2:f7:c0:0f:f3:50:
                    b7:c9:ea:d5:19:c8:15:84:f1:92:0f:bc:2f:a2:f5:
                    58:e0:dd:65:ac:8b:86:ec:69:b2:55:8b:7f:55:b2:
                    72:70:c4:92:af:50:59:b2:62:51:dc:3e:f3:23:dd:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:CE:5C:A8:39:43:AB:49:2D:4F:D3:C8:71:6C:C7:EA:85:36:A1
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:6d:99:8b:86:96:0a:9c:3c:b4:84:4c:2e:b9:5d:ec:f7:
         1a:27:ba:dd:63:54:6b:9a:98:37:a5:6b:1f:29:b0:5c:6e:fe:
         74:20:a2:62:06:5b:40:a8:49:50:c6:46:e7:02:b5:96:9a:cc:
         2c:c3:e1:2f:19:86:5d:67:14:f4:e9:c7:a4:d4:4c:04:7f:0d:
         d4:15:e8:68:b0:07:9d:af:23:9c:ad:19:5c:f8:93:a4:aa:0b:
         11:e0:21:8d:85:e9:95:7d:2e:17:ec:0c:f0:01:c3:e1:f3:b0:
         42:ea:d5:61:ac:f4:9d:21:0f:c2:7f:a0:cc:42:0e:40:d1:5e:
         c5:c1:47:31:2d:87:14:24:5e:b5:f5:2c:2e:7f:f1:b4:12:cc:
         5b:8c:82:6c:2c:91:0f:d2:b8:96:19:af:4d:a6:1a:d3:18:ec:
         aa:04:71:7f:d8:f6:9c:5e:ee:71:8b:30:63:b1:85:20:96:56:
         29:da:fb:9a:f9:e2:7f:fd:61:7f:14:e6:75:46:e7:76:eb:e6:
         e0:58:e9:72:a3:78:aa:d3:f5:23:e8:b5:53:10:20:de:57:e9:
         20:c4:76:f7:a7:f2:0d:79:0f:30:a5:de:ae:22:c4:cd:84:b3:
         a0:36:74:66:f4:d5:78:ab:b8:a1:dd:1b:3a:d1:77:bb:9b:5f:
         d7:a6:1e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org