Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39362e302f32312d3234203d3e203237363531.roa
File:                     3230302e31312e39362e302f32312d3234203d3e203237363531.roa (raw, json)
Hash identifier:          EZZCwqgaMWvRP8fK6tHIsU0WX5u2mPCgGtcpqRbO21A=
Subject key identifier:   6C:8C:80:5C:12:85:23:95:61:A1:69:A8:2C:ED:C0:CE:5B:3C:83:C6
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       018372DBCE6DFEE2DFB4EEFFCB156D97C6EE9F60
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39362e302f32312d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:56 +0000
ROA not before:           Tue 05 Mar 2024 18:09:56 +0000
ROA not after:            Tue 04 Mar 2025 18:14:56 +0000
asID:                     27651
IP address blocks:        200.11.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:72:db:ce:6d:fe:e2:df:b4:ee:ff:cb:15:6d:97:c6:ee:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:56 2024 GMT
            Not After : Mar  4 18:14:56 2025 GMT
        Subject: CN=6C8C805C1285239561A169A82CEDC0CE5B3C83C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:70:02:0d:5b:7e:e9:00:21:76:0f:52:2c:
                    07:53:8f:70:57:4a:6c:52:10:66:c7:86:8b:8d:b9:
                    c8:72:88:9f:a1:31:14:3b:28:b9:b8:7e:5a:19:39:
                    bc:20:21:5a:0a:ca:28:d6:f7:9b:c3:ae:22:79:2e:
                    85:63:14:be:65:0a:0b:2f:ed:3d:db:41:03:81:4d:
                    c4:77:c5:bb:34:e4:33:1c:32:9e:71:2c:dc:15:0c:
                    61:34:4f:d8:ac:45:6e:7c:f9:4b:28:e6:a5:8f:a1:
                    75:1c:34:d6:84:7f:74:a1:ad:86:8d:38:93:36:31:
                    f5:83:13:56:d4:b6:d5:3d:6d:89:82:b7:f6:c8:a5:
                    a8:4c:fb:05:9b:13:69:9c:c3:43:aa:a2:4e:3e:dd:
                    63:1e:90:74:46:01:51:13:09:cb:7c:c0:d8:45:e2:
                    2d:48:74:ae:9b:63:87:73:a0:31:96:ca:4f:0e:4b:
                    23:4d:80:4d:25:ef:15:92:aa:0c:94:24:73:7e:81:
                    92:d5:58:11:e0:ca:1a:ae:e3:f8:aa:34:a9:6b:2b:
                    2c:49:37:84:e6:0f:3e:07:82:75:1a:92:f3:8f:c2:
                    1e:9c:46:1c:9e:06:15:40:6d:7d:2e:fb:c7:75:f1:
                    4d:5b:9a:99:ce:23:80:fe:e2:0a:7d:9f:75:f3:25:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:80:5C:12:85:23:95:61:A1:69:A8:2C:ED:C0:CE:5B:3C:83:C6
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39362e302f32312d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:51:1c:a9:2e:1b:52:91:30:d9:79:ee:91:9f:6c:20:42:
         a1:a2:3c:ee:fc:0e:5d:7c:6c:79:ea:d7:b0:1e:4b:96:5e:4e:
         dc:88:eb:36:c1:5f:3d:c5:1b:28:66:75:b9:20:42:de:9e:b9:
         19:bf:62:03:79:b6:4e:0b:54:32:4c:8e:4c:bc:53:47:26:5d:
         f2:30:e5:69:d4:ce:a3:8c:5e:ca:cb:b0:c2:54:36:d7:ca:12:
         39:aa:56:01:53:66:ee:dd:b6:6e:16:f0:af:66:50:7f:fa:92:
         90:97:84:28:12:50:9f:7d:18:63:85:f6:47:19:67:9e:9f:a1:
         e0:1c:1f:75:08:f2:f6:11:96:52:01:88:11:5c:58:b0:cb:18:
         f2:cf:20:bc:71:ce:2f:09:e4:f7:f1:58:67:52:58:bb:84:50:
         36:8e:50:92:54:a1:99:03:d4:ab:79:75:d0:2f:e4:30:0a:56:
         60:43:da:fd:f8:36:09:2c:4d:e7:99:ea:fd:c5:f3:e7:bc:e3:
         34:5a:b0:5d:82:3a:b3:f0:40:7b:41:24:a7:39:9b:f1:6b:e9:
         69:e0:a0:90:28:05:25:3f:9d:10:1a:46:a3:c7:86:78:b2:54:
         1d:a6:52:38:2a:44:04:ba:96:0a:30:bd:8a:eb:05:f4:63:1a:
         6c:be:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:06 2024 by rpki-client on console-fra.rpki-client.org